last executing test programs: 16m28.655258494s ago: executing program 32 (id=1468): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @empty}], 0x10) 15m47.105528579s ago: executing program 33 (id=1947): r0 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x2, 0x80000201}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x80003, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback={0x6000000}, 0xe35a}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000500)=0x10000001, 0x4) r5 = semget$private(0x0, 0x6, 0x0) semtimedop(r5, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r5, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r5, &(0x7f0000000000)=[{0x0, 0x85fd, 0x1000}], 0x1) semctl$GETZCNT(r5, 0x0, 0xf, 0x0) r6 = getuid() getgroups(0x3, &(0x7f00000001c0)=[0xee00, 0xffffffffffffffff, 0xee01]) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x800, 0x10, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000340)={{0x0, r6, r7, r8, 0xffffffffffffffff, 0x1}, 0x1531, 0x200, 0x0, 0x0, 0x0, 0x0, 0x9dca}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r5, &(0x7f0000000400)=[{0x1, 0x5, 0x2000}, {0x3, 0x1, 0x1000}, {0x1, 0x5, 0x3800}, {0x3, 0x106, 0x800}, {0x0, 0x5e38}, {0x1, 0x0, 0x1000}, {0x4, 0x2000, 0x800}, {0x4, 0x4e}, {0x1, 0x2}, {0x1, 0x81}], 0xa, &(0x7f0000000080)={r9, r10+10000000}) 14m46.758077811s ago: executing program 34 (id=2860): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1813000007000000eab4040000000000001000000000", @ANYRES32, @ANYBLOB="827400"/19, @ANYRES32, @ANYRES32], 0x50) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000000000000000000040000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0xfb, &(0x7f0000003b00)=""/251, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 14m8.39697081s ago: executing program 35 (id=3143): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) readv(r0, &(0x7f00000000c0)=[{&(0x7f00000007c0)=""/4109, 0x100d}], 0xe1) socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x40, 0xc594}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0xa041, 0x0) write$vga_arbiter(r2, &(0x7f0000000380)=ANY=[@ANYBLOB='decodes io'], 0xf) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060300000000000000000000000000140007800800114000f50000050015000c00000005000100060000000500050002000000050004000000000011000300686173683a69702c706f727400000000090002"], 0x60}}, 0x0) listen(r1, 0x3) r4 = socket(0x2, 0x80805, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000140)={r6, 0x3, 0xa4, 0x4000f}, &(0x7f0000000180)=0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x9}}}}}}, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 13m58.40431297s ago: executing program 36 (id=3391): socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x2000850) 12m3.288993647s ago: executing program 37 (id=4592): setpriority(0x3, 0x0, 0x40) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @rand_addr=0x64010100}, {0x2, 0x200, @multicast1}, {0x2, 0x0, @loopback}, 0x2a0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x10001, 0x2000000}) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) symlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000200), 0x8}, 0x1005e2, 0x2, 0x4, 0x0, 0x2, 0x1ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = request_key(&(0x7f0000000b40)='cifs.spnego\x00', &(0x7f0000000b80)={'syz', 0x0}, &(0x7f0000000bc0)='&\x00', 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_MOVE(0x1e, 0x0, r2, r3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") wait4(0x0, 0x0, 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x80e8662d, &(0x7f0000000000)={0x1, 0x81, 0x4, 0x8f10, 0xfff7ffbe, 0x7}) sched_setscheduler(0x0, 0x0, &(0x7f0000000140)=0x87f) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket(0x2a, 0x2, 0x9) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, 0x0) 11m29.175113535s ago: executing program 38 (id=4847): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r0, 0x0, 0x60) 9m10.536249579s ago: executing program 39 (id=5044): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x188b9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x3}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x5}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000140)={r6, 0x9, 0x100}, 0x10) sendmmsg$inet6(r5, &(0x7f0000003340)=[{{&(0x7f00000003c0)={0xa, 0x4e22, 0x7fff, @loopback, 0x5}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001a80)='g', 0x1}], 0x1}}], 0x1, 0x40) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000580)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f000063f000/0x4000)=nil, &(0x7f00000b6000/0x2000)=nil, &(0x7f000008c000/0x4000)=nil, &(0x7f00008f1000/0x2000)=nil, &(0x7f00000a8000/0x2000)=nil, &(0x7f0000841000/0x3000)=nil, &(0x7f0000a3f000/0x3000)=nil, &(0x7f0000aaa000/0x3000)=nil, &(0x7f00003f8000/0x3000)=nil, &(0x7f0000249000/0x4000)=nil, &(0x7f0000000400)="3e8a1f33528c4abe152cb1890e2c74496225059be7c3ff31f25c5d058851966d73b7a1876fdd2024bbcdf390a4e7dfc809dd60e245b16d29ccab1d8b708a624223f951424e63e8c05b7f485b95c4292db2581eccdb95e61e9228c8375329de7f806f52065c3b0d65a0c87fcb27510bb0cb534eae1e6a7336bfb288b0f76292101c400aec297a8c584d2d53dc7d1a2c786ea4da412644460fd2a3584b6fb8d9f2d59455a2c17e9bdadee2a760c4f1a183578b53708b5ca8e4017a1e16fb8ab41e06456fe7520af208a5", 0xc9, r4}, 0x68) sendto$inet6(r5, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r5, 0x1) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) fcntl$setlease(r7, 0x400, 0x1) 9m8.617164724s ago: executing program 40 (id=5061): socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x1, 0x7, 0x4, 0x6, 0x0, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0xa) socket(0x2b, 0x1, 0x1) syz_clone3(&(0x7f0000000240)={0x80, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), {0x39}, &(0x7f0000000140)=""/64, 0x40, &(0x7f0000000180)=""/104, &(0x7f0000000200)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x100, 0x52) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001300)=""/4093, 0xffd) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) 8m8.032726155s ago: executing program 41 (id=5126): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x10001, 0xffff}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r1, 0x107, 0x6, &(0x7f0000000400)=""/74, &(0x7f0000000500)=0x4a) listxattr(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)=""/6, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b34383a333a0826e0878f0e1ac6e7049b073c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b33340d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000052000100ffff0a00000008000100", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000074) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x4c9, 0x1, 0xb2, 0x401, 0xffffffff, 0x2, 0xfff}}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x56, 0x0, 0xac, {0x5, 0x1}, {0x50, 0x2}, @cond=[{0x9, 0x528c, 0xc, 0x800, 0xf535, 0xf4a}, {0x4000, 0x802, 0x1, 0x7, 0x0, 0xffff}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x80, 0x0, 0x4693, 0x6, 0x9, 0x750, 0x80, 0xfffffff3, 0x401}}}}]}, 0x58}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) write(r8, 0x0, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f0000000240)) pivot_root(&(0x7f0000000180)='./proc/sys/kernel/printk_devkmsg\x00', &(0x7f00000001c0)='./proc/sys/kernel/printk_devkmsg/file0\x00') 8m4.932510427s ago: executing program 42 (id=5253): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r0, 0x0, r2, 0x0, 0x3000, 0x100000000000000d) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c0060001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r5, 0x1, &(0x7f0000019200)=[&(0x7f0000000540)={0x4c5, 0x0, 0x106, 0x800000000001, 0x0, r4, 0x0}]) bind$802154_raw(r0, &(0x7f0000000080)={0x1e, @none={0x0, 0xffff}}, 0xfffffffffffffef7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r9 = getpid() syz_pidfd_open(r9, 0x0) sched_setaffinity(r9, 0x8, &(0x7f0000000280)=0xf) setreuid(0xee01, r8) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x40022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_config_ext={0x2}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_xfrm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=ANY=[@ANYBLOB="280100001700010000000000fedbdf257f000001000000000000000000000000000004d600000000fe8000000000000000000000000000bb7f000001000000000000000000000000ffffffff0000000000000000000000004e210000000080000000008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000ac14423321d4105864c9340c89c59845df14bb0000000000000000320000f144190ffff6486ade5a6de74df12c0ba2a2", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000004100020200000000f9ffffff0200"/128], 0x128}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="cc0200000d03010329bd7000ffdbdf250200000908002b000a010100be01328008009400", @ANYRES32=r7, @ANYBLOB='\b\x005\x00', @ANYRES32=r8, @ANYBLOB="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"/668], 0x2cc}}, 0x80c4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x10ffe, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=@newtaction={0x130, 0x30, 0x1, 0x0, 0x0, {}, [{0x11c, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x2, 0x0, 0x9}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x4305}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0xc4, 0x1, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x239d, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1000000, 0x101, 0x8, 0xffffffff, 0xc7}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xf16, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x579, 0x7}}]}, {0x5b, 0x6, "a13a91c8151674aaf66d9abfa759e29ca927d8898e7db9889162202012b92942acc342f0e356e39f30ceca4f629a1dc0f15978fe6ca1200cf99edd3a5407f5db5c02fc085b65831afb6de8a6361a3c5bc96472454c251b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x130}}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766010000e3", @ANYRESHEX=r1, @ANYBLOB=',posixacl,noxattr,cache=mmap,seclabel,smackfstransmute=,uid=', @ANYRESDEC=r8, @ANYBLOB=',\x00']) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1b, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000040b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000017020700f0ffffffbf91000000000000b7020000010000008500000084000000b700fd00000000009500000000000000"], &(0x7f00000008c0)='syzkaller\x00', 0x8, 0x2, &(0x7f0000000900)=""/2, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x12, r0, 0x8, &(0x7f0000000a00)={0x7, 0x7}, 0x8, 0x10, &(0x7f0000000a40)={0x4, 0x1, 0x7fb, 0x9}, 0x10, 0x0, r1, 0x7, &(0x7f0000000ac0)=[r1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000b00)=[{0x0, 0x2, 0x4}, {0x4, 0x4, 0x9, 0x3}, {0x3, 0x1, 0x1}, {0x0, 0x9, 0x6, 0x8}, {0x4, 0x7, 0x2}, {0x5, 0x1, 0xa, 0xb}, {0x3, 0x3, 0x5, 0x9}], 0x10, 0x7}, 0x94) 8m1.514706536s ago: executing program 43 (id=5187): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg(r1, &(0x7f00000094c0)=[{{&(0x7f00000007c0)=@nl=@kern={0x10, 0x0, 0x0, 0x10000}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000880)="f3", 0x1}], 0x1}}, {{&(0x7f00000011c0)=@nl=@kern={0x10, 0x0, 0x0, 0x10000}, 0x80, &(0x7f00000043c0)=[{&(0x7f0000001240)="1f", 0x1}], 0x1, &(0x7f0000004400)=ANY=[], 0x6}}], 0x2, 0x8014) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r2}, 0x20) recvmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) r4 = fsopen(&(0x7f0000000040)='mqueue\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) write$selinux_attr(r5, &(0x7f0000000100)='system_u:object_r:crond_var_run_t:s0\x00', 0x25) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x3, 0xb42e}) connect$bt_l2cap(r5, &(0x7f0000000180)={0x1f, 0x3, @none, 0x1, 0x2}, 0xe) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) unshare(0x20000400) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ipvlan1\x00'}) r7 = fsmount(r4, 0x0, 0x6) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000140)='-\x00', &(0x7f00000001c0)='\x00', r7) request_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='\x00', 0xffffffffffffffff) 7m57.038839201s ago: executing program 44 (id=5219): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2800000013000100000000000000000018000000090000003531f1445400000008"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06daeb01ab2}, 0x4844) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x2900c, 0x40010}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x8}]}, 0x3c}}, 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, &(0x7f0000000100), 0x24, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105142, 0x1d8) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000780)={{{@in=@private, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@private0}}, &(0x7f0000000980)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r5}}, './file0\x00'}) r6 = socket(0x2d, 0x2, 0x0) setsockopt(r6, 0x11d, 0x1, &(0x7f0000000500)="0100", 0x2) setresgid(0x0, 0x0, 0x0) syz_clone(0x3089011, 0x0, 0x0, 0x0, 0x0, 0x0) 7m56.599629001s ago: executing program 45 (id=5220): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2800000013000100000000000000000018000000090000003531f1445400000008"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06daeb01ab2}, 0x4844) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x2900c, 0x40010}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x8}]}, 0x3c}}, 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, &(0x7f0000000100), 0x24, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x13, &(0x7f0000000040)=0x804008, 0x4) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a00010029bd700000000000022020000000000000200000060014004e20000006001d"], 0x2c}}, 0x80) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105142, 0x1d8) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000780)={{{@in=@private, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@private0}}, &(0x7f0000000980)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r8}}, './file0\x00'}) r9 = socket(0x2d, 0x2, 0x0) setsockopt(r9, 0x11d, 0x1, &(0x7f0000000500)="0100", 0x2) setresgid(0x0, 0x0, 0x0) syz_clone(0x3089011, 0x0, 0x0, 0x0, 0x0, 0x0) 7m44.60718638s ago: executing program 46 (id=5281): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x0, @remote, 0x7}]}, &(0x7f0000000140)=0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x800, 0x1ff}, 0x400, 0x5, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x7, 0x20000008b}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002080)={0xc, {"a2e3ad2109c752f91b48470987f70e06d038e7ff7fc6e5539b3245078b089b3208336d060890e0878f0e1ac6e70a9b3368959b6c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b38070d095d0936cd3b78130daa61f8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6ddc4d06e00000000f9db2a7869d85864056526f889af3760fd1980572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988077b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6cb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19c51432c6f14c27693102a4ed84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdbfa629e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x1000}}, 0x1060) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000040000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffd, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xfffd, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) ioprio_set$pid(0x2, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143441, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x2000) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000380)={0x4}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="010027bd00000000000000090000"], 0x14}}, 0x4000) socket$inet(0x2, 0x80000, 0x2) r8 = dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000000240)={r0, 0x9, 0x7ff, 0x2, 0x9, 0xfffc, 0x8, 0x0, {r0, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, 0x8, 0x0, 0x8, 0xcb3, 0x2}}, 0x0) syz_read_part_table(0x61f, &(0x7f0000000cc0)="$eJzs0z2IHVUbB/D/mfu58L5skNhoMAvamsI0sViSRaME0V38KmzERhCsAhYWcm9ICittbI0IKcTCNGoV0UJ2BfFjtQkWIiHYWCmiCIGR+bjZC4rNLory+3GZOXOe554zw/Oc8C83Sl2XlaSUZJ5k9Y53kmFd17NkPuyTxvn22mTa5/fWkifefvT+xx7a2mhy+8kj/2vzy1JuyYmn28Fgb9d69Z7dNz+976f5/LM7v9oZdGlJrlTJ0eRkcnOqe61pBq9f+q7sTUJyeX179XxVTzJaf27cN9y9Zd7G6saslHZyuvSn4x/2TbV/g0VDlpKrD750/a7dE812VdP8O7u/7fVqM/o+izdZSXLrI+30IqU7QvP21Az+sM+4uTSn8VQzeK85rJMD+QD2pe2/C2fHHw3bylx94/C1Uqo2VKVqivprXZ/r63+jniZH15pQU2EFBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADtLl9e3V8dLz8WfvPn37q9WpVCX5spvKShc7l2SQ5PPSJ7/28IHsf/7C2ZVM+kVHScabP178/7EvdkbZvJhMk0NJE67aX2v6ZHsb7/sF+Ed19R/llRfXfxl1U9Mf+tgt33w8WxT45/F0dviFthHnbUt03l1aqpzcGy4Gkz/bU9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH/b6QfOrG1tVI8nVRlOk1SHLm23kXl7revktg+eeuv5Tza+HiTZnLyf5EbOlDxTL62zNenuV6pMciQ5Nmyexrn+8iJjcDO3NMvWs7/rE/kLvwcAAP//Qq9sdQ==") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, 0x0) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x30, 0x1, 0xfc, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0xa, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) read(r10, &(0x7f0000000200), 0x1000) 7m41.979702582s ago: executing program 47 (id=5306): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000100)={0x9, 0x6eb, 0x8003ff, 0x20852, 0x7, "48e9d22e5894022e873fc8af8bed9395157a08", 0x10001, 0x5a62}) writev(r0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="f4d1aca1e94cc1e25a5c86cf553fd0ec982469394e09d235b30d", 0x1a}], 0x1) 7m10.093652584s ago: executing program 48 (id=5698): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x70bd25, 0x0, {{@in=@broadcast, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1d}, {0x0, 0xfffffffffffffffa, 0xfffffffffffffffd, 0xc722}, 0x0, 0x6e6bc0}, [@tmpl={0x144, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, 0x0, @in=@loopback, 0x0, 0x0, 0x3, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xb9}, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x2, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3, 0x0, 0x7ff}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x6c}, 0x2, @in=@remote, 0xffffffff, 0x0, 0x0, 0x9, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x0, @in=@loopback, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}]}, 0x1fc}}, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x1e1000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x4108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x3, 0x1}, 0x1041e0, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8001}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@timestamp={0x44, 0x8, 0x5, 0x3, 0x0, [0x2000000]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001100)={'dummy0\x00', &(0x7f0000001140)=@ethtool_sset_info={0x2c, 0x0, 0xffffffffffffffff}}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000100)='net/softnet_stat\x00') ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x67, 0x1, 0xa, 0x7b, @empty, @loopback, 0x8000, 0x8000, 0x3, 0xe}}) r5 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000006c0)={&(0x7f0000000600)=""/182, 0x21000, 0x0, 0x4, 0x2}, 0x20) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r5, 0x0) accept4(r5, 0x0, 0x0, 0x800) 6m56.903287611s ago: executing program 49 (id=5811): syz_emit_ethernet(0xd81, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"/3457], 0x0) 6m55.071908334s ago: executing program 50 (id=5826): socket$inet6(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) close(0x3) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) epoll_create1(0x80000) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES16=r0], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x8086}, 0x0) 6m38.241081096s ago: executing program 51 (id=5973): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x70bd25, 0x0, {{@in=@broadcast, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1d}, {0x0, 0xfffffffffffffffa, 0xfffffffffffffffd, 0xc722}, 0x0, 0x6e6bc0}, [@tmpl={0x144, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, 0x0, @in=@loopback, 0x0, 0x0, 0x3, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xb9}, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x2, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3, 0x0, 0x7ff}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x6c}, 0x2, @in=@remote, 0xffffffff, 0x0, 0x0, 0x9, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x0, @in=@loopback, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}]}, 0x1fc}}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x1e1000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x4108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x3, 0x1}, 0x1041e0, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8001}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@timestamp={0x44, 0x8, 0x5, 0x3, 0x0, [0x2000000]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001100)={'dummy0\x00', &(0x7f0000001140)=@ethtool_sset_info={0x2c, 0x0, 0xffffffffffffffff}}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=0x0) r5 = syz_open_procfs(r4, &(0x7f0000000100)='net/softnet_stat\x00') ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x67, 0x1, 0xa, 0x7b, @empty, @loopback, 0x8000, 0x8000, 0x3, 0xe}}) r6 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000006c0)={&(0x7f0000000600)=""/182, 0x21000, 0x0, 0x4, 0x2}, 0x20) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r6, 0x0) accept4(r6, 0x0, 0x0, 0x800) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)='/', 0x1}], 0x1, 0x0, 0x0, 0x40010}, 0x0) getdents(r5, 0x0, 0x0) getdents64(r5, 0x0, 0x0) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000540)) pwrite64(r1, 0x0, 0x0, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x503, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_IKEY={0x8, 0x4, 0x20000000}, @IFLA_GRE_FLAGS={0x8, 0xd, 0xffffffff}]}}}]}, 0x50}}, 0x0) 6m27.813053728s ago: executing program 52 (id=6086): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@ipv4_newroute={0x34, 0x18, 0x100, 0x70bd2d, 0x0, {0x2, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @SEG6_LOCAL_BPF={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG={0x8}}}]}, 0x34}}, 0x20000400) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087"], 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x40, 0xc594}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB="a6a73587764a96e0defe656bf239c9f477c8334352ebb934869e3f776ddc9cd9d185fa51a53ca3df892c74324253e2a8d72194ccae6cb53be8670428c0c2935d29485fd2b9a83a79f846492f2e6c0f5842203762c8dce98e9d1c875312d29f1d2022c66a1c076bcf"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x44844) 1m37.92657446s ago: executing program 53 (id=8519): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x50, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) perf_event_open(&(0x7f00000000c0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80, 0xffffffffffffffff}, 0x10000, 0x3, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m35.925712196s ago: executing program 54 (id=8523): openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) inotify_add_watch(0xffffffffffffffff, 0x0, 0x44000160) prlimit64(0x0, 0x8, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xcd}]}, &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x81, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000004000000000000000b00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000055abf99bfcffffff85000000ab0000001833eb00010000000000000000000000023610000080000018420000feffffff00000000000000002571feff0800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000085200000040000008520000005000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r6, 0x0, 0x0) connect$inet(r6, 0x0, 0x0) 1m15.394082654s ago: executing program 8 (id=8715): pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1f5) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x29, 0xb, 0x8, 0x5, 0x48, @mcast1, @remote, 0x20, 0x20, 0x26, 0x5}}) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x60f60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x7ffffffffffffffa}, 0x10eec4, 0x1224, 0x4, 0x2, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x200000102ffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = memfd_create(&(0x7f0000000bc0)='\xff\x00l\x1e\xa0r0}, './file0\x00'}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x3, 0x4, 0x2, 0x80000001, 0x0}, &(0x7f0000000540)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000580)={r2, @in6={{0xa, 0x4e24, 0x44a036c2, @private0, 0x800}}, 0x3, 0x3}, &(0x7f0000000640)=0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000780)={'vxcan1\x00', &(0x7f0000000680)=@ethtool_rxnfc={0x2f, 0x12, 0x8000000000000000, {0xc, @udp_ip4_spec={@loopback, @dev={0xac, 0x14, 0x14, 0x18}, 0x4e24, 0x8001, 0x1}, {0x0, @local, 0x81, 0xfa3, [0xd60, 0x71a]}, @udp_ip6_spec={@private2, @empty, 0x4e21, 0x4e23, 0x4}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, 