last executing test programs: 7m56.66220264s ago: executing program 32 (id=25): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0xc, 0x4) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 7m52.42273147s ago: executing program 33 (id=67): unshare(0x8000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x4c, 0x30, 0xb, 0x5, 0x0, {}, [{0x38, 0x1, [@m_ct={0x34, 0x1, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x12, 0xfffffffa}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) semtimedop(0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=@newtaction={0xe84, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe70, 0x1, [@m_pedit={0xe6c, 0x1, 0x0, 0x0, {{0xa}, {0xe40, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x1000, 0x4, 0x4, 0x5}, 0x1, 0x2}, [{0xdc8, 0xffffffff, 0x1, 0x4, 0x101, 0x4}, {0x28d, 0x7ff, 0x8, 0x0, 0x9, 0x2}, {0x401, 0xfdfffff5, 0x4, 0x8, 0xeb93, 0x8}, {0xaff, 0x9, 0x4, 0x5, 0x3, 0x983c3b9}, {0x11, 0x7, 0xfffff770, 0x9, 0xc, 0x80000001}, {0x7, 0x9, 0x1, 0x7f, 0x10001, 0x2}, {0x4, 0xe3e, 0x4f, 0x4, 0x6}, {0x8ce, 0x8, 0x2, 0x4, 0x800, 0x8}, {0x3, 0x4, 0x0, 0x7dad, 0x7f, 0x6}, {0x1, 0x361, 0x7, 0x4, 0x2, 0x3}, {0x797e, 0x9, 0x1, 0xf56, 0x1, 0x8}, {0x5, 0x8, 0xff, 0x4ff537c1, 0x5, 0x5}, {0x4, 0xe8c, 0xcbf, 0x4, 0x4, 0x400}, {0x800, 0x4, 0xd4f7, 0x9, 0x400, 0xffffff00}, {0xffffffff, 0x4, 0xe546, 0x0, 0x300, 0xd789}, {0x5, 0x5, 0x7, 0x1, 0x7fffffff, 0x8}, {0x7fffffff, 0x401, 0x1, 0xffffffff, 0x380000, 0x2}, {0x1, 0x10000, 0xffffffff, 0x0, 0x17a, 0x6}, {0xff, 0x3ff, 0x91c7, 0x6cff, 0x40, 0x2}, {0x5, 0xffffff00, 0x0, 0x7f, 0x4010000, 0x10001}, {0x7, 0x5, 0x0, 0x1, 0x8, 0x4}, {0x6a7, 0x7, 0x5aa2, 0xb97, 0xb1fb, 0x4}, {0x9, 0x7fffffff, 0x2, 0x6, 0x1, 0x5}, {0xd, 0x8, 0xb3b0, 0x4, 0x80000000, 0x1}, {0xb, 0x0, 0x10000, 0x6, 0x5, 0xd}, {0x29, 0x7, 0x2, 0x1c0, 0x3, 0x10}, {0x5, 0x2, 0x401, 0x3, 0x0, 0x7a01}, {0x7, 0x1611c00, 0xfffffff3, 0x10000, 0x9, 0x101}, {0x1, 0x7, 0x4, 0x3, 0x7}, {0x3, 0x3, 0x2, 0x9, 0x6, 0x2}, {0x6bc5896b, 0x1, 0xb7, 0x4, 0x2, 0x9323}, {0x0, 0xfffffff8, 0x1, 0x7, 0xfffffff8, 0x480}, {0xf, 0x7, 0x8, 0x1ff, 0x7, 0x3}, {0x4, 0x5, 0x9, 0x2, 0x2, 0x401}, {0x922e, 0x0, 0x1944, 0x3, 0x9, 0x8}, {0x10001, 0xfffffffa, 0x9, 0x2, 0x3ff, 0xffffffff}, {0x2, 0x1eb8dd6d, 0x5, 0x8, 0x1, 0x6}, {0xa4, 0x7ff, 0xff, 0x1, 0xd1e5}, {0x0, 0x2, 0x0, 0x8, 0x5, 0x101}, {0x1000005, 0x1, 0x6, 0x7fffffff, 0x8, 0x7}, {0x3, 0x4, 0xadf, 0x10, 0x9, 0x5}, {0x4, 0x2, 0x2, 0x2, 0x7fff, 0x8}, {0x3, 0x8, 0x2, 0x38d9, 0x1, 0x4}, {0x0, 0x824c, 0x3, 0x3, 0xfff, 0x8}, {0x5, 0xc, 0x3, 0x80, 0x9, 0x8}, {0x10001, 0x1, 0x680, 0x4, 0x8, 0x7ff}, {0x7, 0xf34a, 0x81b, 0x80000000, 0x2, 0x4}, {0x2, 0xe7, 0x8, 0x80000000, 0x0, 0x8001}, {0xb594, 0x0, 0x2, 0x2000, 0x1, 0x5}, {0x0, 0x5, 0x1, 0xbc, 0x8, 0x1}, {0x3, 0x401, 0x1, 0x6, 0x3, 0x80000001}, {0x4, 0xfff, 0x8, 0xb, 0x8, 0x9d6}, {0x5691221d, 0x5, 0x3ff, 0xa000, 0xd0e, 0x750e}, {0x9, 0x5, 0xfffffffc, 0x35ca, 0x1ff, 0x5}, {0x4, 0x0, 0x3fc, 0x5, 0x10, 0x4}, {0x0, 0x37, 0x5, 0x10, 0x1, 0x5f5ace3f}, {0xffffffff, 0xfffffffa, 0x227, 0x7fffffff, 0x8b, 0x2}, {0x7, 0x7, 0x0, 0x2, 0xc407, 0x7}, {0x8001, 0xd1, 0xff4, 0xb, 0x0, 0x1}, {0x6, 0xc, 0xb, 0xe7, 0x7}, {0x3, 0x3, 0xffffff46, 0x8, 0x7, 0x8}, {0x7, 0x6, 0x4b48, 0x8, 0x6, 0x7}, {0xe5f, 0x10000, 0x4, 0x4, 0x9, 0xf1}, {0x401, 0xd, 0x3, 0x1, 0x80000000, 0x1}, {0x400, 0x3, 0xe8ce, 0x1, 0x8, 0x10}, {0x5, 0x8ee9, 0x2, 0x3, 0x0, 0xc}, {0x7, 0x24d476e8, 0x10200, 0x80000001, 0x6, 0x600000}, {0x6a8, 0x8, 0x3, 0xfffffffb, 0x8000, 0x9}, {0xab, 0x7, 0x7, 0x3, 0x5}, {0x0, 0xa8, 0x7fffffff, 0xfffffff8, 0x7d, 0x9}, {0x40, 0x9da5, 0x10, 0x8, 0x6}, {0x200, 0x6, 0x1, 0x1, 0x9, 0x7f}, {0x8, 0xfffffffa, 0x7e2, 0x7a, 0x6, 0x10}, {0x5e, 0x15ec, 0x1ba09691, 0x5, 0x7fffffff, 0x9}, {0x0, 0x5, 0x1, 0x0, 0xfffffffb, 0x4}, {0x40, 0x3, 0x5, 0x3ff, 0x10000, 0x254}, {0x3, 0xd5, 0x80000000, 0xf, 0x101, 0x5ca}, {0x6, 0x1, 0xf, 0x4, 0x9, 0x3cf1}, {0x7, 0x6000, 0x6, 0xff, 0xff, 0x100}, {0x1, 0x10000, 0x9, 0x9, 0x7f, 0x1}, {0xf, 0xb, 0x6, 0x8, 0x402, 0x9}, {0x400, 0xbcb, 0x5, 0x9, 0x16b9, 0x3}, {0x1, 0xffffffff, 0x9, 0x1000, 0x80, 0x6}, {0x800, 0x9, 0xff, 0x7fffffff, 0x5, 0xe5}, {0x4, 0x6, 0x4, 0x3ff, 0x3, 0x1000}, {0x80000000, 0x9, 0x6, 0x2, 0x7, 0x5}, {0x80e0470, 0x0, 0x0, 0x1f, 0x2, 0xffff0001}, {0x3ff, 0x8, 0x4, 0x1, 0x0, 0xfffffffa}, {0xbb3, 0x7, 0x1, 0x7, 0x94, 0x3}, {0x4d, 0xf, 0x7, 0x3, 0xa3, 0x80000000}, {0x5, 0xfff, 0x20080, 0x9, 0x26, 0x10000}, {0x1, 0xb, 0x8, 0xffff, 0x0, 0x7}, {0x0, 0x7fffffff, 0x800, 0x6, 0x200f, 0x2}, {0xfffffffb, 0x7, 0x6, 0x8, 0x5, 0x3}, {0x5, 0xcf19, 0x8, 0x0, 0xfff, 0xfffffe00}, {0x2, 0x9, 0x2, 0x1, 0x4, 0x800}, {0xc000, 0x4, 0x807fff, 0x4, 0x1, 0x6}, {0xe37, 0x4, 0x1, 0x6, 0x67b9c8db, 0x4}, {0xac, 0xfffffffe, 0x8f, 0x8001, 0xd, 0x26}, {0xfffff800, 0x7, 0xffffffff, 0x2, 0xaa6, 0xd4}, {0x3, 0xffffc055, 0x2, 0x8, 0xa9, 0x63e}, {0x8, 0xfffffff8, 0xb, 0x7fd1, 0x6, 0x1750e18e}, {0x1000, 0x2, 0x1000, 0x6, 0x6887, 0x4}, {0x80000001, 0x3, 0x89bf, 0x8, 0xffffffff, 0x5}, {0x1, 0x18, 0x190, 0x8, 0xc}, {0x41e2e32, 0x6, 0x6, 0x2, 0x0, 0x4}, {0x0, 0x2, 0x5e, 0x1000, 0x6, 0x8}, {0x7, 0x80000000, 0x20000, 0x0, 0x7fffffff}, {0x2, 0x8001, 0x6, 0x3, 0x8, 0xfffffff7}, {0xe20, 0xc, 0x7, 0x9, 0x9, 0x20000009}, {0x6, 0x1000, 0x3, 0xfffffffb, 0x5267, 0x401}, {0x9a, 0x3, 0x8, 0xfffffff9, 0x2, 0x9}, {0x1, 0x8, 0xfffffffc, 0x1}, {0xac5a, 0xfffffffd, 0xa, 0x59f3, 0x2, 0x8}, {0x5, 0xeae, 0x5, 0xc1, 0x2e, 0x8}, {0x7fffffff, 0x9, 0x0, 0xfff, 0x3, 0x10}, {0x80000000, 0x9, 0x8211, 0x800, 0xace, 0xfffffff7}, {0x10000, 0x1e9d, 0xffff8d98, 0xe, 0xfffffffa}, {0x394cf3a4, 0x288, 0x7}, {0x5, 0xf4, 0x9, 0x3, 0x7fff, 0xf}, {0x10001, 0x8, 0x7, 0x2fe, 0x9, 0x4}, {0x7fffffff, 0x1, 0xb, 0x8b0, 0x10001, 0xffffff47}, {0x6, 0x6, 0x2, 0x4, 0x0, 0xe}, {0x1, 0x5, 0x9a4, 0x8, 0x8000, 0xfffffbff}, {0x3718, 0x1000000, 0x43, 0x0, 0x46, 0x200}, {0x8, 0x9, 0xffffa3fa, 0x3, 0xcb88, 0x6}, {0x1, 0x4, 0x5, 0x6, 0x2, 0xfffffff9}, {0x5, 0xffffffff, 0x61b, 0x4, 0x4, 0x100}], [{0x4, 0x1}, {0x5}, {0x2}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x4}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x2, 0x1}, {0xac098f8bb5bf767, 0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x33b46010c087959a}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0xe41e256834d3e794}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0xbbd25ed3eb5771ef}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {}, {}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {}, {}, {0x3, 0xcf7dcf0528e1043}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x1c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe84}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 7m48.340755296s ago: executing program 34 (id=131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000370427bd70000000000000000000", @ANYRES32=r4, @ANYBLOB="c30803000b2ebe2650001280080001006774700044000280080007000a010101080004000100000008000700ac1414330500", @ANYRES32=r3], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x38, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800) 7m43.038963421s ago: executing program 35 (id=202): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000580080008c0"], 0x4a) 7m40.780755704s ago: executing program 36 (id=240): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0x5) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCGNPMODE(r0, 0x4008744b, &(0x7f0000000100)={0x283, 0x2}) 7m32.983413588s ago: executing program 37 (id=337): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r1, 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r0, 0x7) 7m30.812923998s ago: executing program 38 (id=365): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {0x7}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) 7m30.178462663s ago: executing program 39 (id=371): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4050, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x9, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000100)="c1df0600000200000000000000a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 7m25.367586156s ago: executing program 40 (id=409): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000040)=0xd62, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvfrom(r0, 0x0, 0x9400, 0x10132, 0x0, 0x0) 7m18.869950929s ago: executing program 41 (id=476): r0 = creat(0x0, 0x2) close(r0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) writev(r2, &(0x7f0000000080)=[{&(0x7f00000001c0)="d1bdf15960a8b8b5fd330682ac", 0xd}], 0x1) splice(r2, 0x0, r1, 0x0, 0x2, 0x0) 7m18.656220054s ago: executing program 42 (id=482): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100002}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x60}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m5.298925938s ago: executing program 43 (id=584): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0x7, 0x0, 0x3, 0x800000, 0xb6e, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x2001, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x2000c010) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)={0x14, 0x1, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x50) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x4000010) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) gettid() r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x8000) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000000)) 6m58.334833163s ago: executing program 44 (id=648): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 5m50.612394835s ago: executing program 45 (id=1212): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r3}, &(0x7f00000000c0), &(0x7f0000000140)='%pK \x00'}, 0x20) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 5m45.629853452s ago: executing program 46 (id=1240): socket$igmp(0x2, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x11ec81, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet6(0xa, 0x80002, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x2, 0xfffffffe, 0x8, 0x2}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r2, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 5m32.734845825s ago: executing program 6 (id=1329): socket$kcm(0x2, 0x1, 0x84) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$kcm(0x10, 0x100000000002, 0x4) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000200)=@caif, 0x80, 0x0}, 0x88010) 5m32.605946728s ago: executing program 6 (id=1331): socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20081, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2$9p(0x0, 0x0) r0 = io_uring_setup(0x1f1c, &(0x7f00000005c0)={0x0, 0x17d7, 0xa, 0x3, 0x283}) close_range(r0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 5m32.481519641s ago: executing program 6 (id=1335): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCSABS20(r1, 0x40044591, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext2\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000780)={[{@commit={'commit', 0x3d, 0x9}}]}, 0x2, 0x55c, &(0x7f0000000800)="$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") syz_init_net_socket$llc(0x1a, 0x801, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x7}, 0x8) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x800000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xa7) 5m31.594116772s ago: executing program 6 (id=1350): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1, 0x262, &(0x7f0000000340)="$eJzs289qE10Yx/Ff+/a1tbWd+K/agvigG90MbbyCIC2IAaU2ooLC1E40ZExKZqhExHbnVvAuikt3ingD3bjyAtx1I7jpQhzJZNombUS6sIP2+9mcp5z+wjk5T8JZZDbuvHpSLYdu2YvU32fql1a1KeVaVaovHfuT+og6rery62+fz926e+96oVicmTObLcxfyZvZ2PkPT5+/ufAxGrn9duzdoNZzDza+5r+sj69PbPyYf1wJrRJarR6ZZwv1euQtBL4tVsKqa3Yz8L3Qt0ot9Btd8+WgvrTUNK+2ODq81PDD0Lxa06p+06K6RY2meY+8Ss1c17XRYeF3Smtzc14h61Xgz2o0Ct6MpMk9M6W1TBYEAAAyxf3/MOP+fxi07v/3089vN+7/AAAAAAAAAAAAAAAAAAAAAAD8DTbj2Inj2Nka/5eSJ3zi9O+jkoYljUg6JmlU0pgkR1JO0nFJJySdlHRK0mlJ45LOSDoraaLjtbLeK/bi/A+3jgf3hqTg5XJpudQe2/OFsioK5GtKjr4nZ5lq17PXijNTlsjpfbCS5leWS/9156fltBqmV366nbfu/GDSd9v5vJxWg/XK53vmh3TpYkfelaNPD1VXoMWkJ3fyL6bNrt4o7spPJv/3r3NtW8/zc91fzbfz++iPXe/vgCYHst07pLD5rOoFgd+goKCg2C6y/mbCQdg59KxXAgAAAAAAAAAAAAAAAADYj4P4OWHWewQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2/AwAAP//cgEz4A==") capset(&(0x7f0000000080)={0x20080522}, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f000000abc0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f000000abc0)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xc2100) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000180)={{0x0, 0x1}, {0xe}, 0xbf, 0xbf00}) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1e, 0x4, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000007060300000000ff01000000000000050900020073797a3100000000050001000700000020892652189b7232e0e46b491e29db7695826f1900e34a111023c3fa56dafb8f3efac5e0fd5326f28b82ed98826328"], 0x28}, 0x1, 0x0, 0x0, 0x842}, 0x40) 5m30.634843735s ago: executing program 6 (id=1371): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/vmstat\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) modify_ldt$write2(0x11, &(0x7f0000000040)={0x0, 0x100000, 0x4000, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r4, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000180)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r4, 0x40045304, &(0x7f0000000000)) tkill(r3, 0x7) ioctl$XFS_IOC_INUMBERS(r2, 0x80405880, &(0x7f0000000000)={{0x628a028a, 0xd, 0x1, 0x4, 0xa}}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000ac0)={r0, 0x5, {0x0, 0x0, 0x0, 0x5, 0x100000001, 0x0, 0x0, 0x1f, 0x0, "aee72ab53db8429d863f024cc6088092b7a455f339c550ee85d956b8a1246f8182da7204e0cc33489a60aa4ace2379f28937b44e06328b2ff6d7c47cd5f9aad9", "fd031cbe6abca458fb2f61596ad754c78bca55dd85176fd8d271369a4ccad7730815d2cdaf362319d87d25167e9bd3ba3aa9aa0695e3aa5ae849f84cfe03b318", "59dcc933831af024884c3db9cf4c7b38f4ae9abd919a9d9255d5fccf0c1cbc16", [0x10e3, 0x323ded07]}}) 5m30.42034546s ago: executing program 6 (id=1366): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10040d, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x4a}, 0x28) r0 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) writev(r1, &(0x7f0000000000), 0x42) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) setpgid(0x0, 0x0) 5m30.40638333s ago: executing program 47 (id=1366): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10040d, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x4a}, 0x28) r0 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) writev(r1, &(0x7f0000000000), 0x42) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) setpgid(0x0, 0x0) 2m34.975079766s ago: executing program 5 (id=3330): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0), 0x0, 0xff14) getpid() open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x2) 2m34.974470676s ago: executing program 5 (id=3331): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000200000711037000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x404c, 0x1001ff, 0x4, 0x4, 0x4, 0x2, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)}], 0x2}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}, 0x2000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 2m34.954179836s ago: executing program 5 (id=3332): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)='ns\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) fcntl$F_SET_RW_HINT(r4, 0x40c, 0x0) close(0x3) socket$netlink(0x10, 0x3, 0x2) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r5, &(0x7f0000000480)=[{&(0x7f0000000200)='\f7', 0x2}], 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) getdents64(r2, &(0x7f0000000200)=""/119, 0x77) write$9p(r2, &(0x7f0000000080), 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000900), 0x0, 0x4000001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000240000000030800034000000001080001400000001414000000110001"], 0xdc}}, 0x0) 2m34.930789377s ago: executing program 5 (id=3333): pipe(&(0x7f0000000000)) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0x3}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x16, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0xf}, 0x14) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x4b4483, 0x0, 0x8}, 0x18) socket$inet_mptcp(0x2, 0x1, 0x106) iopl(0x2) clock_getres(0x6, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000001d00), 0x2e03, 0x0) 2m34.820810209s ago: executing program 5 (id=3336): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x20000007c, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x2) creat(0x0, 0x107) mount(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x18800, &(0x7f0000000100)='trans=rdma,\xd6\x17\x0foQW\xbe\xbf\x16S\x84j\xea1Z\x8e\xe9\xc7\x0ep*\xd9\x94Mk\xb9\xc6\x9e\xcf\xd7\x9eoc\xe2(\x03\xc3\xc90$A\x7fL0R\v!{\x8aY\x17\xd0\xa3\xfe\xe3/\xc4\f\b2t\x1c4\x93/^\x91\xe8\xabK\x9e\x14j\xb3\x92\x13\x80sm\xc7\x96\"\xcb\xdc\xcc\xd8\x18\"\x9eT\x97Kh5i\x8f\xfc\xd8=\x8b\xe9\x1b\xce\xf2\xf5$\xf1sa,\x8f\xb6\x89\xcfZ\xa0\xae>Xs=\xadu\x9aQ\xe2z\xaf\x90\x90\x9b\x92\x9b\xeb\aQb#\xec}\xa79\xd7\xe6<6\xadL\xd8$\xd3\xa9\x1d\xd9W\x8a\xb9F\x982%g!\x8a\"@*\xf9\xb8\xc6\xddw\xefY\xefJ\x0e\xc5%S.\n\xde\x95l\xd9\x1cPp\xb3\xfe+rY') perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x60) socket$kcm(0x11, 0x200000000000003, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008091}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1000000, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@auto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xff, 0x439, &(0x7f00000004c0)="$eJzs20tvG0UcAPD/rp30TUIpjz6AQEFEPJImLdADQgKBxAUJCQ7lGJK0KnUb1ASJVhEEhLiiStwRRyQ+ASe4IOCExJUPgCpVKJcWTkZr7yaO4zycOnHAv5+09czuuDN/74w9u5MNoGcNZf8kEQcj4o+IGKhnVxYYqr/cWZyf/HtxfjKJavXtv5JauduL85NF0eJ9B/LMcBqRfp7E8Rb1zl67fmmiUpm+mufL+etzFy9PXJi+MH1l/OzZM6fHXnxh/PmOxJm16faxj2dOHH3j3RtvTp678d4v3yVF/E1xdMjQy+scfLJa7XB13XWoIZ2Uu9gQ2lLKx15fbfwPRCmWT95AvP5ZVxsHbKtqtVo9sPbhhSrwP5ZEt1sAdEfxQ59d/xbbDk09doVbr9QvgLK47+Rb/Ug50rxMX9P1bScNRcS5hX++zrbYnvsQAAAr/JDNf55tNf9L44GGcvfka0ODEXFvRByOiPsi4khE3B9RK/tgRDzUZv1DTfnV85/05pYC26Rs/vdSvra1cv5XzP5isJTnDtXi70vOX6xMn8o/k+Ho25Plx9ap48fXfv9yrWON879sy+ov5oJ5O26W96x8z9TE3MTdxNzo1qcRx8qt4k+WVgKSiDgaEce2WMfFp789sdaxjeNfRwfWmarfRDxVP/8L0RR/IUuNzl3+YHT22vUW65Oje6MyfWq06BWr/frbF2+tVf9dxd8B2fnf37L/L8U/mDSu18629//v2eD4Vvt/f/JOLd2f7/toYm7u6lhE/6WVnaK2f3x1viifxT98svX4PxzLn8TxiMg68cMR8UhEPJq3/bGIeDwiTq4T48+vPvH+1uPfXln8U22d/+VEfzTvaZ0oXfrp+9jbUOlgO/Fn5/9MLTWc79nM999m2tV+bwYAAID/pjQiDkaSjiyl03RkpP738kdif1qZmZ175vzMh1em6s8IDEZfWtzpGmi4HzqWX9YX+fGm/On8vvFXpX21/MjkTGWq28FDjzuwxvjP/FnqduuAbed5Lehdxj/0LuMfepfxD72rxfjf1412ADuv1e//J11oB7Dzmsa/ZT/oIa7/oXcZ/9C7jH/oSbP7YuOH5CUkViUi3RXN2MZEUt4VzehSotvfTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xbwAAAP//Eg/hCA==") r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, 0x0, 0x0) dup3(r0, r1, 0x0) 2m34.668317493s ago: executing program 5 (id=3339): process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f0000000340)) openat$sndseq(0xffffffffffffff9c, 0x0, 0x2) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000900, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x7c) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/49, 0x31) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) bind$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r2, 0x70d, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8840) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_adj\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0xe2120, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x5, 0x10001}, 0xecc8, 0x2b0, 0x0, 0x4, 0xb, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000580)='-8', 0x2}], 0x1, 0x8cf4, 0xc) 2m34.667994073s ago: executing program 48 (id=3339): process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f0000000340)) openat$sndseq(0xffffffffffffff9c, 0x0, 0x2) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000900, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x7c) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/49, 0x31) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) bind$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r2, 0x70d, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8840) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_adj\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0xe2120, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x5, 0x10001}, 0xecc8, 0x2b0, 0x0, 0x4, 0xb, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000580)='-8', 0x2}], 0x1, 0x8cf4, 0xc) 2m10.14547676s ago: executing program 9 (id=3569): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100274674fd32bd7000fcdbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r4 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_icmp(0x2, 0x2, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x306580}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x401, 0x400000, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5a4}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070025bd7000fddbdf2505000000180001801400020073797a5f74756e000000a30700000000080003800400038008000500"], 0x3c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000700)=@ethtool_rxnfc={0x2d, 0x9, 0x7fffffffffffffff, {0xd, @esp_ip4_spec={@remote, @rand_addr=0x64010102, 0x7fff, 0x9}, {0x0, @broadcast, 0x5, 0xfffa, [0x2, 0x1]}, @ether_spec={@local, @remote, 0x64}, {0x0, @local, 0x2, 0x5, [0xffff8cf6, 0x6]}, 0x5, 0xd09}}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3a0, 0xffffffff, 0xf0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 2m9.546939834s ago: executing program 9 (id=3571): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x20040800) sendmsg$NFT_BATCH(r3, 0x0, 0x10) writev(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x80000022, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) 2m9.502187985s ago: executing program 9 (id=3573): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000001740), 0x12) r2 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="6c00000002060500000000000000000005000003120003006269746d61703a69702c6d616300ffff05000400010000000900020073797a310000000020000780050003001f0000000c00018008000100ffffffff08000840000001dd05000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0xc88c4) open_tree(0xffffffffffffff9c, 0x0, 0x89901) close(0xffffffffffffffff) r4 = fsmount(r2, 0x1, 0x0) syz_clone3(&(0x7f0000000880)={0x308800000, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000440)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2m8.979553967s ago: executing program 9 (id=3585): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x4, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, r2, 0x301, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4811}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = fcntl$dupfd(r3, 0x406, r5) setsockopt$inet_int(r6, 0x0, 0xc, &(0x7f00000000c0)=0x201, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x1, 0x10000, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x6}, 0x1c) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x8001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}], 