last executing test programs: 5m10.59137681s ago: executing program 32 (id=76): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = open$dir(&(0x7f0000000280)='./sys\x00', 0x558500, 0x80) mkdirat(r1, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000380)=0x5) r4 = shmget(0x1, 0x2000, 0x100, &(0x7f000000d000/0x2000)=nil) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)='1', 0x1}], 0x1, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {r5, r6}}}], 0x20, 0x40044}}], 0x1, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000780)={'ipvlan0\x00'}) r7 = getgid() setregid(0x0, r7) r8 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100000, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000640)='./file1\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(r4, 0x1, &(0x7f0000000700)={{0x2, r6, r7, r9, r10, 0x104, 0xa}, 0x100, 0xffffffff, 0x2, 0x7, r3, r3, 0xfb}) ioctl$TUNSETGROUP(r2, 0x400454ce, r10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write(r2, &(0x7f0000000240)='1', 0x1) ioctl$TCSETSF(r0, 0x5457, &(0x7f0000000080)={0x0, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88aff00"}) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x101, 0xfffffc00, 0x400, 0x3, "54d208457f0b00"}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x72}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa}, 0x94) 1m14.324304056s ago: executing program 33 (id=2275): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000240)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='nv', 0x2) recvfrom$inet(r0, &(0x7f0000000480), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) syz_clone3(&(0x7f0000000540)={0x180801400, &(0x7f00000005c0)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) waitid$P_PIDFD(0x3, r1, 0x0, 0x40000004, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0xf, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000ea8f0000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000038a15d838500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f00000009c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) ioctl$XFS_IOC_SWAPEXT(r2, 0xc0c0586d, &(0x7f0000000000)={0x0, 0xffffffffffffffff, r2, 0x5bb, 0x7, '\x00', {0x1, 0x40, 0xff80, 0x8001, 0x1, 0x19f3, 0x2, 0xffffffffffffffff, {0x2, 0x4}, {0x0, 0x8}, {0x6, 0xeca8}, 0x1b1, 0x2, 0x5, 0x1, 0x0, 0x1, 0xfffe, 0x6, 0x4, 0x0, '\x00', 0x2, 0xfa, 0x8, 0x3}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a00)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) move_pages(0x0, 0x1efe, &(0x7f0000000140), 0x0, &(0x7f0000000180), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 1m14.296298416s ago: executing program 34 (id=2153): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x845c5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001740)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000001780)='27', 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001c00)={&(0x7f0000001a40)="4f6513bfc2f2e86498d24f9805b40336e5b89ea728938c", &(0x7f0000001a80)=""/251, &(0x7f0000001b80), &(0x7f0000001bc0)="916563905c6f8bf3d720293bb3ecf8b88a49a411", 0x9ae, r0}, 0x38) syz_open_dev$usbfs(0x0, 0x74, 0x160341) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000017c0)={0x0, 0x0}) syz_io_uring_setup(0x8b2, &(0x7f0000001c40)={0x0, 0xd64e, 0x400, 0x0, 0x2e1, 0x0, r0}, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f0000001d40)) 1m14.13670556s ago: executing program 35 (id=2279): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x6, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x400, &(0x7f0000000200)={[{@noquota}, {@norecovery}, {@bh}, {@delalloc}, {@jqfmt_vfsold}, {@noquota}]}, 0x1, 0x4a6, &(0x7f0000000400)="$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") r1 = creat(&(0x7f00000008c0)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r2, &(0x7f00000009c0)='\f', 0x1, 0x8000c61) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x2002, 0xa) fallocate(r1, 0x0, 0x0, 0x2000402) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000a40)={0xc, r1, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) r4 = semget$private(0x0, 0x0, 0x48a) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000140)={{0x2, 0xee01, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x1f}, 0x6, 0x1fffe00000000, 0x0, 0x0, 0x0, 0x0, 0x9}) sendmsg(r0, 0x0, 0x8040) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f0000000380)=0xa40, 0x4) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000a80)=0x2, 0x4) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000ac0)={'syzkaller1\x00', @link_local}) 