0xb27, 0x100, [0x3, 0x8]}, 0x9, 0xfffffe00}, 0x2, [0x80000001, 0x8]}}) write$tun(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="000022f0414f670bc70eaaaaaaaaaaab86dd6105070000002c00fc02000d82e50500000000000000000000000000200100"/62], 0x3a) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r6, 0x4b45, 0x3) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x380, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) 1m12.9981748s ago: executing program 1 (id=8732): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000003900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x40) r1 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)) (async) io_setup(0x9, &(0x7f0000000240)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x17, 0x2, {{0x1, 0x0, 0x20000000, 0x5, 0xfffffffb}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x2404c080}, 0x0) connect$can_bcm(r1, &(0x7f0000000000), 0x10) (async) connect$can_bcm(r1, &(0x7f0000000000), 0x10) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x3, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x6, 0x8, 0x20001, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x3, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x6, 0x8, 0x20001, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}]) 1m12.789672825s ago: executing program 1 (id=8733): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000780)={[{@i_version}, {@nolazytime}, {@errors_remount}, {@grpjquota}, {@acl}]}, 0xfe, 0x29a, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xc6342, 0x80) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x1b1a, 0xc6de, 0x16, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000240)=0x2, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000b00)={0x0, 0x0}, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000280)=[{0x6, 0x40, 0x2, 0x7fff7ffd}]}) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\x01\x00\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x90\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde=\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84\x00\x00r\x8f\b\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000040000000000b7080000000000007b8af8ff00000000bfa200000000000007020900000000000000000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) syz_open_procfs$namespace(0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2002f00, 0xe, 0x0, &(0x7f0000000300)="000400000000000000000000e300", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mq_timedsend(r2, 0x0, 0x0, 0x4, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x9, 0x2, 0x9, 0x2, 0x13, "ba1e53668fa45ed2"}) fsetxattr$security_ima(r0, &(0x7f00000000c0), &(0x7f0000000140)=ANY=[@ANYBLOB="02f45de39821280ae0"], 0x9, 0x3) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000885) 1m12.56821969s ago: executing program 8 (id=8735): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x70bd25, 0x0, {{@in=@broadcast, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1d}, {0x0, 0xfffffffffffffffa, 0xfffffffffffffffd, 0xc722}, 0x0, 0x6e6bc0}, [@tmpl={0x104, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, 0x0, @in=@loopback, 0x0, 0x0, 0x3, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xb9}, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x2, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3, 0x0, 0x7ff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x0, @in=@loopback, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}]}, 0x1bc}}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x1e1000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x4108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x3, 0x1}, 0x1041e0, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8001}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@timestamp={0x44, 0x8, 0x5, 0x3, 0x0, [0x2000000]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001100)={'dummy0\x00', &(0x7f0000001140)=@ethtool_sset_info={0x2c, 0x0, 0xffffffffffffffff}}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r4 = syz_open_procfs(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x67, 0x1, 0xa, 0x7b, @empty, @loopback, 0x8000, 0x8000, 0x3, 0xe}}) r5 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000006c0)={&(0x7f0000000600)=""/182, 0x21000, 0x0, 0x4, 0x2}, 0x20) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r5, 0x0) accept4(r5, 0x0, 0x0, 0x800) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)='/', 0x1}], 0x1, 0x0, 0x0, 0x40010}, 0x0) getdents64(r4, 0x0, 0x0) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000540)) pwrite64(r1, 0x0, 0x0, 0x8000c61) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x1, 0x400}, 0x100200, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) gettid() ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x503, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_IKEY={0x8, 0x4, 0x20000000}, @IFLA_GRE_FLAGS={0x8, 0xd, 0xffffffff}]}}}]}, 0x50}}, 0x0) 1m12.062348452s ago: executing program 8 (id=8740): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x61, 0x4, 0x0, 0xfffff010}]}, 0x10) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='16', 0x2) ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, &(0x7f0000000140)=0x800) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @any, 0x0, 0x2}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0x65, &(0x7f0000000080)=0x2) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES32=r4], 0x50) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r6) ptrace$setsig(0x4203, r6, 0x9, &(0x7f00000003c0)={0x3b, 0x6, 0x6}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001000ffff26bd7000eedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="350c040000000000140012800b0001006d616373656300000400f07f08000500", @ANYRES32=r9, @ANYBLOB="140003006e696376663000"/20], 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r10, 0x84, 0x13, &(0x7f00000001c0)=0x7fffffff, 0x4) 1m11.966582694s ago: executing program 1 (id=8741): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat$tun(0xffffffffffffff9c, 0x0, 0xa0880, 0x0) r1 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0xc0122, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_config_ext={0x2, 0x7f}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) sendmsg$nl_route(r2, 0x0, 0x24048850) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mount(0x0, &(0x7f0000000000)='./mnt\x00', 0x0, 0x0, &(0x7f0000000540)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3c30, 0x1, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000240), 0x10012, &(0x7f0000000100)={[{@name={'name', 0x3d, '.\x00\x14\x00'}}]}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000600)='./tracing/dynamic_events\x00', 0x118) write$binfmt_script(r5, &(0x7f00000001c0)={'#! ', './tracing/dynamic_events', [], 0xa, "de"}, 0x1d) socket$nl_route(0x10, 0x3, 0x0) 1m11.048839755s ago: executing program 8 (id=8750): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x17, 0x0, 0x8, 0xff, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000640)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, 0x0, 0x4}, 0x20) 1m7.126759057s ago: executing program 1 (id=8757): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys_dbg\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys_dbg/bus/usb/devices/usb5/authorized_default\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write(r0, &(0x7f00000001c0)='0', 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x28, 0x2, 0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x8001, r1, 'id1\x00'}) sendmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x6, 0x3, 0x6, "d6da470865ebe167f7ec6450303a3a8becc92da1e77779fc7d90afdb70f20a66d8ad7b3b376eb7888c340ca421ffd2642d17c708f6a45ac1d0acdf0b592fb2", 0x2f}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)="66da676ad37d2fa77b2e406577cc7a", 0xf}, {&(0x7f0000000240)="2195171c6aeb992acf4f1cfd1afda9a7d2cbbb1f98c4eb2dbbccff7683c284c30dcdb4f620d74e39d202ba6c2ccce0a8a7ecc5aeac148b947782a2db90081c594b74aa9fe3d8ae11", 0x48}, {&(0x7f00000002c0)="09c5ee07b5710623f1ec177a39138d869f794e9b744b342838ed5b80b048211e2d225b0e7c20a2089cac1ed274d528ff8785dd0e77d4f821c429581cd972c6c84d684cd317", 0x45}, {&(0x7f0000000340)="1e473941f6c62fab38ef7a5c5ba132b949f77b88dc5cd3a6d6e0", 0x1a}, {&(0x7f0000000380)="4826f57c3e2e445fd9d058ac8f9d20ef062709b8c54d0208e96aa67613a4bc58bfea36", 0x23}, {&(0x7f00000003c0)="7959375ea1dc9e21a044f0cc9834a8b3794fbf9e8b873f07b75724eb07b06c366d3ca962b1d3577aefed985152ab33efef6b90e9313f36", 0x37}], 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x118}, 0x8801) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x8, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_VENDOR(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000004", @ANYRES16=r3, @ANYBLOB="01002dbd700002dcdf251d00000008000100", @ANYRES32=0x0, @ANYBLOB="08001d0003000000"], 0x24}, 0x1, 0x0, 0x0, 0x404c850}, 0x90) write$P9_RWRITE(r4, &(0x7f0000000000)={0xb, 0x77, 0x1}, 0xb) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003, {0x1}}, 0x18) 1m6.884190242s ago: executing program 1 (id=8759): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x61, 0x4, 0x0, 0xfffff010}]}, 0x10) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='16', 0x2) ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, &(0x7f0000000140)=0x800) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @any, 0x0, 0x2}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0x65, &(0x7f0000000080)=0x2) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES32=r4], 0x50) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r6) ptrace$setsig(0x4203, r6, 0x9, &(0x7f00000003c0)={0x3b, 0x6, 0x6}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'bridge0\x00'}) syslog(0x4, &(0x7f0000003ac0)=""/4096, 0x1000) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, &(0x7f00000001c0)=0x7fffffff, 0x4) 1m5.924482875s ago: executing program 1 (id=8765): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/181}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket(0x1d, 0x2, 0x6) socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x1, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x63, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000a40)={0x0, 0xfb, "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"}, &(0x7f0000000700)=0x145) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000900)={r4, @in={{0x2, 0x4e20, @rand_addr=0x64010102}}, [0xef9, 0x10000000000, 0x5, 0x10000, 0x100000001, 0x5292, 0x4, 0x9, 0x0, 0x3, 0x8, 0x29424aca, 0x2, 0x4, 0x7]}, &(0x7f0000000a00)=0x100) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r6, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000c40)=ANY=[], 0x1458}, 0x20048811) recvmsg$kcm(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)=""/102, 0x66}], 0x1}, 0x40) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$kcm(r6, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x8004) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r7, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0xffffffff, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x0) 1m5.779370728s ago: executing program 2 (id=8767): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = fsopen(&(0x7f0000000100)='sockfs\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x10445, &(0x7f0000000040)={[{@inlinecrypt}, {@test_dummy_encryption}]}, 0x3, 0x453, &(0x7f00000004c0)="$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") (fail_nth: 8) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r2, &(0x7f00000000c0)='.\x00', 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x0, &(0x7f0000000300), 0xff, 0x4fc, &(0x7f0000000a40)="$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") write$selinux_load(r2, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0xfa) execveat(r3, 0x0, 0x0, &(0x7f0000001180)={[&(0x7f0000000240)='name', 0x0, &(0x7f0000000f80)='\r\x104\xb1f\x7fS\x05\xfb\xe8VU\x95\x10>0\xef\xca!\xa7[\xe51\xc1~\xd39\xc4\x9b\x06\xfb\xc7\f\xbf\x88\xbc\xef\xc0\x82\xb1', &(0x7f0000001000)='ext4\x00', &(0x7f0000000280)='\x00\x1a\f\x00\x00\x00\x00\x00\x00\x00\x00\x18?k\xfd\\\xff^\t\xe3\xf4\x9d\xbc\xf27n8\t\xca=\xfcC\x1b\x1d\"e\xe0v', &(0x7f0000001080)='~', 0x0]}, 0x100) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x58}, 0x28) sendfile(r4, r1, 0x0, 0xe3aa6ea) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008800) sendto$packet(r4, &(0x7f0000001200)="0a454f3718671ee325fb87df3d7e49fec82c01b8bd59c4eb8bacb5df53729f2167dc3c3fc9d3b3dea495876beb7564ff60ccbe0c31606693cd92fa0924ab03fe187e11b0b55679ab8253fb5071c30d1e683f04fde8f4b90300a799de22fc2bb149e0b87e14727c7830821017dbaf051e2650d60a80c1e1e31a7b60c5b351323c01294adf798901df518f19b001db05e944d4e301e01e9eba1f6356c65b5d0acb269eb5839d48528391bbf05babb0f6c0c3a1ac8b12281956ddf6f48f6809f279a1b82d13ae5a026931", 0xc9, 0x0, &(0x7f0000001300)={0x11, 0x7, 0x0, 0x1, 0xab, 0x6, @multicast}, 0x14) readv(r1, &(0x7f0000000840)=[{&(0x7f0000003300)=""/4064, 0xfe0}], 0x1) fsmount(0xffffffffffffffff, 0x1, 0x86) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000980)={'wlan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010327bd7000ffdbdf250200000000"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 1m4.038973499s ago: executing program 2 (id=8769): set_mempolicy(0x3, &(0x7f0000000040)=0x80000000000001, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x2, &(0x7f0000000380)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x1}], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x40000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) 1m3.910119812s ago: executing program 2 (id=8770): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x51, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a807c8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x20) fcntl$setlease(r0, 0x400, 0x1) fcntl$getflags(r0, 0x401) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000026c0)={0x0, 'hsr0\x00', {0x3}, 0x8}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setns(0xc9, 0x0) r2 = socket(0x8, 0x2, 0x0) setsockopt(r2, 0x108, 0x42020054, &(0x7f0000000200)="01000000010000000000e787df0000000000000000dc050000000000000000010000000000000000000100000000040000000000000072c2e4e50000000000000000000000000000000500"/84, 0x54) 1m3.759045766s ago: executing program 2 (id=8771): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x2000, 0x0, 0x0}, 0x58) 1m3.299623726s ago: executing program 2 (id=8774): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x61, 0x4, 0x0, 0xfffff010}]}, 0x10) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='16', 0x2) ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, &(0x7f0000000140)=0x800) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @any, 0x0, 0x2}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0x65, &(0x7f0000000080)=0x2) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES32=r4], 0x50) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r6) ptrace$setsig(0x4203, r6, 0x9, &(0x7f00000003c0)={0x3b, 0x6, 0x6}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'bridge0\x00'}) syslog(0x4, &(0x7f0000003ac0)=""/4096, 0x1000) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, &(0x7f00000001c0)=0x7fffffff, 0x4) 1m2.351793148s ago: executing program 2 (id=8778): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x4044890) 1m1.384123441s ago: executing program 5 (id=8784): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x31}, 0x300, 0x0, 0xff, 0xb, 0x8006, 0x12, 0x1000000}, 0x20) 1m1.134978236s ago: executing program 5 (id=8785): acct(&(0x7f0000000040)='./file0\x00') 1m1.084651408s ago: executing program 5 (id=8786): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a80)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r1, 0x0, '\x00', 0x0, r0, 0x0, 0x80}, 0x50) 1m0.96969495s ago: executing program 5 (id=8787): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x18, 0x0, 0x398037b3d3988ec5, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000000000000000000000000000a00030076657468300000003400128009000100766574680000000024000280200001"], 0x60}}, 0x0) 1m0.750711255s ago: executing program 5 (id=8788): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x61, 0x4, 0x0, 0xfffff010}]}, 0x10) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='16', 0x2) ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, &(0x7f0000000140)=0x800) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @any, 0x0, 0x2}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0x65, &(0x7f0000000080)=0x2) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES32=r4], 0x50) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r6) ptrace$setsig(0x4203, r6, 0x9, &(0x7f00000003c0)={0x3b, 0x6, 0x6}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'bridge0\x00'}) syslog(0x4, &(0x7f0000003ac0)=""/4096, 0x1000) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, &(0x7f00000001c0)=0x7fffffff, 0x4) 59.865166096s ago: executing program 5 (id=8790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)="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", 0x10c}], 0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='0', 0x1) write$char_usb(r1, &(0x7f0000000300)="c4", 0x1) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x110, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xc6}, @TCA_STAB={0xc0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x8, 0x0, 0x2, 0x2, 0x0, 0x5, 0x3}}, {0xa, 0x2, [0x5, 0x1000, 0x724]}}, {{0x1c, 0x1, {0x5, 0x0, 0x5, 0x2e, 0x2, 0x5, 0x5, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x8, 0x40, 0x2, 0x8001, 0x2, 0x3d55b51, 0xd, 0x6}}, {0x10, 0x2, [0x81, 0x5, 0xff, 0x0, 0x5, 0x2]}}, {{0x1c, 0x1, {0x1, 0x0, 0xf, 0x851, 0x2, 0x4, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x1b, 0x0, 0x40, 0x0, 0x1, 0x8, 0x4, 0x1}}, {0x6, 0x2, [0x5]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xff}, @TCA_RATE={0x6, 0x5, {0x3, 0x1}}]}, 0x110}}, 0x44080) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000001c0)={r8, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e22, @private=0xa010101}], 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000180)={r8}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={r8, 0x3}, 0x8) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000000)=[{r9, 0x8520}, {r9, 0x20}], 0x2, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000180)={[{@debug}]}, 0x0, 0x236, &(0x7f0000000300)="$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") mq_getsetattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x7, 0x203d6bc8}, &(0x7f0000000080)) 55.915213498s ago: executing program 56 (id=8750): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x17, 0x0, 0x8, 0xff, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000640)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, 0x0, 0x4}, 0x20) 50.750964328s ago: executing program 57 (id=8765): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/181}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket(0x1d, 0x2, 0x6) socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x1, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x63, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000a40)={0x0, 0xfb, "28cc8226451966406d131ba80c40be0b140e0134df0da8cb99cc92c57c89d7511827567f36763234fdf6b0363f0f24c1d495c7d38e24077463b99f42140b156956c2616b4a344cf2fc21096ad8076dd4a557cf5f5572a34dc33afe2d30075276f80408f4a40ff69e6fb74e5f59502f29a01cc37455fba8b84f902c7a4caf773c767db5585da4b966cc5183816ca8ab87a87136793810e5429478212f9e0704b7a78af5dd169bab7c5c832237fea692536f5be606f57be1e3469f4d0416016e1c32d187bfc73de52b3087793b35c360903e7e9002a894f099fdb010cb4360cf48b3e7042f96e9b70fa1702e6124db0c103593a1dfbdcecb52623721"}, &(0x7f0000000700)=0x145) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000900)={r4, @in={{0x2, 0x4e20, @rand_addr=0x64010102}}, [0xef9, 0x10000000000, 0x5, 0x10000, 0x100000001, 0x5292, 0x4, 0x9, 0x0, 0x3, 0x8, 0x29424aca, 0x2, 0x4, 0x7]}, &(0x7f0000000a00)=0x100) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r6, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000c40)=ANY=[], 0x1458}, 0x20048811) recvmsg$kcm(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)=""/102, 0x66}], 0x1}, 0x40) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$kcm(r6, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x8004) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r7, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0xffffffff, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x0) 47.256687899s ago: executing program 58 (id=8778): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x4044890) 44.719141159s ago: executing program 59 (id=8790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)="e80000000009050400000000000000000200000009000100a664d3c4b3c3fd2e007a30000000001400028006000100000200e704000203000000000840050000002a34023a48458ca85f2de70000230004800800010000000001200002800c000200001a0129835e56ee98f27a1ff25023af099ea47c8c92e3848b23e327abfb1d87e5a50b6ba05e5e5347380916d85866b3e6d28d2364ac53c72f14d694d37590481cd96502e617fa161b6bf63c89009bad878fdd0e2b655154404a3d9d9dbf6e7418737b117d4968d8d1c97d5d788e452140dbb0b0366d126625a5735992a85b87534b0991e485e2340802463e64b8537771babad643eb0984661eff808b2d8a5dfcb56fa120e30f787b9e", 0x10c}], 0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='0', 0x1) write$char_usb(r1, &(0x7f0000000300)="c4", 0x1) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x110, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xc6}, @TCA_STAB={0xc0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x8, 0x0, 0x2, 0x2, 0x0, 0x5, 0x3}}, {0xa, 0x2, [0x5, 0x1000, 0x724]}}, {{0x1c, 0x1, {0x5, 0x0, 0x5, 0x2e, 0x2, 0x5, 0x5, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x8, 0x40, 0x2, 0x8001, 0x2, 0x3d55b51, 0xd, 0x6}}, {0x10, 0x2, [0x81, 0x5, 0xff, 0x0, 0x5, 0x2]}}, {{0x1c, 0x1, {0x1, 0x0, 0xf, 0x851, 0x2, 0x4, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x1b, 0x0, 0x40, 0x0, 0x1, 0x8, 0x4, 0x1}}, {0x6, 0x2, [0x5]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xff}, @TCA_RATE={0x6, 0x5, {0x3, 0x1}}]}, 0x110}}, 0x44080) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000001c0)={r8, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e22, @private=0xa010101}], 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000180)={r8}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={r8, 0x3}, 0x8) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000000)=[{r9, 0x8520}, {r9, 0x20}], 0x2, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000180)={[{@debug}]}, 0x0, 0x236, &(0x7f0000000300)="$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") mq_getsetattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x7, 0x203d6bc8}, &(0x7f0000000080)) 32.414562395s ago: executing program 9 (id=8918): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0xf) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@delchain={0x2c, 0x64, 0xf31, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffe0}, {0x10, 0xffff}, {0x0, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0xf}]}, 0x2c}}, 0x4040004) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r8, @ANYBLOB="2c0002000201aaaaaaaaaaaa140003800800040000000000080001000200"/44], 0x48}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x81c}]}]}, 0x5c}}, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.events\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r9, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, 0x140f, 0x1, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x80001}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x4040004) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3}, 0x50) r11 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETVNETLE(r11, 0x400454dc, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r12, 0x0) preadv(r12, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 31.607027984s ago: executing program 3 (id=8928): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) unshare(0x20060400) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x123402, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4, 0x5}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0xe, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000080) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 31.526292096s ago: executing program 9 (id=8931): ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000740)={0x6e3, 0xc, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff6eb, 0x0, 0x0, 0x0, 0xa}, [@alu={0x4, 0x0, 0x4, 0x6, 0x1, 0x2, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff7f8}, 0x94) r0 = getpgid(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x3, 