0x1c) 2m8.883933199s ago: executing program 9 (id=3586): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_netdev_private(r1, 0x89ff, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x3e2}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) io_uring_register$IORING_REGISTER_QUERY(r4, 0x23, &(0x7f0000003a80)=[{0x0, &(0x7f0000000300)="5ba869c8e40d72d611baef94a1356cd8f8b225e9bf85f083ca2139ecbd741e4b95f2f64adddc5b7cef", 0x1, 0x29}], 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x8e}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x6}]}}]}, 0x50}}, 0x4000010) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x3, 0x0, 0x7ffc0003}]}) io_submit(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigpending(0x0, 0x0) 2m8.559565377s ago: executing program 9 (id=3591): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0xa) fchdir(r3) getresuid(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x878b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x6}}]}, 0x0, 0x46e, &(0x7f0000000bc0)="$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") socket(0x2, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) uname(0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) mbind(&(0x7f0000ff8000/0x5000)=nil, 0x5000, 0x6, 0x0, 0x7, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) socket(0x400000000010, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xc0ed4040, &(0x7f0000000f40)={[{@commit={'commit', 0x3d, 0x4}}, {@nobarrier}, {@barrier}, {@quota}, {@grpid}, {@journal_dev={'journal_dev', 0x3d, 0x9b9}}, {@data_writeback}, {@jqfmt_vfsv1}]}, 0x0, 0x47a, &(0x7f0000001000)="$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") 1m53.492475761s ago: executing program 49 (id=3591): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0xa) fchdir(r3) getresuid(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x878b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x6}}]}, 0x0, 0x46e, &(0x7f0000000bc0)="$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") socket(0x2, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) uname(0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) mbind(&(0x7f0000ff8000/0x5000)=nil, 0x5000, 0x6, 0x0, 0x7, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) socket(0x400000000010, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xc0ed4040, &(0x7f0000000f40)={[{@commit={'commit', 0x3d, 0x4}}, {@nobarrier}, {@barrier}, {@quota}, {@grpid}, {@journal_dev={'journal_dev', 0x3d, 0x9b9}}, {@data_writeback}, {@jqfmt_vfsv1}]}, 0x0, 0x47a, &(0x7f0000001000)="$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") 1m10.927628252s ago: executing program 2 (id=3994): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x10, 0x10}}]}}}]}, 0x40}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) unshare(0x2040400) ioctl$RTC_UIE_ON(r3, 0x7003) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendto(r4, 0x0, 0x0, 0x48d1, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000300)={'veth1_vlan\x00', &(0x7f0000000200)=@ethtool_perm_addr}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)}], 0x1}, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="130000", 0x3}, {&(0x7f0000000080)='\x00\x00', 0x2}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m10.792690826s ago: executing program 2 (id=3999): r0 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73d, 0x2, 0x1, 0xffffffff}, &(0x7f00000001c0), &(0x7f0000000100), &(0x7f0000000000)) syz_io_uring_setup(0x263f, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x0, 0x0, 0x0, r0}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x5}, 0x8012, 0x4, 0x1, 0x2, 0x1, 0x80, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipe\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000380)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp\x00') mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp,nolock,rsize=1024,wsize=1024\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000480)='addr=127.0.0.1,vers=2,proto=udp\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000500)='nfs4\x00', 0x0, &(0x7f0000000540)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000880)) socketpair(0x2c, 0x3, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f00000006c0)=ANY=[@ANYBLOB="05984e117af4aaaaaaaaaabb0800480400340000000000059078ac1414ff0a010100860c0000000301063c024e9a00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c003c019078000085731a79a903cdfad747e5ce6c5d56d1caa368155f2acadf00b8384747b7e3df9b5bc2a58c69eaae3d8aac84854886ec8fc2"], 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040041}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r2, r3, 0x4, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x8}}, 0x30) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x24, 0x27, 0x5, 0xffffffff, 0x0, r0}, &(0x7f00000002c0), &(0x7f00000000c0), &(0x7f0000000000)) 1m8.322767553s ago: executing program 2 (id=4013): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) syz_emit_ethernet(0x1e, &(0x7f0000000040)={@local, @empty, @void, {@llc_tr={0x11, {@llc={0x42, 0x42, "03", "6c404000000062cf004ab77f84"}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, 0x0, 0x24004084) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x4}, 0xc118, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfdfd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000d40)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x7a, 0x889, {}, 0x1119dff, 0xffffffff7ffffffd, 0x4}}}, 0x90) r5 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xd) r6 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x23, &(0x7f0000000040), 0xcf) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000840)={{0x1, 0x1, 0x18, r5, {0x7}}, './file0\x00'}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@loopback={0x0, 0xffff64010100}, 0x80}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x35, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0x0, 0x10000004, {0x2, 0x0, 0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x40400c4) close(r1) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 1m7.940413542s ago: executing program 2 (id=4016): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x4, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, r3, 0x301, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4811}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = fcntl$dupfd(r4, 0x406, r6) setsockopt$inet_int(r7, 0x0, 0xc, &(0x7f00000000c0)=0x201, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x1, 0x10000, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x6}, 0x1c) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x6004, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0xbf1, @mcast2, 0x2}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x8001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}], 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) setitimer(0x0, 0x0, 0x0) 1m7.825292925s ago: executing program 2 (id=4018): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x4001, 0x3, 0x2a0, 0x0, 0xb, 0x148, 0x0, 0x148, 0x208, 0x240, 0x240, 0x208, 0x215, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x21, 0x0, 0x10}, 0x2e8, 0xe8, 0x130, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x4e24, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e24], [0x1, 0x0, 0x43, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x41, 0x0, 0x0, 0x0, 0xfc]}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0xab, 0x6, 'syz1\x00', {0x4}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'team0\x00', 'netpci0\x00', {}, {}, 0x0, 0x1}, 0xec010000, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./mnt\x00', 0x10002, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$FIONCLEX(r1, 0x5450) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) r3 = open(0x0, 0x4827e, 0x20) fallocate(r3, 0x0, 0x832d, 0x87ffffd) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/block/sda/hctx0/tags\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(r7, 0xf, &(0x7f0000000300)={0x2, r8}) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x8) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0x8, 0x2], 0xfe) 1m7.423934625s ago: executing program 2 (id=4019): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0008}]}) timerfd_create(0x5, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x262, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x10000004}) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) epoll_pwait2(r2, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @connect={{0x6}, {0x7, 0x9}}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) perf_event_open(&(0x7f00000012c0)={0x4, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x7b51fbb6, 0x80104, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xfff, 0x4}, 0x3c8, 0xff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xfffffffffffffffe, r0, 0x3) mremap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x7, 0x37, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) ioctl(r0, 0xc013fd04, &(0x7f0000003000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000070") 52.248929101s ago: executing program 50 (id=4019): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0008}]}) timerfd_create(0x5, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x262, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x10000004}) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) epoll_pwait2(r2, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @connect={{0x6}, {0x7, 0x9}}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) perf_event_open(&(0x7f00000012c0)={0x4, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x7b51fbb6, 0x80104, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xfff, 0x4}, 0x3c8, 0xff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xfffffffffffffffe, r0, 0x3) mremap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x7, 0x37, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) ioctl(r0, 0xc013fd04, &(0x7f0000003000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000070") 46.704035012s ago: executing program 8 (id=4106): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0xa, 0x2, 0x3a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4a046) socket$kcm(0x1e, 0x4, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) close(0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 46.549172276s ago: executing program 8 (id=4108): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) wait4(0xffffffffffffffff, 0x0, 0x20000000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0xc404) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) listen(0xffffffffffffffff, 0x5) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xc4, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x80, 0x12, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x92}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x800}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x800}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10}]}}}, {0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x10c}}, 0x20050800) sendmmsg$inet6(r0, &(0x7f0000000f80)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x86, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000280)="8a", 0x1}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e21, 0x8075, @dev={0xfe, 0x80, '\x00', 0x6}, 0x2}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000ac0)='^', 0x1}], 0x1}}], 0x2, 0x40000c0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000300)={0x0, 0x5}, &(0x7f0000000340)=0x8) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000000)='\x00\xdb\xf9}\x94\xd7\xe5\x1f\xab{\xd0E\xbc\x1f\xb5<\xe4f=\b\x00\x00\x00\x00\x00\x00\x00\xe2\xde\x8c\x10boj\xd3X\x86\v\x8clx=\xbc0F\x94k\x8d\xe0\xeeP\xa8\xa9\x10\xd4\x0f\x1eL!\x82\x8d\x80\xd0#\xca\xaf#\xf6\x95\xf4\xf2\xce\x8f\x8c\xa4\t\xac\x96\x13\x96\xf76\xc1', 0x53) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x2808080, &(0x7f0000000600)={[{@uni_xlate}, {@shortname_win95}, {@uni_xlateno}, {@uni_xlate}, {@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@uni_xlateno}, {@shortname_win95}, {@shortname_winnt}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}, 0x81, 0x2ae, &(0x7f0000001980)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 46.103940756s ago: executing program 8 (id=4113): unshare(0xe060400) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4023, 0x10002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x4, @perf_bp={0x0, 0xb}, 0x8000, 0x5, 0x7, 0x4, 0xb, 0x401, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0xa) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x40000) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mysys/class/net\x00', 0x80000, 0x1) getdents64(r1, &(0x7f0000000540)=""/1000, 0x3e8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@bh}]}, 0x1, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x3, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) 45.1000257s ago: executing program 8 (id=4116): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4048085) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000440)={0x0, 0x80000001, 0x30}, 0xc) dup(r0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$eJzs3U9rY1UUAPDz0uQ1QxftwpUIvsUs3Fims3VhBqkgdqVk4R/QwZmBoQkDDQRGxTArP4ELF34Pd+4FN34DwYVLdw5SuPLeS5NMkkmmHdMO5ffb9HLuOe/em3fbFMK7+fKN/vG9R4MHT779I9rtLBqd6MTTLPaiEWfSWAAA18LTlOLvC72/NxubmhMAsFkz7/+t56RsL4be3fS0AIAN+viTTz+8c3R0+FFRtCP63w+7WdQ/6/47D+Jh9OJ+3IrdOJ1+FpBS3X7/g6PDaBalvbjZHw27ZWX/i98mqXlU9QexG3vL6w+K2kz9aNis/vPIsoiHnXIit2M3XluoL/sPby+pj24eb7XHiyzH34/d+P2reBS9uFd9pjEd/7s8ivfSD/9881mZXNZno2F3u8qbSluXfW8AAAAAAAAAAAAAAAAAAAAAALi+9ouJvbjZL0P1+TvdrdOqf/+Z/up8nUbVX9dnEXnVmDsfaJTip7PzdW4VRZGyOn9yvs+NZrzejOaVLRwAAAAAAAAAAAAAAAAAAABeIYPHXx/f7fXun/wvjfFD/pPH+i96nc5M5M1Ynbx9rrFia5xeznU+5+DXz/uTSLmIi0x+2CoiVs25tRC5Uc5n/ZX/TSmlLIt4udvUepGx1jR2VueUL/AvP+68fXw3W/cats9u3M+zXXmcDB7P3dPIVg96+kwknWv75Sty8vGOeaHr7LzkL9E7f9aDjSPZmlW0ZiKtcSOet/3a59rPl/c3CAAAAAAAAAAAAAAAAAAAqE0f+l3S+WRlaWNjkwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASzb9/v9pIxYic41R/FUVL89JKY0mkTxOBle9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK6//wIAAP//qWdtxQ==") r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10fec8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f00000000c0)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x1, 'fo\x00', 0x6, 0x3, 0x80}, 0x2c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = io_uring_setup(0x76fc, &(0x7f0000000340)={0x0, 0x3c3b, 0x1000, 0x5, 0x2d2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000540), 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x2, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x2, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = io_uring_setup(0x4197, &(0x7f00000002c0)={0x0, 0xe63f, 0x10000, 0xffffffff, 0x292}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r1}}, './file1\x00'}) io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[r3], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0xd0ffbf, 0x0, &(0x7f00000002c0), 0x0) 45.019039062s ago: executing program 8 (id=4118): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_trace', 0x100102, 0x72e7334ada1c82d6) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) sendfile(r2, r3, 0x0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x4, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000002c0)={'filter\x00', 0x0, 0x0, 0x0, [0x1, 0x9, 0x800, 0x0, 0xffff, 0x8], 0x0, &(0x7f0000000280)=[{}, {}, {}]}, 0x78) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r4 = socket(0xa, 0x1, 0x0) r5 = syz_open_dev$loop(&(0x7f00000000c0), 0xba, 0x100) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c0000"], 0xa4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12) socketpair(0xa, 0x5, 0xe, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580)=0x2, &(0x7f00000001c0)=r6}, 0x20) close(0x4) 44.639074991s ago: executing program 8 (id=4122): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000080)={[{@noblock_validity}, {@lazytime}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x1}}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x4a1, &(0x7f0000000a00)="$eJzs3MtvFVUYAPBvprel5SGI+ICAVsFIfLS0PGRhYjSasNBo1AXGVb0tBClgoCZCiKILjHFhSNwblyb+Ba50Y9SViS5xb0iIYQO6umbuzPR5bx/0trf2/n7J9J4zc27P+ebM3J45M70BdKz+7EcSsTkirkfE1oiozC7Qn7/cuXW5+s+ty9UkarU3/06yt8XtW5erxa+oL5lN+YparchvaFDv1XciRsbHx84X+cGJM+8PXrh46ZlTZ0ZOjp0cOzt89Oihg3t6jgwfXkwYtULTAllct3d9dG73zmNvX3u1evzau798l7V3c7G9jKOV+vO929Djra6szbZMSyeVNjaEJcn6rbtYrketqyv6JrdtjZc/bWvjgJVWafT3uXClBqxjSbS7BUB7lH/os+vfcllovNDCsUfb3XwhjyiL+06x5FsqkRZlumdd37ZSb0Qcv/Lv19kSKzQPAQAw3Q/Z+OfpRuO/NB6YVu6e4h7Ktoi4NyK2R8R9EbEjIu6PqJd9MCIeWmL9s++QzB3/pDdmZGtdS6xhftn477ni3tbM8V85+ottXUVuSz3+7uTEqfGxA8U+2R/dG7L80Iy3zPTjS79/OXvdF8U0e/+08V+2ZPXPjDC9MXuCbnRkYmT5kedufhKxqzI9/jKIZHKgn0TEzojYdZd1nHry293NtjWKvxwLL6gFVyK1byKeyPv/Sszo/2SyTNL0/uTQs0eGDw/2xvjYgcHyqJjr19+uvt6s/mXF3wJZ/29sePzn8WfXiElvxIWLl07X79deuItK/vysmjTZtKOIv7tp/HOP/+q+iJ7krXq6pyxVvPYkr2QvfeX6D0cmJs4PT723zNdfh/L49++din8kps7/7fnlWSR/vDH5/j0R8XBEPFL03aMR8VhE7J0n/J9f3Pdes23N+3+eWfkWyuIfnaf/s4+8LDXV/0tPdJ3+6ftm9dcWPP6z/j9UT+0v1izm82+xDVzOvgMAAID/i7T+DHySDkym03RgIH+Gf0dsTCsR8dSJcx+cHc2fld8W3Wk507V12nzoUDE3XOaHZ+UPFvPGX3X11fMD1XPjo+0OHjrcpibnf+av1t5qAdaidfVEH7Akzn/oXM5/6FyNzv/afN+mAawbz7e7AUB79DRe/fFqtwNoi6Vf//euSDuA1Wf+DzqX8x86l/MfOlLT/41Pl/Uv/6ueKGcklvl7KmsknEaJvrXRjDIR6YJl0pWovQW93Djx2uf5IbQ2du9UorLoL7O4y8SGpvt5jmObV++jCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCX+CwAA///vaOGC") perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x3, 0x9, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r0, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, 0x0, 0x8000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x4c044) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) read(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 44.619234041s ago: executing program 51 (id=4122): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000080)={[{@noblock_validity}, {@lazytime}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x1}}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x4a1, &(0x7f0000000a00)="$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") perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x3, 0x9, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r0, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, 0x0, 0x8000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x4c044) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) read(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7.285655529s ago: executing program 0 (id=4325): unshare(0x28000600) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2c0c0}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x20040880) sendmsg(r1, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x40004) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount_setattr(r2, &(0x7f0000000400)='./file0/../file0/file0/file0\x00', 0x8800, &(0x7f0000000000)={0x1, 0xa, 0x40000, {r2}}, 0x20) getpid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x34}, 0x94) r4 = socket(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, 0x0) syz_usb_connect$uac1(0x3, 0x79, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 6.110955737s ago: executing program 1 (id=4333): socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x13b) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/auth_enable\x00', 0x2, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setns(0xc9, 0x0) getsockopt(r0, 0x200000000114, 0x271e, 0x0, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/10, 0xa}, 0x8001}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet6_int(r2, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c) sendto$inet6(r3, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x152, 0x1, 0x0, 0x2, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='20', 0x2) write(r4, &(0x7f0000000200)='2', 0x1) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in=@private=0xa010100, 0x4e1f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffeffffa}, {}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x4d4, 0x32}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xb7, 0x9, 0xfffffffe, 0x3}}, 0xe8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5.96412902s ago: executing program 4 (id=4334): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/lvs/new_id\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1d6b 0003)', 0xa) r2 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r3 = openat(r2, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000d00)=' f 127.0.0.1 2\\00000000 \\\\calhost\n', 0x24) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000005c0), 0x10) recvmmsg(r5, &(0x7f0000009480)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x630, 0x350, 0x280, 0x1b0, 0x280, 0x560, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, @local, @private2}}, @common=@inet=@multiport={{0x50}}]}, @HL={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2a}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x5, 0x0, 0x52}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0xfc}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYRES8=r5, @ANYRESDEC=r1, @ANYRES8=r5, @ANYRES8=r6, @ANYRES64=r4], 0x48}}, 0x0) write(r4, &(0x7f0000000540)='c', 0x1) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x11) ioctl$FIONREAD(r7, 0x8924, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000140)={@desc={0x1, 0x0, @desc1}}) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r8, 0x0, 0xfffffffffffffd66, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x200, 0x0, 0x0, 0x7, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000100)='(()}^+&)\x00') 5.152943769s ago: executing program 1 (id=4337): socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830a}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="0200"], 0xfe44, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = dup(r2) write$UHID_INPUT(r3, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x2, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x20, 0x5c, 0x64, 0x0, 0x6, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x4e21, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "af374149222d486ca7895e9409a659464b39e100", "0e510dd776982e11562021340b296972dfd04230653f5cb2eeb0bcdefce2b91c"}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r4, 0x1, 0x19, 0x0, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_NAPI(r3, 0x1b, &(0x7f0000000240)={0x8, 0x0, 0x1, '\x00', 0x7}, 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440), 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000b70300000000000a850000000c000000b70000000000001a9500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000140), &(0x7f0000000180)=r7}, 0x20) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') r8 = socket$kcm(0xa, 0x2, 0x0) r9 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000440)={{0x84, @loopback, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4.754519798s