last executing test programs: 16m11.127658206s ago: executing program 32 (id=64): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0x6, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x1, 0x3, 0x0, 0xffffffff}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) 16m10.296638275s ago: executing program 33 (id=70): fchdir(0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x80000) connect$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x4, 0x4}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000040) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000bc0), r1) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r2, 0x1, 0x70bd29, 0x5, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x10) semget(0x1, 0xc, 0x304) 16m8.424742403s ago: executing program 34 (id=81): r0 = inotify_init1(0x80000) inotify_add_watch(r0, 0x0, 0x3700000e) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) recvmsg$unix(r1, &(0x7f0000001cc0)={0x0, 0x0, 0x0}, 0x40) unshare(0x44168280) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000001a80)=ANY=[@ANYBLOB="18000000030000000000000007000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000085003e6af85effff74868821989306f7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r4}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001400b59500000c00000000000ac0"], 0x18}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) close(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local}}, 0x0, 0x0, 0x3e, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x400}}, 0x0, 0x0, 0x38, 0x0, "947116a1a606754ba31cb6010000000000000000f81bef965a071f0d1aadd97b9640d9a0cd9eaed05e9aec7f03d4406a77bcd75801000000000000008eb7fafaa8b125736e000000fff900"}, 0xd8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e5f, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x34}, 0x1}, 0x1c) r9 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, 0x7}, 0x1c) setsockopt$inet6_udp_int(r9, 0x11, 0x1, &(0x7f0000000080), 0x4) syz_usbip_server_init(0x1) 16m2.714955591s ago: executing program 35 (id=102): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000000e00)={0x2, 0x8, 0xe, 0x6, 0x5, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_address={0x3, 0x5, 0x6c, 0x80, 0x0, @in={0x2, 0x4e22, @local}}]}, 0x28}}, 0x40000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11ec81, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x48c2) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1040, 0x0) recvmsg$unix(r1, 0x0, 0x100) pipe(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) io_uring_setup(0x6d12, 0x0) io_uring_setup(0x7, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05072bbd7000ffdbdf2501000000180001800300000000000000767469300000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) 15m57.881980338s ago: executing program 36 (id=144): fsopen(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000035) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x2}, 0x0, 0x2, 0xfbfffffc, 0x7, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd}, 0x0, 0xfff8000000000000, 0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x4000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x8}, 0x10ecc8, 0x1222, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$inet6(0xa, 0x4, 0x0) mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) 15m32.736267729s ago: executing program 37 (id=346): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) fchdir(r4) mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0xfffffffe, {0x60, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xfffffdc7, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xf93, 0x80, 0x8, 0x5}}}}]}, 0x48}}, 0x44080) 15m12.499980389s ago: executing program 38 (id=533): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3, 0x2f}]}}}], 0x18}}], 0x1, 0xf00) 14m4.900517003s ago: executing program 39 (id=1693): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}]}, 0x3c}}, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 12m56.811543273s ago: executing program 40 (id=3001): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000180)={0x1d, r1}, 0x10) sendmsg$can_bcm(r2, 0x0, 0x0) 12m48.276213369s ago: executing program 41 (id=3121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000400)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, {0x306, @broadcast}, 0x58, {0x2, 0x4e21, @broadcast}, 'veth0_virt_wifi\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000071110400000000008510000002000000850000007600000095000000000000009500a505000000009a6b4a3f"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 12m47.320648094s ago: executing program 42 (id=3135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x20004884) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000440)="05031600d3fc140000004788031c091050c84278961b78101678784af0ae298493c7652624ce6881492c28dd", 0x2c, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @random="89bb369335c1"}, 0x14) 12m46.892059864s ago: executing program 43 (id=3141): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000000)='7', 0x1) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000600)="b5d142da09b6f606697cfbc5a349375c719b4cb0de5d626786c45357de8159a89a716ac3b9648aa6dc1ef6c8fd518f", 0x2f}, {0x0}, {&(0x7f0000000700)="6964c6662c", 0x5}, {0x0}, {0x0}], 0x5) 12m46.10886092s ago: executing program 44 (id=3151): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8169, 0x2000, 0x800, 0x0, 0x2}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x2, r3, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x34}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x7, 0x5}, 0x90) 12m44.682308966s ago: executing program 45 (id=3156): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8}]}}]}, 0x38}}, 0x200008d0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 12m35.96432593s ago: executing program 46 (id=3195): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x7e, 0x3b00, 0x0, 0xfffffffffffffdfd) 12m24.176246318s ago: executing program 47 (id=3378): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20000400) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 12m23.239185191s ago: executing program 48 (id=3390): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x80) write$nci(r0, &(0x7f0000000840)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x1, 0x3, 0x3, 0x2, @f={0x9, 0x3, 0x2, 0xd, {0x2, 0xc, "cf39ecb894aad082640ff636"}, 0x1}}, 0x16) 12m22.684206567s ago: executing program 49 (id=3394): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f0000008000)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x2003, 0x0) 12m22.428008568s ago: executing program 50 (id=3397): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x125) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x1b05c5a, 0x0) 12m15.312631009s ago: executing program 51 (id=3479): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x4000, 0xe22, 0x8}}}}}}, 0x0) 12m9.392271083s ago: executing program 52 (id=3562): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x125) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x1b05c5a, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) 11m59.314554551s ago: executing program 53 (id=3669): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)) 11m58.940633058s ago: executing program 54 (id=3675): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r2, 0xda8d) accept$inet(r2, 0x0, 0x0) 11m51.556569041s ago: executing program 55 (id=3784): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 11m51.222307996s ago: executing program 56 (id=3791): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/netdevsim/netdevsim0/ports/0/queue_reset\x00', 0x1, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000000)={0xd, 0x7, 0x1, {{}, 0x7}}, 0xd) 11m50.294091349s ago: executing program 57 (id=3802): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0xc, &(0x7f00000010c0)=ANY=[@ANYBLOB="b702000002000000732ac0ff00000000180200000a0000010000000000000000180200000a0000020000000000000000bfa200000000000007020000c0ffffffb703000040000000b70400009900000085000000450000"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0xe, 0x0, &(0x7f0000002280)="0011223344550011223344560800", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11m47.890098331s ago: executing program 58 (id=3817): r0 = syz_open_dev$usbfs(0x0, 0x205, 0x8401) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, 0x0) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000940)=""/4096, 0x79c5}], 0x1) 11m44.791676114s ago: executing program 59 (id=3837): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00'}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10) r3 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r4, 0x0, 0x1, 0xce2f, &(0x7f0000000040)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x35) 11m43.60326441s ago: executing program 60 (id=3852): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x2800402, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/fib_multipath_hash_fields\x00', 0x1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1ffffffffffffe, 0x1) syz_emit_ethernet(0x102b, 0x0, 0x0) write(r0, 0x0, 0x0) 10m29.148234283s ago: executing program 61 (id=5187): sched_setscheduler(0x0, 0x2, 0x0) setrlimit(0xf, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x401, 0x1}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x400000, 0x10, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='attr/current\x00') writev(r1, &(0x7f0000000000)=[{&(0x7f0000001480)='c', 0x1}], 0x1) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x4a248, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4200, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffb}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sync() getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, &(0x7f0000000300)) r2 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x4, 0x100000000, 0x3, 0x8, 0x6, 0x6, 0x20000000ffd, 0x6, 0xfffffffd}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000000c0)) r3 = open(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x58100, 0x18) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r3, r4, 0xffffffffffffffff) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000400)={[{@nodioread_nolock}, {@lazytime}], [{@dont_appraise}, {@fowner_eq={'fowner', 0x3d, r4}}, {@permit_directio}]}, 0xff, 0x501, &(0x7f0000000e80)="$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") bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1b000000000000000000"], 0x50) r6 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) 10m27.07235955s ago: executing program 62 (id=5234): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0xd9a0}, @TCA_HHF_EVICT_TIMEOUT={0xffffffffffffffeb}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48801}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@bridge_newvlan={0x54, 0x70, 0x400, 0x70bd28, 0x25dfdbfd, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x9}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x10}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x21, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xb}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000100)={@multicast1, 0x1, 0x0, 0x50, 0x0, [{@multicast1}, {@multicast2}, {@empty}, {@dev}, {@multicast1}]}}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) close(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000001d80)=0x40, 0x4) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x9eb487cbb07c6a88) listen(r6, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) 10m17.57618554s ago: executing program 63 (id=5404): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x68, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x5000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}]}, 0x68}}, 0x0) 10m15.695208288s ago: executing program 64 (id=5429): ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14eb774a", @ANYRES16=0x0, @ANYBLOB="07000000000000000000050000000800038004000380180001801400020073797a5f74756e"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffff", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100"], 0x3c}, 0x1, 0x0, 0x0, 0xc040}, 0x0) 10m14.004334296s ago: executing program 65 (id=5450): socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xd, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0xfffe, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x8000040, 0xd, 0x8ef}}, @TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x7, 0x80000000, 0x0, 0x1, 0x0, 0x5, 0x4a, 0x81, 0x3, 0x8, 0x100, 0x10001, 0x3, 0x5, 0xb, 0x184, 0x8, 0x7, 0x1, 0x1, 0x9, 0x0, 0x8, 0x7, 0x4, 0x6, 0x7f, 0x10, 0xfffff9b9, 0x5, 0x7, 0x7, 0xf285, 0x7, 0x8, 0x5, 0x2, 0x7, 0x8, 0x1ff, 0x401, 0xe8, 0x80000000, 0xd8fa, 0x8, 0x7, 0x7fff, 0x3, 0x200, 0x4, 0x3, 0x3, 0x6, 0xff, 0x8001, 0x3, 0xd, 0x40, 0x7, 0xf5a, 0xffffffff, 0x1, 0x2, 0x0, 0x800, 0x0, 0x6, 0x1000, 0x6, 0x6, 0x0, 0x1ff, 0x7, 0x4, 0x8, 0xffffffff, 0x80000001, 0x4d, 0x313, 0x7, 0x600, 0x7, 0x6, 0x9, 0x13bf, 0x97, 0x7, 0x9, 0x1, 0x9, 0x0, 0x401, 0x7d, 0x6, 0x80000001, 0x8, 0xdd0, 0xf577, 0x3ff, 0x6, 0x40, 0xfffffffc, 0x7, 0x6, 0xffffff4d, 0x7, 0x7fff, 0x8, 0x4, 0x9, 0x9, 0x475, 0x10, 0x1000, 0x9, 0x4, 0xff, 0x4, 0x1, 0x7, 0x4, 0xfffffff7, 0x2, 0x5, 0x99, 0x7, 0x4, 0x7fffffff, 0x6, 0x8, 0x1000, 0x8001, 0x100, 0x100, 0xc2, 0x4, 0x25, 0x3ff, 0x2277, 0x9, 0xcc8f, 0xd, 0xce2, 0x9b, 0x9, 0x7f, 0x3, 0x8000, 0x7, 0x0, 0x9, 0x8, 0x5, 0x8211, 0x80000001, 0x7b51, 0x74, 0x101, 0xfffffc62, 0x60000, 0x2, 0x3, 0x7ad7, 0x3, 0x2, 0x0, 0x5, 0x54, 0x0, 0x101, 0x4, 0xa2e, 0x7, 0x2, 0x8001, 0x4, 0x80, 0x2, 0xffff5609, 0x6ca98c39, 0x81, 0x0, 0x0, 0x0, 0x5, 0x55a, 0xd, 0x4, 0x1, 0x0, 0x9, 0xfffffffe, 0x101, 0x6, 0x6, 0xa, 0x10000, 0x4, 0x80000000, 0x2000cf1, 0x7, 0x10001, 0x6, 0x4, 0x200, 0x0, 0x8, 0x7, 0x9, 0x3, 0xffff, 0x7fffffff, 0x7, 0x7, 0x200000, 0x5e0, 0xfffffff2, 0x7, 0x3, 0x31, 0x9, 0x5, 0x40000000, 0x4, 0x5, 0x2, 0x8, 0x9, 0x1000, 0x7, 0xbdb7, 0x3, 0xe, 0x7, 0x3, 0x6, 0x4, 0x1, 0x459, 0xd, 0x7, 0x68, 0x4, 0x4, 0x7fffffff, 0x7, 0x2, 0x80000000, 0x6cdd, 0xbd, 0x0, 0x6, 0x40, 0x81]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x40000) 10m8.347968089s ago: executing program 66 (id=5516): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000400000005"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8804) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x50}, 0x40000100) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x75, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000001080)="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", 0x2000, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r4}, 0xc) 9m45.628141062s ago: executing program 67 (id=5839): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 8m10.419614519s ago: executing program 68 (id=7102): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c01008a0104010000000000000000000200f1a515fe06ffcaa8000067ce0e7a6b205432f35a0ead2cb8360a3b42de62f5650e20d7f1b5290511"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="20000000010401000000000000000000020000000a0002000000ffff000000009f00794ca180b68b2cdef792d095308a8a62ddaea4"], 0x20}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x4, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) rename(0x0, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000340)={0x8, {{0xa, 0x4e22, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}, {{0xa, 0x4e24, 0x7f, @remote, 0xfffffffe}}}, 0x108) close(r3) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 7m55.226045554s ago: executing program 69 (id=7302): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x40104d00, &(0x7f0000000040)="0000020000020000000002") r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 7m41.052532992s ago: executing program 70 (id=7286): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000c00)=@get={0x1, 0x0, 0x200}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)=0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/oops_count', 0x400300, 0x4) r4 = perf_event_open$cgroup(&(0x7f0000000340)={0x0, 0x80, 0x9, 0x9, 0x4, 0x2, 0x0, 0x7, 0x8, 0xf, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000300), 0x8}, 0x302a, 0x6, 0x4, 0x5, 0x2, 0x1, 0x9, 0x0, 0x6, 0x0, 0x3}, r3, 0x5, r3, 0xb) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0xf, 0xad, 0x0, 0x0, 0x0, 0x102030, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x10000, 0xfffffffffffffff9}, 0x100198, 0x80000001, 0x5, 0x0, 0x9, 0x9, 0x3, 0x0, 0x80000001, 0x0, 0xc293}, r2, 0x10, r4, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = inotify_init1(0x0) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006b2000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, 0x0, 0x0, r5}, 0x68) mmap(&(0x7f0000810000/0x2000)=nil, 0x2000, 0x1000000, 0x60010, r0, 0x98f6c000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r6, 0xc138fd0e, &(0x7f0000000000)="0400000000000000000000007e01") 6m34.100839568s ago: executing program 71 (id=7933): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000940)='./file0\x00', 0x2000414, &(0x7f00000007c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRESDEC, @ANYRES64], 0x1, 0x2c9, &(0x7f0000000440)="$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") socket$netlink(0x10, 0x3, 0x0) socket(0x1e, 0x5, 0x0) r0 = socket(0x1e, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0xffffff7f, 0xffff7fff, 0x80000000, 0x40000, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x2}, 0x50) recvmmsg(r0, 0x0, 0x0, 0x2102, 0x0) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) readv(r3, &(0x7f0000001fc0)=[{&(0x7f0000000d80)=""/4096, 0x1000}], 0x1) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x2220}, {r2, 0x4236}], 0x2, 0x0, 0x0, 0x0) close(r1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)={0x28, 0x13, 0x1, 0x70bd28, 0x0, "", [@nested={0x18, 0xd3, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x1f}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) mkdir(&(0x7f0000001000)='./file0\x00', 0x1ff) 5m47.123861377s ago: executing program 72 (id=8206): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_int(r0, 0x0, 0x21, 0x0, &(0x7f0000000040)) (fail_nth: 2) 5m38.671471379s ago: executing program 73 (id=8243): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x1f0}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000001540)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002407ddd57ce0800014000000000140003"], 0xcc}}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40e8662e, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2204814, &(0x7f00000010c0)={[{}, {@unhide}, {@map_acorn}, {}, {@map_normal}, {@unhide}, {@map_normal}, {@check_relaxed}, {@cruft}, {@nojoliet}, {@dmode={'dmode', 0x3d, 0x3}}, {}, {@cruft}, {@gid}]}, 0xc1, 0xa55, &(0x7f0000000640)="$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") syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x4, 0x61f, &(0x7f0000001140)="$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") perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x94e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x120, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r1, 0xa) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e"], 0x28}, 0x0) recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) listen(r1, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='.\x00', 0x1a8a439, &(0x7f0000000400)=ANY=[@ANYBLOB="85055b24ff08ade5f58a1f426e7dd621d5cf837cbbab548cc9b1ccce6d7248390f770b60580d33b4bf996670d5c07df000c61ccefdd39095522b8cb370e93d119879c6cb779a289480645aab33c725ab5952af6e8c927c4fc1c3e44dfb9d1ad1ca9bf02528c4d252be7a0ed65f8edf953850389171b93b452982b8b7ca4b00b3e82add3fdf7d0137f9b4dc43b7c37204258b9061c86b7a5aa8da31307f367cc6841b8118169ca12741e9cc2f9e4696d3ea6cab357d53dd022710d21c41f6824509c2abca8745b1992657c28eb4d52ffa8749e925a3561ca0fd36b1ae882ff4d9"], 0xd, 0x0, &(0x7f0000000000)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x142000) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) 5m37.880130746s ago: executing program 74 (id=8246): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "00001234"}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0xfffffffffffffd70, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x810) write(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000002080)={0xc, {"a2e3ad204fc752f91b5d52f70b06d038e7ff7fc6e5539b3d5d098b089b3b08381a090890e0878f0e1ac6e7049b3344959b5d9a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31330d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08c4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e800ba9abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40d4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889632b3570243f989cce3803f465e41e610c2021d653a5520094ec79553299388b0000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c2d88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b19bb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0545359bafffa45237f104b98110403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae2d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e709000000000000004fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83000000000000010058b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff7544130700000000000000f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc6c71737b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f9354b9094f22b625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c558069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e0090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c73144f8e4a737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c10613d17ca51075f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb401000000608d6f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655bff4801784c416b22f73d32d678e2724f43f1fe687c7e8a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d7000bdbfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f4820000000000000900a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f45e9d6f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2e0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15f2dbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af500ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x24, r4, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x24}}, 0x18) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x58, r8, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008804}, 0x4048850) getdents64(r2, &(0x7f0000000000)=""/24, 0x18) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c4000000200000000000000008000", @ANYRES32=0x0, @ANYBLOB="20000000000000002c0012800e0001006970366772657461700000001800028014000700"/52], 0x4c}}, 0x0) 5m24.941578646s ago: executing program 75 (id=8308): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000000010000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r0, &(0x7f0000000300), 0x0}, 0x20) 5m22.633009983s ago: executing program 76 (id=8327): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usb_storage/parameters/delay_use\x00', 0x1, 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[], 0x12) 5m7.936761945s ago: executing program 77 (id=8325): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) uname(&(0x7f0000000500)=""/12) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x81, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff7fffff, 0x330}, 0x0, 0x0, 0xfffffffd, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0x8e8, 0xe138, 0x198, 0x8e8, 0x198, 0x9a0, 0x358, 0x358, 0x9a0, 0x358, 0x3, 0x0, {[{{@ip={@loopback, @empty, 0xff000000, 0x0, 'veth1_macvtap\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x40, 0x1400, 0x0, 0x0, 0x0, "24422e3c60941024a237ac1610fb4503788d97ff4e5385066e1d2b54f468474f3e4dd8c2f2afc95bfb74d7f6153fac56326ffaa6dbe74bba885cd6ed67021293"}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x1, 0x9, 0xf, 'pptp\x00', {0x11}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) r2 = io_uring_setup(0x2a86, &(0x7f0000000240)={0x0, 0xb0e3, 0x1046, 0x0, 0x33b}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r2, 0xc, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 4m56.542577283s ago: executing program 78 (id=8431): r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7fff, 0x10}, 0x10000d, 0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x103}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x7, 0x4080833) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000300)="e1dc36", 0x3}], 0x2) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000001400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000013c0)={&(0x7f0000000a40)={0x964, 0x1, 0x5, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [{{0x254, 0x1, {{0x0, 0x2}, 0x10, 0x64, 0x3, 0x8, 0xf, 'syz1\x00', "5e061104c87a2b5a191f553b5f51b9bbbcb125c55e325ad43342cea3b5380c2d", "b47663268f3f97cddcfead1830185ffdb1462fe191f905f8d8f851e4ad763e87", [{0x8, 0x33, {0x1, 0x9}}, {0x9, 0x2, {0x2, 0x1}}, {0x3, 0x51d, {0x2, 0x3}}, {0x6, 0x3, {0x1, 0x2}}, {0x7, 0xb6, {0x3, 0x80}}, {0x578, 0x1, {0x3, 0x6}}, {0x6c6, 0x0, {0x0, 0x2}}, {0x2, 0x18, {0x1, 0xe}}, {0x1, 0xe, {0x0, 0x6}}, {0x2, 0xff2b, {0x1, 0x8001}}, {0x6, 0xf, {0x0, 0x6}}, {0x2, 0x1, {0x3, 0xe}}, {0x6, 0x4, {0x1, 0x6}}, {0x8d, 0x7, {0x1, 0xfffffffa}}, {0x8, 0xfff, {0x1, 0x1}}, {0xff51, 0x80, {0x2, 0xf}}, {0x0, 0x4, {0x3, 0x6}}, {0xfff, 0xff01, {0x0, 0xfffffffd}}, {0x7660, 0x6e4, {0x2, 0x32}}, {0x401, 0x2, {0x0, 0x3}}, {0x81, 0x2, {0x0, 0x7fff}}, {0x9, 0x3, {0x0, 0x1}}, {0x35, 0x8, {0x2, 0x19a}}, {0x4, 0x1, {0x3389ad8bf3962327, 0x5}}, {0x8, 0x3, {0x0, 0x7}}, {0x3, 0x5, {0x2, 0x7ff}}, {0x8, 0x1, {0x0, 0xffff}}, {0x0, 0x3e5e, {0x3, 0x4}}, {0x8, 0x3c, {0x0, 0x3}}, {0x5, 0xe9c1, {0x0, 0xffff}}, {0x7, 0x404, {0x3, 0x2}}, {0x5, 0xfff, {0x3, 0x9}}, {0xa03, 0x1, {0x3, 0x81}}, {0x401, 0xd, {0x2, 0xc}}, {0xfff, 0x3, {0x1, 0x80000001}}, {0x3, 0x8000, {0x0, 0x7}}, {0xd, 0x4, {0x0, 0x5}}, {0xfffd, 0x8000, {0x0, 0x1ff}}, {0xb27f, 0x2111, {0x3, 0x80000001}}, {0x100, 0x1652, {0xcc6631ee2bceccc4, 0x9}}]}}}, {{0x254, 0x1, {{0x1, 0x9}, 0x6a, 0xef, 0xc0, 0x7, 0x25, 'syz1\x00', "55d6e75863b90a9877f7efa86777b54369843bb203e69e938d4d3bcbdc513232", "7ce0a104a1d359fc940411aa0c8d3bc1e715a47734a3882bec688644ed948421", [{0x7ff, 