1m5.913745646s ago: executing program 36 (id=2332): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0x8, 0x7, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, 0xffffffffffffffff, &(0x7f0000000100)={0x6e, 0x7, 0x0, 0x5}) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x759, &(0x7f0000000700)={[{@nojournal_checksum}, {@noblock_validity}, {@discard}, {@errors_remount}, {@data_writeback, 0x0}, {@min_batch_time={'min_batch_time', 0x3d, 0x20000001}}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@nodiscard}, {@init_itable}, {@oldalloc}, {@init_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@dioread_lock}, {@grpquota}, {@dax_never}, {@init_itable_val={'init_itable', 0x3d, 0x1001}}, {@debug}, {@discard}, {@user_xattr}], [{@audit}, {@fowner_lt}], 0x2c}, 0xa, 0x530, &(0x7f0000000880)="$eJzs3EtvHEUeAPD/jN8bZ+3NPrPZ3Xg3u1prVxvHzvOwhyQCKRcQEgiFC5KxnSjECSg2UhJZioNQInEA5RMEuCHxBeAEFwSIAyhXIiQuIKQI+RKTA2rU0z3jGY/Hr8zYOP79pLGra6qmq6qrPFVdMw5g2xpIfxQieiPiq96IvuywNsFA9mt+bmbsx7mZsUIkydM/FErp7s/NjJWTlvPtyA8GixHF1wqxp/60XVNXrp4fnZycuJRHDE0X89CF0bMTZycujhw7duhgz9EjI4ebUs+2cmD3qeduPTF2+tYLn76XljfJo6vrkdm53jNUGmIgBmrbssq/1vjqv3TVrVVoT38WN68wrFraa9PL1ZGO/+iLttJRpi8ef3VTCwe0VJIkSVddbOW9bDapVihkGZLkegI8AgqxUopFfwWAR0T5jf7+XLpSnRmrXwc/2u6diNIKKK33fP7InmkvrWAH+rO1UUeLzv+7iDg9++B2eQ623dofANh4H56IuHkym3eUH9kzxfhDVbpfR7Y31B8Rv4mIXRHx24h4PyJ+H1FK+8eI+FNVnp0r7gJ0ZPtPVernP1/25IHq6WrTpPO//+d7W7Xzv0rJ+9vyo52l+ncUzpybnDiQt8lgdHSlx8P1L125rfbRY3febHT+gXz+V36k509/L6Qoft++6Abd+Oj06MPWu+ze9VLDXqup/zdR2sRqL2Sz3nRlsDsi/ryO10/b7Nx/3v1Lo+dr6p/Ws67+bywE+xdlbl9HgRZJ3o74d3b9Z6Pm+mc7d515aGj6wstDU1eu/u9c9f7k8NEjI4eHumNy4sBQuVfU++yLG0/lwbplxDLXvzw0WrqRdu96dP9qyf5f2bnsT0OV/dqptZ/jxt2bDdc06+3/nYVnSuHOPO7y6PT0peGIzsJsffzIQt7Loz016dP+P7hv6fG/K+Knt/J8eyIi7cR/jYi/RcTevOx/j4h/RMS+Zer/ycl/vthoCTmQxi5b/9ZK6z++puvfKHD884iln2o7//EHdSd+Peve1de/Ix7cnq/bME+v/6FSaDCPGR+d7l6pXsuVtDrwEE0HAAAAW8beiOiNQnF/fqOpN4rF/fsjdlTuoExN//fMS69cHM++I9AfHcXyna6+qvuhw/ntufQ4zTVSdZw+f7B03zhJkqQnPU7X75Nr/YQ90Fw7Goz/1Hdtm106oOXWtI/W6BttwJa0ePzfXXXO5n8gA9hYTfgcDbBFGf+wfa16/LfqW3DApllq/F+LmN+EogAbbKnx/2xdzPENKQuwsaz/Yfta//j3YQDY6rz/w7a0qi/JryOw69QyaQrtrTlp40AxssC3z2fVXvxfAPojyjHlOc3yL/h1MaI5JWx7+AqmJc5jemquaXHJXN3RjFaN4opp2tfwjxgaBnqa1M41geJCTGGFxD1x/sk7Le2iXfUdcnHvrXS2a+XA1VYPmdIgeGcT/zQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0xc8BAAD//z6fxUM=") (async, rerun: 64) newfstatat(0xffffffffffffff9c, &(0x7f0000000dc0)='./file0\x00', 0x0, 0x1000) (async, rerun: 64) r1 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x9, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000540)={0x1, &(0x7f0000000580)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) (async) getitimer(0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000001000010029bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8db2ae65ad3e0100140003166e650300651400000000b482c2f11680100001800c000900010000000800000014001400776c616e3100"/64], 0x5c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket$kcm(0x21, 0x2, 0x2) (rerun: 32) sendmsg$kcm(r4, &(0x7f0000000180)={&(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f00000003c0)=[{&(0x7f0000000400)="ee", 0xfffffdef}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 1m5.73876985s ago: executing program 37 (id=2334): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) removexattr(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mount$cgroup(0x0, &(0x7f00000008c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000900), 0x0, &(0x7f0000001b40)={[{@name={'name', 0x3d, '-'}}, {@name={'name', 0x3d, 'kfree\x00'}}]}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0)={[{@noload}, {@resgid}, {@inlinecrypt}, {@usrquota}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@test_dummy_encryption_v1}, {@noblock_validity}]}, 0x5, 0x491, &(0x7f0000000300)="$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") listxattr(&(0x7f0000000000)='./mysys\x00', &(0x7f0000000ac0)=""/4096, 0x1000) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000001b80)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "72b2af", 0x4, 0x2f, 0x0, @dev, @mcast2, {[], {0x0, 0x883e, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) setns(r1, 0x24020000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], 0x1f8}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000001ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x110}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0xa65400, 