0x7ffcfffc}]}) syz_pidfd_open(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c000280080001"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) kexec_load(0x3, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x116094000, 0x41000000}], 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) recvmmsg(r3, &(0x7f00000047c0), 0x0, 0x20, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fddbdf251a0000000600210062000000180022800400008004"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r10, @ANYBLOB="08012500800000006d4971e336ddfd088200"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r7, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x80) 30.149823488s ago: executing program 3 (id=8934): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0xa001}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, &(0x7f0000000040)) 29.397485915s ago: executing program 9 (id=8937): bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$system_posix_acl(0x0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000020"], 0x24, 0x1) 29.035011814s ago: executing program 9 (id=8939): r0 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x6, @multicast2}, 0x10) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r2, &(0x7f0000000240)={0x24, @short={0x2, 0x2}}, 0x14) sendmmsg(r2, &(0x7f000000ad80)=[{{&(0x7f00000002c0)=@in={0x2, 0x4e20, @loopback}, 0x80, 0x0}}], 0x1, 0x24887b715b25d9e2) r3 = creat(&(0x7f0000000240)='./proc_mnt/irq/1/smp_affinity\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000049c0)={r3, 0x0, 0x1000, 0x9c, &(0x7f00000037c0)="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", &(0x7f00000047c0)=""/156, 0x5, 0x0, 0x50, 0x97, &(0x7f0000004880)="92af2cc6b8fdf1ce01ae4b77a7f05287920a7e707108bbed9be51e4f563a90f92a560b4acd5e8394ccedee9195bcfeed30fb88ec78929eb773cfa244d0126eaa9518f19ee8c8ac061d3e1540a052011c", &(0x7f0000004900)="9d024425482767f37528951ffeb288fce4cfbc6fca4b8edf4d67551943a9a16818d92494b15a74b1260b58248911715a39c9e21b7e0f25516f403510d642caff38d7e8e8ca69290c79b9cc7abb79a2407201d6a037c195126e14111c71e68e129969757505322ea024cf89cd9b0c0f14d686c810636cdff1e97556036460916b91b686bc4bec5c7b9be50c6b6e287ea58d3749b5fe770a", 0x67e3a2b571314a38}, 0x50) sendmsg$rds(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x2f) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) pread64(r4, &(0x7f00000003c0)=""/63, 0x3f, 0xcf5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r6, &(0x7f0000000200)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4884) write$P9_RWALK(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="3d0000006f02000400000400000004000000002502000000080000000000c8f49ee60000010300000004000000847c1dfd3b052f807cd412e424e1e244c793d685d616040d12da0803fa425138a733759bb7440c8889f8c8ee14cb46de868c60f2c0fb9c879e2da4cf141c2c01cfedf834fb61e809408f846106c53a4699f85b419091997350c8087c2c477c176742461fa200"/162], 0x3d) openat$null(0xffffffffffffff9c, &(0x7f0000002240), 0x10c0, 0x0) signalfd(r1, &(0x7f0000002280)={[0x432d]}, 0x8) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r8 = socket$inet(0x2, 0x3, 0x7f) unshare(0x8000000) r9 = semget$private(0x0, 0x4, 0x421) semop(r9, &(0x7f0000000080)=[{0x2, 0x1, 0x1800}], 0x1) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r8, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r7, 0x0, r8, 0x0, 0x8, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') 28.972194075s ago: executing program 3 (id=8940): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 28.831977699s ago: executing program 3 (id=8942): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@grpid}, {@debug}]}, 0xfd, 0x269, &(0x7f0000001f80)="$eJzs3U9oHFUcB/Df7B/jJotEvQjiHxARDYR4E7zEi0JAQhARVIiIeJJEiAnesp68eNCzSkDwEkpvTXssvYReWgo9pW0O6aXQhh4aemgPW3Znt2ySDW33b9n5fGCYmbz35r0J832zLMxsAJk1GRGzEZGPiKmIKEZE0lrh7XSZbOxulLYXI6rVL+4m9XrpfqrZbiIiKhHxUUShWba29c3e/Z3P3vtjtfju/1tflwZ1fq3293Y/P/h3/vczcx+uXb56ez6J2Sg3ylrPo5eSNn8rJBGv9KOz50RSGPYIeBoLv56+Vsv9qxHxTj3/xcg1IvvnygsXivHBPye1/evOldcHOVag96rVYu0eWKkCmZOLiHIkuemISLdzuenp9DP89fx47qfllV+mflxeXfph2DMV0CvlSHY/PTd2duJI/m/l0/wDo6scsfvlwuaN2vZBftijAfqm9dv2N9JVLf9T362/H/IPmSP/kF3yD9kl/zACOsyu/EN2dZP/F/s0JmAw3P9hhBWbG5W2xfIP2SX/MKL+a/fU6WHyD9nVmn8AIFuqY8N+AhkYlmHPPwAAAAAAAAAAAAAAAAAAwHEbpe3F5jKoPi/+HbH/SUQU2vWfr/8ecfNt4+P3klq1x5K0WVe+favLA3TpVM+evi511Oqlm73qvzOX3uzPcX87vHviP2d9KaJSqzxTKBy//pLG9de5l59QXvy+yw6e0dG3An781WD7P+rh5nD7n9uJOF+bf2bazT+5eK2+bj//lFtfsdyhnx90eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG5lEAAAD//4oibec=") ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) r0 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r1, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000) syz_open_procfs(r0, &(0x7f0000000040)='io\x00') symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 28.502622246s ago: executing program 3 (id=8944): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) unshare(0x20060400) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x123402, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4, 0x5}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0xe, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000080) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 28.111876745s ago: executing program 9 (id=8947): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x61, 0x4, 0x0, 0xfffff010}]}, 0x10) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='16', 0x2) ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, &(0x7f0000000140)=0x800) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @any, 0x0, 0x2}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0x65, &(0x7f0000000080)=0x2) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES32=r4], 0x50) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001000ffff26bd7000eedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="350c040000000000140012800b0001006d616373656300000400f07f08000500", @ANYRES32=r9, @ANYBLOB="140003006e696376663000"/20], 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) syslog(0x4, &(0x7f0000003ac0)=""/4096, 0x1000) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r10, 0x84, 0x13, &(0x7f00000001c0)=0x7fffffff, 0x4) 27.04527613s ago: executing program 9 (id=8958): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0xffffffff}, 0x73) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000940)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) 26.59377228s ago: executing program 7 (id=8964): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="800100001000010000000000000000007f0000010000000000000000000000007f00000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e000000200000000000000000000000000001234320000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020002000000000000000000480002006469676573745f6e756c6c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480002006369706865725f6e756c6c0000"], 0x180}}, 0x0) 26.454685754s ago: executing program 7 (id=8965): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6c0000001000010027bd700402d4df2500000000", @ANYRES32=r3, @ANYBLOB="984e0600c16a01004c001280110001006272696467655f734d617665000000003400058005001c000000000005000500000000000500190002"], 0x6c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x7801, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x178}, {&(0x7f0000000700)="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", 0x133}], 0x2}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000e40)='1', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x2090) 26.454137404s ago: executing program 4 (id=8966): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000052}, 0x4008) 26.403495375s ago: executing program 4 (id=8967): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) utimes(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000100), &(0x7f0000000180)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r3, &(0x7f0000000080)="b351462188", &(0x7f0000000280)=""/69}, 0x20) 26.271940528s ago: executing program 7 (id=8968): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x200000, 0x0) write$tun(r1, &(0x7f0000000480)={@val={0x0, 0xfbfb}, @val={0x1, 0x80, 0x9, 0xb512, 0x10, 0x6}, @mpls={[{0x7}, {0x7, 0x0, 0x1}, {0x1}], @generic="c575d63beb82e00baf7cd3c0a7d4e99e20b9607a9f648bb469acb5b2bacc90f54d7500560f001a68b227dc262d117484816b4c640c87a99af7f2c367731bb2509d52f9916c1cd6d44e441de66fb182bd29f985ca6b3b163c5e4f5e12820f291e088817d5b0cd333440b369f8cf3c81f629e522cf7a6402a0bd6a542ed686129b79e3517655d8075010827ff7f9a775efdaff379a34c08f5c478caa2fcfcab2befff2ffb14c3940ec68c0679c690df8d012c5db09e83b4472569cd4"}}, 0xd5) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x130, 0x98, 0x1c8, 0x130, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00', {}, {}, 0x0, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 26.114855422s ago: executing program 7 (id=8969): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) syz_clone(0xc2002080, 0x0, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r1) shmat(0xffffffffffffffff, &(0x7f0000fff000/0x1000)=nil, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000002840)={0x14, r2, 0xf01, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008804}, 0x0) 26.029155234s ago: executing program 7 (id=8970): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x61, 0x4, 0x0, 0xfffff010}]}, 0x10) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='16', 0x2) ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, &(0x7f0000000140)=0x800) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @any, 0x0, 0x2}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0x65, &(0x7f0000000080)=0x2) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES32=r4], 0x50) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r5) ptrace$setsig(0x4203, r5, 0x9, &(0x7f00000003c0)={0x3b, 0x6, 0x6}) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001000ffff26bd7000eedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="350c040000000000140012800b0001006d616373656300000400f07f08000500", @ANYRES32=r7, @ANYBLOB="140003006e696376663000"/20], 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) syslog(0x4, &(0x7f0000003ac0)=""/4096, 0x1000) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f00000001c0)=0x7fffffff, 0x4) 25.489180746s ago: executing program 3 (id=8973): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/181}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket(0x1d, 0x2, 0x6) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={&(0x7f0000000080), 0x5}, 0xc004, 0x0, 0x0, 0x0, 0x32a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x1, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000a40)={0x0, 0x4c, "28cc8226451966406d131ba80c40be0b140e0134df0da8cb99cc92c57c89d7511827567f36763234fdf6b0363f0f24c1d495c7d38e24077463b99f42140b156956c2616b4a344cf2fc21096a"}, &(0x7f0000000700)=0x54) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, 0x0, 0x0) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r5, 0x0, 0x20048811) recvmsg$kcm(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)=""/102, 0x66}], 0x1}, 0x40) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="c978c0f33ca3874a34fc880000000000000000000000000091389d91c9fa3d9d39bd3c000400000043", @ANYRES32=0x0, @ANYBLOB="240400000000000000002700820000004000128008000100736974003400028006001000f20c0000050005000600000008000200ac1e00010500090089000000050004000900000008000c000400000008002c005e000000"], 0x88}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r7, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0xffffffff, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x0) 25.306400841s ago: executing program 60 (id=8973): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/181}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket(0x1d, 0x2, 0x6) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={&(0x7f0000000080), 0x5}, 0xc004, 0x0, 0x0, 0x0, 0x32a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x1, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000a40)={0x0, 0x4c, "28cc8226451966406d131ba80c40be0b140e0134df0da8cb99cc92c57c89d7511827567f36763234fdf6b0363f0f24c1d495c7d38e24077463b99f42140b156956c2616b4a344cf2fc21096a"}, &(0x7f0000000700)=0x54) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, 0x0, 0x0) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r5, 0x0, 0x20048811) recvmsg$kcm(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)=""/102, 0x66}], 0x1}, 0x40) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="c978c0f33ca3874a34fc880000000000000000000000000091389d91c9fa3d9d39bd3c000400000043", @ANYRES32=0x0, @ANYBLOB="240400000000000000002700820000004000128008000100736974003400028006001000f20c0000050005000600000008000200ac1e00010500090089000000050004000900000008000c000400000008002c005e000000"], 0x88}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r7, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0xffffffff, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x0) 25.083852816s ago: executing program 7 (id=8975): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x61, 0x4, 0x0, 0xfffff010}]}, 0x10) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='16', 0x2) ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, &(0x7f0000000140)=0x800) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @any, 0x0, 0x2}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0x65, &(0x7f0000000080)=0x2) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES32=r4], 0x50) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001000ffff26bd7000eedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="350c040000000000140012800b0001006d616373656300000400f07f08000500", @ANYRES32=r9, @ANYBLOB="140003006e696376663000"/20], 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) syslog(0x4, &(0x7f0000003ac0)=""/4096, 0x1000) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r10, 0x84, 0x13, &(0x7f00000001c0)=0x7fffffff, 0x4) 24.275758825s ago: executing program 4 (id=8976): bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000020"], 0x24, 0x1) 24.187950857s ago: executing program 4 (id=8977): r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x0, 0x95, 0x5, 0x3}, {0x2ad5, 0x81, 0x2, 0x4c4}, {0x8, 0x7, 0x3, 0x9}]}, 0x10) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000040)='./file1\x00', 0x1, &(0x7f0000000000)=ANY=[], 0x1, 0x610, &(0x7f0000001140)="$eJzs3V1vHFcdx/Hf+AE/IIUKUBWFND1NiuRIqbO7bhytejWdPWsP2d1ZzYwr+4YqataV5U0jpSBh3zS+oIAAccEr4JYbLrhHiBsk3ktBXAFSxaJ5stfrfXDjp1B9P6t2zp45c87/zIzmZLzzIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIMerlUplRw2/tbFpRvNqYdAcM7+o7+6xyZh2JSf5T/Pzup5lXf/u0ezXk//d1s3s203NJ5N57X/z9dfe+87MVLH8mIAuyoJ01Oyne/u7j7vdzvNRpacuK6yrsWYfKQr8prtmjR8Fprq6Wrq/Xo9M3W/YaCuKbdN4oXXjIDRL3l1TrlZXjF3eCjZaazW3YYvMh+9USqVV89PFbHu37v9gOfLW/UbDb62lZZLZSZmHyY74yI9NbN2mMds73c7KqOAO8u2UFCr35R/bgoWkUGVSdyulSqVcrlTKqw+qDx6WSjMnMkoDdKLEley0eIWc5+EbOJOpfPxXQ75a2tCmzNCPp5pCBWqOmJ8rxv/v37ejmvznXjY9HP+LUf76UZkbSsf/W9m3W6PG/xGxfOXPXFJ9nv5vr9c7xTLXvpfFtqd97eqxuuqqo+fnFVHf57UzLl84/8iM1mTVkq9IgXw15aY5Js8xqmpVqyrpQ62rrkhGdflqyCrSliLFsuke5SmUlatfKlAooyV5uiujsqqqakVGVsvaUqANtbSmmty0lm3tpOt9ZVz/i0Ll0xSq9Gf/5XihCeP/AuM/Jus7FH559gM4cAa9YvwHAAAAAABfW0761/fk/H9Wb6Sput+wpasOCwAAAAAAnKP0l/+byWQ2Sb0h5xTn/71vXU5wAAAAAADgXDjpPXaOpEW9maWKO6FG/hFg6nJDBAAAAAAAZ5T+/n8rmaTPXntTzuTzf+UXCwAAAAAAgP8PPx/1jP0/p7mOo6g95/zpHwrDWeegvfm289RNZrhPp7PlpgdrjOs3nGt5JelkdSb/5tmbTv70y8OHYH6RT7b74nCGPevXGQjgh0UNQwL4TZEcCEC/0lvZjLeeZNMnxZyslcW637DLXtB4ryzXTeLYjH/8yc5PlHb/F63mTF7xR8+6c0ctHjzNH6B44jmK6cpwNGRl6Efp8xbSey6GPt14Nr0RI2930dH2TrdT6t8A+WUYJ67GGL0B9LluZ2Vu50/aXzze//mkzfJy2vtrU7Ed6H0SRbbc287Tg2SJCT0fFcWdrMydpTvZ5CiKZK2mUVTGRrFTLVZ9tgpeal2MjuJwXayMj6LbWUm3yEG2F7xEFABwVbYnjELOyYE/P7wtDFY15ii3PelNPoOj+6R/XrzIvyWtzBezPtdSlli6kR5YZxZ08oheOjyiJx0YckTPxti0npca3X5/4h1Io8bYpN1fH7ZbTtv9XRK3RrYbNSqO5rKVWPwI8/jjzsedTyqVldXSu6XSg4pm027kk7j+2z8w9gAABkx+x87EEs676Vl1MnP4WfW3Dy8pWNZHeqaunuheerdBesXB/PSQWhf7LkO4N+GsdbHvDS/3Rp7V/avnSH9/J+93R5UxZY/X67xYuYQtAQDA5bndNw7rJcf/e4Pn3TdGjc/JWD7+7Lh/LAcAABfDhl84i/HPnDD02x+Wq9WyG69bEwbeIxP6tTVr/FZsQ2/dba1Z0w6DOPCCRpL4wK/ZyEQb7XYQxqYehKYdRP5m+uZ3k7/6PbJNtxX7XtRuWDeyxgtasevFpuZHnmlvvN/wo3UbpgtHbev5dd9zYz9omelgI/TssjGRtX0F/ZptxTt1P0m2TDv0m264ZT4IGhtNa2o28kK/HQdZhUVbfqsehM202uWrXtkAALwiPt3b333c7XaeX2DiqvsIAACO+wqj9NylBAQAAAAAAAAAAAAAAAAAAAAAAE443Z18X/bO4UbAOQ3kPLvImw6HJ/7411N1ee7SA7u6xL97mVclnr393c8k5Tm9z9S/20zpb+8nu+2FtT49ZNYLSVnOf3qvxPo5deIbe/u7C6deqnFNOsq56iMTgIv2vwAAAP//bdlHnA==") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32], 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23.61094736s ago: executing program 4 (id=8978): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x61, 0x4, 0x0, 0xfffff010}]}, 0x10) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='16', 0x2) ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, &(0x7f0000000140)=0x800) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @any, 0x0, 0x2}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0x65, &(0x7f0000000080)=0x2) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES32=r4], 0x50) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001000ffff26bd7000eedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="350c040000000000140012800b0001006d616373656300000400f07f08000500", @ANYRES32=r9, @ANYBLOB="140003006e696376663000"/20], 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) syslog(0x4, &(0x7f0000003ac0)=""/4096, 0x1000) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r10, 0x84, 0x13, &(0x7f00000001c0)=0x7fffffff, 0x4) 22.747530981s ago: executing program 4 (id=8982): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f0000000400000004000000020002"], 0x48) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r4 = gettid() rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) tkill(r4, 0x12) ptrace$getsig(0x4202, r4, 0x3, &(0x7f00000002c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000003700), 0x400) sched_rr_get_interval(r4, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r6, 0xc05c5340, &(0x7f0000003740)={0xff, 0x6, 0x7, {0x0, 0x101}, 0x4d, 0x3ff}) r7 = memfd_create(&(0x7f00000004c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe2\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9e\xff\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8\x02\x00\x00\x00\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c\x0f\xc5\xb1c\xb0\x0f\xa2<\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xedk\x955;J\xa4\x81cm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\xc9\xc0]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00\xe5\xe1\x11\xed\xd2\xa49\xbeL\xff\xaa\xfe\xd3r\x8a=\x8b\x90\xe1x#q\xd3F\xa5Q\x86x\xe4\x90\\\xec\xeff\xcd\xfc\xa87\x85\xc6\xc9\xf6\xbc\xbd-\xf6\x83#\xc0\x01\xb8\xec5\x81Q\xa6RM\xffP\x8f\x16\\\xdb\xc3h\xf4G\x1f\x95MO\xcc\xf9!\xfe\xaa\xb6,E/\"\xfc\xe2\xac\x8e8\xecR\xa6G#\xdd\\x\x0e\x98\xb7(\v\x84*\xd0\xbb\x1c\xbb0\xdaN\xda\xa9\x95\xd9\f\xb4\x87\x88\x94\xb5(\xe6\xa8\xba\xe1\xe14e\xbf\xf3w\xcbx\xf1\xbdp\xbb\xfeh\xcb\xec\xe6\x90\xd54\x01X$\x96\xcc\xbb\x10\xc8E\xef\x0e\x0f\xe4\xac)M|Y\x89$\x14,n&[\x8a\xc3.\xca\x89\xe1DY*\x85\xdc\xe5\xb9\x8f\f\xbc[W\xa5p\xf2\x06\x98\xd2c\xb5D\x81\x14))\xd2\xd3\xd0\x8d.\x99\xfc\xba\x14M_\"\xec=\x1e}\x7f\x0f\a\xe5\x01\x9ad3`y3\xff\\ P\x89\xd58\x10\x9a[\x98\x1a\xc7\v\xc5\x8c\"8\\\xb2\xc8\xb8hW\x0f\xb0f\xc7\x12H\xfb\xa2]\xfeY\xb6p#stl\x14(&\xb0\xe0S\xc2\xf8\x9d\xd0\xa3\xa1\x10\x83C\x85sB\x05\xc2\xc1\xb8\x8d\x9f\x1b\xb2\xf34\xb7\x8c\xab \xd9\xc7R\xaaw\xea\x9d\xa5\x9d=\xcaa\xca\xf4\xfcX\x0f:(\x8c\xd6\x1d{o\x02_2\xfb& L\xb6=\xfb\xe5', 0x7) lseek(r7, 0x5, 0x3) r8 = socket$unix(0x1, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r9 = syz_open_procfs(0x0, &(0x7f00000018c0)='net/ip_vs\x00') ioctl$FICLONE(r9, 0x40049409, r9) waitid$P_PIDFD(0x3, r9, &(0x7f0000000380), 0x80000006, &(0x7f0000000400)) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x3}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0x5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) 11.842469594s ago: executing program 61 (id=8958): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0xffffffff}, 0x73) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000940)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) 9.811995911s ago: executing program 62 (id=8975): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x61, 0x4, 0x0, 0xfffff010}]}, 0x10) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='16', 0x2) ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, &(0x7f0000000140)=0x800) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @any, 0x0, 0x2}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0x65, &(0x7f0000000080)=0x2) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES32=r4], 0x50) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001000ffff26bd7000eedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="350c040000000000140012800b0001006d616373656300000400f07f08000500", @ANYRES32=r9, @ANYBLOB="140003006e696376663000"/20], 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) syslog(0x4, &(0x7f0000003ac0)=""/4096, 0x1000) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r10, 0x84, 0x13, &(0x7f00000001c0)=0x7fffffff, 0x4) 7.636526572s ago: executing program 63 (id=8982): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f0000000400000004000000020002"], 0x48) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r4 = gettid() rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) tkill(r4, 0x12) ptrace$getsig(0x4202, r4, 0x3, &(0x7f00000002c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000003700), 0x400) sched_rr_get_interval(r4, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r6, 0xc05c5340, &(0x7f0000003740)={0xff, 0x6, 0x7, {0x0, 0x101}, 0x4d, 0x3ff}) r7 = memfd_create(&(0x7f00000004c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe2\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9e\xff\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8\x02\x00\x00\x00\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c\x0f\xc5\xb1c\xb0\x0f\xa2<\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xedk\x955;J\xa4\x81cm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\xc9\xc0]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00\xe5\xe1\x11\xed\xd2\xa49\xbeL\xff\xaa\xfe\xd3r\x8a=\x8b\x90\xe1x#q\xd3F\xa5Q\x86x\xe4\x90\\\xec\xeff\xcd\xfc\xa87\x85\xc6\xc9\xf6\xbc\xbd-\xf6\x83#\xc0\x01\xb8\xec5\x81Q\xa6RM\xffP\x8f\x16\\\xdb\xc3h\xf4G\x1f\x95MO\xcc\xf9!\xfe\xaa\xb6,E/\"\xfc\xe2\xac\x8e8\xecR\xa6G#\xdd\\x\x0e\x98\xb7(\v\x84*\xd0\xbb\x1c\xbb0\xdaN\xda\xa9\x95\xd9\f\xb4\x87\x88\x94\xb5(\xe6\xa8\xba\xe1\xe14e\xbf\xf3w\xcbx\xf1\xbdp\xbb\xfeh\xcb\xec\xe6\x90\xd54\x01X$\x96\xcc\xbb\x10\xc8E\xef\x0e\x0f\xe4\xac)M|Y\x89$\x14,n&[\x8a\xc3.\xca\x89\xe1DY*\x85\xdc\xe5\xb9\x8f\f\xbc[W\xa5p\xf2\x06\x98\xd2c\xb5D\x81\x14))\xd2\xd3\xd0\x8d.