0x2, {0x2, 0x3}}, {0x5, 0xba0f, {0x0, 0x2}}, {0x9, 0xa, {0x2, 0x80000000}}, {0x7, 0x2, {0x3, 0xffffff7f}}, {0x8001, 0x3, {0x2, 0xa}}, {0xc0, 0x6, {0x3, 0x7}}, {0xf, 0x1, {0x1, 0x8}}, {0x9, 0x7, {0x0, 0x4}}, {0x6, 0xe, {0x2, 0x544}}, {0x8, 0x80, {0x2, 0xaa82}}, {0x5, 0xfff, {0x1, 0x3}}, {0x6, 0x6, {0x3, 0xac}}, {0x1d6, 0x2, {0x3, 0x800}}, {0x0, 0x4, {0x0, 0x3}}, {0x3, 0x8987, {0x3, 0x6}}, {0x2, 0xc8, {0x3, 0x5}}, {0x2e4, 0x1, {0x1, 0x5}}, {0x2, 0x5, {0x2, 0x4f}}, {0x4, 0x9, {0x0, 0xff}}, {0x5, 0x1000, {0x2, 0x10001}}, {0xa, 0x8, {0x0, 0x3}}, {0x3, 0xfffa, {0x0, 0x8}}, {0xffff, 0x7, {0x1, 0x2}}, {0x3, 0x0, {0x0, 0x5}}, {0x2, 0x7a, {0x0, 0x8}}, {0x800, 0x8, {0x3, 0x4}}, {0x2, 0x5, {0x1, 0x40}}, {0x81, 0xcf2, {0x2, 0x1}}, {0x4608, 0x8, {0x1, 0x9}}, {0x9, 0x3, {0x3, 0x9}}, {0x5, 0x6, {0x0, 0x1}}, {0x3, 0x80, {0x1, 0x2}}, {0x1, 0x9, {0x2, 0x2}}, {0x9, 0x7, {0x0, 0x7}}, {0xfff4, 0x8, {0x1, 0x4}}, {0x40, 0x5, {0x1, 0x8}}, {0x4, 0x6, {0x0, 0x8001}}, {0x1000, 0x8aa, {0x3, 0x6}}, {0xe, 0x1000, {0x3, 0x5}}, {0x8, 0x8001, {0x2, 0x2}}]}}}, {{0x254, 0x1, {{0x1, 0x4}, 0x4, 0xb7, 0xffff, 0x3, 0x19, 'syz0\x00', "deb35924f6a2d303c81ac5f3ead0c9d01e217bdfbcd1ed60afd89561dbaa6f26", "809ecdb4d7f78ee493918f258b0a1987a50e5b9610bd31e3be0ab25928d8edab", [{0x6, 0xbb1, {0x2, 0x1}}, {0x3, 0x15cb, {0x2, 0x4}}, {0x7, 0x8, {0x1, 0x255f}}, {0x90, 0x4cc, {0x2, 0x100}}, {0x5, 0x6, {0x2, 0x1}}, {0xa, 0x7, {0x0, 0xfa}}, {0x2, 0x3, {0x0, 0x6}}, {0x839a, 0x7, {0x2, 0xb}}, {0xcea2, 0x0, {0x1, 0x7fff}}, {0x2, 0x5, {0x3, 0x7}}, {0x8, 0x8, {0x2, 0xfffffff7}}, {0x4, 0x8000, {0x2, 0x1}}, {0x101, 0xa, {0x1, 0x7}}, {0x5, 0x8001, {0x2, 0xe}}, {0x4, 0x0, {0x1, 0x1}}, {0x1c99, 0x9213, {0x1, 0x1}}, {0x8, 0x9, {0x3, 0x7}}, {0x2, 0x18, {0x2, 0xb3}}, {0xfff7, 0x5, {0x2, 0x516}}, {0x4, 0xfffc, {0x2, 0x41}}, {0x1, 0x7, {0x1, 0xd}}, {0x5, 0x3, {0x0, 0xfffffffb}}, {0x2511, 0x401, {0x1, 0x3}}, {0x2, 0xa, {0xb3ae75fb770882dd, 0x7}}, {0x7, 0xe7, {0x3}}, {0x1, 0x4, {0x0, 0x4}}, {0x9, 0x1, {0x0, 0x6}}, {0x40, 0x7fff, {0x1, 0xa9}}, {0x5, 0x9, {0x1, 0x4}}, {0x8, 0x6, {0x0, 0x2}}, {0x3, 0x8, {0x0, 0x7ff}}, {0x1, 0x7, {0x3, 0xa2}}, {0x200, 0x3, {0x2, 0x101}}, {0x4, 0xfff9, {0x2, 0x8}}, {0x8, 0x1, {0x1, 0x3}}, {0x4, 0x800, {0x0, 0xb85}}, {0xfff, 0x8, {0x0, 0x80000000}}, {0x3, 0xff, {0x0, 0xc}}, {0x5, 0x7, {0x2, 0x1000}}, {0x5, 0x2, {0x3, 0x7}}]}}}, {{0x254, 0x1, {{0x0, 0xa}, 0x30, 0x1, 0xff, 0x7, 0x11, 'syz0\x00', "26eb4dc7e9ed5ac85e48925d5784e7230bb7806f0dad013f7a83c7eec11f9ed4", "f6ab998260a780fdfc20e27de23f2582b007a4e60603da6e55c9d3b60dbc19af", [{0xf620, 0x3, {0x2, 0x101}}, {0x7, 0x3ff, {0x2, 0xfffffffa}}, {0x2, 0x400, {0x1, 0x40}}, {0x2, 0x4, {0x0, 0x1}}, {0xffff, 0x9, {0x2, 0x2}}, {0x7fff, 0x2, {0x3, 0x8}}, {0x3, 0x9, {0x3, 0x10}}, {0x8000, 0x5, {0x2, 0x8}}, {0x41, 0x5, {0x1}}, {0x0, 0x8, {0x0, 0x2}}, {0x8, 0x9fad, {0x3, 0x2}}, {0x8, 0x7, {0x3}}, {0xf1c6, 0x73cb, {0x0, 0x162}}, {0x3932, 0x7, {0x0, 0xffffff64}}, {0x7, 0xc35, {0x2, 0x5}}, {0x5, 0x7, {0x2, 0x996}}, {0x8, 0x3ff}, {0x7, 0xfff9, {0x2, 0x1}}, {0x6, 0x0, {0x1, 0x49c49d3e}}, {0x8, 0xb, {0x1, 0xffffffe4}}, {0x7, 0x7, {0x0, 0x1}}, {0xa, 0xb, {0x1, 0x6}}, {0xfff, 0x4, {0x3, 0x10000}}, {0x9, 0x6, {0x1, 0xb}}, {0x3, 0x8, {0x2, 0x6}}, {0x8, 0x6, {0x3, 0xc78}}, {0x4, 0x2, {0x0, 0x8}}, {0x81, 0xa, {0x3, 0x4}}, {0x1, 0x6, {0x2, 0x7fff}}, {0x8, 0x8001, {0x1, 0xfffff360}}, {0xff00, 0x40, {0x1, 0x169}}, {0x3, 0x0, {0x3, 0x7}}, {0x2, 0x7, {0x1, 0x100}}, {0x5, 0x1}, {0x7, 0x35, {0x0, 0x5}}, {0x1f, 0x1, {0x2, 0x1}}, {0x4, 0x4, {0x3, 0x1}}, {0x0, 0x4, {0x3, 0x3}}, {0x3, 0x792, {0x0, 0xe1a5}}, {0xd3f, 0x7ff, {0x2, 0x9}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x40000}, 0x4040054) mbind(&(0x7f00006dc000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x603e, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r3, 0x0, 0x24048054) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r4) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r5, 0x150}, 0x0, &(0x7f00000008c0)="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", 0x0) fcntl$dupfd(r0, 0x0, r0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x1, @private2, 0x1}, 0x1c) 4m51.589940553s ago: executing program 79 (id=8452): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0xe4, 0x2, 0x4, 0x800000, 0x43, 0x4c7, 0x0, 0x200, 0x0, 0xfffffffffffffffd}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000080)={0x23, 0x4, 0x58, 0x1f}, 0x10) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) r3 = inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x44000160) r4 = dup(r1) inotify_rm_watch(r4, r3) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x10040) syz_emit_ethernet(0x42, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1a080045000034006700000206907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8cc200008076d37d9fa70846b0bb8f62b2e1d239a83f4a4cbbdd89191888ec724cda1ecaf1f5876d4b2588bed264edbaacbbee0e6eb55a27562c773f0aee8eb003cbc93d9a6776fa47bb23d13c8932ed668ee716207a36721bf051d834cde95aee251f823ed6eec4eec034db4ce5884e71cc89b143efc060d811540fa603b5fa6dd2c68e2b618a96eca5ba1178582bc1b2a1a5e410f0cd2e060318d9ce0c32ae6c6100"/184, @ANYRESOCT=r2, @ANYRES16=r4, @ANYRES32=r0], 0x0) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) r6 = syz_usbip_server_init(0x4) write$usbip_server(r6, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1f4a) unshare(0xa000200) r7 = semget$private(0x0, 0x4000, 0x0) semctl$GETALL(r7, 0x0, 0xd, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x4, @perf_config_ext={0x5, 0x7}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="680000003b000100000000000000000003010000000000002600010000112233445566778899aabb8848dd0000140000000145b50000010203040506070800000c0002000600200008000000100003"], 0x68}}, 0x20008800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000001, 0x4c831, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) unshare(0x400) 4m51.498632687s ago: executing program 80 (id=8390): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000140)="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", 0x50a}], 0x1}, 0x0) lchown(&(0x7f0000000040)='.\x00', 0xee00, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x9, 0x4, 0x6, 0xff}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x2800, 0x0, 0x0, 0x6, 0x400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'bridge_slave_1\x00', {0x3}, 0x2}) r4 = open(&(0x7f0000000100)='./file2\x00', 0x1ad941, 0x176) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)='\b', 0xffffff54}], 0x1, 0x7000, 0x0, 0x3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r0}, 0x38) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001400)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44091}, 0x0) 4m37.740276285s ago: executing program 81 (id=8491): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x201080a, &(0x7f00000005c0)={[{@minixdf}, {@nombcache}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x700, 0x0, 0x0}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x84002, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x40d, 0x4, 0x0, 0x9, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket(0x27, 0x1, 0x9) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) add_key$keyring(&(0x7f0000000680), 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b040000000000000000020002005000048018000180080001006f7366000c000280080001400000001224000180090001006d6574610000000014000280080002400000000c0800034000000015100001800b00010064796e73657400000900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x7) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000280)=0x1e) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="10010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e20f0004e2300000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000020000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e"], 0x110}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a31000000000800030000000006300004800800010000001234140002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r6 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40088a01, &(0x7f0000000000)=0x100) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce5800d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xffffff66}], 0x1}, 0x1) 4m31.345480832s ago: executing program 82 (id=8523): socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x2, 0x1, 0x0, 0xffffffff, 0x204b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000002c0)={0xe, 0x3, 0x2, 0xb, 0x1, "e7ffffff6dfaf60b0e00ffffffffffffffff00", 0x9, 0x201}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9000, &(0x7f0000000000)={0xf5, 0x7a}, 0x20) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) 4m23.315648725s ago: executing program 83 (id=8569): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x163440, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, 0x0, 0x8d0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000200001002dbd7000000000000a008004ff0000010000000014000200fc0200"/45], 0x38}}, 0x0) close(r0) r2 = socket(0xa, 0x3, 0x87) sendto(r2, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00', 0x6, 0x800, &(0x7f0000000600)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x1}, 0x11c0ad, 0x0, 0x0, 0x4, 0x6, 0x8001, 0x7ffe}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r3, &(0x7f00000002c0)=""/10, 0x5b) 4m13.527557159s ago: executing program 84 (id=8610): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r1, &(0x7f0000000040)={0x405}, &(0x7f000009de80), 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x20, 0x16, 0xa01, 0x0, 0x0, {0x3}, [@typed={0xc, 0xa, 0x0, 0x0, @u64}]}, 0x20}}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x404c, 0x1001ff, 0x4, 0x4, 0x4, 0x2, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)}], 0x2}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}, 0x2000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f00000002c0)='\xf3\x17\x92\xde\xf5\x14x\xf5\f7\xb7\x9b&*\xaa\xc5\xb0Q\xef\x1au\x9d5=V\xa2xs\xd5\x98\x02\xb5\x8e\x91V\xab\xa6\x90*\xc29\x15f\xa3\xa7l\xc0@7z\xcc\x9b;\xf4R\x8c\xb3\xa76\xaf\xa5\xb6\xed\x83\xa1O\xf2\xb4X \x9a\xd2\xd5\xc4\xad\x8c\x9e\f\xbf5\xaf\xe7\xb8\xb9\xcf\xcd\xc1\x95\xb2\xdf\xea\"\xee8nY\x06\xd36d\x81\xbbd\xb2/\xb4<\xe8S@\xf4\xc6\xca`\xf2\x11^\x1bII\xabw<\x11,\xe3[p\xe4v\x91\xa6\x0f\xc7\x97\x11r{\xcf\x8e\xee\xc0\xee2\b\x8d\x9a\xe1\x05\x14\x10\xab\x8d\xbb\xc7\xda') setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) 4m7.89902786s ago: executing program 85 (id=8631): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e22, @multicast1}, 0x16, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000480)='bond_slave_1\x00', 0xc, 0xffffffffffff8c77}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000002a80)=[{&(0x7f0000000040)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r5, 0x0, 0x80, 0xe) write(r3, 0x0, 0x0) 4m7.697982819s ago: executing program 86 (id=8634): getpid() (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xe, 0x8, 0x0, 0x4, 0x0, 0x3, 0x80, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x5, 0x5}, 0x485, 0x3, 0xb50000, 0x0, 0x7, 0x80000000, 0x8, 0x0, 0x101, 0x0, 0x8000}, r0, 0xe, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) clock_adjtime(0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4023, 0x10002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x4, @perf_bp={0x0, 0xb}, 0x8000, 0x5, 0x7, 0x4, 0x8, 0x401, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0xa) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000140)}, 0x4010) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x4a}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x0, 0x3, 0xffdffffd, 0x2, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x102}, 0x0, 0x4, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f00000008c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xb8, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x330}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x22}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}]}, @NL80211_ATTR_CQM={0x70, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7fff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7fffffff}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x4, 0x2, 0x4, 0x7fffffff, 0x4fb7, 0x82, 0x10, 0x9, 0x4, 0x1000]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x7f, 0xa5, 0x3, 0x400, 0x1409, 0x6, 0x7]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000010}, 0x4010) (async) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f00000008c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xb8, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x330}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x22}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}]}, @NL80211_ATTR_CQM={0x70, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7fff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7fffffff}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x4, 0x2, 0x4, 0x7fffffff, 0x4fb7, 0x82, 0x10, 0x9, 0x4, 0x1000]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x7f, 0xa5, 0x3, 0x400, 0x1409, 0x6, 0x7]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000010}, 0x4010) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x2, 0x3, 0xd1b9}) clock_adjtime(0x7, &(0x7f00000006c0)={0x4368, 0x1, 0x4, 0x7, 0x3, 0xf27, 0x5, 0xfff, 0xe62, 0x5, 0x4, 0x7cf7, 0x2, 0xcc59, 0x9, 0xd, 0xc05a, 0x1, 0x30000, 0x1, 0x5, 0x8, 0x8000000000000001, 0x2000, 0xfffffffffffffff7, 0xae00000000}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x500, &(0x7f0000000a40)="$eJzs3c9vVF0ZAOD3Tju0X7+BFmWhRgURRUOY/gAaggthozGExEhcuYDaDk3TGabptEgri7J0byKJK/0T3LkwYeXCnTvducGFCSrRUBMX8+XeubSl7dAB2g50nie53HvOvfQ9Z4Zzzr2HzpwAetaZiFiLiGMRcTcihvP8JN/iemtLr3v54tH0+otH00k0m7f/lWTn07zY8ndSn+Y/czAifvT9iJ8mO+M2Vlbnp6rVymKeHl2qLYw2VlYvzhXynInJ8cmxq5euTHRYk/49rzhd+93z783d/PEffv+VZ39e+/bP02KVfnE8O7e1HvupVfVilLaV9OZBBOuS/vzfzzso7ndZeDtpa/tcRJzN2v9w9HXQjgCAj1uzORzN4a1pAOCoS5//S5EUyvlcQCkKhXK5NYd3KoYK1Xpj6cJwffn+TGRzWCNRLNybq1bG8rnCkSgmaXo8O95MT2xLX4qIkxHxy4FPsnR5ul6d6eaNDwD0sE+3jf//HWiN/wDAETfY7QIAAIfO+A8Avcf4DwC95y3Gf58OBIAjwvM/APQe4z8A9J49x//Hh1MOAOBQ/PDWrXRrrufffz3zYGX5O6UHF2cqjflybXm6PF1fXCjP1uuz1Up5utnc6+dV6/WF8csbycbK6p1affn+0p252tRs5U7FFz4DQPedPP30r0lErF37JNtiy1oOxmo42grdLgDQNX3dLgDQNT7PA72rg2d80wBwxO2yRO9r2v6K0JN3X/wV6K7zXzT/D73K/D/0rneb///uvpcDOHzm/6F3NZuJNf8BoMeY4wfe6///AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEeVsi0plLO1wNfSPwvlcsTxiBiJYnJvrloZi4gTEfGXgeJAmh7vdqEBgPdU+EeSr/91fvhcafvZY8n/BrJ9RPzs17d/9XBqaWlxPM3/90b+0pM8f+JYNyoAAGx1fWdWa5zO91se5F++eDT9ajvMIj6/0VpcNI27nm+tM/3Rn+0HoxgRQ/9J8nRLer/Stw/x1x5HxBc26/9wS4TSYMRIvvLp9vhp7OMHEH/z9U+yuZnN+IXX4heyc+m+mL0Wn9+HskCveXqj1U/mbS9tYnn7K8SZbL97+x/Meqj396r/W9/R/xU2+r++HfGTrM2f2Ui/uSTPL//xBzsym8Otc48jvtS/W/xkI37Spv8912Ed//blr55td675m4jzsXv8llrWzY4u1RZGGyurF+dqU7OV2cr9iYnJ8cmxq5euTIwORLUyNprNVP9ptxj/vHbhRLv4af2H2sQf3KP+3+iw/r/9/92ffO0N8b/19d3f/1NviJ+Oid/sMP7U0PU2y3e3Vv+faVP/vd7/Cx3Gf/b31ZkOLwUADkFjZXV+qlqtLO5xkN5r7nWNg4/zINYiPoBi9OhBeg/+ARRjx0G3eybgoG02+m6XBAAAAAAAAAAAAAAAaKexsjo/EAf7caJu1xEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICj67MAAAD//y2oyxU=") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0x1, 0x7, 0xffffffff, 0x0, 0x1, 0xfffffffffffffffe, 0x2, 0x3, 0x4040c407}) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file2/file0\x00', 0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 3m53.778942225s ago: executing program 87 (id=8670): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@nombcache}, {}, {@delalloc}, {@resuid={'resuid', 0x3d, 0xee01}}, {@init_itable}, {@nodelalloc}, {@grpid}, {@quota}, {@nomblk_io_submit}]}, 0x81, 0x56a, &(0x7f00000015c0)="$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") r0 = fsopen(&(0x7f0000000180)='rpc_pipefs\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000001480)=""/125, 0x7d}], 0x1, 0x1, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipe\x00', 0x1ff) openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x240, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) epoll_create1(0x0) sendmmsg$inet6(r1, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x28}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x6, 0x8200, 0x1, 0x80, 0x0, 0x0, 0x5, 0x0}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000001c0)={r2, 0x4}, 0x8) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000000340)=""/184, 0x32, 0xb8, 0x1}, 0x28) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x800, 0x4) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5d) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0x20) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x4e23, 0x2, @empty, 0x7fff8}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)="ccbec031dd122b1cffe8c55bed56e91c788ffcd5d20e3a4fc9d5ccc90fe858a79c58a8b0b81771ac7595613f15a4bac4c2e1a40f7bd58c20edb65989339516a60d886f96a2648b5be92bb32dc1af433ad798bcc64d4941f5622260bff5a4224a4a0cecc9da1e04b3d5ce5f466206110e07cf29834d98cfd4e9d62ecc5495c23d7ddc5b01e7d151525d", 0x89}, {&(0x7f00000001c0)="59f772a98e9e97af66223f2adff698f4265c1046499523be25585f8c40d0858c20d5585a1c4253a7", 0x28}], 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000070100000080000089440601680000009aa715dbf1292229965463a5d9e9e11b3c76"], 0x18}, 0x800) ioctl$KDGKBLED(r4, 0x4b64, &(0x7f0000000040)) 3m51.583425626s ago: executing program 88 (id=8683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) statx(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000, 0x2, &(0x7f0000000380)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000dd000000000a0000070900010073797a31000000000900030073597a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={0x0, 0xcc}, 0x1, 0x0, 0x0, 0x4040}, 0x4800) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x3ba9bfc6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)={[&(0x7f0000000340)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0xc, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004040}, 0x4080) syz_open_dev$tty1(0xc, 0x4, 0x3) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3m45.057175529s ago: executing program 89 (id=8726): timer_create(0x2, &(0x7f000049efa0)={0x0, 0x0, 0x1}, &(0x7f0000044000)=0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x200, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x6, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x4, 0x7ffc0001}]}) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_delete(r2) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) getpgrp(r3) timer_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}}, &(0x7f0000000080)) 3m40.719127191s ago: executing program 4 (id=8755): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8008, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="2100000000000000000000000000100000"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) futex(&(0x7f000000cffc), 0x4, 0x0, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) 3m39.748365546s ago: executing program 4 (id=8767): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) creat(&(0x7f00000000c0)='./file0\x00', 0x48) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='com.apple.FinderInfo\x00', &(0x7f00000002c0)=""/4096, 0x1000) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0xffff4a0c, 0x7}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 3m39.65824536s ago: executing program 4 (id=8768): socket$inet6(0xa, 0x3, 0x81) setns(0xc9, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x20002}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1b9, 0x0, &(0x7f0000000700)="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", 0x0, 0x3f95b0e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffefffc}, 0x50) syz_open_dev$sg(&(0x7f0000000100), 0x10, 0x1) socketpair(0x27, 0x3, 0x0, &(0x7f0000000000)) 3m39.572390014s ago: executing program 4 (id=8769): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) socket$kcm(0xa, 0x2, 0x73) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x8000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x58, &(0x7f0000000240)={[{@inode_readahead_blks}, {@noload}, {@norecovery}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@errors_remount}, {@resgid={'resgid', 0x3d, 0xee01}}]}, 0xfe, 0x79f, &(0x7f0000001380)="$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") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x63) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000004000000080000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c7abed38c9f9673c0302031249c0e9feec5e7f6d00"], 0x48) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x200000000300, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000a927caa63bbdebc76264c103ba1b6b9000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000023000000000000000000000000feffffff00"/192]}, 0x138) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r4, @in={{0x2, 0x4e20, @multicast2}}}, &(0x7f0000000040)=0x84) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x208810, &(0x7f0000000140)={[{@nogrpid}]}, 0xff, 0x4c8, &(0x7f00000006c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000280)={'security\x00', 0x6, "a3f88b58d83c"}, &(0x7f0000000080)=0x2e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) accept4$unix(r0, 0x0, 0x0, 0x80000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x100000001, 0x0) 3m39.136896194s ago: executing program 4 (id=8774): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xe, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x39, 0x6, 0x8, 0x7, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008845}, 0x4040000) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000140)={0x0, 0xea60}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x108c0, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95,uni_xlate=1,shortname=winnt,shortname=winnt,uid=', @ANYRESOCT=r1, @ANYRESDEC], 0x1, 0x289, &(0x7f0000000280)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x5) 3m38.858549587s ago: executing program 4 (id=8778): socket$inet6(0xa, 0x3, 0x81) setns(0xc9, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x20002}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1b9, 0x0, &(0x7f0000000700)="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", 0x0, 0x3f95b0e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffefffc}, 0x50) socketpair(0x27, 0x3, 0x0, &(0x7f0000000000)) 3m38.630085158s ago: executing program 90 (id=8778): socket$inet6(0xa, 0x3, 0x81) setns(0xc9, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x20002}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1b9, 0x0, &(0x7f0000000700)="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", 0x0, 0x3f95b0e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffefffc}, 0x50) socketpair(0x27, 0x3, 0x0, &(0x7f0000000000)) 2m56.221872545s ago: executing program 9 (id=9008): creat(&(0x7f00000000c0)='./bus\x00', 0x1a7) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8971, &(0x7f0000000000)={'netdevsim0\x00', @remote}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffff9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) sendmmsg$sock(r2, 0x0, 0x0, 0x20004008) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee01) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 2m55.983877016s ago: executing program 9 (id=9011): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='#\x00'], 0x48) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1e00, &(0x7f00000005c0)={0x0, 0x12f2, 0x2, 0x2, 0x334}, &(0x7f0000000640), 0x0, &(0x7f00000006c0)) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000220001062abd7000fbdb5f080000006c"], 0x1c}], 0x1, 0x0, 0x0, 0x34008080}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000700)={[{@noinit_itable}, {@discard}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@journal_dev={'journal_dev', 0x3d, 0x6}}, {@nolazytime}, {@nobarrier}]}, 0x6, 0x62e, &(0x7f0000001140)="$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") tkill(0x0, 0x32) socket$rxrpc(0x21, 0x2, 0x2) syz_mount_image$iso9660(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x593, &(0x7f0000001180)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) getdents64(r2, &(0x7f0000000100)=""/245, 0xf5) getdents64(r2, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x1}, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000f0000000000000000000a00000a20000000000a05290000000001000000070000000900010073797a300000000048000000090a01040000000000000000070000000900010073797a30000000000c00098008000140e0000000080005400000003c08000a4000000000090002"], 0x90}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x20}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x24424, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x106cc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000001780)=""/4111, 0x100f}], 0x1, 0x9faa, 0x9) ioctl$KDDISABIO(r0, 0x4b37) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$XFS_IOC_FSGROWFSDATA(0xffffffffffffffff, 0x4010586e, &(0x7f00000003c0)={0x9, 0x5}) 2m54.293916954s ago: executing program 9 (id=9017): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000009, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r2, 0x400, 0x1) write$binfmt_script(r2, &(0x7f00000010c0)={'#! ', './file0/file0', [{0x20, '$'}, {0x20, 'GPL\x00'}], 0xa, "4fc588d8f4e4754f65aaaa3bac9a8c08b25754bd3c78a4e3337ec70c01610c9d2b7558a838ba6d5a7d094de4e404e350d9b22f126e8f4cd9d89d043900d345d53516a548c9b15a64ddb8abd155ccd6bfb57293984edf520aa44bcb54bdc68a0409949d9935cbb2d8d70da72aae6243dbec0e18b7fc8fc8f228a1904ff70eff78cfba416b31657f0d437e73de8576fea2c19040ad57fb481888409526a8ffcd629b88afb53aa590a639e0b766d476d85190cdb4d2a7d0d5"}, 0xcf) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x299c459, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x40010002) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) listen(r6, 0x5) sendmsg(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "01"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xd) sendmsg(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bind$unix(r5, &(0x7f0000000300)=@file={0x1, './file0/file0\x00'}, 0x6e) setns(0xc9, 