ago: executing program 4 (id=4339): symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10040d, 0xf, 0x243, 0x9, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES16=r0], 0x48) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sync() sync() sync() r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000100)=0x40a8, 0x4) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r4, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 4.565994463s ago: executing program 1 (id=4340): syz_emit_ethernet(0x76, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaa0086dd60f53a0400403a0000000000000000000000ffffac1e0301ff0200000000000000000000000000010200a3780000050060f19f00ffff3300fc010000000000000000000000000000fc020000000000000000000000000000290000000000000052d51a0aaad618533756b4cb1502c9ff87faeccd465d4ba20630afb66e162081aa0ddffcb82ecbef52e7c965c5d208cce8f9f08403a8980ab417ccbe355b05eb3177bdf06d5f70a4dc1d4db100ef9e88f1e3d399f1f18c66dd49e90397f7dd359f7237f541f4d269d75afb4854f1ea2023996b8df6ce6a2e84a1526817719d7cf36aad79a6df509e334499eb15db422acec5f3f9"], 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20044008) mkdir(&(0x7f0000000000)='./my_sysfs\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$msr(0xffffffffffffffff, &(0x7f00000001c0)=""/33, 0x21) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x200) openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 4.490695784s ago: executing program 3 (id=4341): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x2, 0x1, {0x0, 0x0, r0}}, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000380)='GPL\x00', 0x101, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0xb, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000480)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x4, 0x4, 0x6, 0xc}, {0x1, 0x3, 0xd, 0x4}, {0x0, 0x3, 0xf, 0x3}, {0x3, 0x3, 0xe, 0x6}, {0x2, 0x5, 0xb, 0x1}, {0x2, 0x2, 0xa, 0x7}], 0x10, 0x9c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000640)=[0x0, 0x0], &(0x7f0000000680)=[0x0], 0x0, 0xc0, &(0x7f00000006c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x74, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r2, 0x29, 0x49, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [], {0x14}}, 0x28}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0x70d59, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x1290, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x9, 0x6, 0x0, 0x2, 0x0, 0x70bd29, 0x25dfdbff}, 0x10}}, 0x0) socket$netlink(0x10, 0x3, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x12, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x32}]}, 0x3c}}, 0x0) 4.346631268s ago: executing program 1 (id=4343): r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xffffffffffffffff) r3 = epoll_create1(0x80000) syz_io_uring_setup(0x4325, &(0x7f00000004c0)={0x0, 0x776f, 0x40000, 0x2, 0x80311, 0x0, r0}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[], 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000180), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x6, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000b, 0x11, r4, 0x0) r5 = io_uring_setup(0x344c, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x6d9e, &(0x7f0000000040)={0x0, 0x7b4e, 0x40, 0x1, 0xa0002f5}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0) 4.223663701s ago: executing program 7 (id=4345): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1ff, 0x6}, 0x102005, 0x0, 0x8, 0x6, 0x8b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x14, 0xc, 0x5c}, 0x2c) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r4 = dup(r3) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x71) ftruncate(r5, 0x200002) sendfile(r4, r5, 0x0, 0x80001d00c0d1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xe8) quotactl$Q_GETINFO(0x0, &(0x7f0000000080)=@filename='./file0\x00', r7, &(0x7f0000000540)) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000240)={0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) 4.123007833s ago: executing program 3 (id=4346): r0 = socket$inet(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0xd6, 0x65, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800003, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000000000000c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "00000080072000", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)="c800b66cf7e6a5", 0x7}], 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000040)="08001efbb009006e", 0x8}], 0x1, &(0x7f0000000140)}, 0x804) unshare(0x20000400) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x58}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000040071186a000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') socket$nl_route(0x10, 0x3, 0x0) 3.884105589s ago: executing program 0 (id=4347): socket(0x1e, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f00000001c0)={0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0xc00000, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) io_uring_setup(0x650b, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) r4 = socket$inet(0x2, 0x1, 0x6) bind$inet(r4, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)=':27.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.posix_acl_default\x00') timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000)) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x6c, 0x6, 0x0, 0x80, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1e1ed, 0x1, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0xfffffffc, 0x0, 0x8003}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x681c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7, 0x4}, 0x13c0e8, 0x0, 0x0, 0x989c6d54a3fb7abf, 0x3, 0x3, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) unshare(0x26020480) 3.42017468s ago: executing program 4 (id=4348): socket(0x2a, 0x2, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000002c0), 0x8}, 0x0, 0x0, 0xc00000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{0x0, 0x0, &(0x7f0000003580)=[{0x0}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x2, &(0x7f0000003600)=""/6, 0x6}, 0x51}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0xb4, 0x1, 0x0, 0x0, 0x0, 0xd, 0x800, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x9, 0x100}, 0xb45, 0x4, 0x1, 0x8, 0x109, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x552e1a7561534260, 0x0, 0x39, 0x0, &(0x7f0000000100)) getitimer(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 3.00956695s ago: executing program 7 (id=4349): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x8084, &(0x7f0000001040)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRES16, @ANYRESHEX, @ANYRES16=0x0, @ANYRES32, @ANYRES16, @ANYRES64], 0x1, 0x16b, &(0x7f0000000600)="$eJzs20GrElEUB/Azab73avPW0WKgTSupVi2LeEE0UBQualVgbTSE3Eyt/BSt+4JBuGrVDZ3QEkWknJHn77fxwB+958rMXO7AfXPzw6A/Gr8fPZ/GaZZF+0Hk8TOL87gSrahMAgC4TH6kFN9TSulkEmdfI6XUdEcAwL5Z/wHg+Gxd/+831BgAsDf2/wBwfF6+ev30YVFcvMjz04hvk7JX9qrPKn/8pLi4k8+dL781Lctea5HfrfL87/xqXPud31ubd+L2rSqfZY+eFSv59ejvf/oAAABwFLr5wtr9fbe7Ka+qP94PrOzf23GjXds0AIAdjD99HrwdDt99rKE4m4+Y1TvobsWXBv6Wgy1acRBtKLYWs0v2f/9yk08loA7Lm77pTgAAAAAAAAAAAAAAgE3+8ahQJyLWRBGdbScLTmqfKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACz8CgAA//9vQEW+") r0 = open(0x0, 0x0, 0x0) unlinkat(r0, 0x0, 0x200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$packet(0x11, 0x3, 0x300) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a00010000040000000000000aed"], 0x24}, 0x1, 0x0, 0x0, 0x814}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) add_key(0x0, 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c53", 0x272, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001400078008000640000002000800084088"], 0x60}}, 0x200040c0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_opts(r9, 0x0, 0x4, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="21032cbd7000fedbdf25010000000400030004000180280002800c000180080001000f0000000c00018008000100040000000c000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x24044094}, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 2.513742301s ago: executing program 3 (id=4350): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2de32e1738b8ef9c, @perf_config_ext={0x52, 0x9b7f}, 0x22d264327e9e8aaf, 0x4, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000080)=0x6, 0x4) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) sendmsg$tipc(r1, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) connect$tipc(r1, &(0x7f00000000c0)=@name, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff", 0x44) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r2) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, 0x0, 0x4008000) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x20008800) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) accept4$inet(r3, 0x0, 0x0, 0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) 2.420418483s ago: executing program 0 (id=4351): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x9}, 0x13014, 0x0, 0x2, 0x8, 0x3fe, 0x9, 0xffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(0x0, &(0x7f0000000200)='./config\x00', 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) removexattr(&(0x7f0000000280)='./proc\x00', &(0x7f0000000340)=@random={'osx.', ']\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r3 = open(&(0x7f00000001c0)='./proc/sys/vm/compaction_proactiveness\x00', 0x14b142, 0x0) sendfile(r3, r3, 0x0, 0x1000000201005) mkdir(0x0, 0x1ff) r4 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r4, 0x0) ftruncate(r4, 0x51a9497) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000480)='127.0.0.1:/root\x00\x82\xda|7\xd3\x86+\x0f\xb7\x7fI\xfb\x8a\xed\xa4\xb25D\xa2\xc6\r\x97]R\b\xdaC\xb8\xac6z>? /ht>\xd0%\xc9\x1a\x86\xaa\xee\x9c\xfb\xc6x|\xe6\xf7\xcav\xb5\x85\xb0\xfa\xe3\xb6\xae\x9bl\xf7\t\xcc\xd4\xda~\x05\xfaG7\xbd\t\xae\xba\xb8?\xf0\a\xff\xf6 ?\xacV\xfa-\xeb\xb1\x17^\xa5\xe1%\xbe\xf0.\x820\xa3dP\x86H\x06\xb1\x91\xcb\x89M \xb8\xc4\x10 0x0, 0x0}) futex(&(0x7f0000000280)=0x1, 0x7, 0x0, &(0x7f0000000300)={r4, r5+10000000}, &(0x7f0000000340), 0x0) dup(r3) 1.701887201s ago: executing program 1 (id=4353): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4020, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020600) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001e00010029bd7000fcdb9f2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040080}, 0x804) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x100000000000009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0xe, 0x1}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000002c0), 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r5 = io_uring_setup(0x1103, &(0x7f0000000040)={0x0, 0xc8a5, 0xc000, 0x80000008, 0xee}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a000000"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$int_out(r6, 0x0, &(0x7f0000000380)) eventfd(0x0) io_setup(0xc, 0x0) socket$key(0xf, 0x3, 0x2) io_submit(0x0, 0x0, 0x0) 1.639046572s ago: executing program 7 (id=4354): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$netlink(0x10, 0x3, 0x0) mount$bind(0x0, 0x0, 0x0, 0x135000, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000280)={0x5, 0x4c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, 0xffffffffffffffff, 0xf6d58000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(r5, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000080)="d1c2", 0xfedc}, {&(0x7f0000000040)='`', 0x1}], 0x3) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0xc) socket$rxrpc(0x21, 0x2, 0xa) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)={0x7c, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0xc, 0x3eff, 0x0, 0x0, @u64}, @nested={0xfffffffffffffeb0, 0x19, 0x0, 0x1, [@nested={0x54, 0x75, 0x0, 0x1, [@nested={0x4e, 0x109, 0x0, 0x1, [@generic="a39a16f7f48b47152619a42d33b4c8ecd0bed8535a550132a27c2c9fc46d8d96b78a62f7d442a6d2405c2db65312b0af06b09a7d167f079ec0fc2970823908a7c474ae7c2ca284305894"]}]}]}]}, 0x7c}], 0x1, 0x0, 0x0, 0x8040}, 0x0) 1.555246184s ago: executing program 3 (id=4355): socket$nl_generic(0x11, 0x3, 0x10) r0 = socket$rds(0x15, 0x5, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaa"], 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2cc, &(0x7f00000006c0)="$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") r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401d, 0x30010, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0xbd4c057df0585645, @perf_config_ext={0x6, 0x9}, 0x13c0a8, 0x850, 0x0, 0x989c6d54a3fb7abf, 0x81, 0x4, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) setuid(0xee00) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getcwd(&(0x7f0000000000)=""/21, 0x15) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000000)) shutdown(r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x228, 0x0, 0xffffffff, 0x0, 0x2c8, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "9401d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x22}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x75b1817ec7c0652, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x854, 0x20c0}, 0x80, 0x2}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xa, @remote, @empty, @port=0x4e22, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0xffffffffffffffff, 0x4, 0x3}, 0x3, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e21, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @gre_key=0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x1e, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f00000016c0)={{&(0x7f0000000680)=""/4096, 0x1000}, &(0x7f0000001680), 0x43}, 0x20) perf_event_open(&(0x7f0000001700)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={0x0, 0xf}, 0x480, 0x0, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 1.456206716s ago: executing program 0 (id=4356): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f00000002c0)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa030490781200183f2500000000000000000100007f0000017f00000100186371ae9b1c03c1b5a7c0b3016aadc6bdbd069333b9d4897ca9911b836fc75dfb705024b719fd1ccb7d51bce4713e2bf9381edca4d2c1206365e3fa82faaea07bc9bc86dd4e7be826c3475f1f68325bdcb9847ebe2f6964b79f63eab8aa019e23ec11365fb4564d84d8f8c29889043c656dfce3320a4099b21d4bff4fa04d89992c769daaee84707bb11f"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r2 = gettid() openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1d, 0x800000000004, @tid=r2}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) iopl(0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f0000000080)='{^&\xb8\x00', 0x5, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) socket(0x10, 0x3, 0x2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) epoll_create1(0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @multicast2}, 0x2, 0x0, 0x3}}, 0x26) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r7, 0x40047435, &(0x7f0000000100)=0x1) accept4(0xffffffffffffffff, &(0x7f0000000140)=@sco, &(0x7f0000000200)=0x80, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) 1.455588006s ago: executing program 7 (id=4357): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$kcm(0xa, 0x922000000003, 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) unshare(0x2c020400) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$MRT_PIM(r2, 0x0, 0xcf, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000005a80)=@ethtool_eeprom={0xb, 0x1000, 0xceca}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x8}, 0x1fee9, 0x1222, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0xf1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) bind$phonet(r4, &(0x7f0000000540)={0x23, 0x80, 0x0, 0x6}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0x154}}, 0x8044) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="800100001a0013070000000000000000fe8000000000000000000000000000aa7f00000100000000000000000000000000000000000000020000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a01010200000000000000000000000000000000330000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b40000000000000000000000000000000000000000000000000000200000100000000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000a0002006000000000000000480001007368613100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000745d03006465666c61746500000000000000000000000000000000000000000000000000000000000000001000"/312], 0x180}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/num_groups\x00', 0x1, 0x0) bpf$ITER_CREATE(0xb, &(0x7f00000002c0), 0x8) 1.235319211s ago: executing program 4 (id=4358): socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f00000075c0)={&(0x7f0000007400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x6, 0x9}, {0x10000, 0x1}, {0x7, 0xe}, {0x1c96, 0x5}, {0x6, 0x5761}, {0xf, 0xb684}, {0x0, 0x645e}, {0x3, 0x1}, {0x80, 0xfffffffffffffffa}, {0x6, 0x2}, {0x3, 0x6}, {0x4, 0x81}, {0x69, 0x6}, {0x3, 0x8000008}, {0x4, 0xffe}, {0x5, 0x5}, {0xfffffffffffffff0, 0x10000}, {0x401, 0x802}, {0x2, 0x7}, {0x70000000000000}, {0x9, 0x200000000000003}, {0x6, 0x100000001}, {0x5, 0xffffffff00000001}, {0x9, 0x40}, {0x2, 0x6}, {0x0, 0xabd0122}, {0x39, 0x10}, {0x3, 0x40}, {0x7, 0xc}, {0x7, 0x7f}, {0x8, 0x8}, {0x2, 0x1000a00}, {0xc7ee, 0x9}, {0x100000000, 0x2}, {0x6, 0x4}, {0x5, 0xffffffffffffffff}, {0x5, 0x6}, {0x3f07, 0xffffffff}, {0x2, 0x6}, {0xff, 0xac2}, {0xd, 0x3663e5e9}, {0x6, 0x1ff}, {0xffffffffffffffd4, 0x8000000000000000}, {0x9, 0x8000}, {0x84, 0x1}, {0x2b7c, 0xcb6}, {0x9}, {0x8, 0x3}, {0x2, 0xfffffffffffffff7}, {0x3ff, 0x9}, {0x1, 0x3d}, {0x1, 0x7}, {0x3, 0x7ff}, {0x4, 0x20000000000008}, {0xfffffffffffffffe, 0x800}, {0x2, 0x23}, {0x9, 0x6}, {0x200, 0xd}, {0x80c, 0xde}, {0x1, 0x129}, {0x80000001, 0x3}, {0x1000, 0x3}, {0x2, 0x7}, {0x1, 0x2}, {0x6, 0x1}, {0x9, 0x4}, {0x8, 0x8}, {0xffffffffffffffff, 0x1}, {0x5, 0x3}, {0x6, 0x1}, {0xfffffffffffffffc, 0x3}, {0x4, 0xffffffffffffffff}, {0x9, 0x6}, {0x7, 0x2}, {0x70ac, 0x20000000000000}, {0x0, 0x8000000000000000}, {0xffffffffffffffff, 0x8}, {0x2}, {0xffffffffffffff00, 0x80000000000009}, {0x7f, 0x1}, {0x1000000, 0x6}, {0xf, 0x4}, {0x7bea, 0x9}, {0xc4, 0xbe}, {0x9, 0x900}, {0x564, 0x10001}, {0x4, 0x7}, {0x7fffffff, 0x8a}, {0x3, 0x3}, {0xffffffff00000001, 0x3}, {0x0, 0x9}, {0x100000000, 0x6}, {0x10000, 0x9}, {0x9, 0x4000400000000}, {0x8000000000000000, 0x8}, {0x4, 0x6}, {0xffffffffffffffff, 0x5}, {0x7, 0xffffffffffffffff}, {0xe3}, {0x3, 0x7fff}, {0x6, 0x6}, {0xfffffffffffffcc8, 0x99}, {0x0, 0x1}, {0x6}, {0x6, 0x1}, {0x7ff, 0x24000000000}, {0x79e, 0x100000001}, {0x4, 0x7}, {0xfe, 0x7}, {0x2424, 0x7}, {0x3, 0xffffffffffffffff}, {0x4, 0x3}, {0x3}, {0x4, 0x8000000000000001}, {0x3, 0x3}, {0x587, 0x8fa}, {0xad2, 0x3}, {0x4, 0x2}, {0xffffffffffffc426, 0x80f}, {0x1, 0x3}, {0x1, 0x6}, {0x7, 0x8}, {0x40, 0x7ff}, {0xffffffffffffffff, 0x10000}, {0x2, 0x401}, {0x100000001, 0xfff}, {0x6, 0x4}, {0x8000000000000001, 0x9}, {0x1, 0x80}, {0xbe6, 0x8}, {0xac7b, 0x2}, {0x100000000, 0xff}, {0x898, 0x8}, {0x5, 0x7}, {0x0, 0x81}, {0x6000000000, 0x6}, {0x2, 0x400}, {0xfffffffffffffc01, 0x80000001}, {0x3, 0x8}, {0x5, 0x20}, {0xfffffffffffffffc}, {0x3e6, 0x7}, {0xb6, 0xc}, {0x8, 0xe}, {0x0, 0x19d}, {0x2, 0x81}, {0x6, 0x5}, {0x8, 0x10000}, {0xf, 0x2}, {0x1, 0x3}, {0x6, 0x4008}, {0xdc, 0x8}, {0x1ff, 0xb}, {0x8, 0x6}, {0xfffffffffffffff8, 0x46ef}, {0x8, 0x2}, {0xc41, 0x5}, {0x1000000000007, 0x4}, {0x9, 0x2}, {0xecb6, 0x4}, {0x7, 0x8}, {0x100000001, 0x5}, {0x4, 0x1}, {0xab, 0x2}, {0xf, 0x8}, {0x3ff, 0xca44}, {0xc, 0xc958}, {0x5, 0x8}, {0x10, 0x9}, {0x6, 0x1}, {0x0, 0x400}, {0x5, 0x5}, {0x3, 0x35d1}, {0xfffffffffffffffb, 0x7f}, {0x3, 0x2}, {0xc859, 0x80000000}, {0xced5, 0x80000000}, {0x5, 0xd}, {0xe6, 0xfffffffffffffff7}, {0x6, 0x200}, {0x5, 0x8}, {0xff45, 0x6}, {0x2d81, 0x8}, {0x4}, {0x3, 0x9}, {0x4000000000000000, 0x7ff}, {0x7fffffffffffffff, 0x8}, {0x9, 0x7}, {0xb91, 0x6}, {0xaacc, 0x3}, {0x5b71}, {0xfffffffffffffffb, 0xfffffffffffffff8}, {0x6, 0x3}, {0x6c0f87dd, 0x100}, {0xfffffffffffffff9, 0x8d}, {0x3, 0x80}, {0x100, 0x9}, {0x4, 0x8}, {0x0, 0x2}, {0x400, 0x9}, {0x5, 0x9}, {0x6, 0x1}, {0x2, 0x6}, {0x2, 0xcf}, {0x401}, {0x3, 0x8}, {0x63fc0cb, 0x7f}, {0xfffffffffffffff9, 0x2b}, {0x10002, 0x3}, {0xbcc, 0x8}, {0x4}, {0x4, 0x1000000000000001}, {0xfffffffffffff965, 0xa2c}, {0xaf3, 0xff5}, {0x9, 0x3}, {0x6, 0x5}, {0x80000001, 0x1}, {0x4, 0x9}, {0x606, 0xe}, {0x2, 0x5}, {0xe, 0x69}, {0x3, 0x10}, {0x6}, {0xb, 0x56}, {0x8c}, {0xfffffffffffffff7, 0x5}, {0x4, 0x5}, {0x5, 0xf}, {0x1, 0x2}, {0x9, 0x800000000000000}, {0x34, 0x2}, {0x80c8, 0xffffff0000000000}, {0x7, 0x58}, {0xed, 0x5}, {0x9, 0xfff}, {0x800, 0x1}, {0x0, 0x4}, {0x7, 0x6}, {0xf03, 0x5}, {0x80000002, 0x400}, {0x9}, {0xb9}, {0x4}, {0xffffffff, 0x18ca}, {0x1a8, 0x8}, {0x38, 0x6}, {0x10001, 0x989}, {0x80000002, 0x4}, {0x1, 0x7}, {0xffffffffffff679a, 0x4}, {0x6}, {0x8, 0x7ff}, {0x9, 0xfffffffffffffffa}, {0x3, 0x5d22}, {0x6}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x10, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) socket(0xa, 0x80805, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c814}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000380)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r3, 0x928, &(0x7f0000000420)) 1.221486421s ago: executing program 7 (id=4359): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="180500000800000000000000000000008500000075000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x17e) r5 = creat(&(0x7f0000000600)='./tracing/dynamic_events\x00', 0x118) write$binfmt_script(r5, &(0x7f00000001c0)={'#! ', './tracing/dynamic_events'}, 0x1c) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r6 = accept4(r3, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000001b40)=[{&(0x7f0000000780)=""/237, 0xed}, {&(0x7f0000000880)=""/46, 0x2e}, {0x0}, {0x0}], 0x4, 0x1, 0x4) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000180)=0x1) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r6, &(0x7f0000000a00)={&(0x7f0000000200)=@nl=@unspec, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000280)="70d9dbc29d29c9953b1d088aaedf1bdeb51045a478c7387496d1925ab04b0e2e2709641b9bc166abada053a0c65bc1f0a882725e7b0fcefdbed64fde810d9f6cec3d9d7adc41f7af15cdf17ed041a0219438673fbf8bc13f13dd4ff90d694fb267fb917c06c5f2ea3945b22edcba235de1ee1e3bffd762124e5da1f8c8df", 0x7e}, {&(0x7f00000008c0)="05783feedc191f66c4cc164fb47451c15bf83fac1a3ab64bea2db4a754bd212a87480637e6b2f8b827dde8c95cb78a536e7cb06a5548bb19529cb7f4e88405f7cc70243630344ae741c049a9befcd13e0d668fb0b8cc7d3d3c7c7912bb1d9736fdc21790ee0d5d4a93d7c0c1a493d6cbcc01005614cf1da8e06055c739d48921be04c11e96a7a6fcada22c723be9101bf467dd32ec053765bd7d6ef150a2b128836c9fb1dc4b408405eea2e78270063caec5414d11cecce98a98a32d59748a124a3a8827", 0xc4}], 0x2}, 0x80fcde58d4eecbe4) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000400)='`', 0x1}], 0x1, &(0x7f0000000a80)=ANY=[@ANYBLOB="480000000000000029000000370000002b0500000000000007280000000308480400030000000000000008000000000000000104000000000000080000000000000004010300000014000000000000002900000043000000080000000000000050"], 