\x99\xfc\xba\x14M_\"\xec=\x1e}\x7f\x0f\a\xe5\x01\x9ad3`y3\xff\\ P\x89\xd58\x10\x9a[\x98\x1a\xc7\v\xc5\x8c\"8\\\xb2\xc8\xb8hW\x0f\xb0f\xc7\x12H\xfb\xa2]\xfeY\xb6p#stl\x14(&\xb0\xe0S\xc2\xf8\x9d\xd0\xa3\xa1\x10\x83C\x85sB\x05\xc2\xc1\xb8\x8d\x9f\x1b\xb2\xf34\xb7\x8c\xab \xd9\xc7R\xaaw\xea\x9d\xa5\x9d=\xcaa\xca\xf4\xfcX\x0f:(\x8c\xd6\x1d{o\x02_2\xfb& L\xb6=\xfb\xe5', 0x7) lseek(r7, 0x5, 0x3) r8 = socket$unix(0x1, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r9 = syz_open_procfs(0x0, &(0x7f00000018c0)='net/ip_vs\x00') ioctl$FICLONE(r9, 0x40049409, r9) waitid$P_PIDFD(0x3, r9, &(0x7f0000000380), 0x80000006, &(0x7f0000000400)) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x3}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0x5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) 1.994297834s ago: executing program 6 (id=9075): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) shutdown(0xffffffffffffffff, 0x2) 1.902840536s ago: executing program 6 (id=9076): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1.871202736s ago: executing program 6 (id=9077): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0) 1.643818352s ago: executing program 6 (id=9080): move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x79, 0x3}}, './trace\x00'}) perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x2f, 0x1, 0xf9, 0x0, 0x0, 0x7, 0x4731, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x4, @perf_bp={&(0x7f0000000140), 0x5}, 0x10f8eb, 0x7, 0x2, 0x7, 0xc, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, r0, 0x8) r1 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x80, 0x2}]}, 0x10) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000001800ffff00000000000000008a000000fe00ff09000000009391db9167be6b141750aac74043a90da78a192a3a059c361e2dc1797abfa869f16ad30dbb13e5814c1b46b289f87b0cab7ca85fafb660b8d04e6bf2ca7730d487151cd185583227040a7c95dd89b9187faf7091c9f0d9a3a59296bc7f8a89cb7051a2f4953ebf1982a66a832c070d4b1c10ac2369be08d33453bbf81d7a877631f7717e567641aa7b40b834190c5ab3896df0c2b916b807d8c3518fd5cebea7d043258d6da1195daa6bc446dcd42c4439e63582b70d7d530b9cdff25a6ccbe6a525b48f98e63898f117a9dcda9ecf897ea03243ab469d"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000340), 0xc, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="88000000031400042dbd7000fcdbdf250900020073797a320000000008004100736977001400330076949954975f746f5f626f6e640000000900020073797a30000000000800410073697700140033006272696467655f736c6176655f3100000900020073797a320000000008004100727865001400330077673200"/136], 0x88}, 0x1, 0x0, 0x0, 0x4804}, 0x4000041) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0423, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004, 0x4, @perf_config_ext={0x4, 0x7f}, 0x2012, 0x0, 0x7ffff, 0x5, 0x2, 0x3, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = io_uring_setup(0x603b, &(0x7f0000000040)={0x0, 0xc724, 0xc000, 0xa, 0x38a}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x80002, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x2, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x8185}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x2}]}}]}, 0x44}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r8) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 1.492415565s ago: executing program 0 (id=9083): socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) shutdown(0xffffffffffffffff, 0x2) 1.398765558s ago: executing program 0 (id=9084): openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x700000b, 0x12, r0, 0x0) fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) 1.364070088s ago: executing program 0 (id=9085): r0 = syz_io_uring_setup(0xf19, &(0x7f0000000540)={0x0, 0xfd9a, 0x1000, 0x5, 0x2200184}, &(0x7f0000000500), &(0x7f0000000340), &(0x7f0000000000)) pipe(&(0x7f0000000240)={0xffffffffffffffff}) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) io_uring_enter(r0, 0x82, 0xbc7b, 0x1, 0x0, 0xfffffffffffffe60) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x8003) fcntl$setlease(r2, 0x400, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000000740)=[{&(0x7f0000000040)=@in={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000180)="a2e9", 0x2}], 0x1, &(0x7f0000000500)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x43bf3d3c}}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0x0, 0x3, 0x7fff}}], 0x38, 0x8008}], 0x1, 0x44455) write(r3, &(0x7f0000000180)="707a73408b202e2f66696c65303a30", 0xf) 905.697559ms ago: executing program 6 (id=9086): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0xfffffffd) r3 = socket$inet(0xa, 0x801, 0x84) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) listen(r3, 0xfffffffd) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="4800fe001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 421.96558ms ago: executing program 0 (id=9087): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0) 327.246252ms ago: executing program 0 (id=9088): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000600)=[{&(0x7f0000000280)}], 0x1, 0x5a00, 0x0, 0x1a) openat(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x128) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @mcast2, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000001200)="80006466d3805699", 0x8, 0x200040d0, &(0x7f0000000000)={0xa, 0x4e22, 0x805, @mcast2}, 0x1c) 210.622515ms ago: executing program 0 (id=9089): r0 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x6, @multicast2}, 0x10) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r2, &(0x7f0000000240)={0x24, @short={0x2, 0x2}}, 0x14) sendmmsg(r2, &(0x7f000000ad80)=[{{&(0x7f00000002c0)=@in={0x2, 0x4e20, @loopback}, 0x80, 0x0}}], 0x1, 0x24887b715b25d9e2) r3 = creat(&(0x7f0000000240)='./proc_mnt/irq/1/smp_affinity\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000049c0)={r3, 0x0, 0x1000, 0x9c, &(0x7f00000037c0)="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", &(0x7f00000047c0)=""/156, 0x5, 0x0, 0x55, 0x0, &(0x7f0000004880)="92af2cc6b8fdf1ce01ae4b77a7f05287920a7e707108bbed9be51e4f563a90f92a560b4acd5e8394ccedee9195bcfeed30fb88ec78929eb773cfa244d0126eaa9518f19ee8c8ac061d3e1540a052011c926f2e74db", &(0x7f0000004900), 0x67e3a2b571314a38}, 0x50) sendmsg$rds(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x2f) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) pread64(r4, &(0x7f00000003c0)=""/63, 0x3f, 0xcf5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r6, &(0x7f0000000200)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4884) write$P9_RWALK(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="3d0000006f02000400000400000004000000002502000000080000000000c8f49ee60000010300000004000000847c1dfd3b052f807cd412e424e1e244c793d685d616040d12da0803fa425138a733759bb7440c8889f8c8ee14cb46de868c60f2c0fb9c879e2da4cf141c2c01cfedf834fb61e809408f846106c53a4699f85b419091997350c8087c2c477c176742461fa200"/162], 0x3d) openat$null(0xffffffffffffff9c, &(0x7f0000002240), 0x10c0, 0x0) signalfd(r1, &(0x7f0000002280)={[0x432d]}, 0x8) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r8 = socket$inet(0x2, 0x3, 0x7f) unshare(0x8000000) r9 = semget$private(0x0, 0x4, 0x421) semop(r9, &(0x7f0000000080)=[{0x2, 0x1, 0x1800}], 0x1) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r8, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r7, 0x0, r8, 0x0, 0x8, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') 0s ago: executing program 6 (id=9090): socket$kcm(0x10, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000000)=0x8, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e24, 0x84, @empty, 0x3}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x17, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8880) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) readv(r3, &(0x7f00000000c0)=[{&(0x7f00000007c0)=""/4109, 0x100d}], 0x1) write$evdev(r3, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) kernel console output (not intermixed with test programs): -fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1053.639516][ T3089] EXT4-fs: test_dummy_encryption option not supported [ 1053.924497][ T3099] x_tables: unsorted entry at hook 3 [ 1053.990248][ T3099] loop1: detected capacity change from 0 to 512 [ 1054.034013][ T3099] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c02c, mo2=0002] [ 1054.061141][ T3096] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8683'. [ 1054.073512][ T3099] System zones: 1-12 [ 1054.127660][ T3099] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.8684: error while reading EA inode 32 err=-116 [ 1054.159966][ T3099] loop1: lost filesystem error report for type 5 error -117 [ 1054.163788][ T3099] EXT4-fs (loop1): Remounting filesystem read-only [ 1054.171364][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1054.171386][ C1] EXT4-fs (loop1): initial error at time 1787271437: ext4_xattr_inode_iget:446 [ 1054.171420][ C1] EXT4-fs (loop1): last error at time 1787271437: ext4_xattr_inode_iget:446 [ 1054.221934][ T3099] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 1054.276293][ T3099] EXT4-fs (loop1): 1 orphan inode deleted [ 1054.302014][ T3099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1054.346137][ T3099] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1054.482193][ T3122] loop8: detected capacity change from 0 to 512 [ 1054.522359][ T3122] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.8687: corrupted in-inode xattr: invalid ea_ino [ 1054.549255][ T3122] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1054.554719][ T3122] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.8687: couldn't read orphan inode 15 (err -117) [ 1054.564218][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1054.564254][ C0] EXT4-fs (loop8): initial error at time 1787271438: ext4_iget_extra_inode:5180: inode 15 [ 1054.564290][ C0] EXT4-fs (loop8): last error at time 1787271438: ext4_iget_extra_inode:5180: inode 15 [ 1054.668178][ T3122] loop8: lost filesystem error report for type 5 error -117 [ 1054.670680][ T3122] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1054.738155][ T3135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8691'. [ 1054.802420][ T3122] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #2: block 4: comm syz.8.8687: lblock 0 mapped to illegal pblock 4 (length 1) [ 1054.880407][ T3122] EXT4-fs warning (device loop8): dx_probe:791: inode #2: lblock 0: comm syz.8.8687: error -EUCLEAN reading directory block [ 1054.975633][ T3151] loop1: detected capacity change from 0 to 128 [ 1054.989114][ T3148] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #2: block 4: comm syz.8.8687: lblock 0 mapped to illegal pblock 4 (length 1) [ 1055.032523][ T3151] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1055.108581][ T3151] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1055.138777][ T3148] EXT4-fs warning (device loop8): dx_probe:791: inode #2: lblock 0: comm syz.8.8687: error -EUCLEAN reading directory block [ 1055.302339][ T3165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8696'. [ 1055.362772][T26717] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1055.459037][ T2573] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1055.486909][ T3177] loop8: detected capacity change from 0 to 128 [ 1055.530133][ T3177] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1055.548184][ T3177] ext4 filesystem being mounted at /531/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1055.601107][T26717] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1055.622608][ T3181] loop1: detected capacity change from 0 to 512 [ 1056.207415][ T3210] loop1: detected capacity change from 0 to 512 [ 1056.250638][ T3210] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.8707: corrupted in-inode xattr: invalid ea_ino [ 1056.285691][ T1959] audit_log_start: 4117 callbacks suppressed [ 1056.285713][ T1959] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1056.298695][ T1959] audit: audit_lost=2062 audit_rate_limit=0 audit_backlog_limit=64 [ 1056.306800][ T1959] audit: backlog limit exceeded [ 1056.311841][ T28] audit: type=1400 audit(1787271439.729:34065): avc: denied { write } for pid=1959 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1056.382526][ T3210] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1056.386470][ T3210] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.8707: couldn't read orphan inode 15 (err -117) [ 1056.395982][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1056.396009][ C0] EXT4-fs (loop1): initial error at time 1787271439: ext4_iget_extra_inode:5180: inode 15 [ 1056.396070][ C0] EXT4-fs (loop1): last error at time 1787271439: ext4_iget_extra_inode:5180: inode 15 [ 1056.409212][ T28] audit: type=1400 audit(1787271439.729:34066): avc: denied { write } for pid=1959 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1056.461745][ T3210] loop1: lost filesystem error report for type 5 error -117 [ 1056.462666][ T1959] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1056.469279][ T3182] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1056.473139][ T3210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1056.476604][ T3182] audit: audit_lost=2063 audit_rate_limit=0 audit_backlog_limit=64 [ 1056.476636][ T3182] audit: backlog limit exceeded [ 1056.512434][ T1959] audit: audit_lost=2064 audit_rate_limit=0 audit_backlog_limit=64 [ 1056.630968][ T3228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8708'. [ 1056.631336][ T3210] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 4: comm syz.1.8707: lblock 0 mapped to illegal pblock 4 (length 1) [ 1056.650146][ T3202] loop8: detected capacity change from 0 to 512 [ 1056.710695][ T3210] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.8707: error -EUCLEAN reading directory block [ 1056.770151][ T3231] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 4: comm syz.1.8707: lblock 0 mapped to illegal pblock 4 (length 1) [ 1056.879591][ T3231] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.8707: error -EUCLEAN reading directory block [ 1056.950066][ T2573] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1057.218816][ T3257] loop2: detected capacity change from 0 to 1024 [ 1057.270004][ T3257] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1057.296798][ T3257] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1057.327612][ T3257] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1057.428392][ T3257] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1057.458493][ T3257] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1057.488793][ T3257] EXT4-fs error (device loop2): ext4_read_inode_bitmap:169: comm syz.2.8717: Inode bitmap for bg 0 marked uninitialized [ 1057.510062][ T3257] loop2: lost filesystem error report for type 5 error -117 [ 1057.511735][ T3257] EXT4-fs (loop2): Remounting filesystem read-only [ 1057.519312][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1057.519340][ C1] EXT4-fs (loop2): initial error at time 1787271440: ext4_read_inode_bitmap:169 [ 1057.519377][ C1] EXT4-fs (loop2): last error at time 1787271440: ext4_read_inode_bitmap:169 [ 1057.628961][ T3257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1058.149347][ T3301] loop3: detected capacity change from 0 to 512 [ 1058.367461][ T3301] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.8723: corrupted in-inode xattr: invalid ea_ino [ 1058.406226][ T3301] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1058.407460][ T3301] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.8723: couldn't read orphan inode 15 (err -117) [ 1058.437900][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1058.445681][ C1] EXT4-fs (loop3): initial error at time 1787271441: ext4_iget_extra_inode:5180: inode 15 [ 1058.456336][ C1] EXT4-fs (loop3): last error at time 1787271441: ext4_iget_extra_inode:5180: inode 15 [ 1058.533916][ T3301] loop3: lost filesystem error report for type 5 error -117 [ 1058.535083][ T3301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1058.654387][ T3307] loop8: detected capacity change from 0 to 512 [ 1058.664085][ T3301] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 4: comm syz.3.8723: lblock 0 mapped to illegal pblock 4 (length 1) [ 1058.703353][ T3307] EXT4-fs: inline encryption not supported [ 1058.728564][ T3301] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.8723: error -EUCLEAN reading directory block [ 1058.773711][ T3312] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 4: comm syz.3.8723: lblock 0 mapped to illegal pblock 4 (length 1) [ 1058.812053][ T3307] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 1058.837128][T32676] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1058.849160][ T3312] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.8723: error -EUCLEAN reading directory block [ 1058.908778][ T3315] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 4: comm syz.3.8723: lblock 0 mapped to illegal pblock 4 (length 1) [ 1059.005925][ T3307] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1059.047759][ T3315] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.8723: error -EUCLEAN reading directory block [ 1059.077555][ T3324] netlink: 'syz.1.8728': attribute type 1 has an invalid length. [ 1059.110783][ T3307] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.8724: bg 0: block 248: padding at end of block bitmap is not set [ 1059.186188][ T3307] loop8: lost filesystem error report for type 5 error -117 [ 1059.187978][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1059.202216][ C1] EXT4-fs (loop8): last error at time 1787271442: ext4_validate_block_bitmap:441 [ 1059.213653][ T2510] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1059.235300][ T3307] EXT4-fs error (device loop8): ext4_acquire_dquot:7041: comm syz.8.8724: Failed to acquire dquot type 1 [ 1059.250929][ T3307] loop8: lost filesystem error report for type 5 error -28 [ 1059.268194][ T3307] EXT4-fs (loop8): 1 truncate cleaned up [ 1059.345751][ T3342] netlink: 'syz.3.8730': attribute type 1 has an invalid length. [ 1059.353876][ T3307] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1059.430039][ T3342] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1059.585136][ T4422] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.676048][ T3366] loop1: detected capacity change from 0 to 128 [ 1059.700112][ T3366] EXT4-fs: Ignoring removed i_version option [ 1059.707090][ T4422] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.775532][ T3366] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1059.872666][T26717] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1059.886564][ T3366] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1059.922932][ T4422] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.030816][ T3393] loop8: detected capacity change from 0 to 128 [ 1060.057936][ T3393] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1060.067407][ T4422] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.086881][ T3393] ext4 filesystem being mounted at /539/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1060.378915][T26717] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1060.413162][ T2573] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1060.428494][ T4422] bridge_slave_1: left allmulticast mode [ 1060.428520][ T4422] bridge_slave_1: left promiscuous mode [ 1060.428753][ T4422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.446687][ T4422] bridge_slave_0: left allmulticast mode [ 1060.464219][ T3420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8739'. [ 1060.464252][ T3420] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8739'. [ 1060.478238][ T4422] bridge_slave_0: left promiscuous mode [ 1060.478411][ T4422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.652673][ T3435] cgroup: No subsys list or none specified [ 1060.786380][ T4422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1060.838290][ T4422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1060.864183][ T4422] bond0 (unregistering): Released all slaves [ 1061.169331][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.182102][ T3328] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.191769][ T3328] bridge_slave_0: entered allmulticast mode [ 1061.200266][ T3328] bridge_slave_0: entered promiscuous mode [ 1061.210316][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.218126][ T3328] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.226250][ T3328] bridge_slave_1: entered allmulticast mode [ 1061.235593][ T3328] bridge_slave_1: entered promiscuous mode [ 1061.277283][ T4422] hsr_slave_0: left promiscuous mode [ 1061.284423][ T4422] hsr_slave_1: left promiscuous mode [ 1061.291163][ T4422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1061.299020][ T4422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1061.310508][ T4422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1061.318478][ T4422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1061.339791][ T28] kauditd_printk_skb: 2761 callbacks suppressed [ 1061.339815][ T28] audit: type=1400 audit(1787271444.809:35982): avc: denied { write } for pid=3445 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1061.420819][ T28] audit: type=1400 audit(1787271444.809:35983): avc: denied { write } for pid=26717 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1061.449868][T26717] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1061.459162][T26717] audit: audit_lost=2346 audit_rate_limit=0 audit_backlog_limit=64 [ 1061.468389][T26717] audit: backlog limit exceeded [ 1061.476073][T26717] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1061.484127][T26717] audit: audit_lost=2347 audit_rate_limit=0 audit_backlog_limit=64 [ 1061.485348][ T3475] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1061.493071][T26717] audit: backlog limit exceeded [ 1061.500449][ T4422] veth1_macvtap: left promiscuous mode [ 1061.505216][T26717] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1061.509710][ T4422] veth0_macvtap: left promiscuous mode [ 1061.538254][ T4422] veth1_vlan: left promiscuous mode [ 1061.548084][ T4422] veth0_vlan: left promiscuous mode [ 1061.660253][ T3473] loop2: detected capacity change from 0 to 512 [ 1061.885762][ T4422] team0 (unregistering): Port device team_slave_1 removed [ 1061.904909][ T4422] team0 (unregistering): Port device team_slave_0 removed [ 1063.438364][ T3328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1063.453788][ T3328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1063.765235][ T3328] team0: Port device team_slave_0 added [ 1063.800030][ T3328] team0: Port device team_slave_1 added [ 1063.859241][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1063.903525][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1063.983581][ T3510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8754'. [ 1064.032975][ T3328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1064.106593][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1064.135073][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1064.200680][ T3328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1064.375578][ T3515] loop2: detected capacity change from 0 to 512 [ 1064.415620][ T3515] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1064.520546][ T3328] hsr_slave_0: entered promiscuous mode [ 1064.532071][ T3515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1064.575872][ T3328] hsr_slave_1: entered promiscuous mode [ 1064.593093][ T3515] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1064.814708][ T3528] loop3: detected capacity change from 0 to 8192 [ 1065.697135][ T3328] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1065.762156][ T3328] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1065.775217][ T3328] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1065.787049][T32676] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1065.802358][ T3328] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1065.832535][ T3328] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1065.854652][ T3328] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1065.868487][ T3328] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1065.909738][ T3328] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1066.167542][ T3328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1066.249623][ T3328] 8021q: adding VLAN 0 to HW filter on device team0 [ 1066.292661][ T3422] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.300041][ T3422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1066.348281][ T28] kauditd_printk_skb: 4295 callbacks suppressed [ 1066.348300][ T28] audit: type=1400 audit(1787271449.809:39201): avc: denied { write } for pid=26717 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1066.371508][T26717] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1066.393043][ T3422] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.400502][ T3422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1066.413737][ T3566] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1066.416981][T26717] audit: audit_lost=2708 audit_rate_limit=0 audit_backlog_limit=64 [ 1066.420855][ T28] audit: type=1400 audit(1787271449.809:39202): avc: denied { write } for pid=26717 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1066.431778][T26717] audit: backlog limit exceeded [ 1066.462630][ T3566] audit: audit_lost=2709 audit_rate_limit=0 audit_backlog_limit=64 [ 1066.476143][T26717] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1066.486843][T26717] audit: audit_lost=2710 audit_rate_limit=0 audit_backlog_limit=64 [ 1066.497134][T26717] audit: backlog limit exceeded [ 1066.761116][ T3596] FAULT_INJECTION: forcing a failure. [ 1066.761116][ T3596] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1066.774547][ T3596] CPU: 0 UID: 0 PID: 3596 Comm: syz.2.8767 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1066.774586][ T3596] Tainted: [W]=WARN [ 1066.774599][ T3596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1066.774619][ T3596] Call Trace: [ 1066.774669][ T3596] [ 1066.774681][ T3596] __dump_stack+0x1d/0x30 [ 1066.774712][ T3596] dump_stack_lvl+0x95/0xd0 [ 1066.774765][ T3596] dump_stack+0x15/0x1b [ 1066.774792][ T3596] should_fail_ex+0x25e/0x270 [ 1066.774826][ T3596] should_fail_alloc_page+0xf2/0x100 [ 1066.774927][ T3596] __alloc_frozen_pages_noprof+0x108/0x350 [ 1066.774962][ T3596] alloc_pages_mpol+0xa9/0x1d0 [ 1066.775031][ T3596] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 1066.775074][ T3596] do_wp_page+0x6f6/0x2030 [ 1066.775118][ T3596] ? __rcu_read_lock+0x36/0x50 [ 1066.775188][ T3596] handle_mm_fault+0x8bc/0x2da0 [ 1066.775267][ T3596] do_user_addr_fault+0x634/0x1060 [ 1066.775308][ T3596] ? trace_page_fault_user+0x88/0xa0 [ 1066.775423][ T3596] exc_page_fault+0x62/0xa0 [ 1066.775451][ T3596] asm_exc_page_fault+0x26/0x30 [ 1066.775482][ T3596] RIP: 0033:0x7fc084f75258 [ 1066.775533][ T3596] Code: 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 1066.775557][ T3596] RSP: 002b:00007fc083b16470 EFLAGS: 00010202 [ 1066.775588][ T3596] RAX: 0000000000004005 RBX: 00007fc083b16530 RCX: 0000000000000101 [ 1066.775609][ T3596] RDX: 00000000000000ff RSI: 0000000000000400 RDI: 00007fc083b165d0 [ 1066.775626][ T3596] RBP: 0000000000000102 R08: 00007fc07b6f7000 R09: 0000000000000004 [ 1066.775713][ T3596] R10: 00002000000004c2 R11: 0000000000000451 R12: 0000000000000301 [ 1066.775743][ T3596] R13: 00007fc085175000 R14: 0000000000000013 R15: 00007fc083b165d0 [ 1066.775770][ T3596] [ 1066.775789][ T3596] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1067.067559][ T3596] loop2: detected capacity change from 0 to 512 [ 1067.074792][ T3596] EXT4-fs: inline encryption not supported [ 1067.080825][ T3596] EXT4-fs: test_dummy_encryption option not supported [ 1067.132845][ T3596] loop2: detected capacity change from 0 to 512 [ 1067.308606][ T3596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1067.321155][ T3596] ext4 filesystem being mounted at /175/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1067.546658][ T3624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8767'. [ 1067.753187][ T3328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1067.765359][ T3631] netlink: 'syz.3.8768': attribute type 10 has an invalid length. [ 1067.873493][ T3638] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8768'. [ 1068.336668][ T3631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1068.353908][ T3631] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 1068.367967][T32676] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1068.441913][ T3638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1068.490585][ T3638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1068.537751][ T3638] bond0 (unregistering): (slave netdevsim2): Releasing backup interface [ 1068.567358][ T3638] bond0 (unregistering): Released all slaves [ 1069.291788][ T3328] veth0_vlan: entered promiscuous mode [ 1069.352570][ T3328] veth1_vlan: entered promiscuous mode [ 1069.490872][ T3328] veth0_macvtap: entered promiscuous mode [ 1069.530058][ T3328] veth1_macvtap: entered promiscuous mode [ 1069.625631][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1069.677174][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1069.749417][ T4419] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.784010][ T4419] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.868569][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.902548][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.212052][ T3718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48640 sclass=netlink_route_socket pid=3718 comm=syz.3.8779 [ 1070.331706][ T3722] loop5: detected capacity change from 0 to 164 [ 1070.583715][ T3712] loop3: detected capacity change from 0 to 512 [ 1070.669185][ T3712] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1070.716013][ T3712] EXT4-fs warning (device loop3): ext4_xattr_inode_get:546: inode #11: comm syz.3.8779: ea_inode file size=4 entry size=6 [ 1070.728872][ T3712] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1070.742716][ T3712] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.8779: corrupted inode contents [ 1070.754565][ T3712] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1070.815417][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1070.831328][ C0] EXT4-fs (loop3): initial error at time 1787271454: ext4_do_update_inode:5742: inode 15 [ 1070.841363][ C0] EXT4-fs (loop3): last error at time 1787271454: ext4_do_update_inode:5742: inode 15 [ 1070.964812][ T3712] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #15: comm syz.3.8779: mark_inode_dirty error [ 1070.976783][ T3712] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1070.980712][ T3712] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.8779: corrupted inode contents [ 1071.002545][ T3712] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1071.057884][ T3712] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3001: inode #15: comm syz.3.8779: mark_inode_dirty error [ 1071.313575][ T3712] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1071.346092][ T3712] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3004: inode #15: comm syz.3.8779: mark inode dirty (error -117) [ 1071.374249][ T28] kauditd_printk_skb: 10842 callbacks suppressed [ 1071.374293][ T28] audit: type=1400 audit(1787271454.839:48145): avc: denied { write } for pid=26717 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1071.412251][T32676] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1071.441494][T32676] audit: audit_lost=3344 audit_rate_limit=0 audit_backlog_limit=64 [ 1071.463362][T32676] audit: backlog limit exceeded [ 1071.467259][ T3712] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1071.475883][ T28] audit: type=1400 audit(1787271454.839:48146): avc: denied { write } for pid=26717 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1071.514719][T32676] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1071.528146][T32676] audit: audit_lost=3345 audit_rate_limit=0 audit_backlog_limit=64 [ 1071.536729][ T3762] netlink: 'syz.5.8787': attribute type 46 has an invalid length. [ 1071.544103][T32676] audit: backlog limit exceeded [ 1071.554195][ T2573] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1071.560453][ T28] audit: type=1400 audit(1787271454.839:48147): avc: denied { write } for pid=26717 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1071.577860][ T3712] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 1071.688480][ T3712] EXT4-fs (loop3): 1 orphan inode deleted [ 1071.755238][ T3712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1072.323356][ T2510] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1074.215103][ T3019] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1074.910954][ T3019] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1075.696690][ T3019] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1075.826416][ T3857] netlink: 4812 bytes leftover after parsing attributes in process `syz.3.8795'. [ 1076.358809][ T3019] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1076.378626][ T28] kauditd_printk_skb: 16725 callbacks suppressed [ 1076.378674][ T28] audit: type=1400 audit(1787271459.839:61229): avc: denied { write } for pid=26717 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1076.417327][T26717] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1076.428077][T26717] audit: audit_lost=4561 audit_rate_limit=0 audit_backlog_limit=64 [ 1076.447932][T26717] audit: backlog limit exceeded [ 1076.448001][ T28] audit: type=1400 audit(1787271459.839:61230): avc: denied { write } for pid=26717 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1076.480289][T26717] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1076.489926][T26717] audit: audit_lost=4562 audit_rate_limit=0 audit_backlog_limit=64 [ 1076.505265][ T28] audit: type=1400 audit(1787271459.839:61231): avc: denied { write } for pid=26717 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1076.514053][T26717] audit: backlog limit exceeded [ 1076.549173][ T28] audit: type=1400 audit(1787271459.849:61232): avc: denied { write } for pid=26717 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1077.714432][ T4422] bridge_slave_1: left allmulticast mode [ 1077.723238][ T4422] bridge_slave_1: left promiscuous mode [ 1077.745935][ T4422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.766191][ T4422] bridge_slave_0: left allmulticast mode [ 1077.773309][ T4422] bridge_slave_0: left promiscuous mode [ 1077.786774][ T4422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.073860][ T4422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1078.131650][ T4422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1078.146578][ T4422] bond0 (unregistering): Released all slaves [ 1078.218849][ T4422] tipc: Left network mode [ 1078.278745][ T4422] hsr_slave_0: left promiscuous mode [ 1078.293907][ T4422] hsr_slave_1: left promiscuous mode [ 1078.310790][ T4422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1078.324778][ T4422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1078.555832][ T4422] team0 (unregistering): Port device team_slave_1 removed [ 1078.597361][ T4422] team0 (unregistering): Port device team_slave_0 removed [ 1078.929625][ T3891] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.937025][ T3891] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.946113][ T3891] bridge_slave_0: entered allmulticast mode [ 1078.955004][ T3891] bridge_slave_0: entered promiscuous mode [ 1078.964897][ T3891] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.972943][ T3891] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.980828][ T3891] bridge_slave_1: entered allmulticast mode [ 1078.988628][ T3891] bridge_slave_1: entered promiscuous mode [ 1079.038353][ T3891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1079.055306][ T3891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1079.104887][ T3891] team0: Port device team_slave_0 added [ 1079.167655][ T3891] team0: Port device team_slave_1 added [ 1079.329016][ T49] Bluetooth: hci0: Frame reassembly failed (-84) [ 1079.369790][ T3891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1079.407351][ T3891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1079.545065][ T3891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1079.567124][ T3891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1079.577793][ T3891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1079.636764][ T3891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1079.858911][ T3891] hsr_slave_0: entered promiscuous mode [ 1079.893087][ T3891] hsr_slave_1: entered promiscuous mode [ 1079.919211][ T3891] debugfs: 'hsr0' already exists in 'hsr' [ 1079.934202][ T3891] Cannot create hsr debugfs directory [ 1080.801167][ T3891] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1080.837564][ T3891] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1080.873974][ T3891] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1080.906459][ T3891] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1080.940153][ T3891] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1080.972841][ T3891] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1081.004634][ T3891] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1081.041020][ T3891] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1081.376496][ T3891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1081.387960][ T28] kauditd_printk_skb: 12319 callbacks suppressed [ 1081.387981][ T28] audit: type=1400 audit(1787271464.849:71620): avc: denied { write } for pid=3328 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1081.421017][ T4789] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1081.427364][ T3963] Bluetooth: hci0: command 0x1003 tx timeout [ 1081.453516][ T3328] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1081.460928][ T3328] audit: audit_lost=5207 audit_rate_limit=0 audit_backlog_limit=64 [ 1081.467767][ T3891] 8021q: adding VLAN 0 to HW filter on device team0 [ 1081.469595][ T28] audit: type=1400 audit(1787271464.889:71621): avc: denied { write } for pid=3328 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1081.480155][ T3328] audit: backlog limit exceeded [ 1081.499665][ T28] audit: type=1400 audit(1787271464.889:71622): avc: denied { write } for pid=3328 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1081.527444][ T28] audit: type=1400 audit(1787271464.889:71623): avc: denied { write } for pid=3328 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1081.530593][ T4422] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.551205][ T28] audit: type=1400 audit(1787271464.889:71624): avc: denied { write } for pid=32676 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1081.558811][ T4422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1081.582147][ T28] audit: type=1400 audit(1787271464.889:71625): avc: denied { write } for pid=32676 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1081.613525][ T28] audit: type=1400 audit(1787271464.889:71626): avc: denied { write } for pid=32676 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1081.711761][T18972] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.720014][T18972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1082.180761][ T68] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.267667][ T68] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.354343][ T68] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.470095][ T68] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.743730][ T68] bridge_slave_1: left allmulticast mode [ 1082.760646][ T68] bridge_slave_1: left promiscuous mode [ 1082.778936][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.807635][ T68] bridge_slave_0: left allmulticast mode [ 1082.828973][ T68] bridge_slave_0: left promiscuous mode [ 1082.851269][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.170977][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1083.212009][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1083.246901][ T68] bond0 (unregistering): Released all slaves [ 1083.302011][ T3891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1083.385663][ T68] hsr_slave_0: left promiscuous mode [ 1083.412006][ T68] hsr_slave_1: left promiscuous mode [ 1083.422221][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1083.443979][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1083.462104][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1083.478897][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1083.547253][ T68] veth1_macvtap: left promiscuous mode [ 1083.553719][ T68] veth0_macvtap: left promiscuous mode [ 1083.564099][ T68] veth1_vlan: left promiscuous mode [ 1083.576937][ T68] veth0_vlan: left promiscuous mode [ 1083.910247][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1083.956415][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1084.812694][ T4009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.828758][ T4009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.842825][ T4009] bridge_slave_0: entered allmulticast mode [ 1084.850821][ T4009] bridge_slave_0: entered promiscuous mode [ 1084.861331][ T4009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.869164][ T4009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.877217][ T4009] bridge_slave_1: entered allmulticast mode [ 1084.891136][ T4009] bridge_slave_1: entered promiscuous mode [ 1084.978994][ T4009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1085.046952][ T4009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1085.139150][ T4097] loop3: detected capacity change from 0 to 736 [ 1085.244528][ T4009] team0: Port device team_slave_0 added [ 1085.274706][ T4097] rock: directory entry would overflow storage [ 1085.283266][ T4009] team0: Port device team_slave_1 added [ 1085.295651][ T4097] rock: sig=0x3b10, size=4, remaining=3 [ 1085.412174][ T4105] xt_cluster: node mask cannot exceed total number of nodes [ 1085.438752][ T3891] veth0_vlan: entered promiscuous mode [ 1085.460795][ T4009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1085.479479][ T4009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1085.498484][ T4105] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8809'. [ 1085.529911][ T4009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1085.594092][ T4009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1085.619416][ T4009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1085.684990][ T4009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1085.751606][ T3891] veth1_vlan: entered promiscuous mode [ 1085.815209][ T4422] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.896985][ T4009] hsr_slave_0: entered promiscuous mode [ 1085.921919][ T4009] hsr_slave_1: entered promiscuous mode [ 1085.942537][ T4009] debugfs: 'hsr0' already exists in 'hsr' [ 1085.964016][ T4009] Cannot create hsr debugfs directory [ 1085.996989][ T4422] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.009003][ T4136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8812'. [ 1086.080484][ T4422] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.182470][ T4422] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.380590][ T3891] veth0_macvtap: entered promiscuous mode [ 1086.398829][ T28] kauditd_printk_skb: 8367 callbacks suppressed [ 1086.398852][ T28] audit: type=1400 audit(1787271469.869:79016): avc: denied { write } for pid=3328 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1086.407386][ T3891] veth1_macvtap: entered promiscuous mode [ 1086.454847][ T3328] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1086.462293][ T3328] audit: audit_lost=5534 audit_rate_limit=0 audit_backlog_limit=64 [ 1086.470895][ T28] audit: type=1400 audit(1787271469.899:79017): avc: denied { write } for pid=3328 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1086.494752][ T3328] audit: backlog limit exceeded [ 1086.505084][ T3328] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1086.525463][ T3328] audit: audit_lost=5535 audit_rate_limit=0 audit_backlog_limit=64 [ 1086.545626][ T28] audit: type=1400 audit(1787271469.899:79018): avc: denied { write } for pid=3328 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1086.552285][ T3328] audit: backlog limit exceeded [ 1086.593340][ T3328] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1086.784843][ T3891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1086.883447][ T3891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1087.095123][ T4422] bond0 (unregistering): Released all slaves [ 1087.211923][ T4422] hsr_slave_0: left promiscuous mode [ 1087.223938][ T4422] hsr_slave_1: left promiscuous mode [ 1087.258088][ T4422] veth1_macvtap: left promiscuous mode [ 1087.263633][ T4422] veth0_macvtap: left promiscuous mode [ 1087.271272][ T4422] veth1_vlan: left promiscuous mode [ 1087.276720][ T4422] veth0_vlan: left promiscuous mode [ 1088.009027][ T4419] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.038851][ T4419] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.077291][ T4107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.096659][ T4107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.118456][ T4107] bridge_slave_0: entered allmulticast mode [ 1088.134974][ T4107] bridge_slave_0: entered promiscuous mode [ 1088.156841][ T68] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.200490][ T68] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.229287][ T4216] loop9: detected capacity change from 0 to 164 [ 1088.241178][ T4107] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.277153][ T4107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.302627][ T4107] bridge_slave_1: entered allmulticast mode [ 1088.325731][ T4107] bridge_slave_1: entered promiscuous mode [ 1088.418839][ T3442] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.492701][ T4229] FAULT_INJECTION: forcing a failure. [ 1088.492701][ T4229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1088.496312][ T4232] loop3: detected capacity change from 0 to 164 [ 1088.506897][ T4229] CPU: 0 UID: 0 PID: 4229 Comm: syz.9.8829 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1088.506962][ T4229] Tainted: [W]=WARN [ 1088.506973][ T4229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1088.506996][ T4229] Call Trace: [ 1088.507015][ T4229] [ 1088.507027][ T4229] __dump_stack+0x1d/0x30 [ 1088.507058][ T4229] dump_stack_lvl+0x95/0xd0 [ 1088.507084][ T4229] dump_stack+0x15/0x1b [ 1088.507177][ T4229] should_fail_ex+0x25e/0x270 [ 1088.507218][ T4229] should_fail+0xb/0x20 [ 1088.507251][ T4229] should_fail_usercopy+0x1a/0x20 [ 1088.507290][ T4229] _copy_to_user+0x20/0xa0 [ 1088.507318][ T4229] simple_read_from_buffer+0xb5/0x130 [ 1088.507400][ T4229] proc_fail_nth_read+0x10e/0x150 [ 1088.507508][ T4229] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1088.507536][ T4229] vfs_read+0x18e/0x7c0 [ 1088.507559][ T4229] ? __rcu_read_unlock+0x4e/0x70 [ 1088.507635][ T4229] ? __fget_files+0x184/0x1c0 [ 1088.507673][ T4229] ? mutex_lock+0x57/0x90 [ 1088.507713][ T4229] ksys_read+0xdc/0x1a0 [ 1088.507797][ T4229] __x64_sys_read+0x40/0x50 [ 1088.507821][ T4229] x64_sys_call+0x2886/0x3020 [ 1088.507891][ T4229] do_syscall_64+0x136/0x3c0 [ 1088.507921][ T4229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.507949][ T4229] RIP: 0033:0x7f4101cfe90e [ 1088.507993][ T4229] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1088.508061][ T4229] RSP: 002b:00007f4100796fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1088.508091][ T4229] RAX: ffffffffffffffda RBX: 00007f41007976c0 RCX: 00007f4101cfe90e [ 1088.508111][ T4229] RDX: 000000000000000f RSI: 00007f41007970a0 RDI: 0000000000000004 [ 1088.508129][ T4229] RBP: 00007f4100797090 R08: 0000000000000000 R09: 0000000000000000 [ 1088.508146][ T4229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1088.508262][ T4229] R13: 00007f4101fc6038 R14: 00007f4101fc5fa0 R15: 00007ffe9f9fe688 [ 1088.508349][ T4229] [ 1088.721458][ T4107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1088.756909][ T4009] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1088.768883][ T4009] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1088.800780][ T4232] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8830'. [ 1088.805084][ T3442] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.835841][ T4107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.881928][ T4107] team0: Port device team_slave_0 added [ 1088.889803][ T4009] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1088.901053][ T4009] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1088.912119][ T4009] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1088.923150][ T4239] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8831'. [ 1088.925173][ T4009] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1088.949810][ T4009] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1088.962411][ T4009] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1089.024440][ T4107] team0: Port device team_slave_1 added [ 1089.046352][ T3442] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.119743][ T4107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1089.127764][ T4107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1089.156032][ T4107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1089.170983][ T4107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1089.180258][ T4107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1089.213113][ T4107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1089.231279][ T3442] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.343112][ T4107] hsr_slave_0: entered promiscuous mode [ 1089.363554][ T4107] hsr_slave_1: entered promiscuous mode [ 1089.379462][ T4107] debugfs: 'hsr0' already exists in 'hsr' [ 1089.385319][ T4107] Cannot create hsr debugfs directory [ 1089.444146][ T4271] loop9: detected capacity change from 0 to 2048 [ 1089.556447][ T4271] Alternate GPT is invalid, using primary GPT. [ 1089.587216][ T4271] loop9: p2 p3 p7 [ 1089.643959][ T3442] bridge_slave_1: left allmulticast mode [ 1089.668222][ T3442] bridge_slave_1: left promiscuous mode [ 1089.687247][ T3442] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.712428][ T3442] bridge_slave_0: left allmulticast mode [ 1089.732563][ T3442] bridge_slave_0: left promiscuous mode [ 1089.754021][ T3442] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.932832][ T3442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1089.970016][ T3442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1089.994924][ T3442] bond0 (unregistering): Released all slaves [ 1090.095098][ T3442] hsr_slave_0: left promiscuous mode [ 1090.115435][ T3442] hsr_slave_1: left promiscuous mode [ 1090.130626][ T3442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1090.139748][ T3442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1090.149446][ T3442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1090.157443][ T3442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1090.192138][ T3442] veth1_macvtap: left promiscuous mode [ 1090.199514][ T4317] netlink: 'syz.9.8840': attribute type 13 has an invalid length. [ 1090.200439][ T3442] veth0_macvtap: left promiscuous mode [ 1090.220179][ T3442] veth1_vlan: left promiscuous mode [ 1090.226648][ T3442] veth0_vlan: left