0x0) mount$bind(&(0x7f0000000280)='./mysys\x00', &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000880), 0x11442, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 47.861489006s ago: executing program 9 (id=2545): r0 = socket$inet(0x2, 0x1, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x2, &(0x7f00000001c0)=[{0x6, 0x19, 0x0, 0x6}, {0x7, 0x1e, 0x1, 0xd12}]}) rt_sigqueueinfo(0x0, 0x26, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x891a, &(0x7f0000000000)={{0x2, 0x0, @remote}, {0x1, @random="1900"}, 0xc, {0x2, 0x4e20, @rand_addr=0x64010100}}) syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/config\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/config\x00') io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) getpeername$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10) syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) (async) syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) 47.462999555s ago: executing program 9 (id=2549): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 47.428907817s ago: executing program 9 (id=2550): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/netfilter/nfnetlink_log\x00', 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x1d}, 0x82, 0x0, 0x800000, 0x4, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfff8000000000000, 0xffffffffffffffff, 0x1) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000800)={[0x2]}, 0x8, 0x80000) readv(r0, &(0x7f0000000840)=[{&(0x7f0000000880)=""/128, 0x80}], 0x1) timer_settime(0x0, 0x1, &(0x7f0000000980)={{}, {0x0, 0x989680}}, 0x0) 47.178905063s ago: executing program 38 (id=2554): openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x8a0101, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x2) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001580), &(0x7f00000015c0)=0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000001600)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001680)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001800)={0x0}}, 0x8810) sendmsg$key(0xffffffffffffffff, &(0x7f0000001840)={0x4, 0x0, &(0x7f0000001880)={&(0x7f00000018c0)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000001940), 0x2c8, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) perf_event_open(&(0x7f00000019c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x1000000002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x9, &(0x7f0000001cc0)=@generic={0x0, 0x11}, 0x18) 46.343484654s ago: executing program 9 (id=2561): mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0) mount$bind(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x103496, 0x0) chroot(&(0x7f00000007c0)='./file0\x00') mount$bind(&(0x7f0000000800)='.\x00', &(0x7f0000000840)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0/../file0/../file0\x00') 46.227380297s ago: executing program 9 (id=2562): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000380)=[{{&(0x7f0000000400)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {{&(0x7f0000000500)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000}}], 0x2, 0x0) r2 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xc7ca, 0x42, 0xfffffffc, 0x7a}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000200), 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x25, 0x0, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newpolicy={0xbc, 0x13, 0x101, 0x0, 0x0, {{@in=@rand_addr=0x64010101, @in6=@empty, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x1, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe}, [@tmpl={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000940)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9200103afffe8000000000000000000000000000bbff0200000000000000000000000000010019000000004000000000"], 0x0) 45.720831029s ago: executing program 9 (id=2566): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x17a) mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000500)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/kmsg\x00', 0x60000, 0x0) read(r0, &(0x7f0000000580)=""/174, 0xae) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000480)={{0xffffffffffffffff, &(0x7f0000000000)='SMC_PNETID\x00', 0x2000, &(0x7f0000000040)={@_ha_fsid={[0x6, 0x605a]}, {0x80, 0x1, 0x0, 0x8000000000000000}}, 0x8c, 0x0, &(0x7f00000000c0)=0x5}, {[0x8000, 0x5]}, 0x3, 0xd2, &(0x7f0000000380)=""/210}) write$binfmt_elf64(r1, 0x0, 0xfffffffffffffda7) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev\x00', 0x501100, 