0xb0}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x3, @local}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000000c0)="2af475602e9b84b230ddb9ec2318e59e25ef1b83ba1eebc4c4faa9ad3462603576e60b31ca20532675c4d34f07a53b02bcfb237a408fe4bf5a78af1b9b10dec949036d1f0461b4048e378feff279fe02c130ec727c1e2d3522a900a7249f9aeb7f0ce15db6b369553254c7db38abd41f89368aa88aaa47f7b6faaa9dffed1ed42e4f5460829020", 0x87}, {0x0}, {&(0x7f0000000340)="226e98d6f4c17c6d5d07a8c626e45afecc5ae3913c8d52f8b0af1f1e3c322446699d2d6162a70b3ad0f40aeeedac4bc0a4a0236fa690226768e51ad97067fe72b08ff6002758c060a9520122a201d993551c6f1a8086b751ab18de7b4567159e4c3e1edb41", 0x65}], 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB]}}], 0x2, 0x4000801) shutdown(r2, 0x1) getsockopt$bt_hci(r2, 0x84, 0x6c, &(0x7f0000000b00)=""/4105, &(0x7f0000000000)=0x1009) 992.919717ms ago: executing program 7 (id=4360): unshare(0x2020e00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x64000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRESOCT], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x20000000) syz_open_procfs(0x0, &(0x7f0000000080)='clear_refs\x00') socket$kcm(0x2, 0x3, 0x2) setpriority(0x3, 0x0, 0x4004) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x8b8, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000c40)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) 782.715542ms ago: executing program 0 (id=4361): perf_event_open(&(0x7f0000001200)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0xa}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x52}, 0x4, 0x1}, 0xe) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x81, &(0x7f0000000000)={[{@errors_remount}]}, 0x4, 0x4f0, &(0x7f0000000740)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x8581) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, 0x0) syz_emit_ethernet(0x46, &(0x7f0000001280)=ANY=[@ANYBLOB="0380c20000000180c20000000800450000380000000000019078ac1e0001ac1414aa05009078120002282500000000000000002f000000000000ac1e0401000022ebffff00004012dbda0fd9281fd3b328c667d6a7fa9e4135a2542fee4107345f9225dd159193a96e9d332b6a33fdd6911b2a70ad0bbf"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000640)={0x1, &(0x7f0000000040)=[{0x6, 0x4, 0x8f, 0x7fff0000}]}) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f0000000000)=""/34) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x24, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x1de, &(0x7f0000000640)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6062c78e01a83a00fc000000000000000000000000000001ff0200"/51], 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) io_setup(0x5, &(0x7f0000000e80)=0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r5, 0x0}]) 579.052826ms ago: executing program 3 (id=4362): socket$inet6_icmp(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x108904, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xffffffffffbffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000010c0)='./sys/bus/pci/devices/0000:00:03.0/resource\x00', 0x0, 0x0) read(r1, &(0x7f0000001100)=""/4096, 0x1000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) syz_mount_image$ext4(&(0x7f0000000400)='ext3\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000000480), 0x0, 0x3e3, &(0x7f0000002100)="$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") open(&(0x7f0000000140)='./file2\x00', 0x66842, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a000111"], 0x30}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) 529.924568ms ago: executing program 0 (id=4363): perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x201}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x402001) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$kcm(0x21, 0x2, 0xa) r0 = socket$kcm(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd28, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000010"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x80, 0x0, 0x0, 0x0, 0x30}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x0, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x3c, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r6, {0x9}, {0xffff}, {0x10, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x40, 0xdc}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x40) 478.723259ms ago: executing program 3 (id=4364): r0 = socket$netlink(0x10, 0x3, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x200, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20) r5 = syz_io_uring_complete(0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)='%ps \x00'}, 0x20) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x7ff, 0x0, 0xffffffffffffffff, 0x1, '\x00', r2, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$qrtrtun(r8, &(0x7f0000000300)="ca0e808bb35b", 0x6) r9 = openat(0xffffffffffffff9c, &(0x7f0000006140)='./mnt/events/cdns3/cdns3_ep0_queue/inject\x00', 0x1, 0x0) write(r9, &(0x7f00000061c0)='dir', 0x3) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffff, '\x00', r2, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x50) r11 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x17, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfe34}, [@jmp={0x5, 0x0, 0x6, 0xa, 0x8, 0x4, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xd}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe18}, @jmp={0x5, 0x0, 0xc, 0x7, 0x1, 0x2}]}, &(0x7f00000004c0)='GPL\x00', 0x69, 0xcf, &(0x7f0000000700)=""/207, 0x41100, 0x4, '\x00', r2, 0x25, r5, 0x8, &(0x7f0000000800)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x3, 0x2, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000a80)=[r6, 0xffffffffffffffff, r7, r8, r9, r10, 0x1, r3, r11], &(0x7f0000000b40)=[{0x0, 0x4, 0xc, 0x6}, {0x2, 0x2, 0xd, 0x4}, {0x1, 0x4, 0x5, 0x7}, {0x2, 0x1, 0xe, 0x1}, {0x3, 0x5, 0x4, 0x4}], 0x10, 0x3}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2], 0x3c}}, 0x0) 95.884908ms ago: executing program 4 (id=4365): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb905b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7ffff}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1000003}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x3) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$usbfs(0x0, 0xf, 0x240000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000004640)={0x0, 0x0, &(0x7f0000004600)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000090542b3c5917422254e9adfa195e81bfb02520127ed6d02a27", @ANYRES16=r1, @ANYBLOB="010026bd7000475f00002e0000000a0001007770616e300000000c0005000200aaaaaaaaaa"], 0x2c}, 0x1, 0x0, 0x0, 0x40881}, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) 0s ago: executing program 1 (id=4366): syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x20c019, &(0x7f0000005340)={[{@map_acorn}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@check_strict}, {@hide}, {@mode={'mode', 0x3d, 0xa7c}}, {@utf8}, {@utf8}]}, 0x0, 0x567, &(0x7f0000000200)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@allocspi={0x1ac, 0x16, 0x19, 0x70bd26, 0x25dfdbfb, {{{@in6=@mcast1, @in6=@loopback, 0x4e23, 0xfffa, 0x4e22, 0x6, 0xa, 0x0, 0x20}, {@in6=@private1, 0x4d2, 0x32}, @in6=@mcast1, {0x9, 0x8, 0x8, 0x2, 0xf2, 0x8000000000000000, 0x0, 0x2}, {0x0, 0x1, 0x3, 0x40000000000}, {0x1, 0x8, 0x7}, 0x70bd2d, 0x3500, 0x2, 0x1, 0xc, 0x88}, 0x2f3b, 0xef0f}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x4}, @policy={0xac, 0x7, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x4e23, 0x37, 0xa, 0xa0, 0x20, 0x88}, {0x4e9d2059, 0x2, 0x5, 0xffffffff8d363973, 0x0, 0x0, 0x3, 0x80000001}, {0x6, 0x8, 0xdcb, 0x7113}, 0x6, 0x6e6bb9, 0x1, 0x0, 0x1, 0x3}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2000000000, 0x10000}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x17}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) setxattr(&(0x7f0000000040)='./dev\x00', &(0x7f0000000080)=@random={'trusted.', '}\x00'}, &(0x7f00000000c0)='-\'\x00', 0x3, 0x2) r1 = socket(0x2, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='wg0\x00', 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x6, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f00000004c0)="2d9b1d00000000000000000000000000000000005315b443b7d788aec4bf4890556e91eebbdef82765cda6401bcf473eb55635e9", 0x34}], 0x1}}], 0x1, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x6}, 0x110220, 0x2, 0xfffffffe, 0x0, 0x400000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x7, &(0x7f0000000a40)={0x0, 0x39, 0x0, @thr={&(0x7f0000000940)="bad1070d585eb8f73b670a422a7653829dab942e3e52572be0eda0dfab7943f5", &(0x7f0000000980)="556494f9d4f67f60570d8e299a0a263ebdb223872a922c85c1c788367367b3262e4a786ae90a1779a8cd30e1b5495d1eb61f5872ae9bf824e62aab580730b652faed3cff732da731c9eb0da1e64dc1dc0cd91fcaaa390365639901e9875dc68a57ec0bee64c2696644e7f4ee22539bf2efd20fc148d01a6af3f55378ccb9f719561a40f9cb3160e4d3ba95ec55f7ae8693b47a9c8c54ef987e0c3c76cf3d811f320d5ef2cb1bf50bf9f1b3f06c"}}, &(0x7f0000000a80)=0x0) timer_settime(r3, 0x1, &(0x7f0000000ac0), &(0x7f0000000b00)) kexec_load(0x3, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x116094000, 0x41000000}], 0x0) kernel console output (not intermixed with test programs): { write } for pid=19805 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.355671][ T29] audit: type=1400 audit(1788733836.215:10266): avc: denied { write } for pid=19832 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.410521][ T3024] 8021q: adding VLAN 0 to HW filter on device eth20 [ 396.427032][T19827] syzkaller0 speed is unknown, defaulting to 1000 [ 396.557989][T19674] veth0_vlan: entered promiscuous mode [ 396.578554][T19674] veth1_vlan: entered promiscuous mode [ 396.620118][T19674] veth0_macvtap: entered promiscuous mode [ 396.631414][T19674] veth1_macvtap: entered promiscuous mode [ 396.655328][T19674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.666986][T19674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.691938][ T29] audit: type=1400 audit(1788733836.555:10267): avc: denied { write } for pid=19838 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.794732][T19847] loop2: detected capacity change from 0 to 128 [ 396.801375][ T29] audit: type=1400 audit(1788733836.665:10268): avc: denied { write } for pid=19852 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.852314][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.852450][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.852597][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.852770][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.894234][T19847] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3647'. [ 397.101625][ T29] audit: type=1400 audit(1788733836.965:10269): avc: denied { write } for pid=19858 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 397.177753][ T29] audit: type=1400 audit(1788733837.045:10270): avc: denied { write } for pid=19871 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 397.266048][T19834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3649'. [ 397.424335][ T29] audit: type=1400 audit(1788733837.295:10271): avc: denied { write } for pid=19878 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 397.775170][T19893] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3651'. [ 397.917515][T19914] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 398.579732][T19935] pim6reg: left allmulticast mode [ 398.729628][T19970] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3658'. [ 398.729918][T19970] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3658'. [ 399.100743][T19983] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.0.3659: No space for directory leaf checksum. Please run e2fsck -D. [ 399.100782][T19983] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.0.3659: checksumming directory block 0 [ 399.100890][T19983] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 399.100941][T19983] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.0.3659: No space for directory leaf checksum. Please run e2fsck -D. [ 399.101038][T19983] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.0.3659: checksumming directory block 0 [ 399.101078][T19983] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 399.101151][T19983] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.0.3659: No space for directory leaf checksum. Please run e2fsck -D. [ 399.101197][T19983] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.0.3659: checksumming directory block 0 [ 399.101240][T19983] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 399.101284][T19983] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.0.3659: No space for directory leaf checksum. Please run e2fsck -D. [ 399.101319][T19983] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.0.3659: checksumming directory block 0 [ 399.101389][T19983] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 399.204597][T19983] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 399.765294][T20002] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3665'. [ 400.187538][T20005] loop2: detected capacity change from 0 to 512 [ 400.215014][T20005] ext4: Unknown parameter 'appraise_type' [ 400.298376][T20005] loop2: detected capacity change from 0 to 1024 [ 400.416019][T19985] netlink: 'syz.3.3660': attribute type 10 has an invalid length. [ 400.423555][T19985] wg2: left promiscuous mode [ 400.429884][T19985] wg2: entered promiscuous mode [ 400.430047][T19985] team0: Device wg2 is of different type [ 400.466839][T20005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 400.477310][T20005] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.512750][ T1045] page_pool_release_retry() stalled pool shutdown: id 25, 1 inflight 362 sec [ 400.530055][T18561] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 400.928383][T16644] syz_tun (unregistering): left allmulticast mode [ 400.928416][T16644] syz_tun (unregistering): left promiscuous mode [ 400.928461][T16644] bridge0: port 1(syz_tun) entered disabled state [ 401.171650][T20032] syzkaller0 speed is unknown, defaulting to 1000 [ 401.187085][T20052] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 401.370712][T20032] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.370760][T20032] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.370873][T20032] bridge_slave_0: entered allmulticast mode [ 401.391683][T20032] bridge_slave_0: entered promiscuous mode [ 401.400358][T20032] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.407584][T20032] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.407708][T20032] bridge_slave_1: entered allmulticast mode [ 401.408177][T20032] bridge_slave_1: entered promiscuous mode [ 401.441025][T20050] loop2: detected capacity change from 0 to 512 [ 401.450067][T20032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.477582][T20032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.489672][T20050] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 401.524767][T20032] team0: Port device team_slave_0 added [ 401.528770][T20032] team0: Port device team_slave_1 added [ 401.565414][T20050] EXT4-fs (loop2): 1 truncate cleaned up [ 401.567568][T20050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.609375][T20032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.609399][T20032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.609446][T20032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.614322][T20032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.614393][T20032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.614488][T20032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.688257][T18561] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.725061][T20032] hsr_slave_0: entered promiscuous mode [ 401.733449][T20032] hsr_slave_1: entered promiscuous mode [ 401.734023][T20032] debugfs: 'hsr0' already exists in 'hsr' [ 401.734065][T20032] Cannot create hsr debugfs directory [ 402.129895][T20072] syzkaller0 speed is unknown, defaulting to 1000 [ 402.291721][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 402.291743][ T29] audit: type=1400 audit(1788733842.155:10288): avc: denied { write } for pid=20080 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 402.385023][ T29] audit: type=1400 audit(1788733842.255:10289): avc: denied { write } for pid=20095 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 402.459569][T20032] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 402.470476][T20032] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 402.497200][T20032] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 402.506887][T20032] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 402.508049][T20032] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 402.522888][ T29] audit: type=1400 audit(1788733842.375:10290): avc: denied { read append } for pid=20099 comm="syz.2.3688" name="file0" dev="tmpfs" ino=342 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 402.528213][T20032] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 402.588799][T20032] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 402.597780][T20032] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 402.706697][T20032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.723398][T20032] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.729391][ T392] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.729430][ T392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.766334][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.766382][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.818600][ T29] audit: type=1400 audit(1788733842.685:10291): avc: denied { write } for pid=20101 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 403.162513][ T29] audit: type=1400 audit(1788733842.975:10292): avc: denied { write } for pid=20125 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 403.453267][ T29] audit: type=1400 audit(1788733843.315:10293): avc: denied { write } for pid=20127 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 403.529594][ T29] audit: type=1400 audit(1788733843.395:10294): avc: denied { write } for pid=20149 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 403.597822][T20032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.728860][ T29] audit: type=1400 audit(1788733843.595:10295): avc: denied { setopt } for pid=20163 comm="syz.3.3694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 403.765362][ T29] audit: type=1400 audit(1788733843.635:10296): avc: denied { write } for pid=20163 comm="syz.3.3694" name="functions" dev="configfs" ino=9478 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 403.781600][ T29] audit: type=1400 audit(1788733843.635:10297): avc: denied { write } for pid=20163 comm="syz.3.3694" name="ep.0" dev="configfs" ino=65612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 403.931364][T20032] veth0_vlan: entered promiscuous mode [ 403.948469][T20032] veth1_vlan: entered promiscuous mode [ 403.980149][T20032] veth0_macvtap: entered promiscuous mode [ 403.995042][T20032] veth1_macvtap: entered promiscuous mode [ 404.016632][T20032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.028752][T20032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.123022][ T70] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.123085][ T70] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.123276][ T70] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.123509][ T70] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.284049][T20206] loop7: detected capacity change from 0 to 128 [ 404.287705][T20206] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 404.308695][T20206] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 404.313960][T20206] ext2 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.582864][T20032] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 404.907403][T20246] loop7: detected capacity change from 0 to 512 [ 404.917453][T20246] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 404.970288][T20234] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.970424][T20234] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.199146][T20234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.209943][T20234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.403512][ T38] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.422418][ T38] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.422473][ T38] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.422613][ T38] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.504339][T20258] FAULT_INJECTION: forcing a failure. [ 405.504339][T20258] name failslab, interval 1, probability 0, space 0, times 0 [ 405.504383][T20258] CPU: 0 UID: 0 PID: 20258 Comm: syz.7.3703 Not tainted syzkaller #0 PREEMPT(lazy) [ 405.504459][T20258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 405.504473][T20258] Call Trace: [ 405.504550][T20258] [ 405.504561][T20258] __dump_stack+0x1d/0x30 [ 405.504598][T20258] dump_stack_lvl+0x95/0xd0 [ 405.504629][T20258] dump_stack+0x15/0x1b [ 405.504662][T20258] should_fail_ex+0x262/0x280 [ 405.504712][T20258] should_failslab+0x8c/0xb0 [ 405.504752][T20258] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 405.504792][T20258] ? sock_alloc_inode+0x36/0xf0 [ 405.504887][T20258] ? sock_alloc_inode+0x36/0xf0 [ 405.504981][T20258] ? selinux_socket_create+0xfd/0x180 [ 405.505080][T20258] ? __pfx_sock_alloc_inode+0x10/0x10 [ 405.505181][T20258] sock_alloc_inode+0x36/0xf0 [ 405.505263][T20258] alloc_inode+0x40/0x170 [ 405.505407][T20258] __sock_create+0x121/0x580 [ 405.505523][T20258] ? __se_sys_futex+0x2f6/0x370 [ 405.505663][T20258] ? xfd_validate_state+0x45/0xf0 [ 405.505790][T20258] __sys_socket+0xaf/0x180 [ 405.505874][T20258] __x64_sys_socket+0x3f/0x50 [ 405.505959][T20258] x64_sys_call+0x246e/0x2550 [ 405.506096][T20258] do_syscall_64+0x112/0x360 [ 405.506200][T20258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.506309][T20258] RIP: 0033:0x7ff7ad39e159 [ 405.506362][T20258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.506440][T20258] RSP: 002b:00007ff7abdf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 405.506528][T20258] RAX: ffffffffffffffda RBX: 00007ff7ad625fa0 RCX: 00007ff7ad39e159 [ 405.506579][T20258] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 405.506673][T20258] RBP: 00007ff7ad435024 R08: 0000000000000000 R09: 0000000000000000 [ 405.506735][T20258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.506786][T20258] R13: 00007ff7ad626038 R14: 00007ff7ad625fa0 R15: 00007fff349778a8 [ 405.506856][T20258] [ 405.514980][T20258] socket: no more sockets [ 405.842977][T20261] loop7: detected capacity change from 0 to 1024 [ 405.888414][T20261] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 405.908119][T20261] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.052175][T20264] loop2: detected capacity change from 0 to 512 [ 406.052958][T20264] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 406.062782][T20264] EXT4-fs (loop2): 1 truncate cleaned up [ 406.063948][T20264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.233616][T18561] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.394835][T20032] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 406.771474][T20339] netdevsim netdevsim3: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 407.090352][T20305] syzkaller0 speed is unknown, defaulting to 1000 [ 407.311362][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 407.311390][ T29] audit: type=1400 audit(1788733847.175:10322): avc: denied { write } for pid=20369 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 407.359119][T20365] loop2: detected capacity change from 0 to 512 [ 407.415187][T20365] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 407.436119][T20365] EXT4-fs (loop2): 1 truncate cleaned up [ 407.457261][T20365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.471177][ T29] audit: type=1400 audit(1788733847.335:10323): avc: denied { write } for pid=20364 comm="syz.2.3717" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 407.554221][T20365] EXT4-fs error (device loop2): __ext4_expand_extra_isize:6537: inode #15: comm syz.2.3717: bad extra_isize 62 (inode size 256) [ 407.568122][T20365] EXT4-fs (loop2): Remounting filesystem read-only [ 407.645854][T18561] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.723827][ T29] audit: type=1400 audit(1788733847.595:10324): avc: denied { write } for pid=20378 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 407.806781][ T29] audit: type=1400 audit(1788733847.675:10325): avc: denied { write } for pid=20400 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 408.986888][T20426] random: crng reseeded on system resumption [ 408.988343][ T29] audit: type=1400 audit(2000000000.030:10326): avc: denied { write } for pid=20425 comm="syz.7.3727" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 409.033428][ T29] audit: type=1400 audit(2000000000.080:10327): avc: denied { ioctl } for pid=20425 comm="syz.7.3727" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x330e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 409.076225][T20428] syz_tun: entered allmulticast mode [ 409.132103][T20428] dvmrp6: entered allmulticast mode [ 409.212855][T20380] syzkaller0: left promiscuous mode [ 409.219292][ T1045] syzkaller0 speed is unknown, defaulting to 1000 [ 409.219330][ T1045] syz2: Port: 1 Link ACTIVE [ 409.438467][T20434] syzkaller0 speed is unknown, defaulting to 1000 [ 409.766836][T20423] syz_tun: left allmulticast mode [ 409.799227][T20426] loop7: detected capacity change from 0 to 512 [ 409.841508][T20426] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 409.853581][T20426] EXT4-fs (loop7): can't mount with data_err=abort, fs mounted w/o journal [ 410.397469][T20453] syzkaller0 speed is unknown, defaulting to 1000 [ 410.856837][ T29] audit: type=1400 audit(2000000257.900:10328): avc: denied { link } for pid=20448 comm="syz.4.3733" name="file1" dev="tmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 411.192727][ T29] audit: type=1400 audit(2000000258.241:10329): avc: denied { write } for pid=20472 comm="syz.3.3741" name="functions" dev="configfs" ino=9478 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 411.240664][T20465] loop7: detected capacity change from 0 to 512 [ 411.394800][T20465] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.398172][T20477] PM: Enabling pm_trace changes system date and time during resume. [ 411.398172][T20477] PM: Correct system time has to be restored manually after resume. [ 411.453938][ T29] audit: type=1400 audit(2000000258.501:10330): avc: denied { write } for pid=20464 comm="syz.7.3738" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 411.460750][T20490] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3742'. [ 411.690822][T20500] syz_tun: entered promiscuous mode [ 411.888396][T20032] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.219188][ T29] audit: type=1400 audit(2000000259.261:10331): avc: denied { write } for pid=20502 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.389189][ T29] audit: type=1400 audit(2000000259.431:10332): avc: denied { write } for pid=20529 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.728429][T20542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=20542 comm=syz.0.3757 [ 412.741089][ T29] audit: type=1400 audit(2000000259.771:10333): avc: denied { write } for pid=20536 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.774968][T20546] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 412.775009][T20546] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 412.775527][T20546] vhci_hcd vhci_hcd.0: Device attached [ 412.786835][T20554] vhci_hcd: cannot find the pending unlink 4096 [ 412.828023][ T29] audit: type=1400 audit(2000000259.871:10334): avc: denied { write } for pid=20557 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.936532][T20554] vhci_hcd: connection closed [ 412.936753][ T115] vhci_hcd vhci_hcd.4: stop threads [ 412.936783][ T115] vhci_hcd vhci_hcd.4: release socket [ 412.936808][ T115] vhci_hcd vhci_hcd.4: disconnect device [ 412.961852][ T3761] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 413.083443][ T29] audit: type=1400 audit(2000000260.121:10335): avc: denied { write } for pid=20563 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 413.136429][ T29] audit: type=1400 audit(2000000260.181:10336): avc: denied { write } for pid=20574 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 413.284083][ T29] audit: type=1400 audit(2000000260.331:10337): avc: denied { write } for pid=20578 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 413.334726][ T29] audit: type=1400 audit(2000000260.381:10338): avc: denied { write } for pid=20589 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 413.703677][T20596] netlink: 'syz.2.3760': attribute type 3 has an invalid length. [ 413.703705][T20596] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.3760'. [ 413.793098][ T29] audit: type=1400 audit(2000000260.831:10339): avc: denied { write } for pid=20599 comm="syz.2.3762" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 413.886081][ T29] audit: type=1400 audit(2000000260.931:10340): avc: denied { bind } for pid=20601 comm="syz.3.3763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 414.005500][T20619] netlink: 26 bytes leftover after parsing attributes in process `syz.0.3766'. [ 414.645814][ T29] audit: type=1400 audit(2000000261.691:10341): avc: denied { write } for pid=20628 comm="syz.7.3770" name="usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 414.810477][T20629] loop7: detected capacity change from 0 to 1024 [ 415.201904][T20642] tmpfs: Bad value for 'mpol' [ 415.558908][T20680] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3779'. [ 415.641557][T20660] loop2: detected capacity change from 0 to 2048 [ 415.681713][T20660] EXT4-fs: test_dummy_encryption option not supported [ 415.974569][T20702] netlink: 'syz.3.3786': attribute type 1 has an invalid length. [ 416.155886][T20702] 8021q: adding VLAN 0 to HW filter on device bond2 [ 416.163426][T20697] loop7: detected capacity change from 0 to 512 [ 416.208711][T20704] bond2: (slave geneve3): making interface the new active one [ 416.220378][T20704] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 416.232533][ T115] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.232674][ T115] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.232722][ T115] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.232770][ T115] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.336869][T20714] nfs4: Unknown parameter 'retran' [ 416.559299][T20717] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 416.559329][T20717] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 416.559621][T20717] vhci_hcd vhci_hcd.0: Device attached [ 416.567800][T20729] vhci_hcd: cannot find the pending unlink 4096 [ 416.731434][ T3401] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 416.748143][T20729] vhci_hcd: connection closed [ 416.748402][ T70] vhci_hcd vhci_hcd.7: stop threads [ 416.748432][ T70] vhci_hcd vhci_hcd.7: release socket [ 416.748459][ T70] vhci_hcd vhci_hcd.7: disconnect device [ 416.791978][ T3401] usb 15-1: new full-speed USB device number 2 using vhci_hcd [ 416.792026][ T3401] usb 15-1: enqueue for inactive port 0 [ 416.792056][ T3401] usb 15-1: enqueue for inactive port 0 [ 416.792081][ T3401] usb 15-1: enqueue for inactive port 0 [ 416.861953][ T3401] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 417.450097][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 417.450127][ T29] audit: type=1400 audit(2000000264.491:10664): avc: denied { write } for pid=20808 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.450422][ T29] audit: type=1326 audit(2000000264.491:10665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20718 comm="syz.3.3791" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f912350e98e code=0x7ffc0000 [ 417.523620][ T29] audit: type=1400 audit(2000000264.571:10666): avc: denied { connect } for pid=20824 comm="syz.2.3803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 417.544318][ T29] audit: type=1326 audit(2000000264.591:10667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20824 comm="syz.2.3803" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad332e159 code=0x7ffc0000 [ 417.544358][ T29] audit: type=1326 audit(2000000264.591:10668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20824 comm="syz.2.3803" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad332e159 code=0x7ffc0000 [ 417.545143][ T29] audit: type=1326 audit(2000000264.591:10669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20824 comm="syz.2.3803" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad332e159 code=0x7ffc0000 [ 417.545542][ T29] audit: type=1326 audit(2000000264.591:10670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20824 comm="syz.2.3803" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4ad332e159 code=0x7ffc0000 [ 417.545654][ T29] audit: type=1326 audit(2000000264.591:10671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20824 comm="syz.2.3803" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad332e159 code=0x7ffc0000 [ 417.545864][ T29] audit: type=1326 audit(2000000264.591:10672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20824 comm="syz.2.3803" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad332e159 code=0x7ffc0000 [ 417.546155][ T29] audit: type=1326 audit(2000000264.591:10673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20824 comm="syz.2.3803" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad332e159 code=0x7ffc0000 [ 417.740507][T20828] loop2: detected capacity change from 0 to 1764 [ 417.748926][T20828] iso9660: Bad value for 'block' [ 417.851653][T20835] siw: device registration error -23 [ 417.866807][T20838] loop2: detected capacity change from 0 to 512 [ 417.870508][T20838] EXT4-fs: Ignoring removed nomblk_io_submit option [ 417.870645][T20838] EXT4-fs: Ignoring removed nomblk_io_submit option [ 417.873447][T20838] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 417.885759][T20838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.885955][T20838] ext4 filesystem being mounted at /86/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.930092][T20838] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.3807: iget: bad i_size value: 2533274857506816 [ 418.213492][T18561] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.384467][T20863] loop2: detected capacity change from 0 to 512 [ 418.441514][T20863] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 418.459638][T20863] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal [ 418.628723][T20876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3818'. [ 418.647969][T20876] FAULT_INJECTION: forcing a failure. [ 418.647969][T20876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.648041][T20876] CPU: 0 UID: 0 PID: 20876 Comm: syz.2.3818 Not tainted syzkaller #0 PREEMPT(lazy) [ 418.648081][T20876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 418.648094][T20876] Call Trace: [ 418.648102][T20876] [ 418.648111][T20876] __dump_stack+0x1d/0x30 [ 418.648215][T20876] dump_stack_lvl+0x95/0xd0 [ 418.648355][T20876] dump_stack+0x15/0x1b [ 418.648375][T20876] should_fail_ex+0x262/0x280 [ 418.648397][T20876] should_fail+0xb/0x20 [ 418.648488][T20876] should_fail_usercopy+0x1a/0x20 [ 418.648517][T20876] _copy_from_iter+0xcc/0xe70 [ 418.648547][T20876] ? alloc_pages_mpol+0xdf/0x1d0 [ 418.648582][T20876] copy_page_from_iter+0x15d/0x1f0 [ 418.648612][T20876] tun_get_user+0x612/0x2870 [ 418.648661][T20876] ? ref_tracker_alloc+0x1eb/0x2f0 [ 418.648691][T20876] tun_chr_write_iter+0x15a/0x210 [ 418.648870][T20876] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 418.648950][T20876] vfs_write+0x57f/0x9a0 [ 418.648987][T20876] ksys_write+0xdc/0x1a0 [ 418.649021][T20876] __x64_sys_write+0x40/0x50 [ 418.649069][T20876] x64_sys_call+0x154e/0x2550 [ 418.649117][T20876] do_syscall_64+0x112/0x360 [ 418.649222][T20876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.649245][T20876] RIP: 0033:0x7f4ad32ee98e [ 418.649261][T20876] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 418.649281][T20876] RSP: 002b:00007f4ad1d86fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 418.649315][T20876] RAX: ffffffffffffffda RBX: 00007f4ad1d876c0 RCX: 00007f4ad32ee98e [ 418.649335][T20876] RDX: 0000000000000082 RSI: 0000000000000000 RDI: 00000000000000c8 [ 418.649349][T20876] RBP: 00007f4ad33c5024 R08: 0000000000000000 R09: 0000000000000000 [ 418.649362][T20876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.649380][T20876] R13: 00007f4ad35b6038 R14: 00007f4ad35b5fa0 R15: 00007fffa2d8cbe8 [ 418.649399][T20876] [ 418.875927][T20879] »»»»»»: renamed from vlan0 [ 418.973907][T20886] netlink: 'syz.2.3821': attribute type 8 has an invalid length. [ 419.344681][T20894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3824'. [ 419.465838][T20896] netlink: 'syz.0.3825': attribute type 21 has an invalid length. [ 419.466506][T20896] IPv6: NLM_F_CREATE should be specified when creating new route [ 419.897438][T20918] loop2: detected capacity change from 0 to 128 [ 420.030590][T20918] syz.2.3832: attempt to access beyond end of device [ 420.030590][T20918] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 422.469545][T20958] syzkaller0 speed is unknown, defaulting to 1000 [ 422.562858][T20958] loop7: detected capacity change from 0 to 8192 [ 422.900799][T20965] netlink: 'syz.7.3848': attribute type 1 has an invalid length. [ 423.045102][T20976] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3849'. [ 423.057736][T20965] 8021q: adding VLAN 0 to HW filter on device bond1 [ 423.088093][T20978] bond1: (slave geneve2): making interface the new active one [ 423.135922][T20978] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 423.200587][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 423.200639][ T29] audit: type=1400 audit(2000000270.192:10840): avc: denied { connect } for pid=20973 comm="syz.3.3851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 424.292921][T20993] netlink: 'syz.2.3852': attribute type 12 has an invalid length. [ 424.292949][T20993] netlink: 'syz.2.3852': attribute type 29 has an invalid length. [ 424.292972][T20993] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3852'. [ 424.368824][T20976] syzkaller0 speed is unknown, defaulting to 1000 [ 425.658166][T21010] can0: slcan on ptm0. [ 426.024426][ T29] audit: type=1400 audit(2000000273.052:10841): avc: denied { write } for pid=21029 comm="syz.7.3863" name="functions" dev="configfs" ino=9478 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 426.105721][T21006] can0 (unregistered): slcan off ptm0. [ 426.119699][ T29] audit: type=1400 audit(2000000273.152:10842): avc: denied { write } for pid=21016 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 426.159640][ T29] audit: type=1400 audit(2000000273.192:10843): avc: denied { read } for pid=18448 comm="kworker/0:13" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=67943 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 426.335214][ T29] audit: type=1400 audit(2000000273.372:10844): avc: denied { write } for pid=21042 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 426.519653][T21012] syzkaller0 speed is unknown, defaulting to 1000 [ 426.818862][ T29] audit: type=1400 audit(2000000273.852:10845): avc: denied { write } for pid=21047 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.049825][ T29] audit: type=1400 audit(2000000274.082:10846): avc: denied { write } for pid=21071 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 428.890050][T21076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3881'. [ 428.907579][ T29] audit: type=1326 audit(2000000275.953:10847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21074 comm="syz.3.3881" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912354e159 code=0x7ffc0000 [ 428.909178][ T29] audit: type=1326 audit(2000000275.953:10848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21074 comm="syz.3.3881" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f912354e159 code=0x7ffc0000 [ 428.909292][ T29] audit: type=1326 audit(2000000275.953:10849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21074 comm="syz.3.3881" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912354e159 code=0x7ffc0000 [ 428.910694][ T29] audit: type=1326 audit(2000000275.953:10850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21074 comm="syz.3.3881" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f912354e159 code=0x7ffc0000 [ 428.910817][ T29] audit: type=1326 audit(2000000275.953:10851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21074 comm="syz.3.3881" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912354e159 code=0x7ffc0000 [ 428.913617][ T29] audit: type=1326 audit(2000000275.953:10852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21074 comm="syz.3.3881" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912354e159 code=0x7ffc0000 [ 428.913691][ T29] audit: type=1326 audit(2000000275.953:10853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21074 comm="syz.3.3881" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f912354e159 code=0x7ffc0000 [ 428.913768][ T29] audit: type=1326 audit(2000000275.953:10854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21074 comm="syz.3.3881" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912354e159 code=0x7ffc0000 [ 428.913860][ T29] audit: type=1326 audit(2000000275.953:10855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21074 comm="syz.3.3881" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912354e159 code=0x7ffc0000 [ 429.417276][T21103] loop7: detected capacity change from 0 to 512 [ 429.456046][T21103] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 429.659481][T21114] netlink: 'syz.0.3885': attribute type 10 has an invalid length. [ 429.659905][T21114] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3885'. [ 429.661496][T21114] veth1_virt_wifi: entered promiscuous mode [ 429.671338][T21114] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 429.671386][T21114] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 429.671467][T21114] veth1_virt_wifi: entered allmulticast mode [ 429.694127][T21106] loop2: detected capacity change from 0 to 2048 [ 429.731323][T21106] ext4: Unknown parameter 'obj_user' [ 429.855457][T21124] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3890'. [ 429.855490][T21124] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3890'. [ 429.882824][ T29] audit: type=1400 audit(2000000276.923:10856): avc: denied { read write } for pid=21098 comm="syz.2.3877" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 430.026510][T21131] PM: Enabling pm_trace changes system date and time during resume. [ 430.026510][T21131] PM: Correct system time has to be restored manually after resume. [ 430.083751][T21127] loop7: detected capacity change from 0 to 512 [ 430.085850][T21127] EXT4-fs: Ignoring removed nobh option [ 430.210005][T21127] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.210826][T21127] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 430.223186][T21127] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3891'. [ 430.285569][T21127] EXT4-fs error (device loop7): ext4_find_dest_de:2052: inode #2: block 3: comm syz.7.3891: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 430.343948][T21150] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 430.353101][T21150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3895'. [ 430.800695][T20032] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.919468][T21162] netlink: 'syz.4.3899': attribute type 10 has an invalid length. [ 430.929443][T21162] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3899'. [ 430.945467][T21162] veth1_virt_wifi: entered promiscuous mode [ 430.960225][T21162] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 430.970522][T21162] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 430.992066][T21162] veth1_virt_wifi: entered allmulticast mode [ 431.216993][T21162] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 431.217155][T21162] bridge0: port 3(veth1_virt_wifi) entered forwarding state [ 431.439100][T21171] loop7: detected capacity change from 0 to 128 [ 431.460043][T21171] EXT4-fs: Ignoring removed bh option [ 431.474462][T21171] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 431.490368][T21171] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 431.671653][T21171] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 431.865787][T21187] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3906'. [ 431.865820][T21187] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3906'. [ 432.462186][T21217] netlink: 'syz.7.3917': attribute type 10 has an invalid length. [ 432.462411][T21217] netlink: 2 bytes leftover after parsing attributes in process `syz.7.3917'. [ 432.462742][T21217] veth1_virt_wifi: entered promiscuous mode [ 432.469654][T21217] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 432.469754][T21217] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 432.470108][T21217] veth1_virt_wifi: entered allmulticast mode [ 432.483425][T21217] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 432.483547][T21217] bridge0: port 3(veth1_virt_wifi) entered forwarding state [ 433.192872][T21226] loop2: detected capacity change from 0 to 512 [ 433.209817][T21226] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 435.230062][T21278] sd 0:0:1:0: device reset [ 435.327284][T21278] loop7: detected capacity change from 0 to 512 [ 437.211933][T21323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.419550][T21323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.436958][T21323] sd 0:0:1:0: PR command failed: 1026 [ 