promiscuous mode [ 1090.452247][ T3442] team0 (unregistering): Port device team_slave_1 removed [ 1090.473669][ T3442] team0 (unregistering): Port device team_slave_0 removed [ 1091.021016][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.022190][ T4361] loop3: detected capacity change from 0 to 1024 [ 1091.052254][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.087932][ T4361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1091.091324][ T4195] bridge_slave_0: entered allmulticast mode [ 1091.145748][ T4195] bridge_slave_0: entered promiscuous mode [ 1091.170368][ T4009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1091.171767][ T2510] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1091.228033][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.241742][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.251098][ T4195] bridge_slave_1: entered allmulticast mode [ 1091.259970][ T4195] bridge_slave_1: entered promiscuous mode [ 1091.351683][ T4379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8846'. [ 1091.374290][ T4009] 8021q: adding VLAN 0 to HW filter on device team0 [ 1091.402541][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1091.463665][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1091.482403][ T28] kauditd_printk_skb: 1830 callbacks suppressed [ 1091.482431][ T28] audit: type=1400 audit(1787271474.949:80844): avc: denied { write } for pid=4384 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1091.561027][ T4135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.568592][ T4135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1091.608735][ T4394] FAULT_INJECTION: forcing a failure. [ 1091.608735][ T4394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1091.636630][ T4135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.638929][ T4394] CPU: 1 UID: 0 PID: 4394 Comm: syz.3.8851 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1091.639028][ T4394] Tainted: [W]=WARN [ 1091.639048][ T4394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1091.639064][ T4394] Call Trace: [ 1091.639074][ T4394] [ 1091.639085][ T4394] __dump_stack+0x1d/0x30 [ 1091.639116][ T4394] dump_stack_lvl+0x95/0xd0 [ 1091.639149][ T4394] dump_stack+0x15/0x1b [ 1091.639174][ T4394] should_fail_ex+0x25e/0x270 [ 1091.639249][ T4394] should_fail+0xb/0x20 [ 1091.639281][ T4394] should_fail_usercopy+0x1a/0x20 [ 1091.639318][ T4394] _copy_from_user+0x1c/0xb0 [ 1091.639378][ T4394] kstrtouint_from_user+0x69/0xf0 [ 1091.639446][ T4394] ? avc_policy_seqno+0x15/0x30 [ 1091.639520][ T4394] proc_fail_nth_write+0x50/0x160 [ 1091.639548][ T4394] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1091.639580][ T4394] vfs_write+0x252/0x990 [ 1091.639606][ T4394] ? __fget_files+0x184/0x1c0 [ 1091.639679][ T4394] ? mutex_lock+0x57/0x90 [ 1091.639717][ T4394] ksys_write+0xdc/0x1a0 [ 1091.639743][ T4394] __x64_sys_write+0x40/0x50 [ 1091.639768][ T4394] x64_sys_call+0x27e1/0x3020 [ 1091.639846][ T4394] do_syscall_64+0x136/0x3c0 [ 1091.639877][ T4394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.639982][ T4394] RIP: 0033:0x7fe57759e90e [ 1091.640003][ T4394] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1091.640026][ T4394] RSP: 002b:00007fe576036fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1091.640056][ T4394] RAX: ffffffffffffffda RBX: 00007fe5760376c0 RCX: 00007fe57759e90e [ 1091.640127][ T4394] RDX: 0000000000000001 RSI: 00007fe5760370a0 RDI: 0000000000000004 [ 1091.640146][ T4394] RBP: 00007fe576037090 R08: 0000000000000000 R09: 0000000000000000 [ 1091.640163][ T4394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1091.640183][ T4394] R13: 00007fe577866038 R14: 00007fe577865fa0 R15: 00007ffc2d3851f8 [ 1091.640206][ T4394] [ 1091.800765][ T28] audit: type=1400 audit(1787271475.259:80845): avc: denied { write } for pid=4393 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1091.802989][ T4135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1091.853339][ T28] audit: type=1400 audit(1787271475.309:80846): avc: denied { write } for pid=4406 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1091.931937][ T4409] loop3: detected capacity change from 0 to 512 [ 1091.939807][ T4409] EXT4-fs: Ignoring removed oldalloc option [ 1091.989981][ T4195] team0: Port device team_slave_0 added [ 1092.001813][ T4409] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 1024: comm syz.3.8853: invalid block [ 1092.031716][ T4409] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1092.034073][ T4409] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.8853: invalid indirect mapped block 1024 (level 0) [ 1092.043696][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1092.043731][ C1] EXT4-fs (loop3): initial error at time 1787271475: ext4_get_branch:178: inode 13: block 1024 [ 1092.043772][ C1] EXT4-fs (loop3): last error at time 1787271475: ext4_get_branch:178: inode 13: block 1024 [ 1092.085299][ T4409] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1092.085836][ T4409] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.8853: bg 0: block 35: padding at end of block bitmap is not set [ 1092.092694][ T4195] team0: Port device team_slave_1 added [ 1092.096088][ T4409] loop3: lost filesystem error report for type 5 error -117 [ 1092.117647][ T4409] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1092.144338][ T4409] loop3: lost filesystem error report for type 5 error -117 [ 1092.146356][ T4409] EXT4-fs (loop3): 1 truncate cleaned up [ 1092.161489][ T4409] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1092.181959][ T4107] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1092.207132][ T4107] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1092.219197][ T28] audit: type=1400 audit(1787271475.679:80847): avc: denied { write } for pid=4408 comm="syz.3.8853" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1092.225097][ T4107] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1092.276583][ T28] audit: type=1400 audit(1787271475.719:80848): avc: denied { write } for pid=4408 comm="syz.3.8853" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1092.332343][ T4107] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1092.345034][ T2510] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1092.382901][ T4107] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1092.416026][ T4107] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1092.433280][ T4107] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1092.454671][ T4107] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1092.477002][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1092.489529][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1092.515932][ T28] audit: type=1400 audit(1787271475.939:80849): avc: denied { write } for pid=4416 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1092.542517][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1092.556045][ T4421] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8855'. [ 1092.557723][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1092.572817][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1092.611402][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1092.648013][ T28] audit: type=1400 audit(1787271476.099:80850): avc: denied { write } for pid=4442 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1092.719101][ T4195] hsr_slave_0: entered promiscuous mode [ 1092.726577][ T4195] hsr_slave_1: entered promiscuous mode [ 1092.823128][ T4454] batman_adv: batadv0: Adding interface: veth0 [ 1092.839192][ T4454] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1092.883992][ T4454] batman_adv: batadv0: Interface activated: veth0 [ 1092.892921][ T4458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1092.908700][ T4461] loop9: detected capacity change from 0 to 1024 [ 1092.909091][ T4458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1092.944920][ T4458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1092.966067][ T4458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1092.990041][ T4458] batman_adv: batadv0: Interface deactivated: veth0 [ 1093.004343][ T4458] batman_adv: batadv0: Removing interface: veth0 [ 1093.110951][ T4471] loop9: detected capacity change from 0 to 512 [ 1093.161043][ T4471] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1093.163318][ T28] audit: type=1400 audit(1787271476.619:80851): avc: denied { write } for pid=4450 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1093.250162][ T3891] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1093.324371][ T28] audit: type=1400 audit(1787271476.789:80852): avc: denied { write } for pid=4483 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1093.424350][ T4488] loop3: detected capacity change from 0 to 128 [ 1093.445473][ T4488] EXT4-fs: Ignoring removed i_version option [ 1093.480434][ T4488] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1093.556532][ T4488] ext4 filesystem being mounted at /102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1093.617316][ T28] audit: type=1400 audit(1787271477.079:80853): avc: denied { write } for pid=4489 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1093.681541][ T4488] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.3.8864: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 1093.690939][ T4107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1093.724477][ T4488] EXT4-fs (loop3): Remounting filesystem read-only [ 1093.768859][ T2510] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1093.816881][ T4107] 8021q: adding VLAN 0 to HW filter on device team0 [ 1093.875424][ T4422] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.882784][ T4422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1093.945632][ T4135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.952964][ T4135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1093.975822][ T4009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1094.016765][ T4195] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1094.028664][ T4195] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1094.038055][ T4195] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1094.049053][ T4195] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1094.091333][ T4195] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1094.116271][ T4195] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1094.133494][ T4195] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1094.150817][ T4195] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1094.177955][ T4514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8866'. [ 1094.218998][ T4527] loop9: detected capacity change from 0 to 1024 [ 1094.239849][ T4527] EXT4-fs: Ignoring removed bh option [ 1094.258111][ T4527] EXT4-fs (loop9): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 1094.370817][ T4527] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1094.552292][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1094.639538][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 1094.694980][ T4558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8870'. [ 1094.707258][ T4419] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.714831][ T4419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1094.740436][ T4558] ip6tnl1: entered allmulticast mode [ 1094.767390][ T4558] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8870'. [ 1094.780489][ T4422] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.787636][ T4422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1094.805848][ T4009] veth0_vlan: entered promiscuous mode [ 1094.906469][ T4009] veth1_vlan: entered promiscuous mode [ 1095.072604][ T4009] veth0_macvtap: entered promiscuous mode [ 1095.128057][ T4009] veth1_macvtap: entered promiscuous mode [ 1095.206254][ T4009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1095.255940][ T4009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1095.296944][ T4107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1095.395001][ T3891] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1095.462333][ T68] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.498426][ T68] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.580073][ T4135] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.618892][ T4135] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.724189][ T3019] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1095.869780][ T4622] loop7: detected capacity change from 0 to 512 [ 1095.894060][ T4622] EXT4-fs: Ignoring removed nobh option [ 1095.924449][ T4622] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1095.924554][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1095.953443][ T4622] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #11: block 1: comm syz.7.8879: lblock 0 mapped to illegal pblock 1 (length 1) [ 1095.988501][ T4622] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1095.990656][ T4622] EXT4-fs error (device loop7): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.7.8879: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1096.000527][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1096.000557][ C0] EXT4-fs (loop7): initial error at time 1787271479: ext4_map_blocks:791: inode 11: block 1 [ 1096.000625][ C0] EXT4-fs (loop7): last error at time 1787271479: ext4_map_blocks:791: inode 11: block 1 [ 1096.052808][ T4622] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1096.054172][ T4622] EXT4-fs warning (device loop7): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.7.8879: ea_inode dec ref err=-117 [ 1096.104678][ T4622] EXT4-fs (loop7): 1 orphan inode deleted [ 1096.121591][ T4622] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1096.210678][ T4009] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1096.335106][ T4107] veth0_vlan: entered promiscuous mode [ 1096.380982][ T4107] veth1_vlan: entered promiscuous mode [ 1096.510549][ T4107] veth0_macvtap: entered promiscuous mode [ 1096.575416][ T4107] veth1_macvtap: entered promiscuous mode [ 1096.630195][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 1096.630217][ T28] audit: type=1400 audit(1787271480.099:80861): avc: denied { write } for pid=4663 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1096.655627][ T4670] loop7: detected capacity change from 0 to 7 [ 1096.687565][ T4669] loop9: detected capacity change from 0 to 1024 [ 1096.689432][ T4107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1096.707539][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1096.717713][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1096.720211][ T4107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1096.744086][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1096.753984][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1096.766244][ T4670] loop7: unable to read partition table [ 1096.766813][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1096.780185][ T4670] loop_reread_partitions: partition scan of loop7 (úù) failed (rc=-5) [ 1096.782207][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1096.797113][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1096.803855][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1096.818047][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1096.819519][ T3019] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1096.836819][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1096.846659][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1096.858099][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1096.867878][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1096.880152][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1096.890044][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1096.978341][ T3442] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.090871][ T4195] veth0_vlan: entered promiscuous mode [ 1097.118812][ T4422] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.140911][ T4422] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.185543][ T4195] veth1_vlan: entered promiscuous mode [ 1097.200573][ T4686] loop7: detected capacity change from 0 to 164 [ 1097.230313][ T4422] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.327290][ T4195] veth0_macvtap: entered promiscuous mode [ 1097.360114][ T4195] veth1_macvtap: entered promiscuous mode [ 1097.419173][ T28] audit: type=1400 audit(1787271480.879:80862): avc: denied { write } for pid=4678 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1097.437094][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1097.465116][ T4703] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1097.550961][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1097.618144][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.633548][ T28] audit: type=1400 audit(1787271481.099:80863): avc: denied { write } for pid=4709 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1097.662602][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.781918][ T3019] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1097.850964][ T4720] loop9: detected capacity change from 0 to 1024 [ 1097.866397][ T4422] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.890587][ T4422] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.992196][ T4723] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1097.992931][ T2215] IPVS: starting estimator thread 0... [ 1098.085172][ T4729] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8901'. [ 1098.123230][ T4733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1098.130982][ T4733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1098.141077][ T4733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1098.181780][ T4733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1098.238702][ T4727] IPVS: using max 2592 ests per chain, 129600 per kthread [ 1098.248124][ T28] audit: type=1400 audit(1787271481.709:80864): avc: denied { write } for pid=4724 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1098.327911][ T4746] loop9: detected capacity change from 0 to 1024 [ 1098.335052][ T4746] EXT4-fs: Ignoring removed bh option [ 1098.341989][ T4746] EXT4-fs (loop9): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 1098.344097][ T28] audit: type=1400 audit(1787271481.769:80865): avc: denied { write } for pid=4747 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1098.439217][ T4746] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1098.471667][ T28] audit: type=1400 audit(1787271481.889:80866): avc: denied { write } for pid=4743 comm="syz.9.8902" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1098.500034][ T3019] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1098.526372][ T4755] netlink: 6 bytes leftover after parsing attributes in process `syz.7.8904'. [ 1098.578443][ T4755] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1098.662401][ T3891] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1098.966657][ T4774] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8911'. [ 1099.052822][ T28] audit: type=1326 audit(1787271482.519:80867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4771 comm="syz.9.8910" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4101d3e0d9 code=0x7ffc0000 [ 1099.164633][ T28] audit: type=1326 audit(1787271482.549:80868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4771 comm="syz.9.8910" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4101d3e0d9 code=0x7ffc0000 [ 1099.271360][ T4779] 9p: Bad value for 'rfdno' [ 1099.277356][ T4779] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1099.284080][ T4779] audit: audit_lost=5538 audit_rate_limit=0 audit_backlog_limit=64 [ 1099.922142][ T4800] cgroup: No subsys list or none specified [ 1099.983552][ T4805] FAULT_INJECTION: forcing a failure. [ 1099.983552][ T4805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1100.030016][ T4805] CPU: 1 UID: 0 PID: 4805 Comm: syz.6.8916 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1100.030058][ T4805] Tainted: [W]=WARN [ 1100.030068][ T4805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1100.030086][ T4805] Call Trace: [ 1100.030148][ T4805] [ 1100.030158][ T4805] __dump_stack+0x1d/0x30 [ 1100.030188][ T4805] dump_stack_lvl+0x95/0xd0 [ 1100.030211][ T4805] dump_stack+0x15/0x1b [ 1100.030233][ T4805] should_fail_ex+0x25e/0x270 [ 1100.030288][ T4805] should_fail+0xb/0x20 [ 1100.030326][ T4805] should_fail_usercopy+0x1a/0x20 [ 1100.030364][ T4805] _copy_from_user+0x1c/0xb0 [ 1100.030396][ T4805] kstrtouint_from_user+0x69/0xf0 [ 1100.030480][ T4805] ? avc_policy_seqno+0x15/0x30 [ 1100.030544][ T4805] proc_fail_nth_write+0x50/0x160 [ 1100.030577][ T4805] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1100.030603][ T4805] vfs_write+0x252/0x990 [ 1100.030632][ T4805] ? __fget_files+0x184/0x1c0 [ 1100.030711][ T4805] ? mutex_lock+0x57/0x90 [ 1100.030801][ T4805] ksys_write+0xdc/0x1a0 [ 1100.030830][ T4805] __x64_sys_write+0x40/0x50 [ 1100.030853][ T4805] x64_sys_call+0x27e1/0x3020 [ 1100.030906][ T4805] do_syscall_64+0x136/0x3c0 [ 1100.030940][ T4805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.031102][ T4805] RIP: 0033:0x7fdb2c57e90e [ 1100.031128][ T4805] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1100.031151][ T4805] RSP: 002b:00007fdb2b016fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1100.031179][ T4805] RAX: ffffffffffffffda RBX: 00007fdb2b0176c0 RCX: 00007fdb2c57e90e [ 1100.031199][ T4805] RDX: 0000000000000001 RSI: 00007fdb2b0170a0 RDI: 0000000000000008 [ 1100.031326][ T4805] RBP: 00007fdb2b017090 R08: 0000000000000000 R09: 0000000000000000 [ 1100.031343][ T4805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1100.031359][ T4805] R13: 00007fdb2c846038 R14: 00007fdb2c845fa0 R15: 00007ffcdb32c508 [ 1100.031445][ T4805] [ 1100.324340][ T4817] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8918'. [ 1100.344797][ T4810] loop7: detected capacity change from 0 to 8192 [ 1100.385362][ T4810] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8919'. [ 1100.461146][ T4825] FAULT_INJECTION: forcing a failure. [ 1100.461146][ T4825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1100.547150][ T4825] CPU: 1 UID: 0 PID: 4825 Comm: syz.7.8923 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1100.547192][ T4825] Tainted: [W]=WARN [ 1100.547232][ T4813] Set syz1 is full, maxelem 2076 reached [ 1100.547271][ T4825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1100.547288][ T4825] Call Trace: [ 1100.547299][ T4825] [ 1100.547311][ T4825] __dump_stack+0x1d/0x30 [ 1100.547343][ T4825] dump_stack_lvl+0x95/0xd0 [ 1100.547370][ T4825] dump_stack+0x15/0x1b [ 1100.547450][ T4825] should_fail_ex+0x25e/0x270 [ 1100.547487][ T4825] should_fail+0xb/0x20 [ 1100.547519][ T4825] should_fail_usercopy+0x1a/0x20 [ 1100.547670][ T4825] _copy_from_iter+0xcc/0xe70 [ 1100.547695][ T4825] ? __alloc_skb+0x511/0x6f0 [ 1100.547733][ T4825] ? __alloc_skb+0x205/0x6f0 [ 1100.547827][ T4825] netlink_sendmsg+0x4a4/0x6f0 [ 1100.547865][ T4825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1100.547899][ T4825] ____sys_sendmsg+0x532/0x580 [ 1100.547928][ T4825] ___sys_sendmsg+0x195/0x1e0 [ 1100.547979][ T4825] __x64_sys_sendmsg+0xd4/0x160 [ 1100.548008][ T4825] x64_sys_call+0x194c/0x3020 [ 1100.548075][ T4825] do_syscall_64+0x136/0x3c0 [ 1100.548182][ T4825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.548209][ T4825] RIP: 0033:0x7f92a564e0d9 [ 1100.548248][ T4825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1100.548272][ T4825] RSP: 002b:00007f92a40a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1100.548302][ T4825] RAX: ffffffffffffffda RBX: 00007f92a58d5fa0 RCX: 00007f92a564e0d9 [ 1100.548321][ T4825] RDX: 0000000020000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 1100.548340][ T4825] RBP: 00007f92a40a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1100.548421][ T4825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1100.548446][ T4825] R13: 00007f92a58d6038 R14: 00007f92a58d5fa0 R15: 00007ffdd112a3c8 [ 1100.548547][ T4825] [ 1100.953483][ T4850] netlink: 'syz.3.8928': attribute type 13 has an invalid length. [ 1101.063288][ T4861] loop6: detected capacity change from 0 to 736 [ 1101.144899][ T4868] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8932'. [ 1101.189739][ T4871] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8931'. [ 1101.651933][ T28] kauditd_printk_skb: 284 callbacks suppressed [ 1101.652274][ T28] audit: type=1326 audit(1787271485.079:81152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4847 comm="syz.4.8929" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc05982de42 code=0x7ffc0000 [ 1101.922781][ T28] audit: type=1326 