0x0) read(r2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x100000000, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x5, @perf_config_ext={0x10, 0xc}, 0x10050, 0x6, 0x0, 0x8, 0x9, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1e, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d000000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={0x0, 0x0, 0x26}, 0x28) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f00000009c0)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) perf_event_open(&(0x7f0000000a80)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x5, 0x0) r3 = syz_clone(0xa1c68400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) syz_usb_disconnect(0xffffffffffffffff) setns(r4, 0x10000000) socket$nl_netfilter(0x10, 0x3, 0xc) 45.716446039s ago: executing program 39 (id=2566): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x17a) mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000500)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/kmsg\x00', 0x60000, 0x0) read(r0, &(0x7f0000000580)=""/174, 0xae) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000480)={{0xffffffffffffffff, &(0x7f0000000000)='SMC_PNETID\x00', 0x2000, &(0x7f0000000040)={@_ha_fsid={[0x6, 0x605a]}, {0x80, 0x1, 0x0, 0x8000000000000000}}, 0x8c, 0x0, &(0x7f00000000c0)=0x5}, {[0x8000, 0x5]}, 0x3, 0xd2, &(0x7f0000000380)=""/210}) write$binfmt_elf64(r1, 0x0, 0xfffffffffffffda7) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev\x00', 0x501100, 0x0) read(r2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x100000000, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x5, @perf_config_ext={0x10, 0xc}, 0x10050, 0x6, 0x0, 0x8, 0x9, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1e, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d000000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={0x0, 0x0, 0x26}, 0x28) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f00000009c0)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) perf_event_open(&(0x7f0000000a80)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x5, 0x0) r3 = syz_clone(0xa1c68400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) syz_usb_disconnect(0xffffffffffffffff) setns(r4, 0x10000000) socket$nl_netfilter(0x10, 0x3, 0xc) 44.626428377s ago: executing program 8 (id=2575): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x12, 0xc, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001140)=@newtfilter={0x9a4, 0x2c, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x5b63c8333b0bd0fd, 0xa}, {0xc, 0xfff2}, {0xd, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x3ff}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flow={{0x9}, {0x95c, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0xb9cb}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x10c73}, @TCA_FLOW_ACT={0x4}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xe}, @TCA_FLOW_ACT={0x934, 0x9, 0x0, 0x1, [@m_connmark={0xd4, 0x10, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0xaf, 0xffffffffffffffff, 0xa, 0xab96}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0xffffffff, 0x0, 0x5, 0x15fa}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x7, 0x6, 0x0, 0x2}, 0x80}}]}, {0x50, 0x6, "5bd8a3733c2c1212e9eeaf85591afe95e7b2aae97982366c8a06daca80597e20a41fa79b2fc8de30ec4c344041e15468230f7a2bca7eb49e8bb82b02ba639edc37a07ceb00b0002892673501"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0xe8, 0x19, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7, 0x4, 0xb52, 0x2}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x9f, 0xffffffffffffffff, 0x401, 0x10000}, 0x3, r3}}]}, {0x7b, 0x6, "ce5838aa396f74f066b39fd8b68011a8a25b40d1c7f21d1f27a39f14e49e6f4c1dd90f80e3aa84a4fe900d2c35456e1337b51e579cd30ebb7a423095f196dc3138c9980eb3ff08bca015111e5a3e950a0c6a5d498cefe08895c4b5b801b17b44dac7f900ae60e5b3f92cb7869e51e88a5efebdc2b6b60d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0xe4, 0xc, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x18, 0x4, 0x1ff, 0x6}, 0x6}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x0, 0x5, 0xf, 0x1b47}, 0x3b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x3, 0x5, 0x0, 0x2}, 0x13}}]}, {0x61, 0x6, "e06173af47bf9df9b1ab814f71cf5b406c4685f910b79a0c5f648b45af18ccbfb476e8fe380c33fb4dcf499a9e10d8b594246d815a2a9687aa0a79552682fa93b66d9772553039b311ad2b4d325b36dfd3be1ac26606e4a0b70255775c"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mirred={0x1ec, 0xd, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff, 0x1, 0x3, 0x8, 0x5}, 0x2, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x6ecc, 