437.437028][T21323] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 437.450048][T21323] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 437.753726][T21335] tmpfs: Bad value for 'mpol' [ 438.325630][T21341] sd 0:0:1:0: device reset [ 440.709482][T21381] sd 0:0:1:0: device reset [ 440.742996][T21381] loop2: detected capacity change from 0 to 512 [ 442.721697][T21415] loop7: detected capacity change from 0 to 512 [ 442.770695][T21415] EXT4-fs: journaled quota format not specified [ 442.897678][T21415] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3991'. [ 442.911541][T21415] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3991'. [ 442.938914][T21422] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3991'. [ 443.610040][T21443] loop7: detected capacity change from 0 to 128 [ 443.639053][T21443] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 443.653756][T21443] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.671164][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 443.671190][ T29] audit: type=1400 audit(2000000290.714:10868): avc: denied { write } for pid=21442 comm="syz.7.4001" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 443.717714][ T29] audit: type=1400 audit(2000000290.754:10869): avc: denied { setattr } for pid=21442 comm="syz.7.4001" path="/56/file1/file1" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 443.760244][ T29] audit: type=1400 audit(2000000290.804:10870): avc: denied { ioctl } for pid=21442 comm="syz.7.4001" path="/56/file1/file1" dev="loop7" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 443.831448][T20032] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 444.997660][T21470] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4007'. [ 445.983388][T21475] loop7: detected capacity change from 0 to 128 [ 445.998976][T21475] EXT4-fs (loop7): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 446.040856][T21478] process '/newroot/591/file0' started with executable stack [ 446.041130][T21478] ------------[ cut here ]------------ [ 446.041162][T21478] WARNING: kernel/events/core.c:7629 at perf_pending_task+0x202/0x210, CPU#0: file0/21478 [ 446.064153][T21478] Modules linked in: [ 446.068292][T21478] CPU: 0 UID: 0 PID: 21478 Comm: file0 Not tainted syzkaller #0 PREEMPT(lazy) [ 446.077262][T21478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 446.087469][T21478] RIP: 0010:perf_pending_task+0x202/0x210 [ 446.093274][T21478] Code: 40 fe cd e8 70 af fc ff 41 88 6c 1d 00 eb 05 e8 94 ee dc ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 7f ee dc ff 90 <0f> 0b 90 eb 84 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 [ 446.113081][T21478] RSP: 0018:ffffc90002cffdf8 EFLAGS: 00010283 [ 446.119247][T21478] RAX: ffffffff817cb631 RBX: ffff88811aa42ad8 RCX: 0000000000080000 [ 446.127240][T21478] RDX: ffffc90013209000 RSI: 0000000000026556 RDI: 0000000000026557 [ 446.135442][T21478] RBP: 0000000000000000 R08: 000188812416b387 R09: 0000000000000000 [ 446.143566][T21478] R10: 0001ea000402e4c0 R11: ffffffff817cb430 R12: ffff88812416b300 [ 446.151657][T21478] R13: ffff888101d2a280 R14: 0000000000000000 R15: ffff88811aa42760 [ 446.159714][T21478] FS: 0000000000000000(0000) GS:ffff8882ae698000(0000) knlGS:0000000000000000 [ 446.168706][T21478] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 446.175330][T21478] CR2: 0000000000000000 CR3: 0000000124046000 CR4: 00000000003506f0 [ 446.183425][T21478] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 446.191585][T21478] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 446.199750][T21478] Call Trace: [ 446.203134][T21478] [ 446.206100][T21478] task_work_run+0x130/0x1a0 [ 446.210765][T21478] exit_to_user_mode_loop+0x1e4/0x8c0 [ 446.216253][T21478] do_syscall_64+0x212/0x360 [ 446.220956][T21478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.226901][T21478] RIP: 0033:0x1d8 [ 446.230621][T21478] Code: Unable to access opcode bytes at 0x1ae. [ 446.236883][T21478] RSP: 002b:00007fff9dd6e390 EFLAGS: 00000202 ORIG_RAX: 000000000000003b [ 446.245376][T21478] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 446.253434][T21478] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 446.261549][T21478] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 446.266282][T11302] udevd[11302]: incorrect ext4 checksum on /dev/loop7 [ 446.276426][T21478] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 446.284456][T21478] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 446.292607][T21478] [ 446.295663][T21478] ---[ end trace 0000000000000000 ]--- [ 446.350743][T21483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4011'. [ 446.558023][T21493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4011'. [ 446.673324][T21499] tipc: Started in network mode [ 446.673356][T21499] tipc: Node identity d650557c6c8d, cluster identity 4711 [ 446.686917][T21499] tipc: Enabled bearer , priority 0 [ 446.710094][ T29] audit: type=1400 audit(2000000293.755:10871): avc: denied { mount } for pid=21495 comm="syz.2.4018" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 446.734106][T21496] xt_CT: No such helper "syz1" [ 446.957582][ T29] audit: type=1400 audit(2000000293.935:10872): avc: denied { unmount } for pid=18561 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 446.985992][T21500] tipc: Disabling bearer [ 447.878908][T21520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4024'. [ 448.294144][T21545] 9p: Bad value for 'rfdno' [ 448.330802][ T29] audit: type=1400 audit(2000000295.375:10873): avc: denied { ioctl } for pid=21538 comm="syz.0.4029" path="socket:[69758]" dev="sockfs" ino=69758 ioctlcmd=0x9432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 449.809094][T21571] loop7: detected capacity change from 0 to 128 [ 449.818085][T21571] vfat: Unknown parameter 'É÷¹†' [ 449.972403][T21581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4040'. [ 450.355569][ T29] audit: type=1400 audit(2000000297.395:10874): avc: denied { mounton } for pid=21584 comm="syz.0.4042" path="/mnt" dev="autofs" ino=69863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 451.008653][T21602] option changes via remount are deprecated (pid=21599 comm=syz.7.4045) [ 451.021218][ T29] audit: type=1400 audit(2000000298.065:10875): avc: denied { create } for pid=21599 comm="syz.7.4045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 451.164292][ T29] audit: type=1400 audit(2000000298.205:10876): avc: denied { unmount } for pid=20032 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 451.305724][ T29] audit: type=1326 audit(2000000298.345:10877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21612 comm="syz.3.4049" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912354e159 code=0x7ffc0000 [ 451.306128][ T29] audit: type=1326 audit(2000000298.345:10878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21612 comm="syz.3.4049" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912354e159 code=0x7ffc0000 [ 451.357784][ T29] audit: type=1326 audit(2000000298.405:10879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21612 comm="syz.3.4049" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912354e159 code=0x7ffc0000 [ 451.357880][ T29] audit: type=1326 audit(2000000298.405:10880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21612 comm="syz.3.4049" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912354e159 code=0x7ffc0000 [ 451.361077][ T29] audit: type=1326 audit(2000000298.405:10881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21612 comm="syz.3.4049" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f912354e159 code=0x7ffc0000 [ 451.361189][ T29] audit: type=1326 audit(2000000298.405:10882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21612 comm="syz.3.4049" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912354e159 code=0x7ffc0000 [ 451.361328][ T29] audit: type=1326 audit(2000000298.405:10883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21612 comm="syz.3.4049" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912354e159 code=0x7ffc0000 [ 451.547965][T21614] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 451.548130][T21614] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.548273][T21614] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.673380][T21614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.680785][T21614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.737542][ T12] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.737600][ T12] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.737750][ T12] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.737898][ T12] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.130501][T21644] netlink: 14975 bytes leftover after parsing attributes in process `syz.7.4057'. [ 453.826870][T21683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4063'. [ 453.855383][T21683] FAULT_INJECTION: forcing a failure. [ 453.855383][T21683] name failslab, interval 1, probability 0, space 0, times 0 [ 453.855429][T21683] CPU: 0 UID: 0 PID: 21683 Comm: syz.4.4063 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 453.855583][T21683] Tainted: [W]=WARN [ 453.855619][T21683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 453.855727][T21683] Call Trace: [ 453.855750][T21683] [ 453.855779][T21683] __dump_stack+0x1d/0x30 [ 453.855868][T21683] dump_stack_lvl+0x95/0xd0 [ 453.855950][T21683] dump_stack+0x15/0x1b [ 453.856021][T21683] should_fail_ex+0x262/0x280 [ 453.856100][T21683] ? alloc_empty_file+0x70/0x1e0 [ 453.856219][T21683] should_failslab+0x8c/0xb0 [ 453.856327][T21683] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 453.856432][T21683] ? alloc_empty_file+0x70/0x1e0 [ 453.856596][T21683] alloc_empty_file+0x70/0x1e0 [ 453.856666][T21683] path_openat+0x50/0x10d0 [ 453.856803][T21683] do_file_open+0x16c/0x290 [ 453.856905][T21683] do_sys_openat2+0xa0/0x130 [ 453.857011][T21683] __x64_sys_openat+0xf2/0x120 [ 453.857122][T21683] x64_sys_call+0x1f72/0x2550 [ 453.857210][T21683] do_syscall_64+0x112/0x360 [ 453.857351][T21683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.857458][T21683] RIP: 0033:0x7f2bc276e159 [ 453.857517][T21683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.857580][T21683] RSP: 002b:00007f2bc11c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 453.857657][T21683] RAX: ffffffffffffffda RBX: 00007f2bc29f5fa0 RCX: 00007f2bc276e159 [ 453.857706][T21683] RDX: 0000000000080382 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 453.857755][T21683] RBP: 00007f2bc2805024 R08: 0000000000000000 R09: 0000000000000000 [ 453.857805][T21683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.857847][T21683] R13: 00007f2bc29f6038 R14: 00007f2bc29f5fa0 R15: 00007ffe8b839ec8 [ 453.857917][T21683] [ 454.258399][T21720] loop7: detected capacity change from 0 to 128 [ 454.661479][T21720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.664737][T21720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.686339][T21727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4075'. [ 454.686437][T21727] veth1: left promiscuous mode [ 454.772819][T21732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4076'. [ 455.049285][T21746] siw: device registration error -23 [ 456.029635][T21758] netlink: 'syz.4.4082': attribute type 1 has an invalid length. [ 456.029663][T21758] netlink: 'syz.4.4082': attribute type 1 has an invalid length. [ 456.029690][T21758] iwpm_send_hello: Unable to send a nlmsg [ 456.211425][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 456.211521][ T29] audit: type=1400 audit(2000000303.256:11013): avc: denied { write } for pid=21759 comm="syz.0.4083" name="922" dev="tmpfs" ino=4975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 456.330851][ T29] audit: type=1400 audit(2000000303.376:11014): avc: denied { write } for pid=3298 comm="syz-executor" name="922" dev="tmpfs" ino=4975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 456.331373][ T29] audit: type=1400 audit(2000000303.376:11015): avc: denied { write } for pid=3298 comm="syz-executor" name="922" dev="tmpfs" ino=4975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 456.331663][ T29] audit: type=1400 audit(2000000303.376:11016): avc: denied { write } for pid=3298 comm="syz-executor" name="922" dev="tmpfs" ino=4975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 456.332101][ T29] audit: type=1400 audit(2000000303.376:11017): avc: denied { write } for pid=3298 comm="syz-executor" name="922" dev="tmpfs" ino=4975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 456.332724][ T29] audit: type=1400 audit(2000000303.376:11018): avc: denied { write } for pid=3298 comm="syz-executor" name="922" dev="tmpfs" ino=4975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 460.906020][ T3401] page_pool_release_retry() stalled pool shutdown: id 25, 1 inflight 422 sec [ 462.200116][T21767] syzkaller0 speed is unknown, defaulting to 1000 [ 462.312794][T21767] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.312851][T21767] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.312974][T21767] bridge_slave_0: entered allmulticast mode [ 462.314115][T21767] bridge_slave_0: entered promiscuous mode [ 462.317355][T21767] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.317456][T21767] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.317678][T21767] bridge_slave_1: entered allmulticast mode [ 462.319035][T21767] bridge_slave_1: entered promiscuous mode [ 462.342347][T21767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.344777][T21767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.368550][T21767] team0: Port device team_slave_0 added [ 462.370618][T21767] team0: Port device team_slave_1 added [ 462.392592][T21767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.392671][T21767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.392814][T21767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.394353][T21767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.394408][T21767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.394492][T21767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.436507][T21767] hsr_slave_0: entered promiscuous mode [ 462.437671][T21767] hsr_slave_1: entered promiscuous mode [ 462.438353][T21767] debugfs: 'hsr0' already exists in 'hsr' [ 462.438400][T21767] Cannot create hsr debugfs directory [ 462.527497][ T351] bridge_slave_1: left allmulticast mode [ 462.527525][ T351] bridge_slave_1: left promiscuous mode [ 462.527767][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.539410][ T351] bridge_slave_0: left allmulticast mode [ 462.539430][ T351] bridge_slave_0: left promiscuous mode [ 462.539541][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.578213][ T351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.587689][ T351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.588788][ T351] bond0 (unregistering): Released all slaves [ 462.631512][ T351] tipc: Left network mode [ 462.693334][ T351] hsr_slave_0: left promiscuous mode [ 462.699112][ T351] hsr_slave_1: left promiscuous mode [ 462.699551][ T351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.712617][ T351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.745886][ T29] audit: type=1400 audit(2000000309.787:11019): avc: denied { write } for pid=21790 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 462.777397][ T351] team0 (unregistering): Port device team_slave_1 removed [ 462.784751][ T351] team0 (unregistering): Port device team_slave_0 removed [ 462.795590][ T29] audit: type=1400 audit(2000000309.837:11020): avc: denied { write } for pid=21801 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 462.833111][ T3024] 8021q: adding VLAN 0 to HW filter on device eth1 [ 462.895474][ T29] audit: type=1400 audit(2000000309.937:11021): avc: denied { write } for pid=21803 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 462.928029][ T29] audit: type=1400 audit(2000000309.977:11022): avc: denied { write } for pid=21814 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 463.019310][ T29] audit: type=1400 audit(2000000310.067:11023): avc: denied { write } for pid=21816 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 463.051939][ T29] audit: type=1400 audit(2000000310.097:11024): avc: denied { write } for pid=21827 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 463.179147][ T29] audit: type=1400 audit(2000000310.227:11025): avc: denied { write } for pid=21837 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 463.202665][ T29] audit: type=1400 audit(2000000310.247:11026): avc: denied { setopt } for pid=21830 comm="syz.4.4088" lport=46887 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 463.214763][T21831] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4087'. [ 463.270221][ T29] audit: type=1400 audit(2000000310.317:11027): avc: denied { write } for pid=21850 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 463.340044][ T351] IPVS: stop unused estimator thread 0... [ 463.438791][ T29] audit: type=1400 audit(2000000310.487:11028): avc: denied { write } for pid=21856 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 463.483506][ T3024] 8021q: adding VLAN 0 to HW filter on device eth2 [ 463.589091][ T3024] 8021q: adding VLAN 0 to HW filter on device eth3 [ 463.697350][ T3024] 8021q: adding VLAN 0 to HW filter on device eth4 [ 464.016785][T21767] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 464.026134][T21767] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 464.033952][T21767] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 464.042859][T21767] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 464.050627][T21767] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 464.059517][T21767] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 464.068370][T21767] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 464.078630][T21767] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 464.116706][T21767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.129560][T21767] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.139834][ T115] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.139879][ T115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.158346][ T115] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.158383][ T115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.301367][T21767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.434085][T21767] veth0_vlan: entered promiscuous mode [ 464.440196][T21767] veth1_vlan: entered promiscuous mode [ 464.455809][T21767] veth0_macvtap: entered promiscuous mode [ 464.460141][T21767] veth1_macvtap: entered promiscuous mode [ 464.469935][T21767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.478567][T21767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.516007][ T38] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.516734][ T38] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.516870][ T38] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.516981][ T38] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.592469][T22014] loop7: detected capacity change from 0 to 512 [ 464.592791][T22014] EXT4-fs: Ignoring removed oldalloc option [ 464.615291][T22014] EXT4-fs error (device loop7): ext4_orphan_get:1429: comm syz.7.4099: bad orphan inode 15 [ 464.615333][T22014] loop7: lost filesystem error report for type 5 error -117 [ 464.615495][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 464.615521][ C1] EXT4-fs (loop7): initial error at time 2000000311: ext4_orphan_get:1429 [ 464.615566][ C1] EXT4-fs (loop7): last error at time 2000000311: ext4_orphan_get:1429 [ 464.616480][T22014] ext4_test_bit(bit=14, block=5) = 0 [ 464.617048][T22014] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.821448][T20032] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.951956][T22049] loop5: detected capacity change from 0 to 7 [ 464.961438][T22049] buffer_io_error: 4 callbacks suppressed [ 464.961471][T22049] Buffer I/O error on dev loop5, logical block 0, async page read [ 464.975907][T22049] Buffer I/O error on dev loop5, logical block 0, async page read [ 464.976316][T22049] loop5: unable to read partition table [ 464.990803][T22049] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 465.020959][T21776] Buffer I/O error on dev loop5, logical block 0, async page read [ 465.029498][T21776] Buffer I/O error on dev loop5, logical block 0, async page read [ 465.029631][T21776] Buffer I/O error on dev loop5, logical block 0, async page read [ 465.029712][T21776] Buffer I/O error on dev loop5, logical block 0, async page read [ 465.029838][T21776] Buffer I/O error on dev loop5, logical block 0, async page read [ 465.029930][T21776] Buffer I/O error on dev loop5, logical block 0, async page read [ 465.030004][T21776] Buffer I/O error on dev loop5, logical block 0, async page read [ 465.030074][T21776] Buffer I/O error on dev loop5, logical block 0, async page read [ 465.277318][T22057] geneve3: entered promiscuous mode [ 465.278061][T22057] geneve3: entered allmulticast mode [ 466.015868][T22062] loop8: detected capacity change from 0 to 128 [ 466.033704][T22062] vfat: Unknown parameter 'É÷¹†' [ 467.484211][T22128] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 467.642453][T22139] netlink: 'syz.8.4106': attribute type 10 has an invalid length. [ 467.642559][T22139] netlink: 2 bytes leftover after parsing attributes in process `syz.8.4106'. [ 467.642635][T22139] veth1_virt_wifi: entered promiscuous mode [ 467.667179][T22139] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 467.667321][T22139] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 467.684293][T22139] veth1_virt_wifi: entered allmulticast mode [ 467.710730][T22139] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 467.711023][T22139] bridge0: port 3(veth1_virt_wifi) entered forwarding state [ 467.797400][T22135] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4105'. [ 468.414519][T22160] loop8: detected capacity change from 0 to 128 [ 468.422518][T22163] loop7: detected capacity change from 0 to 512 [ 468.433716][T22160] EXT4-fs: Ignoring removed bh option [ 468.489123][T22160] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 468.489613][T22160] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 468.542850][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 468.542892][ T29] audit: type=1400 audit(2000000315.567:11056): avc: denied { write } for pid=22159 comm="syz.8.4113" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 468.554450][T22163] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.554709][T22163] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 468.636628][T22160] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 469.212155][T20032] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.236318][T22171] loop8: detected capacity change from 0 to 256 [ 469.244659][T22171] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 469.282828][T21767] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 469.282962][T21767] FAT-fs (loop8): Filesystem has been set read-only [ 469.283135][T21767] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 469.321696][T22176] ieee802154 phy1 wpan1: encryption failed: -22 [ 469.415737][T22176] SELinux: security_context_str_to_sid (O!