audit(1787271485.079:81153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4847 comm="syz.4.8929" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc05982de42 code=0x7ffc0000 [ 1102.147598][ T28] audit: type=1326 audit(1787271485.099:81154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4847 comm="syz.4.8929" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05982e0d9 code=0x7ffc0000 [ 1102.481427][ T28] audit: type=1326 audit(1787271485.099:81155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4847 comm="syz.4.8929" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc05982de42 code=0x7ffc0000 [ 1102.744593][ T28] audit: type=1326 audit(1787271485.099:81156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4847 comm="syz.4.8929" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc05982ded7 code=0x7ffc0000 [ 1103.046098][ T28] audit: type=1326 audit(1787271485.099:81157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4847 comm="syz.4.8929" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc0597eadd1 code=0x7ffc0000 [ 1103.266311][ T28] audit: type=1326 audit(1787271485.099:81158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4847 comm="syz.4.8929" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fc05982eec9 code=0x7ffc0000 [ 1103.448686][ T4893] loop7: detected capacity change from 0 to 164 [ 1103.449069][ T28] audit: type=1326 audit(1787271485.099:81159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4847 comm="syz.4.8929" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc0597eae3b code=0x7ffc0000 [ 1103.561356][ T28] audit: type=1326 audit(1787271485.099:81160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4847 comm="syz.4.8929" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05982e0d9 code=0x7ffc0000 [ 1103.587755][ T28] audit: type=1326 audit(1787271485.099:81161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4847 comm="syz.4.8929" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05982e0d9 code=0x7ffc0000 [ 1103.607088][ T4903] loop3: detected capacity change from 0 to 128 [ 1103.684563][ T4903] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c01c, mo2=0002] [ 1103.703776][ T4903] System zones: 1-3, 19-19, 35-36 [ 1103.734120][ T4903] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1103.790324][ T4903] ext4 filesystem being mounted at /128/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1103.929767][ T4898] loop6: detected capacity change from 0 to 8192 [ 1103.942898][ T4898] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1104.009352][ T4898] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8936'. [ 1104.030832][ T4898] tc_dump_action: action bad kind [ 1104.172869][ T4924] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8945'. [ 1104.622996][ T4953] loop6: detected capacity change from 0 to 164 [ 1104.712914][ T3019] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1104.863404][ T2217] bridge0: entered promiscuous mode [ 1104.938513][ T4962] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8954'. [ 1104.981208][ T4971] netlink: 48 bytes leftover after parsing attributes in process `syz.6.8956'. [ 1105.100980][ T4976] FAULT_INJECTION: forcing a failure. [ 1105.100980][ T4976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1105.134632][ T4976] CPU: 1 UID: 0 PID: 4976 Comm: syz.6.8957 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1105.134680][ T4976] Tainted: [W]=WARN [ 1105.134694][ T4976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1105.134714][ T4976] Call Trace: [ 1105.134727][ T4976] [ 1105.134807][ T4976] __dump_stack+0x1d/0x30 [ 1105.134903][ T4976] dump_stack_lvl+0x95/0xd0 [ 1105.135029][ T4976] dump_stack+0x15/0x1b [ 1105.135084][ T4976] should_fail_ex+0x25e/0x270 [ 1105.135126][ T4976] should_fail+0xb/0x20 [ 1105.135216][ T4976] should_fail_usercopy+0x1a/0x20 [ 1105.135283][ T4976] _copy_from_user+0x1c/0xb0 [ 1105.135367][ T4976] do_ipv6_setsockopt+0x127/0x2040 [ 1105.135409][ T4976] ? __rcu_read_unlock+0x4e/0x70 [ 1105.135447][ T4976] ? avc_has_perm_noaudit+0xa3/0x120 [ 1105.135484][ T4976] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 1105.135570][ T4976] ipv6_setsockopt+0x59/0x130 [ 1105.135605][ T4976] tcp_setsockopt+0x98/0xb0 [ 1105.135654][ T4976] sock_common_setsockopt+0x69/0x80 [ 1105.135692][ T4976] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1105.135724][ T4976] __sys_setsockopt+0x184/0x200 [ 1105.135842][ T4976] __x64_sys_setsockopt+0x64/0x80 [ 1105.135897][ T4976] x64_sys_call+0x2327/0x3020 [ 1105.135932][ T4976] do_syscall_64+0x136/0x3c0 [ 1105.135980][ T4976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.136022][ T4976] RIP: 0033:0x7fdb2c5be0d9 [ 1105.136099][ T4976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1105.136190][ T4976] RSP: 002b:00007fdb2b017028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1105.136220][ T4976] RAX: ffffffffffffffda RBX: 00007fdb2c845fa0 RCX: 00007fdb2c5be0d9 [ 1105.136239][ T4976] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1105.136255][ T4976] RBP: 00007fdb2b017090 R08: 0000000000000428 R09: 0000000000000000 [ 1105.136307][ T4976] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000001 [ 1105.136330][ T4976] R13: 00007fdb2c846038 R14: 00007fdb2c845fa0 R15: 00007ffcdb32c508 [ 1105.136357][ T4976] [ 1105.453598][ T3019] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1105.567695][ T4989] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8959'. [ 1106.052727][ T5013] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8965'. [ 1106.074459][ T5013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.185619][ T5025] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1106.197377][ T5025] Cannot find add_set index 0 as target [ 1106.453768][ T3019] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1106.685172][ T4915] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1106.694468][ T28] kauditd_printk_skb: 1675 callbacks suppressed [ 1106.694488][ T28] audit: type=1400 audit(1787271490.159:82837): avc: denied { write } for pid=3891 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1106.698779][ T2217] bridge0: entered promiscuous mode [ 1106.706817][ T28] audit: type=1400 audit(1787271490.169:82838): avc: denied { write } for pid=3891 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1106.793053][ T3891] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1106.800155][ T3891] audit: audit_lost=5539 audit_rate_limit=0 audit_backlog_limit=64 [ 1106.803798][ T3422] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.808943][ T3891] audit: backlog limit exceeded [ 1106.824102][ T28] audit: type=1400 audit(1787271490.229:82839): avc: denied { write } for pid=3891 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1106.852574][ T3891] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1106.859859][ T3891] audit: audit_lost=5540 audit_rate_limit=0 audit_backlog_limit=64 [ 1106.877333][ T3891] audit: backlog limit exceeded [ 1106.883695][ T28] audit: type=1400 audit(1787271490.229:82840): avc: denied { write } for pid=3891 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1106.956598][ T3422] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.055589][ T3422] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.170412][ T3422] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.436422][ T3422] bridge_slave_1: left allmulticast mode [ 1107.454590][ T3422] bridge_slave_1: left promiscuous mode [ 1107.484472][ T3422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.535339][ T3422] bridge_slave_0: left allmulticast mode [ 1107.562937][ T3422] bridge_slave_0: left promiscuous mode [ 1107.588635][ T3422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.946267][ T3422] bond1 (unregistering): Released all slaves [ 1107.969598][ T3019] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1108.029228][ T3422] hsr_slave_0: left promiscuous mode [ 1108.051059][ T3422] hsr_slave_1: left promiscuous mode [ 1108.130651][ T3422] veth1_macvtap: left promiscuous mode [ 1108.136697][ T3422] veth0_macvtap: left promiscuous mode [ 1108.158016][ T3422] veth1_vlan: left promiscuous mode [ 1108.172325][ T3422] veth0_vlan: left promiscuous mode [ 1108.570056][ T3422] team0 (unregistering): Port device team_slave_1 removed [ 1108.607255][ T3422] team0 (unregistering): Port device team_slave_0 removed [ 1109.007571][ T2217] bridge0: entered promiscuous mode [ 1109.021619][ T5079] FAULT_INJECTION: forcing a failure. [ 1109.021619][ T5079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1109.048347][ T5079] CPU: 1 UID: 0 PID: 5079 Comm: syz.6.8979 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1109.048486][ T5079] Tainted: [W]=WARN [ 1109.048498][ T5079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1109.048641][ T5079] Call Trace: [ 1109.048656][ T5079] [ 1109.048669][ T5079] __dump_stack+0x1d/0x30 [ 1109.048704][ T5079] dump_stack_lvl+0x95/0xd0 [ 1109.048732][ T5079] dump_stack+0x15/0x1b [ 1109.048759][ T5079] should_fail_ex+0x25e/0x270 [ 1109.048835][ T5079] should_fail+0xb/0x20 [ 1109.048873][ T5079] should_fail_usercopy+0x1a/0x20 [ 1109.048935][ T5079] _copy_from_user+0x1c/0xb0 [ 1109.048961][ T5079] memdup_user+0x5e/0xd0 [ 1109.049082][ T5079] strndup_user+0x68/0xb0 [ 1109.049118][ T5079] __se_sys_add_key+0x132/0x360 [ 1109.049153][ T5079] __x64_sys_add_key+0x67/0x80 [ 1109.049348][ T5079] x64_sys_call+0xb39/0x3020 [ 1109.049384][ T5079] do_syscall_64+0x136/0x3c0 [ 1109.049443][ T5079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.049469][ T5079] RIP: 0033:0x7fdb2c5be0d9 [ 1109.049490][ T5079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1109.049519][ T5079] RSP: 002b:00007fdb2b017028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1109.049623][ T5079] RAX: ffffffffffffffda RBX: 00007fdb2c845fa0 RCX: 00007fdb2c5be0d9 [ 1109.049646][ T5079] RDX: 0000200000000100 RSI: 0000200000000540 RDI: 0000200000000080 [ 1109.049674][ T5079] RBP: 00007fdb2b017090 R08: 00000000034b94bc R09: 0000000000000000 [ 1109.049696][ T5079] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000001 [ 1109.049771][ T5079] R13: 00007fdb2c846038 R14: 00007fdb2c845fa0 R15: 00007ffcdb32c508 [ 1109.049849][ T5079] [ 1109.291741][ T3422] IPVS: stop unused estimator thread 0... [ 1109.806659][ T5057] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.836681][ T5057] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.846143][ T5057] bridge_slave_0: entered allmulticast mode [ 1109.864078][ T5057] bridge_slave_0: entered promiscuous mode [ 1109.883058][ T5057] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.899612][ T5057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.917770][ T5057] bridge_slave_1: entered allmulticast mode [ 1109.926725][ T5057] bridge_slave_1: entered promiscuous mode [ 1110.105961][ T3019] 8021q: adding VLAN 0 to HW filter on device eth25 [ 1110.199867][ T5057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1110.215047][ T5057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1110.249474][ T5057] team0: Port device team_slave_0 added [ 1110.260218][ T5057] team0: Port device team_slave_1 added [ 1110.288239][ T5057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1110.308077][ T5057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1110.346717][ T5057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1110.360931][ T5057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1110.368146][ T5057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1110.408103][ T5057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1110.536419][ T5057] hsr_slave_0: entered promiscuous mode [ 1110.544171][ T5057] hsr_slave_1: entered promiscuous mode [ 1110.551126][ T5057] debugfs: 'hsr0' already exists in 'hsr' [ 1110.557044][ T5057] Cannot create hsr debugfs directory [ 1110.757479][ T5117] netlink: 'syz.6.8983': attribute type 13 has an invalid length. [ 1111.598665][ T5057] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1111.634467][ T5057] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1111.661334][ T5057] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1111.698060][ T28] kauditd_printk_skb: 10085 callbacks suppressed [ 1111.698082][ T28] audit: type=1400 audit(1787271495.159:92626): avc: denied { write } for pid=4009 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1111.700309][ T5057] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1111.705488][ T28] audit: type=1400 audit(1787271495.159:92627): avc: denied { write } for pid=4009 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1111.748875][ T4195] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1111.765073][ T28] audit: type=1400 audit(1787271495.159:92628): avc: denied { write } for pid=4009 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1111.769594][ T5057] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1111.792287][ T28] audit: type=1400 audit(1787271495.169:92629): avc: denied { write } for pid=4195 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1111.799398][ T4195] audit: audit_lost=5641 audit_rate_limit=0 audit_backlog_limit=64 [ 1111.826899][ T28] audit: type=1400 audit(1787271495.169:92630): avc: denied { write } for pid=4195 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1111.831571][ T4195] audit: backlog limit exceeded [ 1111.854485][ T28] audit: type=1400 audit(1787271495.169:92631): avc: denied { write } for pid=4195 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1111.854531][ T28] audit: type=1400 audit(1787271495.169:92632): avc: denied { write } for pid=4195 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1111.864678][ T5057] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1111.918655][ T5057] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1111.930751][ T5057] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1112.166474][ T5057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1112.191242][ T5147] loop6: detected capacity change from 0 to 164 [ 1112.204520][ T5057] 8021q: adding VLAN 0 to HW filter on device team0 [ 1112.226603][ T3442] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.234557][ T3442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1112.269859][ T4419] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.277127][ T4419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1112.606870][ T5151] netlink: 144 bytes leftover after parsing attributes in process `syz.6.8986'. [ 1113.163008][ T5057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1113.519721][ T5186] tc_dump_action: action bad kind [ 1113.709729][ T5057] veth0_vlan: entered promiscuous mode [ 1113.754071][ T5057] veth1_vlan: entered promiscuous mode [ 1113.856268][ T5057] veth0_macvtap: entered promiscuous mode [ 1113.876274][ T5057] veth1_macvtap: entered promiscuous mode [ 1113.918600][ T5057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1113.949399][ T5057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1114.048703][T18972] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.080320][T18972] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.139248][ T4419] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.175237][ T4419] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.585568][ T5240] loop6: detected capacity change from 0 to 128 [ 1115.646160][ T5240] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 1115.656843][ T5240] System zones: 1-3, 19-19, 35-36 [ 1115.666227][ T5240] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1115.680644][ T5240] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1115.730985][ T4107] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1116.708157][ T28] kauditd_printk_skb: 10713 callbacks suppressed [ 1116.708180][ T28] audit: type=1400 audit(1787271500.179:103316): avc: denied { write } for pid=4009 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1116.758959][ T4195] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1116.765704][ T4195] audit: audit_lost=5652 audit_rate_limit=0 audit_backlog_limit=64 [ 1116.772318][ T5261] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1116.774446][ T4195] audit: backlog limit exceeded [ 1116.785944][ T28] audit: type=1400 audit(1787271500.209:103317): avc: denied { write } for pid=3891 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1116.786251][ T4009] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1116.816825][ T5261] audit: audit_lost=5653 audit_rate_limit=0 audit_backlog_limit=64 [ 1116.816966][ T4009] audit: audit_lost=5654 audit_rate_limit=0 audit_backlog_limit=64 [ 1116.833479][ T4009] audit: backlog limit exceeded [ 1117.187176][ T5284] netlink: 'syz.6.8998': attribute type 15 has an invalid length. [ 1117.409126][ T5292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9000'. [ 1117.620960][ T5297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9001'. [ 1118.196274][ T5314] erspan0: entered promiscuous mode [ 1119.354504][ T5358] netlink: 'syz.6.9011': attribute type 13 has an invalid length. [ 1120.115611][ T5384] loop6: detected capacity change from 0 to 764 [ 1120.131735][ T5384] iso9660: Unknown parameter './proc' [ 1120.250627][ T5396] 9p: Bad value for 'wfdno' [ 1120.424938][ T5400] erspan0: entered promiscuous mode [ 1120.958967][ T5423] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9022'. [ 1121.080262][ T4419] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.187033][ T4419] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.494933][ T4419] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.610721][ T4419] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.722628][ T28] kauditd_printk_skb: 10875 callbacks suppressed [ 1121.722676][ T28] audit: type=1400 audit(1787271505.179:114009): avc: denied { write } for pid=4009 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1121.770679][ T4195] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1121.777283][ T4195] audit: audit_lost=5716 audit_rate_limit=0 audit_backlog_limit=64 [ 1121.808812][ T4195] audit: backlog limit exceeded [ 1121.819996][ T4195] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1121.830133][ T28] audit: type=1400 audit(1787271505.189:114010): avc: denied { write } for pid=4009 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1121.862767][ T4195] audit: audit_lost=5717 audit_rate_limit=0 audit_backlog_limit=64 [ 1121.888392][ T4195] audit: backlog limit exceeded [ 1121.909096][ T4009] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1121.913356][ T28] audit: type=1400 audit(1787271505.189:114011): avc: denied { write } for pid=4009 comm="syz-executor" name="inst1" dev="tracefs" ino=15419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1121.990105][ T4419] bridge_slave_1: left allmulticast mode [ 1122.004431][ T4419] bridge_slave_1: left promiscuous mode [ 1122.023146][ T4419] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.072781][ T4419] bridge_slave_0: left allmulticast mode [ 1122.085215][ T4419] bridge_slave_0: left promiscuous mode [ 1122.107609][ T4419] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.528953][ T4419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1122.592035][ T4419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1122.660402][ T4419] bond0 (unregistering): Released all slaves [ 1122.865427][ T4419] hsr_slave_0: left promiscuous mode [ 1122.885412][ T4419] hsr_slave_1: left promiscuous mode [ 1122.894494][ T4419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1122.922593][ T4419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1122.953001][ T4419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1122.961353][ T4419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1123.054911][ T4419] veth1_macvtap: left promiscuous mode [ 1123.072212][ T4419] veth0_macvtap: left promiscuous mode [ 1123.090155][ T4419] veth1_vlan: left promiscuous mode [ 1123.105567][ T4419] veth0_vlan: left promiscuous mode [ 1123.833229][ T5515] loop6: detected capacity change from 0 to 128 [ 1123.886464][ T5515] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1123.949972][ T5515] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1124.240660][ T4419] team0 (unregistering): Port device team_slave_1 removed [ 1124.275920][ T4107] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1124.300025][ T4419] team0 (unregistering): Port device team_slave_0 removed [ 1125.050563][ T5422] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.057945][ T5422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.076308][ T5422] bridge_slave_0: entered allmulticast mode [ 1125.093327][ T5422] bridge_slave_0: entered promiscuous mode [ 1125.116771][ T5422] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.140803][ T5422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.156064][ T5422] bridge_slave_1: entered allmulticast mode [ 1125.179872][ T5422] bridge_slave_1: entered promiscuous mode [ 1125.323852][ T5422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1125.355045][ T5566] FAULT_INJECTION: forcing a failure. [ 1125.355045][ T5566] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1125.356502][ T5422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1125.387394][ T5566] CPU: 0 UID: 0 PID: 5566 Comm: syz.6.9042 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1125.387463][ T5566] Tainted: [W]=WARN [ 1125.387472][ T5566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1125.387487][ T5566] Call Trace: [ 1125.387497][ T5566] [ 1125.387510][ T5566] __dump_stack+0x1d/0x30 [ 1125.387682][ T5566] dump_stack_lvl+0x95/0xd0 [ 1125.387712][ T5566] dump_stack+0x15/0x1b [ 1125.387739][ T5566] should_fail_ex+0x25e/0x270 [ 1125.387849][ T5566] should_fail_alloc_page+0xf2/0x100 [ 1125.387965][ T5566] __alloc_frozen_pages_noprof+0x108/0x350 [ 1125.388008][ T5566] alloc_pages_mpol+0xa9/0x1d0 [ 1125.388048][ T5566] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 1125.388122][ T5566] handle_mm_fault+0x1020/0x2da0 [ 1125.388173][ T5566] do_user_addr_fault+0x402/0x1060 [ 1125.388213][ T5566] exc_page_fault+0x62/0xa0 [ 1125.388264][ T5566] asm_exc_page_fault+0x26/0x30 [ 1125.388294][ T5566] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 1125.388408][ T5566] Code: 20 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1125.388506][ T5566] RSP: 0018:ffffc9000173fbe8 EFLAGS: 00050206 [ 1125.388531][ T5566] RAX: ffff8881046d2db0 RBX: ffff88811a68b000 RCX: 0000000000000f40 [ 1125.388550][ T5566] RDX: 0000000000000000 RSI: ffff88811a68b0c0 RDI: 0000200000004000 [ 1125.388572][ T5566] RBP: 0000200000003f40 R08: 0000000000000cca R09: 0000000000000000 [ 1125.388594][ T5566] R10: 000188811a68b000 R11: 000188811a68bfff R12: 0000200000004f40 [ 1125.388687][ T5566] R13: ffffc9000173fdf8 R14: 0000000000001000 R15: 00007ffffffff000 [ 1125.388715][ T5566] _copy_to_iter+0x141/0xea0 [ 1125.388739][ T5566] ? __mutex_lock+0xa9d/0xf40 [ 1125.388771][ T5566] copy_page_to_iter+0x174/0x210 [ 1125.388869][ T5566] anon_pipe_read+0x22e/0x770 [ 1125.388906][ T5566] vfs_read+0x699/0x7c0 [ 1125.388927][ T5566] ? __pfx_anon_pipe_read+0x10/0x10 [ 1125.388956][ T5566] ksys_read+0xdc/0x1a0 [ 1125.388978][ T5566] __x64_sys_read+0x40/0x50 [ 1125.389008][ T5566] x64_sys_call+0x2886/0x3020 [ 1125.389039][ T5566] do_syscall_64+0x136/0x3c0 [ 1125.389070][ T5566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.389096][ T5566] RIP: 0033:0x7fdb2c5be0d9 [ 1125.389117][ T5566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1125.389140][ T5566] RSP: 002b:00007fdb2aff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1125.389246][ T5566] RAX: ffffffffffffffda RBX: 00007fdb2c846090 RCX: 00007fdb2c5be0d9 [ 1125.389264][ T5566] RDX: 00000000fffffd7f RSI: 0000200000000080 RDI: 0000000000000003 [ 1125.389280][ T5566] RBP: 00007fdb2aff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1125.389300][ T5566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1125.389332][ T5566] R13: 00007fdb2c846128 R14: 00007fdb2c846090 R15: 00007ffcdb32c508 [ 1125.389359][ T5566] [ 1125.701487][ T5422] team0: Port device team_slave_0 added [ 1125.716533][ T5422] team0: Port device team_slave_1 added [ 1125.814152][ T5422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1125.830123][ T5422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.876350][ T5422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1125.921261][ T5422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1125.941781][ T5422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.991028][ T5422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1126.228086][ T4419] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.414625][ T5600] netlink: 'syz.0.9050': attribute type 13 has an invalid length. [ 1126.471551][ T5604] loop6: detected capacity change from 0 to 128 [ 1126.546961][ T5604] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1126.579324][ T5604] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1126.690210][ T4107] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1126.885265][ T4419] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.913494][ T5422] hsr_slave_0: entered promiscuous mode [ 1126.934057][ T5422] hsr_slave_1: entered promiscuous mode [ 1126.944510][ T5422] debugfs: 'hsr0' already exists in 'hsr' [ 1126.951653][ T5422] Cannot create hsr debugfs directory [ 1127.048314][ T5620] loop6: detected capacity change from 0 to 2048 [ 1127.071753][ T5620] journal_path: Non-blockdev passed as './file1' [ 1127.111525][ T5620] EXT4-fs: error: could not find journal device path [ 1127.143608][ T4419] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.231466][ T28] kauditd_printk_skb: 3973 callbacks suppressed [ 1127.231488][ T28] audit: type=1400 audit(1787271510.699:117452): avc: denied { write } for pid=5618 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1127.351470][ T28] audit: type=1400 audit(1787271510.819:117453): avc: denied { write } for pid=5635 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1127.445882][ T4419] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.595355][ T5484] bridge0: port 1(bridge_slave_0) entered blocking state [ 1127.607577][ T5484] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.615129][ T5647] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9056'. [ 1127.616113][ T5484] bridge_slave_0: entered allmulticast mode [ 1127.634426][ T5484] bridge_slave_0: entered promiscuous mode [ 1127.664661][ T5649] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9058'. [ 1127.678933][ T5484] bridge0: port 2(bridge_slave_1) entered blocking state [ 1127.687251][ T5484] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.700794][ T5484] bridge_slave_1: entered allmulticast mode [ 1127.711790][ T5484] bridge_slave_1: entered promiscuous mode [ 1127.833036][ T5658] loop6: detected capacity change from 0 to 512 [ 1127.905740][ T5484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1127.925759][ T28] audit: type=1400 audit(1787271511.329:117454): avc: denied { write } for pid=5651 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1127.926556][ T5484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1127.963428][ T5658] EXT4-fs (loop6): 1 orphan inode deleted [ 1127.970042][ T5658] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1127.988711][ T5658] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1128.014476][ T28] audit: type=1400 audit(1787271511.459:117455): avc: denied { write } for pid=5669 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1128.041229][ T4422] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1128.051892][ T4422] EXT4-fs error (device loop6): ext4_release_dquot:7077: comm kworker/u8:14: Failed to release dquot type 1 [ 1128.078284][ T5658] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1128.134475][ T5484] team0: Port device team_slave_0 added [ 1128.144181][ T5484] team0: Port device team_slave_1 added [ 1128.164797][ T4107] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1128.203591][ T4419] bridge_slave_1: left promiscuous mode [ 1128.217256][ T4419] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.232249][ T4419] bridge_slave_0: left allmulticast mode [ 1128.241804][ T4419] bridge_slave_0: left promiscuous mode [ 1128.248136][ T4419] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.346792][ T4419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1128.361391][ T4419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1128.373743][ T4419] bond0 (unregistering): Released all slaves [ 1128.461907][ T5484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1128.480076][ T5484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1128.514746][ T5484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1128.534492][ T5484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1128.550407][ T5484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1128.596007][ T5484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1128.634975][ T4419] hsr_slave_0: left promiscuous mode [ 1128.642215][ T28] audit: type=1400 audit(1787271512.089:117456): avc: denied { write } for pid=5680 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1128.642360][ T4419] hsr_slave_1: left promiscuous mode [ 1128.674020][ T4419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1128.682846][ T4419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1128.692527][ T4419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1128.700851][ T4419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1128.721084][ T28] audit: type=1400 audit(1787271512.189:117457): avc: denied { write } for pid=5696 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1128.745420][ T4419] veth1_macvtap: left promiscuous mode [ 1128.752380][ T4419] veth0_macvtap: left promiscuous mode [ 1128.758523][ T4419] veth1_vlan: left promiscuous mode [ 1128.763978][ T4419] veth0_vlan: left promiscuous mode [ 1128.894369][ T4419] team0 (unregistering): Port device team_slave_1 removed [ 1128.909007][ T4419] team0 (unregistering): Port device team_slave_0 removed [ 1128.963689][ T5547] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.973287][ T5547] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.981814][ T5547] bridge_slave_0: entered allmulticast mode [ 1128.989728][ T5547] bridge_slave_0: entered promiscuous mode [ 1129.066635][ T5547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.075969][ T5547] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.086714][ T5547] bridge_slave_1: entered allmulticast mode [ 1129.094684][ T5547] bridge_slave_1: entered promiscuous mode [ 1129.116433][ T5702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1129.124310][ T5702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1129.136026][ T5702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1129.144934][ T5702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1129.216685][ T5484] hsr_slave_0: entered promiscuous mode [ 1129.226325][ T5484] hsr_slave_1: entered promiscuous mode [ 1129.234278][ T5484] debugfs: 'hsr0' already exists in 'hsr' [ 1129.243086][ T5484] Cannot create hsr debugfs directory [ 1129.269645][ T5547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1129.279596][ T28] audit: type=1400 audit(1787271512.739:117458): avc: denied { write } for pid=5703 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1129.311032][ T5547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1129.333984][ T28] audit: type=1400 audit(1787271512.789:117459): avc: denied { write } for pid=5715 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1129.405928][ T5547] team0: Port device team_slave_0 added [ 1129.430108][ T5547] team0: Port device team_slave_1 added [ 1129.518554][ T5547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1129.525844][ T5547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1129.553943][ T5547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1129.567312][ T5547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1129.574524][ T5547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1129.609094][ T5547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1129.646790][ T5726] tunl0: Caught tx_queue_len zero misconfig [ 1129.773076][ T5547] hsr_slave_0: entered promiscuous mode [ 1129.790426][ T5547] hsr_slave_1: entered promiscuous mode [ 1129.797327][ T5547] debugfs: 'hsr0' already exists in 'hsr' [ 1129.815556][ T5547] Cannot create hsr debugfs directory [ 1129.829496][T18972] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.859934][ T28] audit: type=1400 audit(1787271513.319:117460): avc: denied { write } for pid=5727 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1129.874288][ T5422] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1129.922135][ T5422] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1129.959449][ T5422] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1129.973947][ T5422] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1129.991794][ T5422] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1130.005276][ T5422] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1130.052221][T18972] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.067492][ T5422] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1130.080773][ T5422] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1130.171124][T18972] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.277609][T18972] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.391568][ T5774] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9074'. [ 1130.572939][T18972] bridge_slave_1: left allmulticast mode [ 1130.579418][T18972] bridge_slave_1: left promiscuous mode [ 1130.586236][T18972] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.597258][T18972] bridge_slave_0: left allmulticast mode [ 1130.605066][T18972] bridge_slave_0: left promiscuous mode [ 1130.612001][T18972] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.711678][T18972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1130.729611][T18972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1130.744329][T18972] bond0 (unregistering): Released all slaves [ 1130.848384][ T3019] 8021q: adding VLAN 0 to HW filter on device eth26 [ 1130.856576][ T5794] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9082'. [ 1130.912188][ T5422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1130.955750][T18972] hsr_slave_0: left promiscuous mode [ 1130.965438][T18972] hsr_slave_1: left promiscuous mode [ 1130.996763][T18972] veth1_macvtap: left promiscuous mode [ 1131.002893][T18972] veth0_macvtap: left promiscuous mode [ 1131.010427][T18972] veth1_vlan: left promiscuous mode [ 1131.028430][T18972] veth0_vlan: left promiscuous mode [ 1131.206918][T18972] team0 (unregistering): Port device team_slave_1 removed [ 1131.221601][T18972] team0 (unregistering): Port device team_slave_0 removed [ 1131.391788][ T5422] 8021q: adding VLAN 0 to HW filter on device team0 [ 1131.416861][ T4419] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.424378][ T4419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1131.443678][ T3422] bridge0: port 2(bridge_slave_1) entered blocking state [ 1131.451330][ T3422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1131.772449][ T5484] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1131.784983][ T5484] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1131.793791][ T5484] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1131.804214][ T5484] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1131.824967][ T5484] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1131.839315][ T5484] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1131.857499][ T5484] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1131.875127][ T5484] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1131.916167][ T5547] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1131.944670][ T5547] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1131.976798][ T5547] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1132.001414][ T5547] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1132.022285][ T5547] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1132.042011][ T5547] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1132.083765][ T5422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1132.101739][ T5547] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1132.122872][ T5547] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1132.271795][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1132.271814][ T28] audit: type=1400 audit(1787271515.739:117465): avc: denied { write } for pid=5868 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1132.382366][ T5484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1132.446817][ T5484] 8021q: adding VLAN 0 to HW filter on device team0 [ 1132.482687][ T5547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1132.515929][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.523812][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1132.580524][ T3422] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.587946][ T3422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1132.635430][ T5547] 8021q: adding VLAN 0 to HW filter on device team0 [ 1132.665149][ T4422] ================================================================== [ 1132.673309][ T4422] BUG: KCSAN: data-race in __set_task_comm / strlen [ 1132.680020][ T4422] [ 1132.682384][ T4422] write to 0xffff88810418bba0 of 8 bytes by task 5888 on cpu 0: [ 1132.690190][ T4422] __set_task_comm+0x92/0x180 [ 1132.695334][ T4422] begin_new_exec+0xeb4/0x1210 [ 1132.700284][ T4422] load_elf_binary+0x64a/0x1a30 [ 1132.705345][ T4422] bprm_execve+0x45c/0x9b0 [ 1132.709953][ T4422] kernel_execve+0x5e0/0x630 [ 1132.714715][ T4422] call_usermodehelper_exec_async+0x196/0x250 [ 1132.721185][ T4422] ret_from_fork+0x146/0x330 [ 1132.725992][ T4422] ret_from_fork_asm+0x1a/0x30 [ 1132.730959][ T4422] [ 1132.735312][ T4422] read to 0xffff88810418bba0 of 1 bytes by task 4422 on cpu 1: [ 1132.743486][ T4422] strlen+0x19/0x40 [ 1132.747402][ T4422] trace_event_raw_event_sched_stat_runtime+0x59/0x140 [ 1132.754279][ T4422] update_se+0x153/0x460 [ 1132.758632][ T4422] update_curr+0x29/0x210 [ 1132.763172][ T4422] enqueue_task_fair+0x144/0xab0 [ 1132.768243][ T4422] ttwu_do_activate+0xa7/0x230 [ 1132.773262][ T4422] try_to_wake_up+0x44a/0x6c0 [ 1132.777951][ T4422] __mutex_unlock_slowpath+0x216/0x370 [ 1132.783860][ T4422] mutex_unlock+0x81/0x90 [ 1132.788205][ T4422] __rtnl_unlock+0x56/0xb0 [ 1132.792719][ T4422] netdev_run_todo+0xb6/0x9c0 [ 1132.797780][ T4422] rtnl_unlock+0xe/0x20 [ 1132.802137][ T4422] addrconf_dad_work+0x8f6/0xbc0 [ 1132.807228][ T4422] process_scheduled_works+0x4d4/0x9a0 [ 1132.812705][ T4422] worker_thread+0x569/0x750 [ 1132.817405][ T4422] kthread+0x221/0x270 [ 1132.821563][ T4422] ret_from_fork+0x146/0x330 [ 1132.826183][ T4422] ret_from_fork_asm+0x1a/0x30 [ 1132.831006][ T4422] [ 1132.833336][ T4422] value changed: 0x75 -> 0x00 [ 1132.838010][ T4422] [ 1132.840407][ T4422] Reported by Kernel Concurrency Sanitizer on: [ 1132.846599][ T4422] CPU: 1 UID: 0 PID: 4422 Comm: kworker/u8:14 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1132.858150][ T4422] Tainted: [W]=WARN [ 1132.862072][ T4422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1132.872187][ T4422] Workqueue: ipv6_addrconf addrconf_dad_work [ 1132.878363][ T4422] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1132.967725][ T28] audit: type=1400 audit(1787271516.369:117466): avc: denied { write } for pid=3284 comm="syz-executor" path="pipe:[2587]" dev="pipefs" ino=2587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1133.000169][ T28] audit: type=1400 audit(1787271516.459:117467): avc: denied { write } for pid=5875 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1133.010395][ T3422] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.030886][ T3422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1133.103373][ T28] audit: type=1400 audit(1787271516.569:117468): avc: denied { write } for pid=5891 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1133.124734][ T3422] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.132864][ T3422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1133.509459][ T4422] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.592454][ T4422] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.631415][ T28] audit: type=1400 audit(1787271517.099:117469): avc: denied { write } for pid=5895 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1133.690182][ T4422] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.714902][ T28] audit: type=1400 audit(1787271517.179:117470): avc: denied { write } for pid=5906 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1133.780377][ T4422] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.911821][ T28] audit: type=1400 audit(1787271517.379:117471): avc: denied { write } for pid=5908 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1133.986582][ T28] audit: type=1400 audit(1787271517.449:117472): avc: denied { write } for pid=5919 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1134.048528][ T4422] bridge_slave_1: left allmulticast mode [ 1134.073864][ T4422] bridge_slave_1: left promiscuous mode [ 1134.092383][ T4422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.127055][ T4422] bridge_slave_0: left allmulticast mode [ 1134.141225][ T4422] bridge_slave_0: left promiscuous mode [ 1134.159715][ T4422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.266170][ T28] audit: type=1400 audit(1787271517.729:117473): avc: denied { write } for pid=5921 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1134.369405][ T28] audit: type=1400 audit(1787271517.839:117474): avc: denied { write } for pid=5932 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1134.410351][ T4422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1134.454260][ T4422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1134.499874][ T4422] bond0 (unregistering): Released all slaves [ 1134.608615][ T4422] hsr_slave_0: left promiscuous mode [ 1134.624227][ T4422] hsr_slave_1: left promiscuous mode [ 1134.649622][ T4422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1134.657059][ T4422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1134.671588][ T4422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1134.698393][ T4422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1134.752713][ T4422] veth1_macvtap: left promiscuous mode [ 1134.768134][ T4422] veth0_macvtap: left promiscuous mode [ 1134.788624][ T4422] veth1_vlan: left promiscuous mode [ 1134.794056][ T4422] veth0_vlan: left promiscuous mode [ 1135.014016][ T4422] team0 (unregistering): Port device team_slave_1 removed [ 1135.030526][ T4422] team0 (unregistering): Port device team_slave_0 removed [ 1136.224975][ T4422] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.294790][ T4422] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.375360][ T4422] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.464785][ T4422] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.613839][ T4422] bridge_slave_1: left allmulticast mode [ 1136.623689][ T4422] bridge_slave_1: left promiscuous mode [ 1136.630407][ T4422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.640711][ T4422] bridge_slave_0: left allmulticast mode [ 1136.646447][ T4422] bridge_slave_0: left promiscuous mode [ 1136.653257][ T4422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.665875][ T4422] bridge_slave_1: left allmulticast mode [ 1136.672384][ T4422] bridge_slave_1: left promiscuous mode [ 1136.680291][ T4422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.690902][ T4422] bridge_slave_0: left allmulticast mode [ 1136.696987][ T4422] bridge_slave_0: left promiscuous mode [ 1136.707244][ T4422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.720045][ T4422] bridge_slave_1: left allmulticast mode [ 1136.726031][ T4422] bridge_slave_1: left promiscuous mode [ 1136.734225][ T4422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.744782][ T4422] bridge_slave_0: left allmulticast mode [ 1136.751054][ T4422] bridge_slave_0: left promiscuous mode [ 1136.756931][ T4422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.772726][ T4422] bridge_slave_1: left allmulticast mode [ 1136.778895][ T4422] bridge_slave_1: left promiscuous mode [ 1136.784731][ T4422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.795366][ T4422] bridge_slave_0: left allmulticast mode [ 1136.801851][ T4422] bridge_slave_0: left promiscuous mode [ 1136.807635][ T4422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.052621][ T4422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1137.067373][ T4422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1137.080030][ T4422] bond0 (unregistering): Released all slaves [ 1137.116950][ T4422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1137.131653][ T4422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1137.143797][ T4422] bond0 (unregistering): Released all slaves [ 1137.182865][ T4422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1137.196300][ T4422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1137.208862][ T4422] bond0 (unregistering): Released all slaves [ 1137.255245][ T4422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1137.269843][ T4422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1137.282221][ T4422] bond0 (unregistering): Released all slaves [ 1137.309622][ T3019] 8021q: adding VLAN 0 to HW filter on device eth27 [ 1137.353776][ T4422] hsr_slave_0: left promiscuous mode [ 1137.360613][ T4422] hsr_slave_1: left promiscuous mode [ 1137.367322][ T4422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1137.376962][ T4422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1137.394472][ T4422] hsr_slave_0: left promiscuous mode [ 1137.402284][ T4422] hsr_slave_1: left promiscuous mode [ 1137.409038][ T4422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1137.417201][ T4422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1137.433956][ T4422] hsr_slave_0: left promiscuous mode [ 1137.440724][ T4422] hsr_slave_1: left promiscuous mode [ 1137.447098][ T4422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1137.456052][ T4422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1137.473448][ T4422] hsr_slave_0: left promiscuous mode [ 1137.480677][ T4422] hsr_slave_1: left promiscuous mode [ 1137.528393][ T4422] veth1_macvtap: left promiscuous mode [ 1137.533968][ T4422] veth0_macvtap: left promiscuous mode [ 1137.540195][ T4422] veth1_vlan: left promiscuous mode [ 1137.545974][ T4422] veth0_vlan: left promiscuous mode [ 1137.723900][ T4422] team0 (unregistering): Port device team_slave_1 removed [ 1137.741298][ T4422] team0 (unregistering): Port device team_slave_0 removed [ 1137.841846][ T4422] team0 (unregistering): Port device team_slave_1 removed [ 1137.855663][ T4422] team0 (unregistering): Port device team_slave_0 removed [ 1137.956248][ T4422] team0 (unregistering): Port device team_slave_1 removed [ 1137.970169][ T4422] team0 (unregistering): Port device team_slave_0 removed [ 1138.075854][ T4422] team0 (unregistering): Port device team_slave_1 removed [ 1138.090564][ T4422] team0 (unregistering): Port device team_slave_0 removed [ 1138.138996][ T3019] 8021q: adding VLAN 0 to HW filter on device eth28 [ 1138.274160][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 1138.274195][ T28] audit: type=1400 audit(1787271521.739:117499): avc: denied { write } for pid=6102 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1138.317230][ T28] audit: type=1400 audit(1787271521.779:117500): avc: denied { write } for pid=6113 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1138.453780][ T28] audit: type=1400 audit(1787271521.919:117501): avc: denied { write } for pid=6115 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1138.510312][ T28] audit: type=1400 audit(1787271521.979:117502): avc: denied { write } for pid=6126 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1138.658020][ T28] audit: type=1400 audit(1787271522.119:117503): avc: denied { write } for pid=6128 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1138.694746][ T28] audit: type=1400 audit(1787271522.159:117504): avc: denied { write } for pid=6139 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1138.835364][ T28] audit: type=1400 audit(1787271522.299:117505): avc: denied { write } for pid=6141 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1138.872991][ T28] audit: type=1400 audit(1787271522.339:117506): avc: denied { write } for pid=6152 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1139.057477][ T28] audit: type=1400 audit(1787271522.519:117507): avc: denied { write } for pid=6155 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1139.095217][ T28] audit: type=1400 audit(1787271522.559:117508): avc: denied { write } for pid=6166 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1139.142700][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1139.675939][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1139.876369][ T3019] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1140.077406][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1141.886043][ T3019] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1142.092149][ T3019] 8021q: adding VLAN 0 to HW filter on device eth2