0x40000000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = epoll_create(0x6b) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0xb0000000}) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000010000020900010073797a3100000000080002400000000248000000030a010400000000000000000100ffff0900030073797a310000000014000480080002400000000008000140000000030900010073797a3100000000080007006e61740014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x2000c091}, 0x800) 2m53.829094456s ago: executing program 9 (id=9022): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x8a}, 0x80, 0x0, 0x0, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setns(0xc9, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r1, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = msgget$private(0x0, 0x3ac) r3 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r3, 0x4b2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) fallocate(r4, 0x20, 0x0, 0x8ffff) msgrcv(r2, 0x0, 0x0, 0x0, 0x2000) keyctl$link(0x8, r3, r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400002000905000500020200000500010006"], 0x58}}, 0x4080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x7f000001}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050) 2m51.939048833s ago: executing program 9 (id=9034): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7fff, 0x10}, 0x10000d, 0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x103}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x14810, r0, 0xeb52) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r1, 0x0, 0x0, 0x1, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="300000001a00010028bd7000fedb5f25818080000000000017000100140002"], 0x30}}, 0x884) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r3, 0x20, &(0x7f0000000080)={&(0x7f0000002700)=""/4116, 0x1014, 0x0, 0x0}}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x17) 2m47.584391095s ago: executing program 9 (id=9058): creat(&(0x7f00000000c0)='./bus\x00', 0x1a7) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8971, &(0x7f0000000000)={'netdevsim0\x00', @remote}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffff9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) setuid(0xee01) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 2m47.425281633s ago: executing program 91 (id=9058): creat(&(0x7f00000000c0)='./bus\x00', 0x1a7) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8971, &(0x7f0000000000)={'netdevsim0\x00', @remote}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffff9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) setuid(0xee01) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 1m57.450417372s ago: executing program 8 (id=9204): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='#\x00'], 0x48) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1e00, &(0x7f00000005c0)={0x0, 0x12f2, 0x2, 0x2, 0x334}, &(0x7f0000000640), 0x0, &(0x7f00000006c0)) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000220001062abd7000fbdb5f080000006c"], 0x1c}], 0x1, 0x0, 0x0, 0x34008080}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000700)={[{@noinit_itable}, {@discard}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@journal_dev={'journal_dev', 0x3d, 0x6}}, {@nolazytime}, {@nobarrier}]}, 0x6, 0x62e, &(0x7f0000001140)="$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") tkill(0x0, 0x32) socket$rxrpc(0x21, 0x2, 0x2) syz_mount_image$iso9660(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x593, &(0x7f0000001180)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) getdents64(r2, &(0x7f0000000100)=""/245, 0xf5) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x1}, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000f0000000000000000000a00000a20000000000a05290000000001000000070000000900010073797a300000000048000000090a01040000000000000000070000000900010073797a30000000000c00098008000140e0000000080005400000003c08000a4000000000090002"], 0x90}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x20}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x24424, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x106cc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000001780)=""/4111, 0x100f}], 0x1, 0x9faa, 0x9) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)={{}, {0x4}}, 0x24, 0x0) ioctl$KDDISABIO(r0, 0x4b37) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$XFS_IOC_FSGROWFSDATA(0xffffffffffffffff, 0x4010586e, &(0x7f00000003c0)={0x9, 0x5}) 1m56.784077532s ago: executing program 8 (id=9211): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e24, 0x80000b, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000640)}, {&(0x7f0000000740)="3f955f5755c3796fdcc30385c96689ba538b74798e417c6f658781671ee5aab17f4fbb38e520cfa9421ecf3895e195cda1cb7ca2bc62a1968f64dc923607ce8140c20c79c81181fc6039c0b3522e0c37905a354d8f856f0538ce23b3fd62eb18c183ca", 0x63}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x20000081) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b80000000001010400000000000000000a0000003c00017fa902b98014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000024000d8014000400200100000000000000000000000000020c000380060001004e2200"], 0xb8}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x3) getuid() sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x4000000) r4 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x3, 0x1, 0x0, 0x5, 0x10, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x8101, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0x9d}, 0x0, 0xfff8000000000003, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x20004080) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000034000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a30000000004c000000060a010400000000000000000500000008000b40000000002400048020000180070001007274000014000280080001400000007f00000240000000040900010073797a3000000000140000001100010000000000000000000000000a"], 0xc0}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="78fcffff0f000104fefffffeffe9000000000000", @ANYRES32=0x0, @ANYBLOB="000000000002000018031680100001800c000900ff0f0000050000008800018014000b00000000000000000004000000000000002800010000020000ffffffffffff000000000000000000000000000000000000000000000000000014000a00ff01000000000000000000000000000028000100ffffff7f0180c200000e00000000000000000000000000000000000000000000000000000c0007000100000000000000900001800c0005000c0000000300000014000b00000800000000000001040000000000001000020009000000600700000500000014000a0008000000000000003f810000000000000c000900020000000180ffff0c000300080000006d0500001000020004000000ab040000000000040c000300080000000200000014000a00030000000000000007000000000000007c00018010000200030000001c030000f9ffffff0c0009000010000005000000100006000000000007000000400000002800010000000000bbbbbbbbbbbb00000000000000000000000000000000000000000000000000000c00090008000000040000000c00050005000000000000000c00090000000000060000003800018014000b000700000000000000ffffffffffffffff0c0004004a0a0000ffffffff14000a000500000000000000fbffffffffffffff380101800c00070029f40000b40d0000100002000b0000004b0200000600000010000200e0ff0000240800006ba4cbca2800010005000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000028000100000000000000000000000000000000000000000000000000000000000000000000000000b8000c8014000100010000004d0b00000400000088a800001400010000000100b00700000c000000810000001400010005000000410f00003a3f00009fcc000014000100960c00007801000000000c008100000014000100020000005400000000000000810000001400010008000000020d00000100000088a8000014000100000000000e030000ff7f000088a800001400010010000000070300000100000088a8000014000100000001009d050000ff07000088a80000400034801400350076657468305f746f5f687372000000001400350067656e65766531000000000000000000140035006272696467655f736c6176655f310000"], 0x378}, 0x1, 0xd, 0x0, 0x4000000}, 0xc080) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r6, 0x890c, &(0x7f00000003c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0x6, 'veth0_to_bond\x00'}) socket$netlink(0x10, 0x3, 0x0) 1m55.621387357s ago: executing program 8 (id=9221): perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x2}, 0x12280, 0x2, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000005000000070000000900000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000800000000004df9012ae753ff37b436e0cfbce422dca74854b5532a73a90f8dcfe4304a8263221c6aa556bc39473c1cf6530a8a50d5f6d07a5f92aafe0fcf81f3bc562be72e54c4ccdfbde0cd4273b9dd52670b4249c1f92d133225958f4843d91e0e4547fb456a200c86ac49c04be80f0000000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007021000f8ffffffb703000008000000b7040000000000008500000003000000850000000f0000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = syz_open_dev$usbfs(0x0, 0xf, 0x240000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4, 0xe}, 0x0, 0x7, 0x11000, 0x5, 0x8, 0x90000011, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000300)={0x8, 0xffffffff, 0x9, 0xec, 0x2, 0xb}) socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_open_procfs(0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = socket(0x2, 0x80805, 0x0) syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000001100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYRES8=r5, @ANYRES16=r6], 0x1, 0x37b, &(0x7f0000000d80)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x0, 0x12, r7, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 1m53.752808503s ago: executing program 8 (id=9234): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000010, &(0x7f0000000280)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x85, 0x7a5, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) write(r0, &(0x7f00000000c0)='2', 0xa800) (fail_nth: 2) 1m53.364382791s ago: executing program 8 (id=9240): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x4}, 0x38) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0) kexec_load(0x2, 0x1, &(0x7f0000001440)=[{0x0, 0x0, 0x8, 0x9}], 0x1) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000400)={{0xfa, 0xfd}, 0x0, 0xfffff6, 0xb, {0xfd, 0x88}, 0x2, 0x24}) write(r0, &(0x7f0000000080)='4', 0x1) 1m53.040656206s ago: executing program 8 (id=9245): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) listns(&(0x7f0000001a00)={0x20, 0x0, 0x7, 0x20000, 0x0, 0x3}, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000a00000000000000000000008a856cb90000000000000000"], 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000240)={0x9000001d}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x1e, 0x12, &(0x7f0000000b00)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018450000ffffffff0000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_emit_ethernet(0x3e, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606450a60008000000000000000000000000000000000001fe8000000000000000000000000026aa2900040062400100"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f00000003c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000027000000850000005000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x3, &(0x7f0000000480)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000002) openat$cgroup_ro(r2, &(0x7f0000000400)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bind$x25(r1, &(0x7f0000000100), 0x12) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 1m52.808466016s ago: executing program 92 (id=9245): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) listns(&(0x7f0000001a00)={0x20, 0x0, 0x7, 0x20000, 0x0, 0x3}, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000a00000000000000000000008a856cb90000000000000000"], 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000240)={0x9000001d}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x1e, 0x12, &(0x7f0000000b00)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018450000ffffffff0000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_emit_ethernet(0x3e, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606450a60008000000000000000000000000000000000001fe8000000000000000000000000026aa2900040062400100"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f00000003c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000027000000850000005000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x3, &(0x7f0000000480)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000002) openat$cgroup_ro(r2, &(0x7f0000000400)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bind$x25(r1, &(0x7f0000000100), 0x12) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 55.710084946s ago: executing program 1 (id=9732): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x88ce359bdb08143e, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10092, &(0x7f0000000280), 0xfb, 0x249, &(0x7f0000000880)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x28, r3, 0x1, 0x70bd25, 0x3, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x2400c046) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x304) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r9 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x3f, 0x0}, @in6=@mcast1, 0xee24, 0x0, 0x0, 0x3, 0x2}, {0x81000, 0xa00000004, 0x40000000007, 0x3, 0x67, 0x0, 0x200000003, 0x9}, {0x2}, 0x5, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in=@empty, 0x4d3, 0x6c}, 0xa, @in6=@loopback, 0x3502, 0x4, 0x8, 0x0, 0x9075, 0xef, 0x9}}, 0xe8) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, 0x7}, 0x1c) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f00000000c0)={'vcan0\x00', @random}) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001180)) 52.408565059s ago: executing program 1 (id=9768): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x20, 0x1, 0x3, 0x1, 0x0, 0x0, {0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x1, 0x1}}]}, 0x20}}, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) r1 = socket(0x11, 0xa, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x6, 0x10, 0x0, {}, {}, {}, 0x1, @can={{}, 0x3, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}, 0x1, 0x0, 0x0, 0x200000c1}, 0x40) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0, 0x2b}, 0x8, 0x0, 0xb00, 0x24}, 0x0) 52.308680043s ago: executing program 1 (id=9769): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_names\x00') bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x274, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40048}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 52.046155126s ago: executing program 1 (id=9773): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x1100, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x40000000000000e1}}}}}}}, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x6, 0xe0640) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x80010, r0, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup, 0x2b, 0x0, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42042, 0x80) quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000200, 0x0, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@cgroup=r2, 0xffffffffffffffff, 0x10, 0x10, 0x0, @void, @value=r3, @void, @void, r1}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x2, [@struct={0xb, 0x2, 0x0, 0x4, 0x0, 0x2, [{0xa, 0x2, 0x80000000}, {0xe, 0x2, 0x1}]}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x17, 0x0, 0x54, 0x8}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x5a, 0x0, 0x70}, @ptr={0x10, 0x0, 0x0, 0x2, 0x4}]}}, &(0x7f0000000380)=""/237, 0x6a, 0xed, 0x1}, 0x28) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x1, 0x379, &(0x7f0000000580)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c5082, 0xdc) write(r5, &(0x7f0000000200)="c7", 0x1) sendfile(r5, r4, 0x0, 0x7fff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 51.483970232s ago: executing program 1 (id=9777): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x10, 0x10, 0x9, 0xff4, {{0x27, 0x4, 0x3, 0x1, 0x9c, 0x66, 0x0, 0x5, 0x29, 0x0, @private=0xa010101, @multicast1, {[@rr={0x7, 0xb, 0xc9, [@broadcast, @local]}, @lsrr={0x83, 0xb, 0x10, [@dev={0xac, 0x14, 0x14, 0x20}, @broadcast]}, @noop, @timestamp_addr={0x44, 0x24, 0xc6, 0x1, 0x6, [{@multicast1, 0x5}, {@rand_addr=0x64010101, 0x7fffffff}, {@loopback, 0x7}, {@private=0xa010100, 0x5}]}, @cipso={0x86, 0x2c, 0x2, [{0x0, 0x8, "448e9b670c1a"}, {0x2, 0xe, "4a68e5986521d14bb1a2997b"}, {0x2, 0x10, "583271ea1ab36a1b5e6ca8e2304b"}]}, @ssrr={0x89, 0x7, 0x93, [@broadcast]}, @ssrr={0x89, 0x17, 0xf1, [@broadcast, @private=0xa010100, @loopback, @rand_addr=0x64010102, @broadcast]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', r2, 0x29, 0xb, 0x6, 0x401, 0x50, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x8, 0x0, 0x126c, 0x9}}) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050) 50.897512279s ago: executing program 1 (id=9784): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000180)=@req3={0x780f, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)="9a03311c", 0x38) write(0xffffffffffffffff, &(0x7f00000003c0)='B', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/target/core/rd_mcp_0/ramdisk_0/control\x00', 0x1, 0x0) write(r2, &(0x7f00000005c0)='rd_pages=327', 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/target/core/rd_mcp_0/ramdisk_0/enable\x00', 0x48041, 0x1) write(r3, &(0x7f0000000640)='1', 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000800)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0/virtual_scsi_port\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/nexus\x00', 0x1, 0x0) write(r4, &(0x7f0000000880), 0x0) write(0xffffffffffffffff, &(0x7f0000000900), 0x0) socket$nl_generic(0x10, 0x3, 0x10) 50.608070222s ago: executing program 93 (id=9784): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000180)=@req3={0x780f, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)="9a03311c", 0x38) write(0xffffffffffffffff, &(0x7f00000003c0)='B', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/target/core/rd_mcp_0/ramdisk_0/control\x00', 0x1, 0x0) write(r2, &(0x7f00000005c0)='rd_pages=327', 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/target/core/rd_mcp_0/ramdisk_0/enable\x00', 0x48041, 0x1) write(r3, &(0x7f0000000640)='1', 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000800)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0/virtual_scsi_port\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/nexus\x00', 0x1, 0x0) write(r4, &(0x7f0000000880), 0x0) write(0xffffffffffffffff, &(0x7f0000000900), 0x0) socket$nl_generic(0x10, 0x3, 0x10) 22.369642562s ago: executing program 5 (id=10095): r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18de6e78ca4b39fb34000000000000000000000071123e00000000009500000000000000112d144617ecce0d16cd315da718e934b7c52e0cd3c7e08a0a7d96891c8912301b0019778606d0ffc91953f51d41d03315890f466d6a6ed43e8de7fa25adea6718a06c2212a4c34025e9b3a15d16fadcbe0600f58c7a67bb62da1264ed9f8702027357cf862e339ec75a679d69e0b0996b19b8b8c19ad2b9794160dbcd6503274559065317162d1abb389d6c07ca798aff4a9425ee77"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) ioctl$FIBMAP(r0, 0x2283, &(0x7f0000000040)=0x85) 22.144545062s ago: executing program 5 (id=10098): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000850) 22.086587255s ago: executing program 5 (id=10100): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendto$packet(r2, 0x0, 0x0, 0x4000, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 21.936311642s ago: executing program 5 (id=10102): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000000000, 0x2}}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="5800000010004b0400000000000000adafd0c7d94f620a81a1127526d55e5e18128cc5a50543122789cd5c0322d0e23845741d67df771816947b5ff3d63e4eefb7813f8bbccdb4e1d95a4bbd5576eee29f547dfe30125d14488dcf578d950712007edb9a1e42877a5c4e06f89ee8492fdf90613ff455cf04f546e4b7b53f925e6a8bbc9332753c21a7d4bf4a8bd8a120637cfdfe8b393bbe36", @ANYRES32=0x0, @ANYBLOB="000000000e2c0000300012800b000100697036746e6c0000200002801400030020010000000000000000000000000002050009002900000008000400110e0000"], 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000824) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="b8be6037", @ANYRES32=0x0, @ANYBLOB="06040100000000001400030076657468315f746f5f626f6e640000000800168004000180"], 0x3c}, 0x1, 0x0, 0x0, 0x4000840}, 0x60000090) shmget$private(0x0, 0xa000, 0x80, &(0x7f000063c000/0xa000)=nil) (async) r4 = shmget$private(0x0, 0xa000, 0x80, &(0x7f000063c000/0xa000)=nil) r5 = shmat(r4, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) (async) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) setsockopt$packet_int(r6, 0x107, 0xc, &(0x7f0000000200)=0x6, 0x4) (async) setsockopt$packet_int(r6, 0x107, 0xc, &(0x7f0000000200)=0x6, 0x4) shmdt(r5) shmdt(r5) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f00000004c0)={0x48, r7, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x3}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x4}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x48804) syz_emit_ethernet(0x2e, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) (async) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) (async) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) mount(&(0x7f0000000580)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000680)='pipefs\x00', 0x0, &(0x7f00000006c0)='-l}*\'!&-[#}\x00') perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x4, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) 20.856642272s ago: executing program 5 (id=10110): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r1, @ANYRES32=r1], 0x44}}, 0x2000850) 20.576054195s ago: executing program 5 (id=10114): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24008840) ioctl$NILFS_IOCTL_GET_SUSTAT(0xffffffffffffffff, 0x80306e85, &(0x7f0000000040)) splice(r2, 0x0, r5, 0x0, 0x80, 0x4) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timerfd_create(0x8, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x3, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x6}]}]}, {0x0, [0x5f]}}, 0x0, 0x2f, 0x0, 0x0, 0x4}, 0x28) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x8000005, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80088c0}, 0x40) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4}, 0x8084, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) socket(0xa, 0x5, 0x0) socket(0x2, 0x80805, 0x0) 19.798917702s ago: executing program 94 (id=10114): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24008840) ioctl$NILFS_IOCTL_GET_SUSTAT(0xffffffffffffffff, 0x80306e85, &(0x7f0000000040)) splice(r2, 0x0, r5, 0x0, 0x80, 0x4) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timerfd_create(0x8, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x3, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x6}]}]}, {0x0, [0x5f]}}, 0x0, 0x2f, 0x0, 0x0, 0x4}, 0x28) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x8000005, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80088c0}, 0x40) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4}, 0x8084, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) socket(0xa, 0x5, 0x0) socket(0x2, 0x80805, 0x0) 7.151637049s ago: executing program 0 (id=10194): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) epoll_create1(0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x100) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7c, 0x3ff, 0x3, 0x800000, 0x10001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f00001fb000/0x4000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000591000/0x2000)=nil, &(0x7f00000f0000/0x1000)=nil, &(0x7f0000acb000/0x1000)=nil, &(0x7f0000907000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x0, [0x806f, 0x0, 0x2d5, 0x5, 0x6], [0x1009d8, 0x5, 0x1, 0x9, 0x8005, 0x1, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc3c, 0x3, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x4, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x0, 0x4, 0x40005, 0x8, 0x8000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0x14, 0x5bc, 0x5, 0x7ffffffb, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x7fd, 0xe000000000004, 0xe4, 0xf, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x7, 0x0, 0x6, 0x20, 0xb, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x7, 0x8, 0x1, 0x16d, 0x53, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x406, 0x3, 0x6, 0x2, 0x0, 0x3, 0x40, 0x7fffffff, 0x3, 0xe, 0x341a]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x3, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x2f) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000000)={0x17, 0xffffffffffffffff, 0xc, {0x7fffffffffffffff, 0x9}, 0x9}, 0x1) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)='disable= size=0x4', 0x11) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {}, 0xa}}, 0x26) 6.188461683s ago: executing program 0 (id=10209): openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) open$dir(0x0, 0xc402, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 5.877274417s ago: executing program 0 (id=10213): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x88ce359bdb08143e, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10092, &(0x7f0000000280), 0xfb, 0x249, &(0x7f0000000880)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x28, r3, 0x1, 0x70bd25, 0x3, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x2400c046) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x304) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r8 = socket$inet6(0xa, 0x3, 0x88) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, 0x7}, 0x1c) 5.080290394s ago: executing program 6 (id=10224): openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) open$dir(0x0, 0xc402, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 5.018479657s ago: executing program 6 (id=10226): ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x2d) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x60048040}, 0xc040445) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000580)=@gcm_256={{0x304}, "88bafce1d0342fcd", "f3c4a1363e9faa6303b1d50a4594f78318c65aea3d9e5000", "8c0ea9f3", "34cdeacce803cd3b"}, 0x38) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) r2 = getpid() r3 = syz_io_uring_setup(0x315b, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0x0, 0x1000001, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000000)=[@ioring_restriction_register_op], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r3, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001e40)=[{0x0}], 0x1) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) futex$unlock_pi_list64(&(0x7f0000000480)=0x6, 0x287, 0xfffffff6, &(0x7f00000004c0), &(0x7f0000000500)=0xf14, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$peekuser(0x3, r4, 0x370) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000340)={'\x00', 0x5, 0x7, 0xc0000000, 0xffffffffad3ed4d7, 0x4, 0x0}) r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x205, 0x8401) r8 = fcntl$dupfd(r7, 0x406, r7) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000100)={0x0, 0xb, 0x6, 0x7, 0x0, 0x9, 0x0}) syz_clone3(&(0x7f0000000400)={0x20000000, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f00000001c0), {0x35}, &(0x7f0000000200)=""/15, 0xf, &(0x7f0000000280)=""/32, &(0x7f00000003c0)=[r1, r2, r4, r5, 0x0, r6], 0x6, {r8}}, 0x58) 3.615668982s ago: executing program 0 (id=10236): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={0x0, 0xd}, 0x8804, 0xff, 0x20000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) lgetxattr(0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, 0x0, 0x2000850) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.079978537s ago: executing program 6 (id=10239): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xf, 0x0, &(0x7f0000000080)="e0b9d5a2a00a3c6ffda2e386112192", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.812340249s ago: executing program 6 (id=10241): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x402683) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)={0x24, 0x0, 0x1, 0x0, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x4, 0x10d}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000065}, 0x4008000) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x5e}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) r1 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0xa04000, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES32=r0], 0x1, 0x11f0, &(0x7f0000002d00)="$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") syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x1, 0x1227, &(0x7f00000024c0)="$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") bind$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={0x24, @short={0x2, 0x1, 0xaaa3}}, 0x14) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x1000000, 0x2000003}) r3 = open(&(0x7f0000000140)='./file2\x00', 0x105480, 0x100) write$binfmt_script(r3, &(0x7f0000000240)={'#! ', './file2', [{}, {0x20, '#(-'}], 0xa, "08d7afd0dc819b1b9dcb92254534c1f3ee6b7bdc4c41a1897f40557475916215f302bbc9"}, 0x34) setns(r3, 0x4000000) r4 = signalfd4(r2, &(0x7f0000000200)={[0x4]}, 0x8, 0x80000) socket$l2tp6(0xa, 0x2, 0x73) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(0x3) utime(&(0x7f0000000000)='.