0x0, 0x1, 0x10001}, 0x3, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfff, 0xc, 0x20000000, 0x6, 0xbeb0}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0x2000, 0xffffffffffffffff, 0x6, 0x7fffffff}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x6, 0x7}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x53, 0xe, 0x10000000, 0xe6ad, 0x2}, 0x3}}]}, {0xff, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ctinfo={0x104, 0xb, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}]}, {0xd0, 0x6, "c170b7efa5d96dd8b7038f7c02d82c441c178db66c3f8a4f27a9c9c847e443367f948ebff62259a99fa2598c322f63c4bce070c14bbf5affaacb52264fdc6ccd18be42fb9cc0e5dff3c5f696becd734d2d9d30519c84eb3de681082281ab31320413bacd2b9010ac5fb5d1bd3e4921ec7c8db86c1f9eb3600dc3a98db230de084d809142958104782311a3acd115bdad07d29e0c61b9631ce147d5242c99631fe91fb8b0fcd6cff9aeb5b9a979ab3385b2aeee6f9df390173409f19ec4aee6fb4f542c0d9e8d945d5cd5db15"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mirred={0x104, 0x10, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xf71, 0x2, 0x0, 0xff, 0x7}, 0x2, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x401, 0xffffffffffffffff, 0x9, 0x7fff}, 0x1, r3}}]}, {0x98, 0x6, "95ed24c6e229b1fc1e98c5e70369c12a14686b8d4ae95876fda20d344bdecd12cfb61037a867286f67944866854474915609a7e091796ab9dfd0740a2dace0b3196c8960483451dcd7aac78d924ea5d4103d4db42891b4cbfe91c7d7110ab8569b78d3b63930633e3e7ce81220eea4d64b97009ff134afe3eb3fef5e023d31b531907255bff072a674b199f2dc505596a576ead2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x1fc, 0xf, 0x0, 0x0, {{0xb}, {0xe0, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'flower\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'flower\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x7ff, 0x0, 0xf66, 0x3c5}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8f, 0x9, 0x5, 0x6b4}}, @TCA_DEF_PARMS={0x18, 0x2, {0x72a5, 0x9, 0x0, 0x80000001, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x6d98, 0x1, 0x401, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0x30000000, 0x1, 0x4ae23f461ea5730e, 0x7, 0x7a}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x3, 0x1, 0xe}}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x4, 0x20000005, 0x13, 0x9}}, @TCA_DEF_DATA={0x1c, 0x3, '/dev/infiniband/rdma_cm\x00'}]}, {0xf2, 0x6, "9711ffaff617d0aced142fff3a7379a105c3c3c091def98f9518c97799bcade579cffa0f16993063c057cfb0e3edb8ad77e129ca0342faab368093c5690477ea01255106aba6f87db7adab681b37fc5cc10ba7c70fcede16867390e53a39e855d72ac62a3ebd8681ee284dd47bfc88f0ba39a06e74de6ef06445d04525697196bdb6ea8ba94980f251e0a5aac842c6cd551f96ea26adc7b65c414f6f9bdd74aa3f6222a3cb7a91ca45a7b1b2da0110d47c0f98f13918e0387d7ba39ce9ff3f913a0b224b840f5ffab488d8d727ec2934feb14b8b084dc943e34a4e732dd365ea4bc82d6ab7d729e5a89d7b4703d7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ct={0xa0, 0x12, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @loopback}, @TCA_CT_LABELS={0x14, 0x7, "858afa37357e5cc5b9f00266b02ddde9"}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8}, @TCA_CT_LABELS_MASK={0x14, 0x8, "4403302b5bb4c3920ea6831906abcdf9"}]}, {0x1c, 0x6, "9eac977e79014859451c5aa4ee5a91ddb15e0d730c632c4e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x9a4}, 0x1, 0x0, 0x0, 0x81}, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x8, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000009500000000000000e0f3"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008004500002400000000002f908dac141400e0000001000065580401907800d8621b002c17a91f534b34f9b2019edff9550e05e78def0e8c"], 0x0) timer_create(0x3, 0x0, &(0x7f0000000800)) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000880)={0x2, 0x42, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0x10eccc, 0x5, 0x0, 0x5, 0x8, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ptrace$getregset(0x4205, r5, 0x202, &(0x7f0000000900)={&(0x7f0000000940)=""/120, 0xffffffffffffff28}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000a00)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000a40)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x1, @loopback}, r6}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000a80)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e22, @remote}}}, 0x118) clock_gettime(0x0, &(0x7f0000000bc0)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000c00)={{0x0, 0xea60}, {r7, r8/1000+10000}}, 0x0) timer_create(0xfffffff9, 