ÒqÚ}â¢þý)\ßšN\®ycägÀŠ [ 469.415737][T22176] {©H\Ñ^ô:cî~y·­þRÁäñßêWÛ•i»B3s_%¢GïÃÝ(ºÞuô‘…5RÔ)_Es›tkiy RÃseÛ¸)M) failed with errno=-22 [ 469.648680][T22192] netlink: 'syz.0.4121': attribute type 10 has an invalid length. [ 469.648752][T22192] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4121'. [ 469.709997][ T115] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.826173][ T115] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.901772][ T115] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.076966][T22205] syzkaller0 speed is unknown, defaulting to 1000 [ 470.259998][ T115] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.423415][T22205] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.423460][T22205] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.423631][T22205] bridge_slave_0: entered allmulticast mode [ 470.424221][T22205] bridge_slave_0: entered promiscuous mode [ 470.452205][ T115] veth1_virt_wifi: left allmulticast mode [ 470.452311][ T115] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 470.465764][ T115] bridge_slave_1: left allmulticast mode [ 470.465805][ T115] bridge_slave_1: left promiscuous mode [ 470.466047][ T115] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.477565][ T115] bridge_slave_0: left allmulticast mode [ 470.477621][ T115] bridge_slave_0: left promiscuous mode [ 470.477939][ T115] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.542979][ T115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.553058][ T115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.562799][ T115] bond0 (unregistering): Released all slaves [ 470.574597][T22205] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.574661][T22205] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.589339][T22205] bridge_slave_1: entered allmulticast mode [ 470.589777][T22205] bridge_slave_1: entered promiscuous mode [ 470.617543][T22205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.618976][T22205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.631251][T22205] team0: Port device team_slave_0 added [ 470.632089][T22205] team0: Port device team_slave_1 added [ 470.643017][T22205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.643038][T22205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.643082][T22205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.643899][T22205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.643914][T22205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.644000][T22205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.671825][T22205] hsr_slave_0: entered promiscuous mode [ 470.672890][T22205] hsr_slave_1: entered promiscuous mode [ 470.673470][T22205] debugfs: 'hsr0' already exists in 'hsr' [ 470.673511][T22205] Cannot create hsr debugfs directory [ 470.870659][ T115] hsr_slave_0: left promiscuous mode [ 470.876614][ T115] hsr_slave_1: left promiscuous mode [ 470.877063][ T115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.877086][ T115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.897552][ T115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.897620][ T115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.915507][ T115] veth1_macvtap: left promiscuous mode [ 470.915545][ T115] veth0_macvtap: left promiscuous mode [ 470.915665][ T115] veth1_vlan: left promiscuous mode [ 470.915713][ T115] veth0_vlan: left promiscuous mode [ 470.932807][ T29] audit: type=1400 audit(2000000317.978:11057): avc: denied { write } for pid=22229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 470.970618][ T29] audit: type=1400 audit(2000000318.018:11058): avc: denied { write } for pid=22240 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.056226][ T115] team0 (unregistering): Port device team_slave_1 removed [ 471.063693][ T115] team0 (unregistering): Port device team_slave_0 removed [ 471.093955][ T3024] 8021q: adding VLAN 0 to HW filter on device eth13 [ 471.176939][ T29] audit: type=1400 audit(2000000318.228:11059): avc: denied { write } for pid=22243 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.210100][ T29] audit: type=1400 audit(2000000318.258:11060): avc: denied { write } for pid=22254 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.245034][ T3024] 8021q: adding VLAN 0 to HW filter on device eth14 [ 471.341684][ T29] audit: type=1400 audit(2000000318.388:11061): avc: denied { write } for pid=22260 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.374406][ T29] audit: type=1400 audit(2000000318.418:11062): avc: denied { write } for pid=22271 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.408779][ T3024] 8021q: adding VLAN 0 to HW filter on device eth16 [ 471.488521][ T29] audit: type=1400 audit(2000000318.538:11063): avc: denied { write } for pid=22274 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.521375][ T29] audit: type=1400 audit(2000000318.568:11064): avc: denied { write } for pid=22285 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.558278][ T3024] 8021q: adding VLAN 0 to HW filter on device eth15 [ 471.632182][ T29] audit: type=1400 audit(2000000318.678:11065): avc: denied { write } for pid=22288 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.874878][T22205] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 471.883690][T22205] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 471.891983][T22205] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 471.900794][T22205] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 471.908761][T22205] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 471.917638][T22205] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 471.925571][T22205] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 471.934207][T22205] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 471.972693][T22205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.985043][T22205] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.992559][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.992607][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.009462][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.009503][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.145587][T22205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.227377][T22205] veth0_vlan: entered promiscuous mode [ 472.233111][T22205] veth1_vlan: entered promiscuous mode [ 472.247182][T22205] veth0_macvtap: entered promiscuous mode [ 472.250908][T22205] veth1_macvtap: entered promiscuous mode [ 472.260934][T22205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.269848][T22205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.306587][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.307031][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.307306][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.308110][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.390659][T22391] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4125'. [ 472.528912][T22406] loop1: detected capacity change from 0 to 128 [ 472.554449][T22406] EXT4-fs: Ignoring removed bh option [ 473.090867][T22405] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4143'. [ 473.202720][T22406] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 473.216696][T22406] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 473.472273][T22406] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 473.674422][T22452] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4147'. [ 473.676758][T22445] loop1: detected capacity change from 0 to 512 [ 473.681734][T22441] loop7: detected capacity change from 0 to 1024 [ 473.774888][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 473.774910][ T29] audit: type=1400 audit(2000000320.818:11085): avc: denied { write } for pid=22444 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.835038][T22445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.835123][T22445] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 473.867060][T22464] ieee802154 phy1 wpan1: encryption failed: -22 [ 473.882826][ T29] audit: type=1400 audit(2000000320.928:11086): avc: denied { write } for pid=22466 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.912649][T22464] SELinux: security_context_str_to_sid (O!ÒqÚ}â¢þý)\ßšN\®ycägÀŠ [ 473.912649][T22464] {©H\Ñ^ô:cî~y·­þRÁäñßêWÛ•i»B3s_%¢GïÃÝ(ºÞuô‘…5RÔ)_Es›tkiy RÃseÛ¸)M) failed with errno=-22 [ 474.053355][ T29] audit: type=1400 audit(2000000321.098:11087): avc: denied { write } for pid=22470 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.096226][ T29] audit: type=1400 audit(2000000321.148:11088): avc: denied { write } for pid=22481 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.202342][ T29] audit: type=1400 audit(2000000321.248:11089): avc: denied { write } for pid=22483 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.245763][ T29] audit: type=1400 audit(2000000321.298:11090): avc: denied { write } for pid=22494 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.352016][ T29] audit: type=1400 audit(2000000321.398:11091): avc: denied { write } for pid=22496 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.395531][ T29] audit: type=1400 audit(2000000321.448:11092): avc: denied { write } for pid=22507 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.418639][T22205] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.589294][T22512] SELinux: security_context_str_to_sid (O!ÒqÚ}â¢þý)\ßšN\®ycägÀŠ [ 474.589294][T22512] {©H\Ñ^ô:cî~y·­þRÁäñßêWÛ•i»B3s_%¢GïÃÝ(ºÞuô‘…5RÔ)_Es›tkiy RÃseÛ¸)M) failed with errno=-22 [ 474.974304][T22514] syzkaller0 speed is unknown, defaulting to 1000 [ 475.049446][T22541] loop7: detected capacity change from 0 to 128 [ 475.050129][T22541] EXT4-fs (loop7): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 475.426575][T22518] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4138'. [ 476.110275][ T29] audit: type=1400 audit(2000000323.158:11093): avc: denied { write } for pid=22614 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.172376][T22623] syzkaller0 speed is unknown, defaulting to 1000 [ 476.213796][ T29] audit: type=1400 audit(2000000323.258:11094): avc: denied { write } for pid=22640 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.217557][T22630] loop1: detected capacity change from 0 to 1024 [ 476.479005][T22660] ieee802154 phy1 wpan1: encryption failed: -22 [ 476.507829][T22660] SELinux: security_context_str_to_sid (O!ÒqÚ}â¢þý)\ßšN\®ycägÀŠ [ 476.507829][T22660] {©H\Ñ^ô:cî~y·­þRÁäñßêWÛ•i»B3s_%¢GïÃÝ(ºÞuô‘…5RÔ)_Es›tkiy RÃseÛ¸)M) failed with errno=-22 [ 476.592683][T22658] syzkaller0 speed is unknown, defaulting to 1000 [ 476.702229][T22659] syz_tun: entered allmulticast mode [ 476.886337][T22635] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4165'. [ 477.742098][T22716] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4172'. [ 478.198580][T22736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4174'. [ 478.263372][T22707] netlink: 'syz.7.4168': attribute type 10 has an invalid length. [ 478.266224][T22707] team0: Device wg2 is of different type [ 479.413439][T22763] syzkaller0 speed is unknown, defaulting to 1000 [ 479.926215][T22772] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4180'. [ 480.227548][T22776] loop7: detected capacity change from 0 to 512 [ 480.265489][T22761] netlink: 'syz.0.4190': attribute type 10 has an invalid length. [ 480.272394][T22761] team0: Device wg2 is of different type [ 480.334667][T22776] EXT4-fs error (device loop7): ext4_xattr_inode_iget:473: comm syz.7.4184: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 480.334747][T22776] loop7: lost filesystem error report for type 5 error -117 [ 480.336213][T22776] EXT4-fs (loop7): 1 orphan inode deleted [ 480.337667][T22776] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.026419][T20032] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.368796][T22805] netlink: 1408 bytes leftover after parsing attributes in process `syz.1.4191'. [ 481.795080][T22765] lo: entered allmulticast mode [ 482.237192][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 482.237252][ T29] audit: type=1400 audit(2000000329.279:11101): avc: denied { write } for pid=22825 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 482.536506][ T29] audit: type=1400 audit(2000000329.589:11102): avc: denied { write } for pid=22853 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 482.748231][T22858] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 482.875543][T22861] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 482.875576][T22861] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0000 l0 [ 483.313000][T22872] loop7: detected capacity change from 0 to 512 [ 483.327398][T22872] EXT4-fs (loop7): 1 orphan inode deleted [ 483.328068][T22872] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.335385][T22872] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.476892][T20032] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.825503][T22888] loop7: detected capacity change from 0 to 128 [ 483.922135][T22888] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 483.985802][T22844] netlink: 'syz.1.4199': attribute type 10 has an invalid length. [ 484.024218][T22888] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 484.025995][T22844] team0: Device wg2 is of different type [ 485.464805][T22925] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4219'. [ 485.743634][T22929] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.4220' sets config #0 [ 485.807289][T22931] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4230'. [ 485.821509][T22931] batman_adv: batadv0: Removing interface: dummy0 [ 485.861703][ T29] audit: type=1400 audit(2000000332.910:11103): avc: denied { append } for pid=22936 comm="syz.1.4223" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 485.946263][ T29] audit: type=1400 audit(2000000332.990:11104): avc: denied { write } for pid=22936 comm="syz.1.4223" name="cgroup.subtree_control" dev="cgroup2" ino=529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 485.946336][ T29] audit: type=1400 audit(2000000332.990:11105): avc: denied { open } for pid=22936 comm="syz.1.4223" path="" dev="cgroup2" ino=529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 485.986226][T22942] loop1: detected capacity change from 0 to 2048 [ 486.015026][T22942] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.027256][T22937] EXT4-fs (loop1): shut down requested (1) [ 486.040994][ T29] audit: type=1400 audit(2000000333.080:11106): avc: denied { read } for pid=2967 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 486.041058][ T29] audit: type=1400 audit(2000000333.080:11107): avc: denied { search } for pid=2967 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 486.041119][ T29] audit: type=1400 audit(2000000333.080:11108): avc: denied { append } for pid=2967 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 486.041250][ T29] audit: type=1400 audit(2000000333.080:11109): avc: denied { open } for pid=2967 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 486.041317][ T29] audit: type=1400 audit(2000000333.080:11110): avc: denied { getattr } for pid=2967 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 486.303641][T22205] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.540052][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 487.540094][ T29] audit: type=1400 audit(2000000334.590:11113): avc: denied { write } for pid=22976 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 488.126371][T22990] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.7.4233: No space for directory leaf checksum. Please run e2fsck -D. [ 488.126418][T22990] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.7.4233: checksumming directory block 0 [ 488.126471][T22990] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 488.126566][T22990] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.7.4233: No space for directory leaf checksum. Please run e2fsck -D. [ 488.126661][T22990] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.7.4233: checksumming directory block 0 [ 488.126704][T22990] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 488.126749][T22990] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.7.4233: No space for directory leaf checksum. Please run e2fsck -D. [ 488.126878][T22990] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.7.4233: checksumming directory block 0 [ 488.126991][T22990] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 488.127032][T22990] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.7.4233: No space for directory leaf checksum. Please run e2fsck -D. [ 488.127069][T22990] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.7.4233: checksumming directory block 0 [ 488.127184][T22990] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 488.127214][T22990] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 488.419949][T22947] netlink: 'syz.0.4224': attribute type 10 has an invalid length. [ 488.431135][ T29] audit: type=1400 audit(2000000335.480:11114): avc: denied { write } for pid=22984 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 488.458879][T22947] team0: Device wg2 is of different type [ 488.482777][T23000] netlink: 14 bytes leftover after parsing attributes in process `syz.7.4236'. [ 488.521430][ T29] audit: type=1400 audit(2000000335.570:11115): avc: denied { write } for pid=23012 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 488.786624][T23003] syzkaller0: entered promiscuous mode [ 488.794474][T23003] syzkaller0: entered allmulticast mode [ 489.742493][ T29] audit: type=1400 audit(2000000335.890:11116): avc: denied { remount } for pid=23013 comm="syz.4.4239" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 490.666039][T23045] loop7: detected capacity change from 0 to 164 [ 490.719181][ T29] audit: type=1400 audit(2000000337.770:11117): avc: denied { write } for pid=23027 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 490.755236][T23051] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.1.4247: No space for directory leaf checksum. Please run e2fsck -D. [ 490.755369][T23051] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.1.4247: checksumming directory block 0 [ 490.755456][T23051] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 490.755616][T23051] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.1.4247: No space for directory leaf checksum. Please run e2fsck -D. [ 490.755678][T23051] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.1.4247: checksumming directory block 0 [ 490.755778][T23051] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 490.756016][T23051] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.1.4247: No space for directory leaf checksum. Please run e2fsck -D. [ 490.756072][T23051] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.1.4247: checksumming directory block 0 [ 490.756136][T23051] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 490.756269][T23051] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.1.4247: No space for directory leaf checksum. Please run e2fsck -D. [ 490.756318][T23051] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.1.4247: checksumming directory block 0 [ 490.910609][T23051] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 490.910692][T23051] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 490.991377][ T29] audit: type=1400 audit(2000000338.040:11118): avc: denied { write } for pid=23056 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 492.420176][T23083] loop1: detected capacity change from 0 to 2048 [ 492.597842][ T29] audit: type=1326 audit(2000000339.650:11119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23082 comm="syz.1.4256" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5dcbe159 code=0x7ffc0000 [ 492.598127][ T29] audit: type=1326 audit(2000000339.650:11120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23082 comm="syz.1.4256" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5dcbe159 code=0x7ffc0000 [ 492.598228][ T29] audit: type=1326 audit(2000000339.650:11121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23082 comm="syz.1.4256" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5dcbe159 code=0x7ffc0000 [ 492.600253][ T29] audit: type=1326 audit(2000000339.650:11122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23082 comm="syz.1.4256" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fdc5dcbe159 code=0x7ffc0000 [ 492.600446][ T29] audit: type=1326 audit(2000000339.650:11123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23082 comm="syz.1.4256" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5dcbe159 code=0x7ffc0000 [ 492.600986][ T29] audit: type=1326 audit(2000000339.650:11124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23082 comm="syz.1.4256" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5dcbe159 code=0x7ffc0000 [ 492.601062][ T29] audit: type=1326 audit(2000000339.650:11125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23082 comm="syz.1.4256" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5dcbe159 code=0x7ffc0000 [ 492.601244][ T29] audit: type=1326 audit(2000000339.650:11126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23082 comm="syz.1.4256" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fdc5dcbe159 code=0x7ffc0000 [ 492.601465][ T29] audit: type=1326 audit(2000000339.650:11127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23082 comm="syz.1.4256" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5dcbe159 code=0x7ffc0000 [ 492.601736][ T29] audit: type=1326 audit(2000000339.650:11128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23082 comm="syz.1.4256" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5dcbe159 code=0x7ffc0000 [ 492.682874][T23094] loop7: detected capacity change from 0 to 512 [ 492.706310][T23094] EXT4-fs (loop7): orphan cleanup on readonly fs [ 492.708894][T23094] EXT4-fs error (device loop7): ext4_xattr_inode_iget:473: comm syz.7.4258: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731432448 [ 492.708987][T23094] loop7: lost filesystem error report for type 5 error -117 [ 492.710754][T23094] EXT4-fs (loop7): 1 orphan inode deleted [ 492.711423][T23094] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 492.802277][T23094] macvtap0: entered allmulticast mode [ 492.802342][T23094] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 492.802699][T23094] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 493.054211][T23094] netdevsim netdevsim7 netdevsim0: left allmulticast mode [ 493.641917][T23104] batman_adv: batadv0: Adding interface: macvtap0 [ 