\x00', 0x0) socketpair(0x1, 0x1, 0x0, 0x0) setns(0xc9, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14dc5d5e928ee12c8e0000000018000001000000"], 0x14}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') lseek(r6, 0xfffd, 0x0) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000040)={0x0, 0x9, 0xd, 0xa, 0x4, "dff297f35d91554addfcde426185a1ee7732d1"}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r4, 0xc0bc5310, &(0x7f0000000300)) preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0xfffffffe, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x10010, 0x4) 2.392524019s ago: executing program 0 (id=10245): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000001b0800000075000000000000", @ANYRES64=r0], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x440c0) sendmsg$can_bcm(r0, 0x0, 0x4048884) 2.193740159s ago: executing program 0 (id=10246): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x88ce359bdb08143e, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10092, &(0x7f0000000280), 0xfb, 0x249, &(0x7f0000000880)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x28, r3, 0x1, 0x70bd25, 0x3, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x2400c046) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x304) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r8 = socket$inet6(0xa, 0x3, 0x88) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, 0x7}, 0x1c) 1.775449027s ago: executing program 6 (id=10251): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xf, 0x0, &(0x7f0000000080)="e0b9d5a2a00a3c6ffda2e386112192", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.627715625s ago: executing program 6 (id=10253): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ptrace(0x10, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000340)={0x3, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480)={r3}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_ext={0x1a, 0xb, &(0x7f0000000e80)=ANY=[@ANYBLOB="180000004f0c000000000000fcffffff180100002020752500000000002020207b1af8ff00000000bfa100010000f8ffffffb702000008000000b70300000500000085000000b900003bb83f5101e40095000000000000003ec2a4b74ab4abc63e1babf331e47eaed5d1c263b96996bdc95599b92e399dee630fb9873283f4c37998e5bd0f2b8dd7b4bf79a39e6d6993014890d3673d4e6a7b702eee911b743a2a5ead9a7c6cfc2bff760c0266d6a2a98d34bf1d605989d3b4258c78b6e71b4f90b85e9d6b9199f9a23f64fb"], &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4aa}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) bind$can_raw(r4, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) 1.625777594s ago: executing program 3 (id=10254): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001100a7cc4a37", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16, @ANYRES32], 0x44}}, 0x2000850) 1.524403149s ago: executing program 3 (id=10255): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={0x0, 0xd}, 0x8804, 0xff, 0x20000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) lgetxattr(0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, 0x0, 0x2000850) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 982.847544ms ago: executing program 2 (id=10260): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d00", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000850) 836.296061ms ago: executing program 7 (id=10261): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x100, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff2}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20004055) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0xc0122, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, @perf_bp={0x0}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket$kcm(0x2, 0x5, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000340)="a0a741373a", 0x7fffff}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000000700000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, &(0x7f0000000100)) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) read$msr(0xffffffffffffffff, &(0x7f0000000300)=""/40, 0x28) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, &(0x7f0000000340)) io_setup(0x3, 0x0) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, &(0x7f0000000080)=""/149) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = dup(0xffffffffffffffff) write$binfmt_elf64(r3, 0x0, 0x40) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="1400000028004b00cc69cf73577814970686eb87", 0x14}], 0x1}, 0x4000000) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={@empty, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x9, 0x0, 0x0, 0x500, 0x0, 0x4d30356}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000380)={0x0, 0x6}, &(0x7f00000003c0)=0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) 823.535482ms ago: executing program 2 (id=10262): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x2, 0x6, 0x658, 0x4e0, 0x2c0, 0xf0, 0x2c0, 0x2c0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xff, 0xff000000, 0xffffff00], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000010000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@dev={0xac, 0x14, 0x14, 0x16}, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xffffffff, 'system_u:object_r:updpwd_exec_t:s0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xffffff00], '\x00', 'sit0\x00', {}, {}, 0x2f, 0x9}, 0x0, 0xa8, 0xe0, 0x48000000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0xffff, 0x44, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@loopback, 0x1, 0xde}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b8) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x2}, 0xc12a, 0x6, 0x3, 0x6, 0x7, 0x400004, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240), 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r2, 0x4) (fail_nth: 4) r3 = io_uring_setup(0x45, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x0, 0x400c1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 657.49709ms ago: executing program 2 (id=10263): socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) openat$tun(0xffffffffffffff9c, 0x0, 0x42082, 0x0) close(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socket$unix(0x1, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f0000002800)=ANY=[@ANYRES16, @ANYRESHEX], 0x20) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x30, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x3c) close_range(r1, 0xffffffffffffffff, 0x0) 567.814654ms ago: executing program 3 (id=10264): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b70200000a000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bce5a6f087ae8f5e64be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67c4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xf, 0x0, &(0x7f0000000080)="e0b9d5a2a00a3c6ffda2e386112192", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 566.368894ms ago: executing program 7 (id=10265): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001100a7cc4a37", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16, @ANYRES32], 0x44}}, 0x2000850) 448.693309ms ago: executing program 3 (id=10266): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_LIMIT={0x8}, @TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xd}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc004}, 0x4884) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x681c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7, 0x4}, 0x13c0e8, 0x0, 0x0, 0x989c6d54a3fb7abf, 0x3, 0x3, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) gettid() r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001780), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f00000017c0)={0x28, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_team\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000011}, 0x48000) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0x80080000, 0x6, 0xe, "dce4f0020100000000001b347d5c00010200"}) wait4(0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x10a0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000180)={0x80000005}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) close(0x3) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000000640)=""/235, 0xffffffffffffff29}], 0x23a, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {0x1, 0x1}, 0x2, 0xe0, &(0x7f00000000c0)={0x80, 0x18, 0xff, 0x9, 0x8d5e}, 0x8, 0x200, 0x2, 0x0, 0x3fb, 0x2, 0x0}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0x2, 0xa, 0xb2cc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0xfffffffd}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x11, 0x15, 0x0, &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) 447.646059ms ago: executing program 2 (id=10267): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000001b0800000075000000000000", @ANYRES64=r0], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x440c0) sendmsg$can_bcm(r0, 0x0, 0x4048884) 400.228281ms ago: executing program 7 (id=10268): r0 = socket$can_raw(0x1d, 0x3, 0x1) fcntl$getflags(r0, 0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r1, &(0x7f0000002b00)=[{{&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000080)=""/18, 0x12}, {&(0x7f00000000c0)=""/224, 0xe0}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/216, 0xd8}, {&(0x7f00000012c0)=""/16, 0x10}, {&(0x7f0000001300)=""/221, 0xdd}, {&(0x7f0000001400)=""/206, 0xce}], 0x7}, 0x490}, {{&(0x7f0000001580)=@hci, 0x80, &(0x7f0000002680)=[{&(0x7f0000001600)=""/12, 0xc}, {&(0x7f0000001640)=""/7, 0x7}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x3, &(0x7f00000026c0)=""/68, 0x44}, 0x34}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000002740)=""/97, 0x61}], 0x1, &(0x7f0000002800)=""/230, 0xe6}, 0x7}, {{&(0x7f0000002900)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000002980)=""/250, 0xfa}], 0x1, &(0x7f0000002ac0)=""/53, 0x35}, 0x6}], 0x4, 0x1, &(0x7f0000002c00)={0x0, 0x3938700}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000002c40), 0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000002c80), 0x3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000002cc0)={0x7, 'ip6gretap0\x00', {0x1000}, 0x42}) getsockopt$inet_udp_int(r2, 0x11, 0xb, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000002d80)={0x0, 0x4}) sendmsg$inet(r2, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002dc0)="3933308e6a25f700ea53ebc86ae6a3046130b4b35194f130a5fe48e29cb88f9e85b1283a2b519e273957725947731cc9e89899a3c9890691758065e0c4a4bd163ea11dac38f9e4d109e1117130d29f98465a8f8424443b1f26c0eabf6d4b0ac9a333181ad633178afd99fec5b97f9c116c04da0d7b90459ad2c31a392997c776c8a1a004f485bda8a628ddc50ff12a11525e6d1e2e0944a40c0791f3cbf331f2d9bb00f934872be2cce30a8cd340742cad4ba1c5111ade368b44e6489a6bb56e7935960a3c005123b283418bc720ddeb3fefc79fcb8c9652aa582cbd06f7302cb65d200fcb31b0ddf0c1a894b4829835952c", 0xf2}, {&(0x7f0000002ec0)="45b46c8363fd2ff7c16b42de09fdb2bf36c7b83cbc4cc1b93a15f319f30a66c7ea08a9bf92c6651dc9561754e9dd7c85e38dcbcf7ebdaa28cbde1369ad09af642020c71dde86ea964c6f06eae0e3f2e9442dfe162131c25631ce29667295d7e65d84b534fc61c0c1cef5fd1bb6386c9d536b3be57b2ecb4092527473cc83e1ef12bb14f555fd33d3b63a0c5fad496330c8ffd32ce86f8b53142ae4252aaab0b52395eae0869ac1e514610b8f693fe5dca3caa35dc42d510555", 0xb9}, {&(0x7f0000002f80)="a32cfd8f0d295cf31c1be73a240f86f7dd00827ae92ab85f82b8596ed4783468802323605ddb1467adb77caed00fc60a99a67b012199ba38efa19431fdfb24cba5d5a7f5c6c4a88425682160c8d565c5ee4d73cbf0", 0x55}, {&(0x7f0000003000)="1620af8a0c6aff5edb53a90a653098fb98941e8b03efd5ce9bc414a9cd92f540f8a3486de9dcfcdfbad39026dcebbd4148f7ea374c4d81a4", 0x38}, {&(0x7f0000003040)="eb4ab98b0e40bc12722a6a71892f7ce64f7442a24476c2f0512923085c960000fcdd5e6e0820c4cba765d3572ecf6a89018e8311392e5dca84d030d7259b06ae328d39f56c68af45a6f07f22a4f95012ed3659755491c9342f112a698542d7e3a99af59ecbf1f8ca9385ada8661fed632918c2f16348839b9d0f1f6a456dbd0330a79726f6f1e2d467d6357b8bd1ea7b13bf83fd7b79bce2", 0x98}], 0x5}, 0x40040) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x3, &(0x7f00000031c0), &(0x7f0000003200)=0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003280), r2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000003340)={'ip6_vti0\x00', &(0x7f00000032c0)={'syztnl1\x00', 0x0, 0x2f, 0xb, 0x5e, 0x9, 0x22, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x39}, 0x20, 0x8, 0x4, 0x161}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000003440)={'syztnl1\x00', &(0x7f0000003380)={'syztnl2\x00', 0x0, 0x7800, 0xf975a5b0ee236574, 0x3, 0x9, {{0x19, 0x4, 0x3, 0x39, 0x64, 0x65, 0x0, 0xff, 0x2f, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0xa}, {[@cipso={0x86, 0x4f, 0x2, [{0x1, 0x9, "6777ef520fbbfa"}, {0x7, 0x11, "eca14caf2816f3afc3801a3becd8c0"}, {0x1, 0x7, "a417f3cb71"}, {0x7, 0x8, "584b9b9b87e1"}, {0x0, 0x9, "c836b588de6398"}, {0x2, 0x7, "99806d3bad"}, {0x6, 0x4, "4a89"}, {0x6, 0xc, "9f9d58495ef859206ce0"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000003500)={'ip6_vti0\x00', &(0x7f0000003480)={'ip6gre0\x00', 0x0, 0x29, 0xd7, 0x2, 0x8, 0x2, @dev={0xfe, 0x80, '\x00', 0x1b}, @local, 0x4f, 0x1, 0x6, 0x80000001}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000035c0)={0x1, 0x58, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000003640)={'sit0\x00', &(0x7f0000003600)={'ip_vti0\x00', 0x0, 0x69, 0x7, 0x1, 0x1, {{0x6, 0x4, 0x3, 0x0, 0x18, 0x65, 0x0, 0x1, 0x2, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000003840)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003800)={&(0x7f0000003680)={0x158, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x158}}, 0x4004810) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000003880)) socketpair(0x3, 0x4, 0x1, &(0x7f00000038c0)) capset(&(0x7f0000003900)={0x20080522, 0xffffffffffffffff}, &(0x7f0000003940)={0x3, 0x2b7, 0x1, 0x4, 0x8}) r10 = syz_io_uring_setup(0x1471, &(0x7f0000003980)={0x0, 0xf6fd, 0x1000, 0x1, 0x33b}, &(0x7f0000003a00), &(0x7f0000003a40), &(0x7f0000003a80)) io_uring_enter(r10, 0x76ce, 0x3a4e, 0x9, &(0x7f0000003ac0)={[0x8001]}, 0x8) r11 = openat$cgroup(0xffffffffffffffff, &(0x7f0000003b00)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r11, &(0x7f0000003b40)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003bc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000003cc0)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003c80)={&(0x7f0000003c00)={0x44, r12, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004041}, 0x20040080) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000003d00), 0xffffffffffffffff) 366.976833ms ago: executing program 3 (id=10269): io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x89, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000280)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x0, 0x7f, 0x0, 0x0, 0xf}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000000080), 0x2c, 0x0, 0x0, 0xe80b, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write$vga_arbiter(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="6c2c5b7486568faf4b"], 0xa) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8"], 0x2c}}, 0x0) 312.853555ms ago: executing program 2 (id=10270): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x203, 0xa0402) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000400)={0x0, 0x3, 0x17, 0x2, 0x0, 0x3, 0x0}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) keyctl$setperm(0x5, 0x0, 0x52b242d) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) mmap$usbfs(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000001, 0x10, r0, 0x7fffffffffffffff) syz_io_uring_setup(0x2138, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xc, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x3ff, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x10}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x3) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4a20, 0x7ffff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x4}, 0x1c) getsockopt$inet6_int(r4, 0x29, 0x10, 0x0, &(0x7f0000000140)=0x47) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1c, 0x16, &(0x7f00000022c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r5, 0x25, &(0x7f0000002380)) r6 = semget$private(0x0, 0x6, 0x0) semtimedop(r6, &(0x7f00000001c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r6, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r6, &(0x7f0000000180)=[{0x0, 0x0, 0x1000}, {0x2, 0x0, 0x2000}, {0x3, 0xb, 0x800}, {0x1, 0x1, 0x1000}, {0x1, 0x7, 0x800}, {0x1, 0x0, 0x800}], 0x6) semctl$IPC_RMID(r6, 0x0, 0x0) close(0x3) write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) 212.85965ms ago: executing program 7 (id=10271): r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FIBMAP(r0, 0x2283, &(0x7f0000000040)=0x85) 100.543735ms ago: executing program 7 (id=10272): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d00", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000850) 88.951916ms ago: executing program 2 (id=10273): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x20040014, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @loopback}, 0x1c) 62.615637ms ago: executing program 3 (id=10274): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={0x0, 0xd}, 0x8804, 0xff, 0x20000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) lgetxattr(0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000850) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 7 (id=10275): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@barrier_val={'barrier', 0x3d, 0xd}}, {@minixdf}, {@acl}, {@stripe={'stripe', 0x3d, 0x4}}, {@jqfmt_vfsv1}, {@grpjquota}, {@i_version}]}, 0x1, 0x4c7, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x52f2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r4 = dup(r3) ioctl$HIDIOCGRDESC(r4, 0x90044802, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd28, 0x35dfdbfc, {0xa, 0x20, 0x14, 0x0, 0x8, 0x0, 0x0, 0x7, 0x17}, [@FRA_SRC={0x14, 0x2, @private0}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x44}, 0x1, 0x0, 0x0, 0x100000d0}, 0x4000001) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) file_getattr(r5, 0x0, &(0x7f0000006040), 0x27, 0x1000) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) kernel console output (not intermixed with test programs): utes in process `syz.7.9636'. [ 945.812521][T13896] netlink: 'syz.7.9636': attribute type 7 has an invalid length. [ 945.812609][T13896] netlink: 'syz.7.9636': attribute type 8 has an invalid length. [ 945.812626][T13896] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9636'. [ 945.826401][T13885] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9633'. [ 945.865127][T13896] erspan0: entered promiscuous mode [ 945.888575][T13896] gretap0: entered promiscuous mode [ 945.895041][T13896] erspan0: left promiscuous mode [ 945.924290][T13900] loop1: detected capacity change from 0 to 256 [ 945.925550][T13900] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 945.927225][T13896] gretap0: left promiscuous mode [ 945.953944][T13900] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 946.025044][ T29] audit: type=1400 audit(2000000192.330:11685): avc: denied { write } for pid=13878 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 946.090015][ T29] audit: type=1400 audit(2000000192.400:11686): avc: denied { write } for pid=13907 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 946.175050][T13912] loop2: detected capacity change from 0 to 1024 [ 946.180298][T13909] FAULT_INJECTION: forcing a failure. [ 946.180298][T13909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 946.180353][T13909] CPU: 0 UID: 0 PID: 13909 Comm: syz.1.9639 Not tainted syzkaller #0 PREEMPT(lazy) [ 946.180384][T13909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 946.180474][T13909] Call Trace: [ 946.180554][T13909] [ 946.180565][T13909] __dump_stack+0x1d/0x30 [ 946.180595][T13909] dump_stack_lvl+0x95/0xd0 [ 946.180659][T13909] dump_stack+0x15/0x1b [ 946.180685][T13909] should_fail_ex+0x262/0x280 [ 946.180777][T13909] should_fail+0xb/0x20 [ 946.180802][T13909] should_fail_usercopy+0x1a/0x20 [ 946.180832][T13909] _copy_to_user+0x20/0xa0 [ 946.180895][T13909] simple_read_from_buffer+0xb5/0x130 [ 946.181022][T13909] proc_fail_nth_read+0x10e/0x150 [ 946.181124][T13909] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 946.181224][T13909] vfs_read+0x18e/0x7c0 [ 946.181315][T13909] ? __rcu_read_unlock+0x4e/0x70 [ 946.181358][T13909] ? __fget_files+0x184/0x1c0 [ 946.181384][T13909] ? mutex_lock+0x57/0x90 [ 946.181413][T13909] ksys_read+0xdc/0x1a0 [ 946.181445][T13909] __x64_sys_read+0x40/0x50 [ 946.181482][T13909] x64_sys_call+0x2135/0x2550 [ 946.181511][T13909] do_syscall_64+0x112/0x360 [ 946.181615][T13909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.181643][T13909] RIP: 0033:0x7f54bab9e98e [ 946.181663][T13909] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 946.181686][T13909] RSP: 002b:00007f54b9636fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 946.181743][T13909] RAX: ffffffffffffffda RBX: 00007f54b96376c0 RCX: 00007f54bab9e98e [ 946.181762][T13909] RDX: 000000000000000f RSI: 00007f54b96370a0 RDI: 0000000000000004 [ 946.181779][T13909] RBP: 00007f54b9637090 R08: 0000000000000000 R09: 0000000000000000 [ 946.181873][T13909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 946.181963][T13909] R13: 00007f54bae66038 R14: 00007f54bae65fa0 R15: 00007ffeb3e32b08 [ 946.181986][T13909] [ 946.261637][T13912] EXT4-fs: Ignoring removed orlov option [ 946.261709][T13912] EXT4-fs: Ignoring removed orlov option [ 946.332701][T13912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 946.368815][T13919] loop1: detected capacity change from 0 to 512 [ 946.372084][ T29] audit: type=1401 audit(2000000192.680:11687): op=setxattr invalid_context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fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 946.427297][T13919] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 946.468180][T13919] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #12: comm syz.1.9642: corrupted xattr block 6: invalid header [ 946.471806][T13919] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 946.471868][T13919] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #12: comm syz.1.9642: corrupted xattr block 6: invalid header [ 946.476107][T13919] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 946.480661][T13919] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #12: comm syz.1.9642: corrupted xattr block 6: invalid header [ 946.485846][T13919] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 946.485945][T13919] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #12: comm syz.1.9642: corrupted xattr block 6: invalid header [ 946.486432][T13919] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 946.488688][ T29] audit: type=1400 audit(2000000192.800:11688): avc: denied { mounton } for pid=13918 comm="syz.1.9642" path="/201/file0/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 946.503383][T13919] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #12: comm syz.1.9642: corrupted xattr block 6: invalid header [ 946.503963][T13919] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 946.504012][T13919] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #12: comm syz.1.9642: corrupted xattr block 6: invalid header [ 946.504608][T13919] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 946.504775][T13919] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #12: comm syz.1.9642: corrupted xattr block 6: invalid header [ 946.505236][ T29] audit: type=1400 audit(2000000192.810:11689): avc: denied { write } for pid=13918 comm="syz.1.9642" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 946.507903][T13919] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 946.508024][T13919] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #12: comm syz.1.9642: corrupted xattr block 6: invalid header [ 946.508602][ T29] audit: type=1400 audit(2000000192.820:11690): avc: denied { add_name } for pid=13918 comm="syz.1.9642" name="devices.list" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 946.510113][T13919] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 946.525630][T13919] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #12: comm syz.1.9642: corrupted xattr block 6: invalid header [ 946.586509][T13930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13930 comm=syz.0.9643 [ 946.631976][ T29] audit: type=1326 audit(2000000192.940:11691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13893 comm="syz.3.9637" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fcbf3e159 code=0x7fc00000 [ 946.887357][T11169] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 946.999878][T13947] syzkaller0: entered promiscuous mode [ 946.999905][T13947] syzkaller0: entered allmulticast mode [ 947.071631][T13951] loop0: detected capacity change from 0 to 256 [ 947.081762][T13951] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 947.105119][T13945] se_dev->se_dev_ptr already set for storage object [ 947.119987][T13951] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 947.176582][ T8778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 947.250270][T13957] loop3: detected capacity change from 0 to 1024 [ 947.278746][T13957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 947.362166][T13969] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9654'. [ 947.468324][T13967] MTRR 0 not used [ 947.472419][T12227] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 947.595282][T13987] loop3: detected capacity change from 0 to 128 [ 947.615670][T13987] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 947.617884][T13987] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 947.691474][T13984] syzkaller0: entered promiscuous mode [ 947.691505][T13984] syzkaller0: entered allmulticast mode [ 947.700654][T13993] FAULT_INJECTION: forcing a failure. [ 947.700654][T13993] name failslab, interval 1, probability 0, space 0, times 0 [ 947.700765][T13993] CPU: 0 UID: 0 PID: 13993 Comm: syz.3.9657 Not tainted syzkaller #0 PREEMPT(lazy) [ 947.700875][T13993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 947.700890][T13993] Call Trace: [ 947.700899][T13993] [ 947.700923][T13993] __dump_stack+0x1d/0x30 [ 947.700957][T13993] dump_stack_lvl+0x95/0xd0 [ 947.700982][T13993] dump_stack+0x15/0x1b [ 947.701036][T13993] should_fail_ex+0x262/0x280 [ 947.701123][T13993] ? __get_vm_area_node+0x125/0x1f0 [ 947.701155][T13993] should_failslab+0x8c/0xb0 [ 947.701254][T13993] __kmalloc_cache_node_noprof+0x81/0x420 [ 947.701291][T13993] ? __get_vm_area_node+0x125/0x1f0 [ 947.701322][T13993] __get_vm_area_node+0x125/0x1f0 [ 947.701355][T13993] __vmalloc_node_range_noprof+0x262/0x1000 [ 947.701475][T13993] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 947.701505][T13993] ? trace_buffer_unlock_commit_regs+0x115/0x310 [ 947.701541][T13993] ? avc_has_perm_noaudit+0xa3/0x120 [ 947.701604][T13993] ? cred_has_capability+0x224/0x2a0 [ 947.701677][T13993] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 947.701702][T13993] __vmalloc_noprof+0xa4/0xf0 [ 947.701743][T13993] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 947.701773][T13993] bpf_prog_alloc_no_stats+0x47/0x390 [ 947.701842][T13993] ? bpf_prog_alloc+0x2a/0x150 [ 947.701868][T13993] bpf_prog_alloc+0x3c/0x150 [ 947.701896][T13993] bpf_prog_load+0x54b/0x1060 [ 947.701948][T13993] ? avc_has_perm_noaudit+0xa3/0x120 [ 947.701986][T13993] __sys_bpf+0xbae/0xc30 [ 947.702024][T13993] __x64_sys_bpf+0x69/0x80 [ 947.702049][T13993] x64_sys_call+0xf26/0x2550 [ 947.702119][T13993] do_syscall_64+0x112/0x360 [ 947.702192][T13993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.702220][T13993] RIP: 0033:0x7f7fcbf3e159 [ 947.702240][T13993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 947.702312][T13993] RSP: 002b:00007f7fca976028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 947.702340][T13993] RAX: ffffffffffffffda RBX: 00007f7fcc1c6090 RCX: 00007f7fcbf3e159 [ 947.702360][T13993] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 947.702377][T13993] RBP: 00007f7fca976090 R08: 0000000000000000 R09: 0000000000000000 [ 947.702440][T13993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 947.702457][T13993] R13: 00007f7fcc1c6128 R14: 00007f7fcc1c6090 R15: 00007ffddddd4958 [ 947.702509][T13993] [ 947.712281][T13993] syz.3.9657: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 947.718243][T13993] CPU: 0 UID: 0 PID: 13993 Comm: syz.3.9657 Not tainted syzkaller #0 PREEMPT(lazy) [ 947.718274][T13993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 947.718291][T13993] Call Trace: [ 947.718302][T13993] [ 947.718313][T13993] __dump_stack+0x1d/0x30 [ 947.718375][T13993] dump_stack_lvl+0x95/0xd0 [ 947.718402][T13993] dump_stack+0x15/0x1b [ 947.718426][T13993] warn_alloc+0x146/0x1c0 [ 947.718466][T13993] __vmalloc_node_range_noprof+0x28a/0x1000 [ 947.718551][T13993] ? trace_buffer_unlock_commit_regs+0x115/0x310 [ 947.718617][T13993] ? avc_has_perm_noaudit+0xa3/0x120 [ 947.718654][T13993] ? cred_has_capability+0x224/0x2a0 [ 947.718691][T13993] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 947.718719][T13993] __vmalloc_noprof+0xa4/0xf0 [ 947.718754][T13993] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 947.718782][T13993] bpf_prog_alloc_no_stats+0x47/0x390 [ 947.718881][T13993] ? bpf_prog_alloc+0x2a/0x150 [ 947.718907][T13993] bpf_prog_alloc+0x3c/0x150 [ 947.718933][T13993] bpf_prog_load+0x54b/0x1060 [ 947.719053][T13993] ? avc_has_perm_noaudit+0xa3/0x120 [ 947.719140][T13993] __sys_bpf+0xbae/0xc30 [ 947.719178][T13993] __x64_sys_bpf+0x69/0x80 [ 947.719203][T13993] x64_sys_call+0xf26/0x2550 [ 947.719266][T13993] do_syscall_64+0x112/0x360 [ 947.719334][T13993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.719361][T13993] RIP: 0033:0x7f7fcbf3e159 [ 947.719382][T13993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 947.719450][T13993] RSP: 002b:00007f7fca976028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 947.719477][T13993] RAX: ffffffffffffffda RBX: 00007f7fcc1c6090 RCX: 00007f7fcbf3e159 [ 947.719496][T13993] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 947.719513][T13993] RBP: 00007f7fca976090 R08: 0000000000000000 R09: 0000000000000000 [ 947.719531][T13993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 947.719590][T13993] R13: 00007f7fcc1c6128 R14: 00007f7fcc1c6090 R15: 00007ffddddd4958 [ 947.719622][T13993] [ 947.724544][T13993] Mem-Info: [ 947.724557][T13993] active_anon:11028 inactive_anon:16470 isolated_anon:0 [ 947.724557][T13993] active_file:2206 inactive_file:34322 isolated_file:0 [ 947.724557][T13993] unevictable:58 dirty:178 writeback:0 [ 947.724557][T13993] slab_reclaimable:4270 slab_unreclaimable:26782 [ 947.724557][T13993] mapped:29822 shmem:17477 pagetables:3708 [ 947.724557][T13993] sec_pagetables:0 bounce:0 [ 947.724557][T13993] kernel_misc_reclaimable:0 [ 947.724557][T13993] free:1816705 free_pcp:9802 free_cma:0 [ 947.724646][T13993] Node 0 active_anon:44112kB inactive_anon:65880kB active_file:8824kB inactive_file:137288kB unevictable:232kB isolated(anon):0kB isolated(file):0kB mapped:119288kB dirty:712kB writeback:0kB shmem:69908kB kernel_stack:4928kB pagetables:14832kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 947.724711][T13993] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 947.724861][T13993] lowmem_reserve[]: 0 2878 7856 7856 [ 947.724972][T13993] Node 0 DMA32 free:2943720kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947244kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 947.725045][T13993] lowmem_reserve[]: 0 0 4978 4978 [ 947.725152][T13993] Node 0 Normal free:4307740kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0kB free_highatomic:0kB active_anon:44112kB inactive_anon:65880kB active_file:8824kB inactive_file:137288kB unevictable:232kB writepending:712kB zspages:0kB present:5242880kB managed:5098228kB mlocked:232kB bounce:0kB free_pcp:35684kB local_pcp:14892kB free_cma:0kB [ 947.725298][T13993] lowmem_reserve[]: 0 0 0 0 [ 947.725438][T13993] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 947.725669][T13993] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 1*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (M) 1*256kB (M) 2*512kB (M) 3*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2943720kB [ 947.741672][T13993] Node 0 Normal: 1188*4kB (UM) 262*8kB (UME) 743*16kB (UME) 850*32kB (UME) 609*64kB (UME) 466*128kB (UME) 208*256kB (UME) 63*512kB (UME) 44*1024kB (UM) 19*2048kB (UME) 975*4096kB (UM) = 4307632kB [ 947.741976][T13993] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 947.741998][T13993] 54091 total pagecache pages [ 947.742009][T13993] 5 pages in swap cache [ 947.742111][T13993] Free swap = 122928kB [ 947.742121][T13993] Total swap = 124996kB [ 947.742130][T13993] 2097051 pages RAM [ 947.742138][T13993] 0 pages HighMem/MovableOnly [ 947.742146][T13993] 81843 pages reserved [ 947.841628][T13984] loop2: detected capacity change from 0 to 1024 [ 947.846014][T13984] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 947.850863][T13984] JBD2: no valid journal superblock found [ 947.850882][T13984] EXT4-fs (loop2): Could not load journal inode [ 948.176778][T14000] loop2: detected capacity change from 0 to 256 [ 948.186996][T14000] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 948.212022][T14000] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 948.605627][T14014] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9666'. [ 948.656007][T12227] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 948.748770][T14019] se_dev->se_dev_ptr already set for storage object [ 948.762401][T14020] loop2: detected capacity change from 0 to 512 [ 948.805596][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 948.805617][ T29] audit: type=1400 audit(2000000195.120:11701): avc: denied { write } for pid=14001 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 948.875399][ T29] audit: type=1400 audit(2000000195.190:11702): avc: denied { write } for pid=14029 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 949.125387][T14036] loop0: detected capacity change from 0 to 512 [ 949.125928][T14036] ext4: Unknown parameter 'obj_user' [ 949.178571][ T29] audit: type=1400 audit(2000000195.490:11703): avc: denied { write } for pid=14035 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 949.270402][ T29] audit: type=1400 audit(2000000195.580:11704): avc: denied { write } for pid=14065 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 949.336779][T14063] MTRR 0 not used [ 949.352269][T14068] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9675'. [ 949.352312][T14068] netlink: 'syz.0.9675': attribute type 7 has an invalid length. [ 949.352329][T14068] netlink: 'syz.0.9675': attribute type 8 has an invalid length. [ 949.352379][T14068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9675'. [ 949.580127][T14082] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9678'. [ 949.618053][ T29] audit: type=1400 audit(2000000195.930:11705): avc: denied { write } for pid=14070 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 949.699425][ T29] audit: type=1400 audit(2000000196.010:11706): avc: denied { write } for pid=14092 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 949.832872][ T29] audit: type=1326 audit(2000000196.140:11707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14043 comm="syz.2.9673" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89a30e159 code=0x7fc00000 [ 949.868121][ T29] audit: type=1400 audit(2000000196.180:11708): avc: denied { getopt } for pid=14102 comm="syz.3.9684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 949.932750][T14106] syzkaller0: entered promiscuous mode [ 949.932788][T14106] syzkaller0: entered allmulticast mode [ 950.146612][T14118] sg_write: data in/out 1116124/6 bytes for SCSI command 0x0-- guessing data in; [ 950.146612][T14118] program syz.3.9686 not setting count and/or reply_len properly [ 950.314529][T14121] usb usb9: usbfs: process 14121 (syz.1.9689) did not claim interface 0 before use [ 950.337977][ T29] audit: type=1400 audit(2000000196.650:11709): avc: denied { write } for pid=14096 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 950.506947][ T29] audit: type=1400 audit(2000000196.820:11710): avc: denied { write } for pid=14131 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 950.564654][T14135] __nla_validate_parse: 1 callbacks suppressed [ 950.564672][T14135] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9690'. [ 950.970746][T14159] netlink: 100 bytes leftover after parsing attributes in process `syz.0.9696'. [ 951.841126][T14197] syzkaller1: entered promiscuous mode [ 951.841182][T14197] syzkaller1: entered allmulticast mode [ 951.863019][T14207] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9702'. [ 951.866247][T14197] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9700'. [ 951.927358][T14205] MTRR 0 not used [ 952.454973][T14237] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14237 comm=syz.7.9711 [ 953.225521][T14273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9713'. [ 953.386305][T14273] team0: Port device team_slave_0 removed [ 953.974684][ T359] IPVS: starting estimator thread 0... [ 953.976368][T14297] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 953.990703][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 953.990722][ T29] audit: type=1400 audit(2000000200.300:11721): avc: denied { getopt } for pid=14296 comm="syz.2.9726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 954.064341][T14299] IPVS: using max 2208 ests per chain, 110400 per kthread [ 954.282768][T14301] ip6gretap1: entered allmulticast mode [ 954.361506][T14301] batman_adv: batadv0: Adding interface: ip6gretap1 [ 954.361527][T14301] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.361689][T14301] batman_adv: batadv0: Interface activated: ip6gretap1 [ 954.495532][T14305] loop3: detected capacity change from 0 to 512 [ 954.496952][T14305] ext3: Bad value for 'data' [ 954.636022][ T29] audit: type=1326 audit(2000000200.950:11722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14293 comm="syz.0.9725" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19293e159 code=0x7fc00000 [ 955.540511][T14308] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.787420][T14308] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 955.906168][ T359] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 956.370269][T14324] loop1: detected capacity change from 0 to 128 [ 956.395546][T14324] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 956.399110][T14324] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 956.484773][T14324] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.9732: No space for directory leaf checksum. Please run e2fsck -D. [ 956.484810][T14324] EXT4-fs error (device loop1): htree_dirblock_to_tree:1051: inode #2: comm syz.1.9732: Directory block failed checksum [ 956.536770][ T70] Bluetooth: hci0: Frame reassembly failed (-84) [ 956.625726][ T29] audit: type=1400 audit(2000000202.940:11723): avc: denied { write } for pid=14306 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 956.731217][T14334] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9734'. [ 956.817027][ T29] audit: type=1400 audit(2000000203.130:11724): avc: denied { write } for pid=14339 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 957.159901][ T29] audit: type=1400 audit(2000000203.470:11725): avc: denied { write } for pid=14355 comm="syz.0.9741" name="ramdisk_0" dev="configfs" ino=143089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 957.160443][T14367] se_dev->se_dev_ptr already set for storage object [ 957.200363][ T29] audit: type=1400 audit(2000000203.510:11726): avc: denied { write } for pid=14345 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 957.234884][T14374] loop2: detected capacity change from 0 to 256 [ 957.294878][ T29] audit: type=1400 audit(2000000203.610:11727): avc: denied { write } for pid=14377 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 957.492177][T14391] FAULT_INJECTION: forcing a failure. [ 957.492177][T14391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 957.492211][T14391] CPU: 1 UID: 0 PID: 14391 Comm: syz.0.9746 Not tainted syzkaller #0 PREEMPT(lazy) [ 957.492238][T14391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 957.492252][T14391] Call Trace: [ 957.492261][T14391] [ 957.492350][T14391] __dump_stack+0x1d/0x30 [ 957.492402][T14391] dump_stack_lvl+0x95/0xd0 [ 957.492426][T14391] dump_stack+0x15/0x1b [ 957.492491][T14391] should_fail_ex+0x262/0x280 [ 957.492522][T14391] should_fail+0xb/0x20 [ 957.492548][T14391] should_fail_usercopy+0x1a/0x20 [ 957.492629][T14391] _copy_from_user+0x1c/0xb0 [ 957.492681][T14391] do_sock_getsockopt+0x122/0x570 [ 957.492720][T14391] ? trace_buffer_unlock_commit_regs+0x115/0x310 [ 957.492805][T14391] __x64_sys_getsockopt+0x11d/0x1a0 [ 957.492839][T14391] x64_sys_call+0x1032/0x2550 [ 957.492868][T14391] do_syscall_64+0x112/0x360 [ 957.492935][T14391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.492959][T14391] RIP: 0033:0x7fe19293e159 [ 957.493019][T14391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 957.493060][T14391] RSP: 002b:00007fe191397028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 957.493087][T14391] RAX: ffffffffffffffda RBX: 00007fe192bc5fa0 RCX: 00007fe19293e159 [ 957.493107][T14391] RDX: 0000000000000008 RSI: 000000000000010c RDI: 0000000000000004 [ 957.493126][T14391] RBP: 00007fe191397090 R08: 0000200000000080 R09: 0000000000000000 [ 957.493144][T14391] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 957.493196][T14391] R13: 00007fe192bc6038 R14: 00007fe192bc5fa0 R15: 00007ffcdcbc9398 [ 957.493217][T14391] [ 957.730001][ T29] audit: type=1400 audit(2000000204.040:11728): avc: denied { write } for pid=14380 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 957.851153][T14402] usb usb9: usbfs: process 14402 (syz.0.9750) did not claim interface 0 before use [ 957.869482][ T29] audit: type=1400 audit(2000000204.180:11729): avc: denied { write } for pid=14408 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 957.950415][T14414] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9754'. [ 957.950458][T14414] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9754'. [ 958.136737][T14425] netlink: 'syz.0.9758': attribute type 8 has an invalid length. [ 958.136833][T14425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9758'. [ 958.210776][T14423] loop3: detected capacity change from 0 to 2048 [ 958.270111][T14431] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9759'. [ 958.331188][ T4289] IPVS: starting estimator thread 0... [ 958.411017][ T29] audit: type=1400 audit(2000000204.720:11730): avc: denied { write } for pid=14418 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 958.413957][T14437] IPVS: using max 2160 ests per chain, 108000 per kthread [ 958.603755][T14335] Bluetooth: hci0: command 0x1003 tx timeout [ 958.603826][ T3843] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 958.659902][ T8778] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 958.750173][T14463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9767'. [ 958.765538][T14452] usb usb9: usbfs: process 14452 (syz.0.9764) did not claim interface 0 before use [ 958.817092][T14469] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9769'. [ 958.817153][T14469] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9769'. [ 958.878306][T14463] loop2: detected capacity change from 0 to 2048 [ 959.002626][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 959.002646][ T29] audit: type=1400 audit(2000000205.310:11733): avc: denied { write } for pid=14483 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 959.447765][ T29] audit: type=1400 audit(2000000205.760:11734): avc: denied { write } for pid=14488 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 959.491353][T14491] loop1: detected capacity change from 0 to 512 [ 959.568071][ T29] audit: type=1400 audit(2000000205.880:11735): avc: denied { write } for pid=14512 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 959.625312][ T8778] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 959.625427][ T8778] FAT-fs (loop1): Filesystem has been set read-only [ 959.625562][ T8778] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 959.978671][ T29] audit: type=1400 audit(2000000206.290:11736): avc: denied { write } for pid=14519 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 960.014676][ T29] audit: type=1326 audit(2000000206.320:11737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14493 comm="syz.7.9775" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5938c0e159 code=0x7fc00000 [ 960.158745][T14533] loop0: detected capacity change from 0 to 512 [ 960.159350][T14533] EXT4-fs: Ignoring removed nomblk_io_submit option [ 960.159445][T14533] EXT4-fs: Ignoring removed nomblk_io_submit option [ 960.161266][T14533] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 960.210827][ T29] audit: type=1400 audit(2000000206.520:11738): avc: denied { write } for pid=14541 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 960.211483][ T4289] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.212707][T14533] EXT4-fs (loop0): 1 truncate cleaned up [ 960.255472][T14533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 960.300413][ T8875] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.372154][ T4289] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.476922][ T4289] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.574694][ T4289] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.663351][ T29] audit: type=1400 audit(2000000206.970:11739): avc: denied { write } for pid=14547 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 960.766176][ T29] audit: type=1400 audit(2000000207.080:11740): avc: denied { write } for pid=14579 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 960.824948][ T364] netdevsim netdevsim1 eth8: set [1, 0] type 2 family 0 port 20000 - 0 [ 960.834861][ T42] netdevsim netdevsim1 eth7: set [1, 0] type 2 family 0 port 20000 - 0 [ 960.837685][ T364] netdevsim netdevsim1 eth6: set [1, 0] type 2 family 0 port 20000 - 0 [ 960.837895][ T364] netdevsim netdevsim1 eth5: set [1, 0] type 2 family 0 port 20000 - 0 [ 961.101291][ T29] audit: type=1400 audit(2000000207.410:11741): avc: denied { write } for pid=14583 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 961.161678][ T29] audit: type=1326 audit(2000000207.470:11742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14608 comm="syz.3.9798" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fcbf3e159 code=0x7ffc0000 [ 961.219247][ T4289] bond0 (unregistering): Released all slaves [ 961.299116][ T4289] hsr_slave_0: left promiscuous mode [ 961.300670][ T4289] hsr_slave_1: left promiscuous mode [ 961.341551][ T4289] veth1_macvtap: left promiscuous mode [ 961.341585][ T4289] veth0_macvtap: left promiscuous mode [ 961.341704][ T4289] veth1_vlan: left promiscuous mode [ 961.437464][ T4289] team0 (unregistering): Port device vlan0 removed [ 961.547975][T14624] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9801'. [ 961.548019][T14624] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9801'. [ 961.882374][ T4289] IPVS: stop unused estimator thread 0... [ 961.982765][T14652] syzkaller0: entered promiscuous mode [ 961.982822][T14652] syzkaller0: entered allmulticast mode [ 962.018357][T14657] loop2: detected capacity change from 0 to 512 [ 962.070590][T14657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 962.070747][T14657] ext4 filesystem being mounted at /144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 962.071616][T14657] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #2: block 3: comm syz.2.9807: lblock 2 mapped to illegal pblock 3 (length 26) [ 962.127611][T11169] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 962.369970][T14568] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.370019][T14568] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.379910][T14568] bridge_slave_0: entered allmulticast mode [ 962.388334][T14568] bridge_slave_0: entered promiscuous mode [ 962.405662][T14568] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.405713][T14568] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.406071][T14568] bridge_slave_1: entered allmulticast mode [ 962.421618][T14568] bridge_slave_1: entered promiscuous mode [ 962.466677][T14568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 962.472074][T14568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 962.517002][T14568] team0: Port device team_slave_0 added [ 962.521848][T14568] team0: Port device team_slave_1 added [ 962.556058][T14694] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9813'. [ 962.556131][T14694] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9813'. [ 962.640045][T14698] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9815'. [ 962.641319][T14568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 962.641334][T14568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.641365][T14568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 962.643294][T14568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 962.643309][T14568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.643342][T14568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 962.665617][T14698] 8021q: adding VLAN 0 to HW filter on device bond2 [ 962.672238][T14698] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9815'. [ 962.831340][T14568] hsr_slave_0: entered promiscuous mode [ 962.857478][T14568] hsr_slave_1: entered promiscuous