0x0, &(0x7f0000000c40)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r9, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010020000000fddbdf252700000018000180140002006970365f7674693000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r11 = syz_io_uring_setup(0x862, 0x0, &(0x7f0000000d80), 0x0, &(0x7f0000000dc0)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r11, 0x1e, &(0x7f0000000e00)={r4, 0x0, 0x2, 0x2dd13031, 0xba8}, 0x1) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r12, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e2200"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000880) pipe(0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x1, 0x4}, {0x0, 0x9}, {0x5, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 44.220155007s ago: executing program 8 (id=2576): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x60, &(0x7f0000000080)={&(0x7f0000000240)={0x3c, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x723}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x3c}}, 0x0) 44.138041119s ago: executing program 8 (id=2577): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x6, 0x1011, &(0x7f0000000700)=""/4113, 0x41000, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x845c5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000240)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001740)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r1, &(0x7f0000001780)='270', 0x3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001c00)={&(0x7f0000001a40)="4f6513bfc2f2e86498d24f9805b40336e5b89ea728938c", &(0x7f0000001a80)=""/251, &(0x7f0000001b80), &(0x7f0000001bc0)="916563905c6f8bf3d720293bb3ecf8b88a49a411", 0x9ae, r1}, 0x38) syz_open_dev$usbfs(0x0, 0x74, 0x160341) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000017c0)={0x0, 0x0}) r2 = syz_io_uring_setup(0x8b2, &(0x7f0000001c40)={0x0, 0xd64e, 0x400, 0x0, 0x2e1, 0x0, r1}, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f0000001d40)) io_uring_setup(0x5317, &(0x7f0000001d80)={0x0, 0x8df2, 0x40, 0x3, 0x335, 0x0, r2}) memfd_create(&(0x7f0000001800)='%\x00#D)\xdeA\x02\n,\x06\x89\x96\x8f\xd3F\x9fe\xf7\x9f\x9f\x0f\xeb\v\xc3\x86%0\x05\x9d4\xfa\x92H\x89m\x14>4\xe4\xb4m\fF\xaf\x9d&\x05\xcf\xc1HZ\x9a\xa3X\xaa;t\x12\'\xf5\x18PvY', 0x6) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x1f, 0xc, &(0x7f0000001940)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$kcm(0x2, 0x1, 0x84) mount_setattr(0xffffffffffffffff, 0x0, 0x8900, &(0x7f0000001a00)={0x0, 0x71}, 0x20) unshare(0x40000000) 43.534059314s ago: executing program 8 (id=2580): mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0) mount$bind(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x103496, 0x0) chroot(&(0x7f00000007c0)='./file0\x00') mount$bind(&(0x7f0000000800)='.\x00', &(0x7f0000000840)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0/../file0/../file0\x00') 43.505804505s ago: executing program 8 (id=2581): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x845c5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001740)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000001780)='270', 0x3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001c00)={&(0x7f0000001a40), 0x0, 0x0, 0x0, 0x9ae, r0}, 0x38) syz_open_dev$usbfs(0x0, 0x74, 0x160341) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r1 = syz_io_uring_setup(0x8b2, &(0x7f0000001c40)={0x0, 0xd64e, 0x400, 0x0, 0x2e1, 0x0, r0}, 0x0, 0x0, &(0x7f0000001d40)) io_uring_setup(0x5317, &(0x7f0000001d80)={0x0, 0x8df2, 0x40, 0x3, 0x335, 0x0, r1}) memfd_create(&(0x7f0000001800)='%\x00#D)\xdeA\x02\n,\x06\x89\x96\x8f\xd3F\x9fe\xf7\x9f\x9f\x0f\xeb\v\xc3\x86%0\x05\x9d4\xfa\x92H\x89m\x14>4\xe4\xb4m\fF\xaf\x9d&\x05\xcf\xc1HZ\x9a\xa3X\xaa;t\x12\'\xf5\x18PvY', 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x1f, 0xc, &(0x7f0000001940)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$kcm(0x2, 0x1, 0x84) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000019c0)) mount_setattr(0xffffffffffffffff, 0x0, 0x8900, 0x0, 0x0) unshare(0x40000000) socket$inet6_tcp(0xa, 0x1, 0x0) 43.218510132s ago: executing program 8 (id=2587): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) capget(&(0x7f0000000700)={0x20080522}, &(0x7f0000000740)={0x40, 0x40, 0x8, 0x2, 0x7f, 0x6}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) capset(&(0x7f0000000080)={0x19980330, r0}, &(0x7f0000000140)={0x1, 0x1, 0x1, 0xffffffff, 0xbd, 0x2}) 43.162147163s ago: executing program 40 (id=2587): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) capget(&(0x7f0000000700)={0x20080522}, &(0x7f0000000740)={0x40, 0x40, 