493.642390][T23104] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.642461][T23104] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 493.649630][T17553] netdevsim netdevsim1207 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.750328][T23076] netlink: 'syz.3.4252': attribute type 10 has an invalid length. [ 493.762482][T23076] team0: Device wg2 is of different type [ 493.777530][T23108] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.4.4260: No space for directory leaf checksum. Please run e2fsck -D. [ 493.777573][T23108] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.4.4260: checksumming directory block 0 [ 493.777815][T23108] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 493.777850][T23108] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.4.4260: No space for directory leaf checksum. Please run e2fsck -D. [ 493.777973][T23108] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.4.4260: checksumming directory block 0 [ 493.778071][T23108] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 493.778223][T23108] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.4.4260: No space for directory leaf checksum. Please run e2fsck -D. [ 493.778288][T23108] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.4.4260: checksumming directory block 0 [ 493.778377][T23108] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 493.778533][T23108] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.4.4260: No space for directory leaf checksum. Please run e2fsck -D. [ 493.778605][T23108] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.4.4260: checksumming directory block 0 [ 493.778698][T23108] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 493.778790][T23108] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 493.918336][T20032] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.003039][T23110] syz_tun: entered allmulticast mode [ 494.025141][T23110] syz_tun: left allmulticast mode [ 494.268994][T23106] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4270'. [ 494.502049][T23114] loop7: detected capacity change from 0 to 4096 [ 494.532052][T23114] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.714692][T20032] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.961294][T23128] netlink: 'syz.3.4266': attribute type 10 has an invalid length. [ 494.961593][T23128] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4266'. [ 495.486007][T23132] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4268'. [ 495.925385][T23122] pim6reg: entered allmulticast mode [ 496.003022][T23122] pim6reg: left allmulticast mode [ 496.759896][T23148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4273'. [ 496.776580][T23148] vlan2: entered promiscuous mode [ 496.776620][T23148] gretap0: entered promiscuous mode [ 497.078998][T23161] syz_tun: entered allmulticast mode [ 497.091366][T23161] tmpfs: Bad value for 'mpol' [ 497.392706][T23166] loop1: detected capacity change from 0 to 512 [ 497.419561][T23166] EXT4-fs (loop1): invalid #clusters per group: 95 [ 497.650547][T23172] Cannot find del_set index 4 as target [ 497.943884][T23178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4280'. [ 498.068011][T23183] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4281'. [ 498.126281][T23164] netlink: 'syz.7.4275': attribute type 10 has an invalid length. [ 498.134958][T23164] team0: Device wg2 is of different type [ 498.359284][T23186] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4279'. [ 498.438539][T23183] loop1: detected capacity change from 0 to 4096 [ 498.439291][T23183] EXT4-fs: Ignoring removed mblk_io_submit option [ 498.645768][T23183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.663975][T23195] loop7: detected capacity change from 0 to 512 [ 498.698735][T23196] netlink: 'syz.0.4286': attribute type 11 has an invalid length. [ 498.745597][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 498.745684][ T29] audit: type=1400 audit(2000000345.801:11288): avc: denied { write } for pid=23182 comm="syz.1.4281" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 498.750901][ T29] audit: type=1400 audit(2000000345.801:11289): avc: denied { mounton } for pid=23182 comm="syz.1.4281" path="/37/bus/sys" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 498.757137][T23195] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.757352][T23195] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.760511][T23183] bond0: invalid ARP target specified [ 498.761233][ T29] audit: type=1400 audit(2000000345.811:11290): avc: denied { compute_member } for pid=23182 comm="syz.1.4281" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 498.872779][ T29] audit: type=1400 audit(2000000345.921:11291): avc: denied { write } for pid=22205 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 498.872906][ T29] audit: type=1400 audit(2000000345.921:11292): avc: denied { write } for pid=22205 comm="syz-executor" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 498.872965][ T29] audit: type=1400 audit(2000000345.921:11293): avc: denied { write } for pid=22205 comm="syz-executor" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 498.873024][ T29] audit: type=1400 audit(2000000345.921:11294): avc: denied { unlink } for pid=22205 comm="syz-executor" name=66696C6507 dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 498.873243][ T29] audit: type=1400 audit(2000000345.921:11295): avc: denied { write } for pid=22205 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 498.873376][ T29] audit: type=1400 audit(2000000345.921:11296): avc: denied { write } for pid=22205 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 498.873600][ T29] audit: type=1400 audit(2000000345.931:11297): avc: denied { write } for pid=22205 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 498.948695][T22205] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.066970][T20032] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.825986][T23207] loop7: detected capacity change from 0 to 512 [ 499.826930][T23207] EXT4-fs (loop7): invalid #clusters per group: 95 [ 500.390023][T23218] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 500.543973][T23216] pim6reg: entered allmulticast mode [ 500.572038][T23216] pim6reg: left allmulticast mode [ 500.656699][T23220] loop7: detected capacity change from 0 to 8192 [ 500.739168][T23202] netlink: 'syz.0.4298': attribute type 10 has an invalid length. [ 500.749069][T23202] team0: Device wg2 is of different type [ 500.948743][T23227] Cannot find add_set index 0 as target [ 501.039388][T23223] loop1: detected capacity change from 0 to 512 [ 501.048054][T23223] EXT4-fs: Ignoring removed oldalloc option [ 501.094308][T23223] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 501.094521][T23223] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #11: comm syz.1.4297: corrupted inode contents [ 501.094575][T23223] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 501.111107][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 501.111162][ C0] EXT4-fs (loop1): initial error at time 2000000348: mb_free_blocks:2049: inode 11: block 64 [ 501.111266][ C0] EXT4-fs (loop1): last error at time 2000000348: ext4_do_update_inode:5801: inode 11 [ 501.162652][T23223] EXT4-fs error (device loop1): ext4_dirty_inode:6731: inode #11: comm syz.1.4297: mark_inode_dirty error [ 501.162747][T23223] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 501.163279][T23223] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.4297: invalid indirect mapped block 1 (level 1) [ 501.163357][T23223] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 501.163804][T23223] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #11: comm syz.1.4297: corrupted inode contents [ 501.163872][T23223] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 501.164316][T23223] EXT4-fs error (device loop1) in ext4_orphan_del:304: Corrupt filesystem [ 501.164410][T23223] loop1: lost filesystem error report for type 5 error -117 [ 501.164824][T23223] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #11: comm syz.1.4297: corrupted inode contents [ 501.164872][T23223] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 501.168198][T23223] EXT4-fs error (device loop1): ext4_truncate:4721: inode #11: comm syz.1.4297: mark_inode_dirty error [ 501.168327][T23223] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 501.168549][T23223] EXT4-fs error (device loop1) in ext4_process_orphan:346: Corrupt filesystem [ 501.168582][T23223] loop1: lost filesystem error report for type 5 error -117 [ 501.169161][T23223] EXT4-fs (loop1): 1 truncate cleaned up [ 501.181761][T23223] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.234175][T23223] EXT4-fs error (device loop1): ext4_readdir:270: inode #2: block 13: comm syz.1.4297: path /39/file0: bad entry in directory: directory entry too close to block end - offset=1016, size=1024 [ 501.412348][T22205] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.639295][T23239] loop1: detected capacity change from 0 to 512 [ 501.816429][T23239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.816583][T23239] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.846013][T23237] pim6reg: entered allmulticast mode [ 501.888168][T23237] pim6reg: left allmulticast mode [ 501.938376][T23227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.938712][T23227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.192121][T22205] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.450037][T23251] netlink: 'syz.3.4303': attribute type 2 has an invalid length. [ 502.450128][T23251] netlink: 'syz.3.4303': attribute type 8 has an invalid length. [ 502.450184][T23251] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4303'. [ 502.467102][T23251] netlink: 'syz.3.4303': attribute type 2 has an invalid length. [ 502.467186][T23251] netlink: 'syz.3.4303': attribute type 8 has an invalid length. [ 502.467213][T23251] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4303'. [ 502.586071][T23255] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4304'. [ 502.687883][T23253] loop1: detected capacity change from 0 to 128 [ 502.722596][T23253] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4301'. [ 502.869248][T23261] tipc: Enabling of bearer rejected, already enabled [ 503.099310][T23268] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 503.814636][T23285] loop7: detected capacity change from 0 to 512 [ 503.823238][T23285] EXT4-fs: Ignoring removed oldalloc option [ 503.919844][T23285] EXT4-fs error (device loop7): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 503.920013][T23285] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #11: comm syz.7.4313: corrupted inode contents [ 503.920045][T23285] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 503.935632][ C1] EXT4-fs (loop7): error count since last fsck: 2 [ 503.935688][ C1] EXT4-fs (loop7): initial error at time 2000000350: mb_free_blocks:2049: inode 11: block 64 [ 503.935762][ C1] EXT4-fs (loop7): last error at time 2000000350: ext4_do_update_inode:5801: inode 11 [ 504.002873][T23285] EXT4-fs error (device loop7): ext4_dirty_inode:6731: inode #11: comm syz.7.4313: mark_inode_dirty error [ 504.002924][T23285] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 504.004511][T23285] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.4313: invalid indirect mapped block 1 (level 1) [ 504.004686][T23285] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 504.005940][T23285] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #11: comm syz.7.4313: corrupted inode contents [ 504.006134][T23285] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 504.007047][T23285] EXT4-fs error (device loop7) in ext4_orphan_del:304: Corrupt filesystem [ 504.007139][T23285] loop7: lost filesystem error report for type 5 error -117 [ 504.008039][T23285] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #11: comm syz.7.4313: corrupted inode contents [ 504.008814][T23285] EXT4-fs error (device loop7): ext4_truncate:4721: inode #11: comm syz.7.4313: mark_inode_dirty error [ 504.009564][T23285] EXT4-fs error (device loop7) in ext4_process_orphan:346: Corrupt filesystem [ 504.009593][T23285] loop7: lost filesystem error report for type 5 error -117 [ 504.010683][T23285] EXT4-fs (loop7): 1 truncate cleaned up [ 504.020090][T23285] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.457802][T23265] netlink: 'syz.3.4310': attribute type 10 has an invalid length. [ 504.877597][T23265] team0: Device wg2 is of different type [ 504.888063][T23285] EXT4-fs error (device loop7): ext4_readdir:270: inode #2: block 13: comm syz.7.4313: path /115/file0: bad entry in directory: directory entry too close to block end - offset=1016, size=1024 [ 505.294291][T20032] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.313995][T23303] Cannot find add_set index 0 as target [ 505.393435][T23301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4328'. [ 505.779305][T23303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.786023][T23303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.436297][T23309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4332'. [ 506.436785][T23309] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4332'. [ 506.594936][T23320] syz_tun: left promiscuous mode [ 506.607908][T23320] geneve3: left promiscuous mode [ 506.607950][T23320] geneve3: left allmulticast mode [ 506.784749][T23315] pim6reg: entered allmulticast mode [ 506.804932][T23315] pim6reg: left allmulticast mode [ 506.902143][T23324] loop1: detected capacity change from 0 to 8192 [ 508.037781][T23334] netlink: 'syz.3.4326': attribute type 4 has an invalid length. [ 508.154911][T23336] can0: slcan on ttyS3. [ 508.160479][T23338] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4329'. [ 508.200828][T23336] can0 (unregistered): slcan off ttyS3. [ 508.538403][T23348] can0: slcan on ptm0. [ 509.183892][T23364] loop1: detected capacity change from 0 to 128 [ 509.311093][T23364] syz.1.4337: attempt to access beyond end of device [ 509.311093][T23364] loop1: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 509.380387][T23341] can0 (unregistered): slcan off ptm0. [ 509.441284][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 509.447682][ T29] audit: type=1400 audit(2000000356.412:11305): avc: denied { write } for pid=23357 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.620596][ T29] audit: type=1400 audit(2000000356.662:11306): avc: denied { write } for pid=23384 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.656397][T23376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4338'. [ 509.832128][ T29] audit: type=1400 audit(2000000356.892:11307): avc: denied { write } for pid=23387 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.884776][T23382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4339'. [ 509.910892][T23402] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4341'. [ 509.918032][ T29] audit: type=1400 audit(2000000356.962:11308): avc: denied { write } for pid=23406 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.412798][T22598] IPVS: starting estimator thread 0... [ 510.450078][T23414] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 510.569016][T23424] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4346'. [ 510.733103][T23419] IPVS: using max 2352 ests per chain, 117600 per kthread [ 510.981181][ T29] audit: type=1400 audit(2000000358.033:11309): avc: denied { listen } for pid=23422 comm="syz.0.4347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 511.808846][T23437] loop7: detected capacity change from 0 to 128 [ 512.798492][T23451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4353'. [ 512.873220][T23460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.873379][T23460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.894490][T23462] SET target dimension over the limit! [ 512.919252][ T29] audit: type=1326 audit(2000000359.963:11310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23457 comm="syz.3.4355" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912354e159 code=0x7ffc0000 [ 512.919373][ T29] audit: type=1326 audit(2000000359.963:11311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23457 comm="syz.3.4355" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912354e159 code=0x7ffc0000 [ 512.920549][ T29] audit: type=1326 audit(2000000359.973:11312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23457 comm="syz.3.4355" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912354e159 code=0x7ffc0000 [ 512.923506][ T29] audit: type=1326 audit(2000000359.973:11313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23457 comm="syz.3.4355" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912354e159 code=0x7ffc0000 [ 512.927128][ T29] audit: type=1326 audit(2000000359.973:11314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23457 comm="syz.3.4355" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f912354e159 code=0x7ffc0000 [ 513.817392][T23479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4363'. [ 513.905475][T23483] lo: left promiscuous mode [ 513.905654][T23483] tunl0: left promiscuous mode [ 513.905856][T23483] gre0: left promiscuous mode [ 513.906035][T23483] gretap0: left promiscuous mode [ 513.906213][T23483] erspan0: left promiscuous mode [ 513.906334][T23483] ip_vti0: left promiscuous mode [ 513.906608][T23483] ip6_vti0: left promiscuous mode [ 513.927183][T23483] sit0: left promiscuous mode [ 513.928977][T23483] ip6tnl0: left promiscuous mode [ 513.934261][T23483] ip6gre0: left promiscuous mode [ 513.935052][T23483] syz_tun: left promiscuous mode [ 513.935837][T23483] ip6gretap0: left promiscuous mode [ 513.936598][T23483] bridge0: left promiscuous mode [ 513.937684][T23483] vcan0: left promiscuous mode [ 513.938394][T23483] bond0: left promiscuous mode [ 513.942191][T23483] team0: left promiscuous mode [ 513.947597][T23483] nlmon0: left promiscuous mode [ 513.947885][T23483] batadv0: left promiscuous mode [ 513.948349][T23483] veth0: left promiscuous mode [ 513.973850][T23483] wg0: left promiscuous mode [ 513.975475][T23483] veth0_to_bridge: left promiscuous mode [ 513.995529][T23483] veth1_to_bridge: left promiscuous mode [ 514.003228][T23483] bond_slave_0: left promiscuous mode [ 514.008815][T23483] veth1_to_bond: left promiscuous mode [ 514.014139][T23483] bond_slave_1: left promiscuous mode [ 514.014728][T23483] veth0_to_team: left promiscuous mode [ 514.015289][T23483] team_slave_0: left promiscuous mode [ 514.043952][T23483] veth1_to_team: left promiscuous mode [ 514.044108][T23483] team_slave_1: left promiscuous mode [ 514.044169][T23483] veth0_to_batadv: left promiscuous mode [ 514.044271][T23483] batadv_slave_0: left promiscuous mode [ 514.044355][T23483] xfrm0: left promiscuous mode [ 514.044451][T23483] veth0_to_hsr: left promiscuous mode [ 514.044614][T23483] veth1_to_hsr: left promiscuous mode [ 514.044714][T23483] hsr0: left promiscuous mode [ 514.088938][T23483] veth0_virt_wifi: left promiscuous mode [ 514.089272][T23483] vlan1: left promiscuous mode [ 514.100233][T23483] macvlan0: left promiscuous mode [ 514.100296][T23483] macvlan1: left promiscuous mode [ 514.100400][T23483] ipvlan0: left promiscuous mode [ 514.100454][T23483] ipvlan1: left promiscuous mode [ 514.100655][T23483] geneve0: left promiscuous mode [ 514.100783][T23483] geneve1: left promiscuous mode [ 514.100869][T23483] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 514.100945][T23483] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 514.101057][T23483] netdevsim netdevsim3 netdevsim2: left promiscuous mode [ 514.152744][T23483] netdevsim netdevsim3 netdevsim3: left promiscuous mode [ 514.152872][T23483] geneve2: left promiscuous mode [ 514.152957][T23483] ip6tnl1: left promiscuous mode [ 514.153020][T23483] ipvlan2: left promiscuous mode [ 514.153127][T23483] tipc: Resetting bearer [ 514.181875][T23483] bond1: left promiscuous mode [ 514.181976][T23483] veth0_to_bond: left promiscuous mode [ 514.182395][T23483] bridge1: left promiscuous mode [ 514.182525][T23483] sit1: left promiscuous mode [ 514.182611][T23483] bridge2: left promiscuous mode [ 514.224423][T18445] syzkaller0 speed is unknown, defaulting to 1000 [ 514.224450][T18445] syz2: Port: 1 Link DOWN [ 514.270885][ T38] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.271392][ T38] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.271463][ T38] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.271539][ T38] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.308894][T23485] loop1: detected capacity change from 0 to 164 [ 514.321053][ T15] ================================================================== [ 514.321070][T23485] 1A [ 514.321093][ T15] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 514.321139][ T15] [ 514.321147][ T15] write to 0xffffffff86e6b830 of 8 bytes by task 23485 on cpu 1: [ 514.321168][ T15] data_alloc+0x2fc/0x380 [ 514.321197][ T15] prb_reserve+0x8e3/0xaf0 [ 514.321227][ T15] vprintk_store+0x54e/0x910 [ 514.321258][ T15] vprintk_emit+0x1a4/0x610 [ 514.321284][ T15] vprintk_default+0x26/0x30 [ 514.321315][ T15] vprintk+0x1d/0x30 [ 514.321339][ T15] _printk+0x79/0xa0 [ 514.321362][ T15] parse_rock_ridge_inode_internal+0xa55/0x10c0 [ 514.321405][ T15] parse_rock_ridge_inode+0x3d/0xe0 [ 514.321445][ T15] __isofs_iget+0xbca/0x10f0 [ 514.321478][ T15] isofs_fill_super+0xe2a/0x1340 [ 514.321509][ T15] get_tree_bdev_flags+0x291/0x300 [ 514.321542][ T15] get_tree_bdev+0x1f/0x30 [ 514.321578][ T15] isofs_get_tree+0x1c/0x30 [ 514.321620][ T15] vfs_get_tree+0x57/0x1d0 [ 514.321652][ T15] do_new_mount+0x288/0x8d0 [ 514.321681][ T15] path_mount+0x4ad/0xb90 [ 514.321716][ T15] __se_sys_mount+0x28c/0x2e0 [ 514.321751][ T15] __x64_sys_mount+0x67/0x80 [ 514.321780][ T15] x64_sys_call+0xc3b/0x2550 [ 514.321810][ T15] do_syscall_64+0x112/0x360 [ 514.321845][ T15] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.321873][ T15] [ 514.321880][ T15] read to 0xffffffff86e6b830 of 16 bytes by task 15 on cpu 0: [ 514.321896][ T15] _prb_read_valid+0x183/0x930 [ 514.321926][ T15] prb_read_valid+0x3c/0x60 [ 514.321958][ T15] nbcon_kthread_func+0x1ff/0x690 [ 514.321980][ T15] kthread+0x223/0x270 [ 514.321998][ T15] ret_from_fork+0x146/0x330 [ 514.322029][ T15] ret_from_fork_asm+0x1a/0x30 [ 514.322056][ T15] [ 514.322062][ T15] Reported by Kernel Concurrency Sanitizer on: [ 514.322078][ T15] CPU: 0 UID: 0 PID: 15 Comm: pr/ttyS0 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 514.322113][ T15] Tainted: [W]=WARN [ 514.322122][ T15] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 514.322138][ T15] ================================================================== [ 514.670549][T23472] netlink: 'syz.7.4360': attribute type 10 has an invalid length. [ 514.680703][T23472] team0: Device wg2 is of different type [ 521.298728][ T3414] page_pool_release_retry() stalled pool shutdown: id 25, 1 inflight 482 sec