mode [ 962.932886][T14711] syzkaller0: entered promiscuous mode [ 962.932914][T14711] syzkaller0: entered allmulticast mode [ 963.052564][T14723] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9822'. [ 963.052601][T14723] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9822'. [ 963.171000][T14725] loop0: detected capacity change from 0 to 1024 [ 963.179891][T14725] EXT4-fs: Ignoring removed orlov option [ 963.186041][T14725] EXT4-fs: Invalid want_extra_isize 130 [ 963.269240][T14568] netdevsim netdevsim5 eth28 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 963.357226][T14568] netdevsim netdevsim5 eth27 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 963.469041][T14736] loop3: detected capacity change from 0 to 1024 [ 963.526533][T14736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 963.541912][T14734] loop0: detected capacity change from 0 to 512 [ 963.579573][T14734] EXT4-fs (loop0): can't mount with commit=, fs mounted w/o journal [ 963.581773][T14568] netdevsim netdevsim5 eth26 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 963.702982][T14739] se_dev->se_dev_ptr already set for storage object [ 963.850255][T14568] netdevsim netdevsim5 eth18 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 963.906585][T12227] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 964.119180][T14747] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9827'. [ 964.119401][T14747] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9827'. [ 964.652026][T14568] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 964.685545][T14568] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 964.693067][T14568] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 964.705973][T14754] loop2: detected capacity change from 0 to 128 [ 964.713669][T14754] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 964.734128][ T29] kauditd_printk_skb: 244 callbacks suppressed [ 964.734150][ T29] audit: type=1400 audit(2000000211.050:11987): avc: denied { write } for pid=14726 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 964.735846][T14568] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 964.787665][T14568] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 964.812985][T14568] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 964.822726][T14568] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 964.831947][ T359] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 964.852114][T14568] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 964.900645][ T29] audit: type=1400 audit(2000000211.210:11988): avc: denied { write } for pid=14764 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 964.902780][T14759] gtp0: entered promiscuous mode [ 964.902872][T14759] gtp0: entered allmulticast mode [ 964.951255][T14759] team0: Device gtp0 is of different type [ 965.012912][T14771] syzkaller0: entered promiscuous mode [ 965.012934][T14771] syzkaller0: entered allmulticast mode [ 965.176736][ T29] audit: type=1400 audit(2000000211.490:11989): avc: denied { write } for pid=14773 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 965.251737][ T29] audit: type=1400 audit(2000000211.560:11990): avc: denied { write } for pid=14799 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 965.305113][T14568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 965.338649][T14568] 8021q: adding VLAN 0 to HW filter on device team0 [ 965.359774][ T359] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.359822][ T359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 965.380449][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.380492][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 965.574363][ T29] audit: type=1400 audit(2000000211.890:11991): avc: denied { write } for pid=14803 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 965.678949][ T29] audit: type=1400 audit(2000000211.990:11992): avc: denied { write } for pid=14818 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 965.684529][T14821] loop3: detected capacity change from 0 to 512 [ 965.712530][ T29] audit: type=1326 audit(2000000212.020:11993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14765 comm="syz.0.9834" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19293e159 code=0x7fc00000 [ 965.739579][T14821] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.9838: corrupted in-inode xattr: invalid ea_ino [ 965.739684][T14821] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 965.740706][T14821] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.9838: couldn't read orphan inode 15 (err -117) [ 965.740739][T14821] loop3: lost filesystem error report for type 5 error -117 [ 965.749444][T14821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 965.780532][T14821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9838'. [ 965.827729][T12227] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 965.857307][T14827] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9839'. [ 966.041077][T14833] gtp0: entered promiscuous mode [ 966.041107][T14833] gtp0: entered allmulticast mode [ 966.056012][T14833] team0: Device gtp0 is of different type [ 966.064385][ T29] audit: type=1326 audit(2000000212.370:11994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14795 comm="syz.7.9837" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5938c0e159 code=0x7fc00000 [ 967.045486][T14855] PM: suspend entry (deep) [ 967.045708][T14855] PM: suspend exit [ 967.168685][T14568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 967.506639][ T359] Filesystems sync: 0.460 seconds [ 967.589700][T14872] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2499 [ 967.811539][ T29] audit: type=1400 audit(2000000214.120:11995): avc: denied { write } for pid=14860 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 967.865038][ T29] audit: type=1400 audit(2000000214.180:11996): avc: denied { write } for pid=14888 comm="syz.3.9858" name="ramdisk_0" dev="configfs" ino=143089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 967.868492][T14899] se_dev->se_dev_ptr already set for storage object [ 967.934382][T14893] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.939269][T14893] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.044131][T14893] gtp0: left promiscuous mode [ 968.316320][T14917] loop2: detected capacity change from 0 to 1024 [ 968.355671][T14917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 968.409878][T11169] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.526952][T14568] veth0_vlan: entered promiscuous mode [ 968.598997][T14940] bond1: Removing last arp target with arp_interval on [ 968.615067][T14940] bond1: entered promiscuous mode [ 968.615110][T14940] bond1: entered allmulticast mode [ 968.615742][T14940] 8021q: adding VLAN 0 to HW filter on device bond1 [ 968.662735][T14568] veth1_vlan: entered promiscuous mode [ 968.855585][T14568] veth0_macvtap: entered promiscuous mode [ 968.931403][T14955] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 969.017594][T14568] veth1_macvtap: entered promiscuous mode [ 969.478390][T14568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 969.521628][T14568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 969.604274][ T42] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.605077][ T42] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.636146][ T359] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.667361][ T42] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.333738][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 970.333757][ T29] audit: type=1400 audit(2000000216.600:12001): avc: denied { write } for pid=14956 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 970.397182][T14978] loop3: detected capacity change from 0 to 1024 [ 970.474010][T14978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 970.488966][ T29] audit: type=1400 audit(2000000216.790:12002): avc: denied { write } for pid=14976 comm="syz.3.9876" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 970.584448][T12227] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 970.619883][ T29] audit: type=1400 audit(2000000216.930:12003): avc: denied { write } for pid=14988 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 970.939785][T15000] MTRR 0 not used [ 970.995748][T15001] MTRR 0 not used [ 971.272276][ T29] audit: type=1400 audit(2000000217.580:12004): avc: denied { write } for pid=14999 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 971.478939][ T29] audit: type=1400 audit(2000000217.780:12005): avc: denied { write } for pid=15026 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 971.897888][ T29] audit: type=1400 audit(2000000218.210:12006): avc: denied { write } for pid=15034 comm="syz.5.9888" name="ramdisk_0" dev="configfs" ino=143089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 971.900474][T15044] se_dev->se_dev_ptr already set for storage object [ 971.997750][T15051] loop0: detected capacity change from 0 to 164 [ 971.998648][T15051] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777184467440737095516150xffffffffffffffff' [ 972.043088][ T29] audit: type=1400 audit(2000000218.350:12007): avc: denied { write } for pid=15029 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 972.156162][T15056] loop2: detected capacity change from 0 to 512 [ 972.160369][ T29] audit: type=1400 audit(2000000218.470:12008): avc: denied { write } for pid=15057 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 972.185459][T15056] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 972.185521][T15056] System zones: 1-12 [ 972.187012][T15056] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.9893: missing EA_INODE flag [ 972.187042][T15056] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 972.189034][T15056] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.9893: error while reading EA inode 12 err=-117 [ 972.189149][T15056] loop2: lost filesystem error report for type 5 error -117 [ 972.192405][T15056] EXT4-fs (loop2): 1 orphan inode deleted [ 972.193133][T15056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 972.360457][ T29] audit: type=1400 audit(2000000218.670:12009): avc: denied { write } for pid=15055 comm="syz.2.9893" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 972.361695][ T29] audit: type=1400 audit(2000000218.670:12010): avc: denied { write } for pid=15055 comm="syz.2.9893" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 972.672303][T15071] loop3: detected capacity change from 0 to 512 [ 972.693102][T15075] loop0: detected capacity change from 0 to 512 [ 972.732784][T15075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 972.732873][T15075] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 972.783433][T15071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 972.783630][T15071] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 972.834851][T15071] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #12: comm syz.3.9897: corrupted xattr block 6: invalid header [ 972.838541][T15071] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 972.838612][T15071] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #12: comm syz.3.9897: corrupted xattr block 6: invalid header [ 972.842926][T15071] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 972.848739][T15071] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #12: comm syz.3.9897: corrupted xattr block 6: invalid header [ 972.854010][T15071] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 972.854056][T15071] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #12: comm syz.3.9897: corrupted xattr block 6: invalid header [ 972.857673][T15071] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 972.878021][T15071] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #12: comm syz.3.9897: corrupted xattr block 6: invalid header [ 972.881910][T15071] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 972.881974][T15071] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #12: comm syz.3.9897: corrupted xattr block 6: invalid header [ 972.883389][T15071] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 972.883634][T15071] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #12: comm syz.3.9897: corrupted xattr block 6: invalid header [ 972.888386][T15071] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 972.888428][T15071] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #12: comm syz.3.9897: corrupted xattr block 6: invalid header [ 972.888951][T15071] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 972.900813][T15071] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #12: comm syz.3.9897: corrupted xattr block 6: invalid header [ 972.945608][ T8875] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 973.071997][T11169] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 973.098410][T12227] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 973.350174][T15099] loop3: detected capacity change from 0 to 512 [ 973.379087][T15099] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.9903: corrupted in-inode xattr: invalid ea_ino [ 973.379134][T15099] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 973.382944][T15099] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.9903: couldn't read orphan inode 15 (err -117) [ 973.383016][T15099] loop3: lost filesystem error report for type 5 error -117 [ 973.396312][T15102] loop2: detected capacity change from 0 to 1024 [ 973.396952][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 973.396982][ C1] EXT4-fs (loop3): initial error at time 2000000219: ext4_iget_extra_inode:5210: inode 15 [ 973.397055][ C1] EXT4-fs (loop3): last error at time 2000000219: ext4_orphan_get:1408 [ 973.418959][T15099] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 973.456686][T15102] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 973.549674][T12227] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 973.586296][T11169] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 973.914426][T15127] loop5: detected capacity change from 0 to 512 [ 973.956710][T15132] __nla_validate_parse: 1 callbacks suppressed [ 973.956733][T15132] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9912'. [ 974.006368][T15127] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 974.006571][T15127] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 974.171895][T14568] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 974.428706][T15154] loop2: detected capacity change from 0 to 512 [ 974.470005][T15154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 974.470157][T15154] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 974.511785][T15161] FAULT_INJECTION: forcing a failure. [ 974.511785][T15161] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 974.511823][T15161] CPU: 0 UID: 0 PID: 15161 Comm: syz.5.9917 Not tainted syzkaller #0 PREEMPT(lazy) [ 974.511938][T15161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 974.511956][T15161] Call Trace: [ 974.511966][T15161] [ 974.511979][T15161] __dump_stack+0x1d/0x30 [ 974.512010][T15161] dump_stack_lvl+0x95/0xd0 [ 974.512068][T15161] dump_stack+0x15/0x1b [ 974.512156][T15161] should_fail_ex+0x262/0x280 [ 974.512195][T15161] should_fail_alloc_page+0xf2/0x100 [ 974.512231][T15161] __alloc_frozen_pages_noprof+0x157/0x400 [ 974.512330][T15161] alloc_pages_mpol+0xaf/0x1d0 [ 974.512359][T15161] alloc_frozen_pages_noprof+0x94/0x120 [ 974.512387][T15161] ? bcm_tx_setup+0x350/0xee0 [ 974.512491][T15161] ___kmalloc_large_node+0x44/0xd0 [ 974.512567][T15161] ? bcm_tx_setup+0x350/0xee0 [ 974.512671][T15161] __kmalloc_large_node_noprof+0x18/0xa0 [ 974.512702][T15161] ? bcm_tx_setup+0x350/0xee0 [ 974.512728][T15161] __kmalloc_noprof+0x27e/0x4d0 [ 974.512795][T15161] ? bcm_tx_setup+0x350/0xee0 [ 974.512941][T15161] bcm_tx_setup+0x350/0xee0 [ 974.512976][T15161] bcm_sendmsg+0x38c/0x4c0 [ 974.513008][T15161] ? __pfx_bcm_sendmsg+0x10/0x10 [ 974.513066][T15161] ____sys_sendmsg+0x532/0x580 [ 974.513096][T15161] ___sys_sendmsg+0x195/0x1e0 [ 974.513134][T15161] __x64_sys_sendmsg+0xd4/0x160 [ 974.513225][T15161] x64_sys_call+0x22ab/0x2550 [ 974.513251][T15161] do_syscall_64+0x112/0x360 [ 974.513342][T15161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.513383][T15161] RIP: 0033:0x7ff0bab1e159 [ 974.513433][T15161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 974.513454][T15161] RSP: 002b:00007ff0b9556028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 974.513492][T15161] RAX: ffffffffffffffda RBX: 00007ff0bada6090 RCX: 00007ff0bab1e159 [ 974.513511][T15161] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000005 [ 974.513528][T15161] RBP: 00007ff0b9556090 R08: 0000000000000000 R09: 0000000000000000 [ 974.513547][T15161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 974.513564][T15161] R13: 00007ff0bada6128 R14: 00007ff0bada6090 R15: 00007ffcb93bc1b8 [ 974.513667][T15161] [ 975.143214][T11169] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 975.485984][T15191] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 975.721843][T15207] loop0: detected capacity change from 0 to 512 [ 975.745762][T15207] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.9928: corrupted in-inode xattr: invalid ea_ino [ 975.745823][T15207] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 975.746422][T15207] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.9928: couldn't read orphan inode 15 (err -117) [ 975.746530][T15207] loop0: lost filesystem error report for type 5 error -117 [ 975.795302][T15207] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 975.904633][ T8875] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 976.097922][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 976.097974][ T29] audit: type=1400 audit(2000000222.410:12097): avc: denied { write } for pid=15193 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 976.186239][T15232] netlink: 'syz.7.9935': attribute type 1 has an invalid length. [ 976.310641][T15232] 8021q: adding VLAN 0 to HW filter on device bond3 [ 976.383175][T15232] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15232 comm=syz.7.9935 [ 976.466687][T15239] bond3: (slave gretap1): making interface the new active one [ 976.469001][T15239] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 976.512174][ T29] audit: type=1400 audit(2000000222.820:12098): avc: denied { write } for pid=15249 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 976.773399][T15265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15265 comm=syz.2.9940 [ 977.136445][T15275] loop2: detected capacity change from 0 to 2048 [ 977.186364][T15275] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 977.277647][T11169] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 977.278906][ T29] audit: type=1400 audit(2000000223.590:12099): avc: denied { write } for pid=15256 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 977.309540][T15290] FAULT_INJECTION: forcing a failure. [ 977.309540][T15290] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 977.309576][T15290] CPU: 1 UID: 0 PID: 15290 Comm: syz.3.9947 Not tainted syzkaller #0 PREEMPT(lazy) [ 977.309628][T15290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 977.309658][T15290] Call Trace: [ 977.309667][T15290] [ 977.309681][T15290] __dump_stack+0x1d/0x30 [ 977.309710][T15290] dump_stack_lvl+0x95/0xd0 [ 977.309737][T15290] dump_stack+0x15/0x1b [ 977.309762][T15290] should_fail_ex+0x262/0x280 [ 977.309847][T15290] should_fail_alloc_page+0xf2/0x100 [ 977.309883][T15290] __alloc_frozen_pages_noprof+0x157/0x400 [ 977.309925][T15290] alloc_pages_mpol+0xaf/0x1d0 [ 977.309973][T15290] vma_alloc_folio_noprof+0x1b3/0x300 [ 977.310002][T15290] do_wp_page+0x64d/0x1ed0 [ 977.310027][T15290] ? trace_event_buffer_commit+0x174/0x590 [ 977.310091][T15290] ? __rcu_read_lock+0x36/0x50 [ 977.310128][T15290] handle_mm_fault+0xe29/0x3bb0 [ 977.310195][T15290] ? lock_mm_and_find_vma+0x8b/0x3d0 [ 977.310230][T15290] do_user_addr_fault+0x404/0x1060 [ 977.310293][T15290] exc_page_fault+0x62/0xa0 [ 977.310326][T15290] asm_exc_page_fault+0x26/0x30 [ 977.310352][T15290] RIP: 0010:__put_user_4+0xd/0x30 [ 977.310418][T15290] Code: 66 89 01 31 c9 0f 01 ca e9 80 ab 01 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 57 ab 01 00 90 90 90 90 90 90 90 90 90 90 [ 977.310443][T15290] RSP: 0018:ffffc90001a7fd78 EFLAGS: 00050206 [ 977.310466][T15290] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000003e78 [ 977.310485][T15290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 977.310521][T15290] RBP: 00000000000400f5 R08: 0001ffff86f5dc5f R09: 0000000000000000 [ 977.310548][T15290] R10: fffffffffffffff5 R11: ffffffff81874d10 R12: 0000000000000000 [ 977.310566][T15290] R13: 0000200000003e40 R14: 0000200000003e40 R15: 00000000000003ff [ 977.310587][T15290] ? __pfx_perf_trace_kfree+0x10/0x10 [ 977.310698][T15290] __sys_sendmmsg+0x1a8/0x320 [ 977.310734][T15290] __x64_sys_sendmmsg+0x57/0x70 [ 977.310759][T15290] x64_sys_call+0x1fb4/0x2550 [ 977.310789][T15290] do_syscall_64+0x112/0x360 [ 977.310939][T15290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.310965][T15290] RIP: 0033:0x7f7fcbf3e159 [ 977.310985][T15290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 977.311074][T15290] RSP: 002b:00007f7fca997028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 977.311101][T15290] RAX: ffffffffffffffda RBX: 00007f7fcc1c5fa0 RCX: 00007f7fcbf3e159 [ 977.311119][T15290] RDX: 03fffffffffffe3d RSI: 0000200000003e40 RDI: 0000000000000003 [ 977.311137][T15290] RBP: 00007f7fca997090 R08: 0000000000000000 R09: 0000000000000000 [ 977.311155][T15290] R10: 00000000000000f5 R11: 0000000000000246 R12: 0000000000000001 [ 977.311195][T15290] R13: 00007f7fcc1c6038 R14: 00007f7fcc1c5fa0 R15: 00007ffddddd4958 [ 977.311219][T15290] [ 977.700205][ T29] audit: type=1400 audit(2000000224.010:12100): avc: denied { write } for pid=15299 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 977.959936][T15315] loop0: detected capacity change from 0 to 128 [ 978.062027][T15316] usb usb9: usbfs: process 15316 (syz.5.9957) did not claim interface 0 before use [ 978.267287][ T3383] hid-generic 0005:1046D:B012.002B: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 978.277720][T15322] loop5: detected capacity change from 0 to 128 [ 978.367688][T15322] xt_CT: You must specify a L4 protocol and not use inversions on it [ 978.574183][T15327] fido_id[15327]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 978.604331][ T29] audit: type=1326 audit(2000000224.920:12101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15338 comm="syz.0.9967" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19293e159 code=0x7ffc0000 [ 978.605822][ T29] audit: type=1326 audit(2000000224.920:12102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15338 comm="syz.0.9967" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19293e159 code=0x7ffc0000 [ 978.605936][ T29] audit: type=1326 audit(2000000224.920:12103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15338 comm="syz.0.9967" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19293e159 code=0x7ffc0000 [ 978.610329][ T29] audit: type=1326 audit(2000000224.920:12104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15338 comm="syz.0.9967" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe19293e159 code=0x7ffc0000 [ 978.669969][ T29] audit: type=1326 audit(2000000224.950:12105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15338 comm="syz.0.9967" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19293e159 code=0x7ffc0000 [ 978.670047][ T29] audit: type=1326 audit(2000000224.960:12106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15338 comm="syz.0.9967" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19293e159 code=0x7ffc0000 [ 978.800989][T15350] loop2: detected capacity change from 0 to 1024 [ 978.803412][T15350] EXT4-fs: Ignoring removed orlov option [ 978.845104][T15350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 979.030226][T15369] tmpfs: Bad value for 'nr_blocks' [ 979.060939][T15369] FAULT_INJECTION: forcing a failure. [ 979.060939][T15369] name fail_futex, interval 1, probability 0, space 0, times 0 [ 979.061029][T15369] CPU: 1 UID: 0 PID: 15369 Comm: syz.5.9971 Not tainted syzkaller #0 PREEMPT(lazy) [ 979.061064][T15369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 979.061081][T15369] Call Trace: [ 979.061091][T15369] [ 979.061104][T15369] __dump_stack+0x1d/0x30 [ 979.061162][T15369] dump_stack_lvl+0x95/0xd0 [ 979.061187][T15369] dump_stack+0x15/0x1b [ 979.061215][T15369] should_fail_ex+0x262/0x280 [ 979.061248][T15369] should_fail+0xb/0x20 [ 979.061284][T15369] get_futex_key+0x12d/0xb10 [ 979.061320][T15369] futex_wake+0x89/0x400 [ 979.061366][T15369] do_futex+0x3f8/0x460 [ 979.061480][T15369] __se_sys_futex+0x2f6/0x370 [ 979.061522][T15369] __x64_sys_futex+0x78/0x90 [ 979.061580][T15369] x64_sys_call+0x22e2/0x2550 [ 979.061608][T15369] do_syscall_64+0x112/0x360 [ 979.061652][T15369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.061723][T15369] RIP: 0033:0x7ff0bab1e159 [ 979.061742][T15369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 979.061769][T15369] RSP: 002b:00007ff0b95770e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 979.061794][T15369] RAX: ffffffffffffffda RBX: 00007ff0bada5fa8 RCX: 00007ff0bab1e159 [ 979.061850][T15369] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff0bada5fac [ 979.061871][T15369] RBP: 00007ff0bada5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 979.061892][T15369] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 979.061908][T15369] R13: 00007ff0bada6038 R14: 00007ffcb93bc0d0 R15: 00007ffcb93bc1b8 [ 979.061929][T15369] [ 979.325264][T15383] FAULT_INJECTION: forcing a failure. [ 979.325264][T15383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 979.325297][T15383] CPU: 1 UID: 0 PID: 15383 Comm: syz.3.9975 Not tainted syzkaller #0 PREEMPT(lazy) [ 979.325330][T15383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 979.325347][T15383] Call Trace: [ 979.325355][T15383] [ 979.325365][T15383] __dump_stack+0x1d/0x30 [ 979.325403][T15383] dump_stack_lvl+0x95/0xd0 [ 979.325429][T15383] dump_stack+0x15/0x1b [ 979.325453][T15383] should_fail_ex+0x262/0x280 [ 979.325560][T15383] should_fail+0xb/0x20 [ 979.325586][T15383] should_fail_usercopy+0x1a/0x20 [ 979.325618][T15383] _copy_from_user+0x1c/0xb0 [ 979.325665][T15383] input_event_from_user+0x5e/0x190 [ 979.325691][T15383] ? input_inject_event+0xd5/0xf0 [ 979.325728][T15383] evdev_write+0x1b0/0x2b0 [ 979.325804][T15383] ? __pfx_evdev_write+0x10/0x10 [ 979.325843][T15383] vfs_write+0x254/0x9a0 [ 979.325931][T15383] ? __fget_files+0x184/0x1c0 [ 979.325965][T15383] ksys_write+0xdc/0x1a0 [ 979.326056][T15383] __x64_sys_write+0x40/0x50 [ 979.326093][T15383] x64_sys_call+0x154e/0x2550 [ 979.326121][T15383] do_syscall_64+0x112/0x360 [ 979.326186][T15383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.326316][T15383] RIP: 0033:0x7f7fcbf3e159 [ 979.326333][T15383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 979.326357][T15383] RSP: 002b:00007f7fca997028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 979.326387][T15383] RAX: ffffffffffffffda RBX: 00007f7fcc1c5fa0 RCX: 00007f7fcbf3e159 [ 979.326480][T15383] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 979.326500][T15383] RBP: 00007f7fca997090 R08: 0000000000000000 R09: 0000000000000000 [ 979.326518][T15383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 979.326536][T15383] R13: 00007f7fcc1c6038 R14: 00007f7fcc1c5fa0 R15: 00007ffddddd4958 [ 979.326591][T15383] [ 979.371172][T11169] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 979.704372][T15399] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9977'. [ 979.976528][T15406] usb usb9: usbfs: process 15406 (syz.0.9980) did not claim interface 0 before use [ 980.072796][T15416] se_dev->se_dev_ptr already set for storage object [ 980.159841][T15420] loop0: detected capacity change from 0 to 512 [ 980.186887][T15420] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.9984: bg 0: block 4: invalid block bitmap [ 980.186926][T15420] loop0: lost filesystem error report for type 5 error -117 [ 980.187848][T15420] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 980.187889][T15420] loop0: lost filesystem error report for type 5 error -117 [ 980.189439][T15420] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.9984: invalid indirect mapped block 1 (level 1) [ 980.189475][T15420] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 980.193618][ C1] EXT4-fs (loop0): error count since last fsck: 3 [ 980.193643][ C1] EXT4-fs (loop0): initial error at time 2000000226: ext4_validate_block_bitmap:436 [ 980.193707][ C1] EXT4-fs (loop0): last error at time 2000000226: ext4_free_branches:1023: inode 11 [ 980.207926][T15420] EXT4-fs (loop0): 1 truncate cleaned up [ 980.208602][T15420] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 980.891671][T15442] se_dev->se_dev_ptr already set for storage object [ 981.100838][ T8875] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 981.132635][T15447] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9988'. [ 981.168981][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 981.169067][ T29] audit: type=1326 audit(2000000227.480:12188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15452 comm="syz.0.9989" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19293e159 code=0x7ffc0000 [ 981.169143][ T29] audit: type=1326 audit(2000000227.480:12189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15452 comm="syz.0.9989" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19293e159 code=0x7ffc0000 [ 981.169177][ T29] audit: type=1326 audit(2000000227.480:12190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15452 comm="syz.0.9989" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19293e159 code=0x7ffc0000 [ 981.169211][ T29] audit: type=1326 audit(2000000227.480:12191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15452 comm="syz.0.9989" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19293e159 code=0x7ffc0000 [ 981.169325][ T29] audit: type=1326 audit(2000000227.480:12192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15452 comm="syz.0.9989" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe19293e159 code=0x7ffc0000 [ 981.170180][ T29] audit: type=1326 audit(2000000227.480:12193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15452 comm="syz.0.9989" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19293e159 code=0x7ffc0000 [ 981.170402][ T29] audit: type=1326 audit(2000000227.480:12194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15452 comm="syz.0.9989" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19293e159 code=0x7ffc0000 [ 981.170910][ T29] audit: type=1326 audit(2000000227.480:12195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15452 comm="syz.0.9989" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19293e159 code=0x7ffc0000 [ 981.170987][ T29] audit: type=1326 audit(2000000227.480:12196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15452 comm="syz.0.9989" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19293e159 code=0x7ffc0000 [ 981.171452][ T29] audit: type=1326 audit(2000000227.480:12197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15452 comm="syz.0.9989" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fe19293e159 code=0x7ffc0000 [ 981.537864][T15472] se_dev->se_dev_ptr already set for storage object [ 981.592598][T15469] usb usb9: usbfs: process 15469 (syz.2.9994) did not claim interface 0 before use [ 981.619870][T15474] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9996'. [ 981.619982][T15474] netlink: 'syz.3.9996': attribute type 7 has an invalid length. [ 981.619996][T15474] netlink: 'syz.3.9996': attribute type 8 has an invalid length. [ 981.620010][T15474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9996'. [ 981.693487][T15478] loop5: detected capacity change from 0 to 512 [ 982.256360][T15505] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10007'. [ 982.397500][T15511] usb usb9: usbfs: process 15511 (syz.2.10008) did not claim interface 0 before use [ 982.515453][T15517] syzkaller0: entered promiscuous mode [ 982.515530][T15517] syzkaller0: entered allmulticast mode [ 982.621530][T15525] loop2: detected capacity change from 0 to 2048 [ 982.648982][T15526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 982.649192][T15526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 982.652056][T15525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-00ff07000000 r/w without journal. Quota mode: none. [ 982.652169][T15525] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 982.939088][T15525] bridge0: entered allmulticast mode [ 982.943078][T15538] bridge_slave_1: left allmulticast mode [ 982.943102][T15538] bridge_slave_1: left promiscuous mode [ 982.943300][T15538] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.969886][T15538] bridge_slave_0: left allmulticast mode [ 982.969911][T15538] bridge_slave_0: left promiscuous mode [ 982.970168][T15538] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.123373][T15525] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-00ff07000000. [ 983.331642][T15565] loop5: detected capacity change from 0 to 128 [ 983.357303][T15565] syz.5.10019: attempt to access beyond end of device [ 983.357303][T15565] loop5: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 983.427447][T15570] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10020'. [ 983.817032][T15597] loop5: detected capacity change from 0 to 256 [ 983.822934][T15597] FAT-fs (loop5): bogus sectors per cluster 0 [ 983.822959][T15597] FAT-fs (loop5): Can't find a valid FAT filesystem [ 983.862897][ T3022] 8021q: adding VLAN 0 to HW filter on device eth5 [ 983.935313][T15606] loop3: detected capacity change from 0 to 1024 [ 983.983499][T15606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 984.089800][T12227] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.092678][T15617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10031'. [ 984.092716][T15617] netlink: 'syz.2.10031': attribute type 30 has an invalid length. [ 984.092738][T15617] netlink: 'syz.2.10031': attribute type 29 has an invalid length. [ 984.092754][T15617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10031'. [ 984.340614][ T3022] 8021q: adding VLAN 0 to HW filter on device eth6 [ 984.473402][T15645] usb usb9: usbfs: process 15645 (syz.2.10038) did not claim interface 0 before use [ 984.570362][T15655] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10040'. [ 984.570406][T15655] netlink: 'syz.5.10040': attribute type 7 has an invalid length. [ 984.570460][T15655] netlink: 'syz.5.10040': attribute type 8 has an invalid length. [ 984.570474][T15655] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10040'. [ 984.665443][ T3022] 8021q: adding VLAN 0 to HW filter on device eth7 [ 984.801395][T15669] loop3: detected capacity change from 0 to 1024 [ 984.851534][T15669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 984.899274][T15679] se_dev->se_dev_ptr already set for storage object [ 984.940642][T12227] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.028485][T15683] se_dev->se_dev_ptr already set for storage object [ 985.149627][T15694] usb usb9: usbfs: process 15694 (syz.3.10049) did not claim interface 0 before use [ 985.232118][T15698] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15698 comm=syz.5.10051 [ 985.305325][T15702] loop3: detected capacity change from 0 to 512 [ 985.311533][T15702] EXT4-fs: Ignoring removed i_version option [ 985.327456][T15704] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10053'. [ 985.327612][T15704] netlink: 'syz.7.10053': attribute type 7 has an invalid length. [ 985.327627][T15704] netlink: 'syz.7.10053': attribute type 8 has an invalid length. [ 985.327642][T15704] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10053'. [ 985.371126][T15704] erspan0: entered promiscuous mode [ 985.387451][T15704] gretap0: entered promiscuous mode [ 985.393231][T15704] erspan0: left promiscuous mode [ 985.413194][T15702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 985.413337][T15702] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 985.439217][T15704] gretap0: left promiscuous mode [ 985.572960][T12227] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.624916][T15716] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10055'. [ 985.726119][ T3022] 8021q: adding VLAN 0 to HW filter on device eth8 [ 985.772668][T15725] FAULT_INJECTION: forcing a failure. [ 985.772668][T15725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 985.772766][T15725] CPU: 1 UID: 0 PID: 15725 Comm: syz.5.10058 Not tainted syzkaller #0 PREEMPT(lazy) [ 985.772798][T15725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 985.772813][T15725] Call Trace: [ 985.772823][T15725] [ 985.772835][T15725] __dump_stack+0x1d/0x30 [ 985.772909][T15725] dump_stack_lvl+0x95/0xd0 [ 985.772941][T15725] dump_stack+0x15/0x1b [ 985.772967][T15725] should_fail_ex+0x262/0x280 [ 985.772993][T15725] should_fail+0xb/0x20 [ 985.773091][T15725] should_fail_usercopy+0x1a/0x20 [ 985.773131][T15725] _copy_from_user+0x1c/0xb0 [ 985.773166][T15725] memdup_user+0x5e/0xd0 [ 985.773194][T15725] strndup_user+0x68/0xb0 [ 985.773328][T15725] __se_sys_mount+0x4d/0x2e0 [ 985.773351][T15725] __x64_sys_mount+0x67/0x80 [ 985.773374][T15725] x64_sys_call+0xc3b/0x2550 [ 985.773407][T15725] do_syscall_64+0x112/0x360 [ 985.773522][T15725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.773602][T15725] RIP: 0033:0x7ff0bab1e159 [ 985.773624][T15725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 985.773649][T15725] RSP: 002b:00007ff0b9577028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 985.773677][T15725] RAX: ffffffffffffffda RBX: 00007ff0bada5fa0 RCX: 00007ff0bab1e159 [ 985.773696][T15725] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 985.773726][T15725] RBP: 00007ff0b9577090 R08: 0000200000000140 R09: 0000000000000000 [ 985.773745][T15725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 985.773762][T15725] R13: 00007ff0bada6038 R14: 00007ff0bada5fa0 R15: 00007ffcb93bc1b8 [ 985.773805][T15725] [ 985.800478][T15718] loop0: detected capacity change from 0 to 1024 [ 985.830158][T15718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 985.909610][ T8875] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.004168][T15735] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 986.174437][T15741] usb usb9: usbfs: process 15741 (syz.3.10062) did not claim interface 0 before use [ 986.192640][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 986.192701][ T29] audit: type=1400 audit(2000000232.500:12476): avc: denied { write } for pid=15739 comm="syz.0.10060" name="ramdisk_0" dev="configfs" ino=143089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 986.202603][ T29] audit: type=1326 audit(2000000232.510:12477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15719 comm="syz.7.10056" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5938bce98e code=0x7ffc0000 [ 986.203596][T15742] se_dev->se_dev_ptr already set for storage object [ 986.305120][ T29] audit: type=1326 audit(2000000232.620:12478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15719 comm="syz.7.10056" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5938c0e159 code=0x7ffc0000 [ 986.376342][T15754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15754 comm=syz.0.10064 [ 986.409696][ T29] audit: type=1400 audit(2000000232.720:12479): avc: denied { write } for pid=15740 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 986.479790][ T29] audit: type=1400 audit(2000000232.790:12480): avc: denied { write } for pid=15761 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 986.774713][T15776] loop5: detected capacity change from 0 to 1024 [ 986.840410][T15776] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 986.868175][ T29] audit: type=1400 audit(2000000233.180:12481): avc: denied { write } for pid=15774 comm="syz.5.10070" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 986.916356][T15791] xt_HMARK: spi-set and port-set can't be combined [ 986.966863][T14568] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.014003][ T29] audit: type=1400 audit(2000000233.320:12482): avc: denied { write } for pid=15765 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 987.066655][T15795] usb usb9: usbfs: process 15795 (syz.3.10073) did not claim interface 0 before use [ 987.180200][ T29] audit: type=1400 audit(2000000234.490:12483): avc: denied { write } for pid=15804 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 987.189700][T15803] loop5: detected capacity change from 0 to 164 [ 987.204074][T15805] loop0: detected capacity change from 0 to 512 [ 987.262764][T15803] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 987.287892][T15805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 987.288032][T15805] ext4 filesystem being mounted at /255/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 987.291626][T15803] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 987.298806][T15811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15811 comm=syz.3.10077 [ 987.480474][ T8875] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.505850][T15819] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 987.539665][T15819] EXT4-fs (loop3): 1 truncate cleaned up [ 987.551841][T15819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 987.596416][T15819] random: crng reseeded on system resumption [ 987.631334][ T29] audit: type=1400 audit(2000000234.940:12484): avc: denied { ioctl } for pid=15817 comm="syz.3.10080" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 987.763253][T12227] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.769792][T15833] IPVS: Error connecting to the multicast addr [ 987.800750][T15838] set_capacity_and_notify: 1 callbacks suppressed [ 987.800773][T15838] loop0: detected capacity change from 0 to 512 [ 987.803342][T15838] EXT4-fs: Ignoring removed orlov option [ 987.828145][T15838] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 987.837937][T15838] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842e01c, mo2=0002] [ 987.838160][T15838] EXT4-fs (loop0): orphan cleanup on readonly fs [ 987.838181][T15838] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.10085: bad orphan inode 3 [ 987.838246][T15838] loop0: lost filesystem error report for type 5 error -117 [ 987.841517][T15838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 988.018038][ T8875] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 988.031608][T15841] netlink: 'syz.3.10086': attribute type 21 has an invalid length. [ 988.183856][T15852] loop0: detected capacity change from 0 to 512 [ 988.243508][T15852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 988.243702][T15852] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 988.253003][T15852] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #12: comm syz.0.10089: corrupted xattr block 6: invalid header [ 988.291449][ T29] audit: type=1400 audit(2000000235.590:12485): avc: denied { write } for pid=15818 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 988.291755][T15852] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 988.291800][T15848] usb usb9: usbfs: process 15848 (syz.5.10087) did not claim interface 0 before use [ 988.291843][T15852] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #12: comm syz.0.10089: corrupted xattr block 6: invalid header [ 988.295486][T15852] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 988.307190][T15852] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #12: comm syz.0.10089: corrupted xattr block 6: invalid header [ 988.307849][T15852] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 988.307968][T15852] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #12: comm syz.0.10089: corrupted xattr block 6: invalid header [ 988.310169][T15852] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 988.310374][T15852] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #12: comm syz.0.10089: corrupted xattr block 6: invalid header [ 988.313288][T15852] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 988.313388][T15852] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #12: comm syz.0.10089: corrupted xattr block 6: invalid header [ 988.313995][T15852] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 988.321708][T15852] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #12: comm syz.0.10089: corrupted xattr block 6: invalid header [ 988.386992][T15861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15861 comm=syz.3.10090 [ 988.450640][ T8875] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 988.867317][T15872] loop0: detected capacity change from 0 to 512 [ 989.041716][T15872] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 989.041898][T15872] ext4 filesystem being mounted at /259/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 989.194890][T15901] netlink: 56 bytes leftover after parsing attributes in process `syz.5.10102'. [ 989.320350][T15907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=15907 comm=syz.5.10102 [ 989.331581][T15907] pipefs: Unknown parameter '-l}*'!&-[#}' [ 989.400985][T15911] loop2: detected capacity change from 0 to 512 [ 989.412000][T15911] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 989.431791][T15911] EXT4-fs (loop2): 1 truncate cleaned up [ 989.432435][T15911] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 990.013364][T11169] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 990.187614][ T8875] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 990.249041][T15952] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10108'. [ 990.249086][T15952] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10108'. [ 990.259218][T15953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10107'. [ 990.259259][T15953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10107'. [ 990.451904][T15957] loop0: detected capacity change from 0 to 512 [ 990.461126][T15957] EXT4-fs: Ignoring removed bh option [ 990.473148][T15957] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 990.504648][T15957] EXT4-fs (loop0): 1 truncate cleaned up [ 990.505201][T15957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 990.541412][ T359] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.899516][ T359] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.909517][T15962] loop3: detected capacity change from 0 to 1764 [ 991.040000][ T359] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.079684][T15971] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #2: block 13: comm syz.0.10111: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 991.212816][ T359] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.398774][ T6826] netdevsim netdevsim5 eth23: set [1, 0] type 2 family 0 port 20000 - 0 [ 991.493769][ T6826] netdevsim netdevsim5 eth25: set [1, 0] type 2 family 0 port 20000 - 0 [ 991.526195][ T359] bridge_slave_1: left allmulticast mode [ 991.526247][ T359] bridge_slave_1: left promiscuous mode [ 991.526398][ T359] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.546826][ T359] bridge_slave_0: left allmulticast mode [ 991.546850][ T359] bridge_slave_0: left promiscuous mode [ 991.547193][ T359] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.645698][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 991.645780][ T29] audit: type=1400 audit(2000000238.960:12500): avc: denied { write } for pid=15972 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 991.757789][ T29] audit: type=1400 audit(2000000239.070:12501): avc: denied { write } for pid=15997 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 991.938435][T16005] netlink: 'syz.2.10119': attribute type 1 has an invalid length. [ 991.963088][ T359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 991.976087][ T359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 991.986429][ T359] bond0 (unregistering): Released all slaves [ 992.010776][ T6826] netdevsim netdevsim5 eth18: set [1, 0] type 2 family 0 port 20000 - 0 [ 992.010988][ T6826] netdevsim netdevsim5 eth24: set [1, 0] type 2 family 0 port 20000 - 0 [ 992.363817][ T359] hsr_slave_0: left promiscuous mode [ 992.386694][ T359] hsr_slave_1: left promiscuous mode [ 992.392378][ T359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 992.392398][ T359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 992.405630][ T359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 992.405653][ T359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 992.936715][T15814] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 992.962875][ T359] veth1_macvtap: left promiscuous mode [ 992.962913][ T359] veth0_macvtap: left promiscuous mode [ 992.963019][ T359] veth1_vlan: left promiscuous mode [ 992.963172][ T359] veth0_vlan: left promiscuous mode [ 993.342584][ T359] team0 (unregistering): Port device team_slave_1 removed [ 993.370244][ T359] team0 (unregistering): Port device team_slave_0 removed [ 993.847936][ T29] audit: type=1400 audit(2000000241.160:12502): avc: denied { map } for pid=16030 comm="syz.2.10123" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 994.072691][ T29] audit: type=1400 audit(2000000241.380:12503): avc: denied { write } for pid=16000 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 994.087558][T16048] loop3: detected capacity change from 0 to 1024 [ 994.108603][T16048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 994.108688][T16048] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 994.110446][ T29] audit: type=1400 audit(2000000241.420:12504): avc: denied { write } for pid=16047 comm="syz.3.10126" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 994.174023][T12227] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 994.258731][T16062] netlink: 'syz.3.10128': attribute type 1 has an invalid length. [ 994.282893][ T29] audit: type=1400 audit(2000000241.590:12505): avc: denied { write } for pid=16063 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 994.345598][T16062] bond1: entered promiscuous mode [ 994.347900][T16062] 8021q: adding VLAN 0 to HW filter on device bond1 [ 994.394401][T16067] 8021q: adding VLAN 0 to HW filter on device bond1 [ 994.399658][T16067] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 994.399691][T16067] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 994.452395][T16067] bond1: (slave ip6gre1): making interface the new active one [ 994.452424][T16067] ip6gre1: entered promiscuous mode [ 994.479140][T16067] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 994.586018][ T29] audit: type=1400 audit(2000000241.900:12506): avc: denied { write } for pid=16068 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 994.599256][T15995] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.599301][T15995] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.599998][T15995] bridge_slave_0: entered allmulticast mode [ 994.608585][T15995] bridge_slave_0: entered promiscuous mode [ 994.625691][T15995] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.625775][T15995] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.629638][T15995] bridge_slave_1: entered allmulticast mode [ 994.642776][T15995] bridge_slave_1: entered promiscuous mode [ 994.730542][ T29] audit: type=1400 audit(2000000242.040:12507): avc: denied { write } for pid=16082 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 994.790138][T15995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 994.827704][T15995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 994.954563][T15995] team0: Port device team_slave_0 added [ 994.959815][T15995] team0: Port device team_slave_1 added [ 995.040764][T15995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 995.040784][T15995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 995.040880][T15995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 995.047627][T15995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 995.047651][T15995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 995.047685][T15995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 995.150069][T15995] hsr_slave_0: entered promiscuous mode [ 995.152017][T15995] hsr_slave_1: entered promiscuous mode [ 995.375414][ T29] audit: type=1400 audit(2000000242.690:12508): avc: denied { write } for pid=16100 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 995.498824][T15995] netdevsim netdevsim6 eth12 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 995.586943][T15995] netdevsim netdevsim6 eth11 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 995.631714][ T8875] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.644685][ T29] audit: type=1400 audit(2000000242.960:12509): avc: denied { write } for pid=16114 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 995.662711][T15995] netdevsim netdevsim6 eth10 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 996.019277][T16135] loop0: detected capacity change from 0 to 1027 [ 996.179118][T16137] loop0: detected capacity change from 0 to 512 [ 996.319544][T16137] loop0: detected capacity change from 0 to 512 [ 996.485166][T16137] loop0: detected capacity change from 0 to 512 [ 996.544669][T15995] netdevsim netdevsim6 eth9 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 996.588476][T16137] loop0: detected capacity change from 0 to 512 [ 996.668366][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 996.668386][ T29] audit: type=1400 audit(2000000243.980:12564): avc: denied { write } for pid=16149 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 996.812500][ T29] audit: type=1400 audit(2000000244.120:12565): avc: denied { write } for pid=16174 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 996.847434][T16137] loop0: detected capacity change from 0 to 512 [ 996.874026][T16137] loop0: detected capacity change from 0 to 512 [ 996.890326][T15995] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 996.914282][T16137] loop0: detected capacity change from 0 to 512 [ 996.931219][T15995] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 996.947080][T15995] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 996.993268][T15995] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 997.008420][T15995] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 997.037115][T16137] loop0: detected capacity change from 0 to 512 [ 997.048636][T15995] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 997.070508][T15995] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 997.107559][T15995] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 997.159325][T16184] netlink: 'syz.3.10145': attribute type 1 has an invalid length. [ 997.729128][T16197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16197 comm=syz.7.10146 [ 997.729368][T16197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16197 comm=syz.7.10146 [ 997.729833][T16197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16197 comm=syz.7.10146 [ 997.730184][T16197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16197 comm=syz.7.10146 [ 997.730514][T16197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16197 comm=syz.7.10146 [ 997.742737][T16197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16197 comm=syz.7.10146 [ 997.742909][T16197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16197 comm=syz.7.10146 [ 997.743024][T16197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16197 comm=syz.7.10146 [ 997.743412][T16197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16197 comm=syz.7.10146 [ 997.744760][T16197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16197 comm=syz.7.10146 [ 998.234656][T15995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 998.291480][T16203] x_tables: duplicate underflow at hook 1 [ 998.486967][T15995] 8021q: adding VLAN 0 to HW filter on device team0 [ 998.561582][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.561699][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 998.629716][ T6826] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.629765][ T6826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 998.750317][T16130] EXT4-fs: Ignoring removed i_version option [ 998.778339][T16130] EXT4-fs warning (device loop0): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop0. [ 998.826417][T16211] sit0: entered promiscuous mode [ 998.830199][ T29] audit: type=1400 audit(2000000246.140:12566): avc: denied { write } for pid=16187 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 998.856677][T16211] netlink: 'syz.3.10148': attribute type 1 has an invalid length. [ 998.856708][T16211] netlink: 1 bytes leftover after parsing attributes in process `syz.3.10148'. [ 998.885692][ T29] audit: type=1326 audit(2000000246.200:12567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16215 comm="syz.7.10149" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5938c0e159 code=0x7ffc0000 [ 998.886328][ T29] audit: type=1326 audit(2000000246.200:12568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16215 comm="syz.7.10149" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5938c0e159 code=0x7ffc0000 [ 998.886429][ T29] audit: type=1326 audit(2000000246.200:12569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16215 comm="syz.7.10149" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5938c0e159 code=0x7ffc0000 [ 998.888946][ T29] audit: type=1326 audit(2000000246.200:12570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16215 comm="syz.7.10149" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5938c0e159 code=0x7ffc0000 [ 998.938804][ T29] audit: type=1326 audit(2000000246.250:12571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16215 comm="syz.7.10149" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5938c0e159 code=0x7ffc0000 [ 998.938904][ T29] audit: type=1326 audit(2000000246.250:12572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16215 comm="syz.7.10149" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5938c0dec2 code=0x7ffc0000 [ 998.938997][ T29] audit: type=1326 audit(2000000246.250:12573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16215 comm="syz.7.10149" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5938c0df57 code=0x7ffc0000 [ 999.996876][T16235] netlink: 'syz.7.10153': attribute type 21 has an invalid length. [ 999.997008][T16235] IPv6: NLM_F_CREATE should be specified when creating new route [ 1000.389899][T16249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10155'. [ 1000.594257][T16266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10160'. [ 1000.622747][T16266] set_capacity_and_notify: 6 callbacks suppressed [ 1000.622844][T16266] loop3: detected capacity change from 0 to 256 [ 1000.623421][T16266] vfat: Unknown parameter '0x0000000000000003000000000000000000030x0000000000000003' [ 1000.758208][T15995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1001.509789][T16326] sg_write: data in/out 563552/136 bytes for SCSI command 0x0-- guessing data in; [ 1001.509789][T16326] program syz.2.10171 not setting count and/or reply_len properly [ 1001.552058][T16326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1001.552292][T16326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1001.660484][T16341] se_dev->se_dev_ptr already set for storage object [ 1001.676487][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 1001.676505][ T29] audit: type=1326 audit(2000000248.990:12765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16333 comm="syz.7.10173" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5938c0e159 code=0x7ffc0000 [ 1001.691820][ T29] audit: type=1400 audit(2000000249.000:12766): avc: denied { write } for pid=16336 comm="syz.3.10172" name="ramdisk_0" dev="configfs" ino=143089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1001.694533][T16342] se_dev->se_dev_ptr already set for storage object [ 1001.769990][ T29] audit: type=1326 audit(2000000249.080:12767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16333 comm="syz.7.10173" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5938c0e159 code=0x7ffc0000 [ 1001.771879][T15995] veth0_vlan: entered promiscuous mode [ 1001.821026][T15995] veth1_vlan: entered promiscuous mode [ 1001.928838][T15995] veth0_macvtap: entered promiscuous mode [ 1001.942954][T15995] veth1_macvtap: entered promiscuous mode [ 1002.025830][T15995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1002.070379][T15995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1002.125221][ T4289] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.126457][ T4289] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.186673][ T4289] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.187073][ T4289] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.191011][ T29] audit: type=1400 audit(2000000249.500:12768): avc: denied { write } for pid=16343 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1002.218737][T16367] MTRR 0 not used [ 1002.338842][ T29] audit: type=1400 audit(2000000249.650:12769): avc: denied { write } for pid=16381 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1003.238022][ T29] audit: type=1326 audit(2000000250.550:12770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16390 comm="syz.2.10184" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89a30e159 code=0x7ffc0000 [ 1003.242915][ T29] audit: type=1326 audit(2000000250.550:12771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16390 comm="syz.2.10184" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89a30e159 code=0x7ffc0000 [ 1003.245489][ T29] audit: type=1326 audit(2000000250.560:12772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16390 comm="syz.2.10184" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89a30e159 code=0x7ffc0000 [ 1003.245915][ T29] audit: type=1326 audit(2000000250.560:12773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16390 comm="syz.2.10184" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa89a2ce98e code=0x7ffc0000 [ 1003.246980][ T29] audit: type=1326 audit(2000000250.560:12774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16390 comm="syz.2.10184" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89a30e159 code=0x7ffc0000 [ 1003.597150][T16416] se_dev->se_dev_ptr already set for storage object [ 1003.911126][T16425] gtp0: entered promiscuous mode [ 1003.911152][T16425] gtp0: entered allmulticast mode [ 1003.914366][T16425] team0: Device gtp0 is of different type [ 1004.020893][T16440] loop2: detected capacity change from 0 to 256 [ 1004.155367][T16437] usb usb9: usbfs: process 16437 (syz.3.10193) did not claim interface 0 before use [ 1004.332362][T16465] se_dev->se_dev_ptr already set for storage object [ 1005.015660][T16492] loop3: detected capacity change from 0 to 2048 [ 1005.272353][T16519] usb usb9: usbfs: process 16519 (syz.2.10211) did not claim interface 0 before use [ 1005.285051][T16525] loop0: detected capacity change from 0 to 128 [ 1005.304140][T16525] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1005.304525][T16525] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1005.310227][T16525] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.10213: No space for directory leaf checksum. Please run e2fsck -D. [ 1005.310276][T16525] EXT4-fs error (device loop0): htree_dirblock_to_tree:1051: inode #2: comm syz.0.10213: Directory block failed checksum [ 1005.313259][ T6826] Bluetooth: hci0: Frame reassembly failed (-84) [ 1005.337635][T16527] loop6: detected capacity change from 0 to 512 [ 1005.426180][T16527] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1005.426345][T16527] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1005.575855][T15995] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1005.777488][T16547] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10217'. [ 1005.777520][T16547] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10217'. [ 1006.324398][T16590] xt_hashlimit: size too large, truncated to 1048576 [ 1006.706449][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 1006.706470][ T29] audit: type=1326 audit(2000000254.020:12933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16577 comm="syz.6.10226" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb511c2e159 code=0x7ffc0000 [ 1006.706635][ T29] audit: type=1326 audit(2000000254.020:12934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16577 comm="syz.6.10226" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb511c2e159 code=0x7ffc0000 [ 1006.706715][ T29] audit: type=1326 audit(2000000254.020:12935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16577 comm="syz.6.10226" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fb511c2e159 code=0x7ffc0000 [ 1006.706822][ T29] audit: type=1326 audit(2000000254.020:12936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16577 comm="syz.6.10226" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb511c2e159 code=0x7ffc0000 [ 1006.706899][ T29] audit: type=1326 audit(2000000254.020:12937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16577 comm="syz.6.10226" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb511c2e159 code=0x7ffc0000 [ 1006.706938][ T29] audit: type=1326 audit(2000000254.020:12938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16577 comm="syz.6.10226" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb511c2e159 code=0x7ffc0000 [ 1006.706978][ T29] audit: type=1326 audit(2000000254.020:12939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16577 comm="syz.6.10226" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb511c2e159 code=0x7ffc0000 [ 1006.708096][ T29] audit: type=1326 audit(2000000254.020:12940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16577 comm="syz.6.10226" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb511c2e159 code=0x7ffc0000 [ 1006.708201][ T29] audit: type=1326 audit(2000000254.020:12941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16577 comm="syz.6.10226" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb511c2e159 code=0x7ffc0000 [ 1006.708236][ T29] audit: type=1326 audit(2000000254.020:12942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16577 comm="syz.6.10226" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb511c2e159 code=0x7ffc0000 [ 1006.750277][T16603] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10231'. [ 1007.324163][T14335] Bluetooth: hci0: command 0x1003 tx timeout [ 1007.324684][ T3843] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1007.513422][ T8875] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1007.547729][T16627] netlink: 'syz.2.10235': attribute type 4 has an invalid length. [ 1008.152470][T16632] usb usb9: usbfs: process 16632 (syz.2.10237) did not claim interface 0 before use [ 1008.506365][T16648] netlink: 'syz.2.10242': attribute type 4 has an invalid length. [ 1008.610105][T16647] loop6: detected capacity change from 0 to 8192 [ 1008.671664][T16655] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10244'. [ 1008.768532][T16655] loop2: detected capacity change from 0 to 512 [ 1008.769124][T16655] EXT4-fs: Ignoring removed bh option [ 1008.773618][T16652] loop3: detected capacity change from 0 to 1024 [ 1008.806211][T16652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1008.824663][T16655] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.10244: corrupted in-inode xattr: e_value size too large [ 1008.824701][T16655] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1008.825847][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1008.825869][ C0] EXT4-fs (loop2): initial error at time 2000000256: ext4_iget_extra_inode:5210: inode 15 [ 1008.825961][ C0] EXT4-fs (loop2): last error at time 2000000256: ext4_iget_extra_inode:5210: inode 15 [ 1008.834040][T16655] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.10244: couldn't read orphan inode 15 (err -117) [ 1008.834093][T16655] loop2: lost filesystem error report for type 5 error -117 [ 1008.842812][T16655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1008.990956][T16670] loop0: detected capacity change from 0 to 128 [ 1009.008728][T12227] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1009.029947][T16670] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1009.047697][T16670] ext4 filesystem being mounted at /281/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1009.075886][T11169] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1009.100830][T16670] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.10246: No space for directory leaf checksum. Please run e2fsck -D. [ 1009.100875][T16670] EXT4-fs error (device loop0): htree_dirblock_to_tree:1051: inode #2: comm syz.0.10246: Directory block failed checksum [ 1009.113767][ T364] Bluetooth: hci0: Frame reassembly failed (-84) [ 1009.123090][T16676] netlink: 'syz.7.10247': attribute type 4 has an invalid length. [ 1009.215148][T16647] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1009.215176][T16647] FAT-fs (loop6): Filesystem has been set read-only [ 1009.295974][T16647] FAT-fs (loop6): error, invalid access to FAT (entry 0x00003c09) [ 1009.296062][T16647] syz.6.10241: attempt to access beyond end of device [ 1009.296062][T16647] loop6: rw=8388608, sector=15583, nr_sectors = 1 limit=8192 [ 1009.507642][T16696] usb usb9: usbfs: process 16696 (syz.2.10252) did not claim interface 0 before use [ 1009.845462][T16726] se_dev->se_dev_ptr already set for storage object [ 1010.027982][T16733] loop2: detected capacity change from 0 to 1024 [ 1010.059648][T16733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1010.122836][T11169] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1010.235423][T16748] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10260'. [ 1010.337280][T16756] FAULT_INJECTION: forcing a failure. [ 1010.337280][T16756] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.337315][T16756] CPU: 0 UID: 0 PID: 16756 Comm: syz.2.10262 Not tainted syzkaller #0 PREEMPT(lazy) [ 1010.337418][T16756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1010.337432][T16756] Call Trace: [ 1010.337442][T16756] [ 1010.337453][T16756] __dump_stack+0x1d/0x30 [ 1010.337482][T16756] dump_stack_lvl+0x95/0xd0 [ 1010.337510][T16756] dump_stack+0x15/0x1b [ 1010.337545][T16756] should_fail_ex+0x262/0x280 [ 1010.337569][T16756] ? security_file_alloc+0x32/0xf0 [ 1010.337658][T16756] should_failslab+0x8c/0xb0 [ 1010.337696][T16756] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 1010.337768][T16756] ? security_file_alloc+0x32/0xf0 [ 1010.337802][T16756] security_file_alloc+0x32/0xf0 [ 1010.337832][T16756] init_file+0x5b/0x1b0 [ 1010.337902][T16756] alloc_empty_file+0x85/0x1e0 [ 1010.337928][T16756] alloc_file_pseudo+0x92/0x120 [ 1010.337994][T16756] anon_inode_getfd+0xbf/0x190 [ 1010.338019][T16756] btf_get_fd_by_id+0x17f/0x1e0 [ 1010.338041][T16756] bpf_btf_get_fd_by_id+0xf8/0x110 [ 1010.338132][T16756] __sys_bpf+0x91f/0xc30 [ 1010.338166][T16756] __x64_sys_bpf+0x69/0x80 [ 1010.338188][T16756] x64_sys_call+0xf26/0x2550 [ 1010.338218][T16756] do_syscall_64+0x112/0x360 [ 1010.338259][T16756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.338295][T16756] RIP: 0033:0x7fa89a30e159 [ 1010.338317][T16756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1010.338340][T16756] RSP: 002b:00007fa898d67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1010.338394][T16756] RAX: ffffffffffffffda RBX: 00007fa89a595fa0 RCX: 00007fa89a30e159 [ 1010.338416][T16756] RDX: 0000000000000004 RSI: 0000200000001840 RDI: 0000000000000013 [ 1010.338487][T16756] RBP: 00007fa898d67090 R08: 0000000000000000 R09: 0000000000000000 [ 1010.338505][T16756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1010.338532][T16756] R13: 00007fa89a596038 R14: 00007fa89a595fa0 R15: 00007fff09e29738 [ 1010.338553][T16756] [ 1010.622475][T16761] ref_ctr_offset mismatch. inode: 0x523 offset: 0x5 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 1010.694611][T16772] usb usb9: usbfs: process 16772 (syz.3.10266) did not claim interface 0 before use [ 1011.025707][T16797] netlink: 36 bytes leftover after parsing attributes in process `syz.7.10272'. [ 1011.066628][T12227] ================================================================== [ 1011.066662][T12227] BUG: KCSAN: data-race in __set_task_comm / strlen [ 1011.066710][T12227] [ 1011.066718][T12227] write to 0xffff888101ce2a5b of 13 bytes by task 16800 on cpu 0: [ 1011.066735][T12227] __set_task_comm+0x92/0x180 [ 1011.066759][T12227] begin_new_exec+0xef1/0x12c0 [ 1011.066784][T12227] load_elf_binary+0x5e2/0x18f0 [ 1011.066804][T12227] bprm_execve+0x46b/0xa50 [ 1011.066830][T12227] do_execveat_common+0x7a4/0x8a0 [ 1011.066858][T12227] __x64_sys_execve+0x5f/0x80 [ 1011.066886][T12227] x64_sys_call+0x1cd2/0x2550 [ 1011.066912][T12227] do_syscall_64+0x112/0x360 [ 1011.066942][T12227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.066964][T12227] [ 1011.066972][T12227] read to 0xffff888101ce2a61 of 1 bytes by task 12227 on cpu 1: [ 1011.066990][T12227] strlen+0x19/0x40 [ 1011.067007][T12227] trace_event_raw_event_sched_stat_runtime+0x5a/0x150 [ 1011.067036][T12227] update_se+0x153/0x460 [ 1011.067058][T12227] update_curr+0x1e/0x210 [ 1011.067087][T12227] enqueue_task_fair+0x77/0x850 [ 1011.067115][T12227] wake_up_new_task+0x24b/0x3c0 [ 1011.067141][T12227] kernel_clone+0x343/0x5f0 [ 1011.067166][T12227] __x64_sys_clone+0x143/0x180 [ 1011.067190][T12227] x64_sys_call+0x2479/0x2550 [ 1011.067222][T12227] do_syscall_64+0x112/0x360 [ 1011.067251][T12227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.067273][T12227] [ 1011.067279][T12227] value changed: 0x6e -> 0x00 [ 1011.067292][T12227] [ 1011.067298][T12227] Reported by Kernel Concurrency Sanitizer on: [ 1011.067311][T12227] CPU: 1 UID: 0 PID: 12227 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 1011.067339][T12227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1011.067354][T12227] ================================================================== [ 1011.157709][T14335] Bluetooth: hci0: command 0x1003 tx timeout [ 1011.157754][ T3843] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1011.277205][ T8875] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1011.713985][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 1011.714006][ T29] audit: type=1326 audit(2000000259.030:13145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16804 comm="syz.7.10275" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5938bce98e code=0x7ffc0000 [ 1011.715974][ T29] audit: type=1326 audit(2000000259.030:13146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16804 comm="syz.7.10275" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5938bce98e code=0x7ffc0000 [ 1011.717258][ T29] audit: type=1326 audit(2000000259.030:13147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16804 comm="syz.7.10275" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5938bce98e code=0x7ffc0000 [ 1011.719886][ T29] audit: type=1326 audit(2000000259.030:13148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16804 comm="syz.7.10275" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5938bce98e code=0x7ffc0000 [ 1011.722491][ T29] audit: type=1326 audit(2000000259.030:13149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16804 comm="syz.7.10275" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5938bce98e code=0x7ffc0000 [ 1011.734180][ T29] audit: type=1326 audit(2000000259.040:13150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16804 comm="syz.7.10275" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5938bce98e code=0x7ffc0000 [ 1011.734288][ T29] audit: type=1326 audit(2000000259.040:13151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16804 comm="syz.7.10275" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5938bce98e code=0x7ffc0000 [ 1011.734405][ T29] audit: type=1326 audit(2000000259.040:13152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16804 comm="syz.7.10275" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5938bce98e code=0x7ffc0000 [ 1011.734487][ T29] audit: type=1326 audit(2000000259.040:13153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16804 comm="syz.7.10275" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5938bce98e code=0x7ffc0000 [ 1011.734549][ T29] audit: type=1326 audit(2000000259.040:13154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16804 comm="syz.7.10275" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5938bce98e code=0x7ffc0000 [ 1015.315412][ T3022] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1015.489280][ T3022] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1015.692291][ T3022] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1015.866812][ T3022] 8021q: adding VLAN 0 to HW filter on device eth25 [ 1016.787984][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 1016.788002][ T29] audit: type=1400 audit(2000000264.100:13300): avc: denied { write } for pid=17137 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1016.839316][ T29] audit: type=1400 audit(2000000264.150:13301): avc: denied { write } for pid=17148 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1016.986196][ T29] audit: type=1400 audit(2000000264.300:13302): avc: denied { write } for pid=17150 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1017.032449][ T29] audit: type=1400 audit(2000000264.340:13303): avc: denied { write } for pid=17161 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1017.193165][ T29] audit: type=1400 audit(2000000264.500:13304): avc: denied { write } for pid=17164 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1017.230800][ T29] audit: type=1400 audit(2000000264.540:13305): avc: denied { write } for pid=17175 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1017.367812][ T29] audit: type=1400 audit(2000000264.680:13306): avc: denied { write } for pid=17177 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1017.415550][ T29] audit: type=1400 audit(2000000264.730:13307): avc: denied { write } for pid=17188 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1017.806536][ T29] audit: type=1400 audit(2000000265.120:13308): avc: denied { write } for pid=17202 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1017.852065][ T29] audit: type=1400 audit(2000000265.160:13309): avc: denied { write } for pid=17215 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1