0x8, 0x2, 0x7f, 0x6}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) capset(&(0x7f0000000080)={0x19980330, r0}, &(0x7f0000000140)={0x1, 0x1, 0x1, 0xffffffff, 0xbd, 0x2}) 36.004671512s ago: executing program 2 (id=2664): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000b00)='\x00', 0x89901) statx(r1, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000b40)) 35.745298758s ago: executing program 2 (id=2665): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 35.430882396s ago: executing program 2 (id=2673): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/netfilter/nfnetlink_log\x00', 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x1d}, 0x82, 0x0, 0x800000, 0x4, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfff8000000000000, 0xffffffffffffffff, 0x1) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000880)=""/128, 0x80}], 0x1) timer_create(0x0, &(0x7f0000000900)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000940)=0x0) timer_settime(r0, 0x1, &(0x7f0000000980)={{}, {0x0, 0x989680}}, 0x0) 35.379626907s ago: executing program 2 (id=2677): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x56, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff356}, 0x0, 0x80000000, 0x0, 0x9, 0xae7, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000300)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'ip6tnl0\x00', 0x0}) recvmsg$can_raw(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/27, 0x1b}, {&(0x7f00000004c0)}], 0x2, &(0x7f0000000500)=""/164, 0xa4}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x1, 0x2, 0x7fffffff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48080}, 0x4000010) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = openat(r3, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x147042, 0xc) write(r4, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9f0000000c00000002000000000000000000000d000000000000"], 0x0, 0x26, 0x0, 0x1, 0x200}, 0x28) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0, 0x4}, 0x10005, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) socket$inet_udp(0x2, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0) mount$bind(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x103496, 0x0) chroot(&(0x7f00000007c0)='./file0\x00') mount$bind(&(0x7f0000000800)='.\x00', &(0x7f0000000840)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0/../file0/../file0\x00') request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3\xa5e\x11\xf9\xa0\xba;\x9bH\x00e', 0xfffffffffffffffe) 34.497800019s ago: executing program 2 (id=2680): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x8, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b637ddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) mkdirat(0xffffffffffffffff, &(0x7f0000000580)='./sys/module/kernel/parameters/panic\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kernel/parameters/panic\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1e, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000071121b100000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) read(r1, &(0x7f0000000140)=""/100, 0x64) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl(0xffffffffffffffff, 0xc0184d03, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x800000a, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x1, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0}, 0x20) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x6a, 0x1, 0x0, 0xc) syz_open_procfs(0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000680)={0x2, 0x0, &(0x7f00000006c0)={0x0, 0xa0}}, 0x0) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setns(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x1, 0xe, &(0x7f0000001800)=ANY=[], &(0x7f0000001c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001c40), 0x8, 0x10, &(0x7f0000001c80), 0x10}, 0x94) add_key(&(0x7f0000001cc0)='rxrpc\x00', &(0x7f0000001d00), &(0x7f0000001d40)="000000000000000463656c6c00000001000000440000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004010203040000000405060708", 0x58, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)="1400000034005f76432127c23b84aa980b47564c", 0x14}], 0x1}, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) 34.242791736s ago: executing program 2 (id=2684): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x9}, 0x204, 0x9, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000003c0)='./proc\x00', 0xa6) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/thread-self/fail-nth\x00', 0x2002, 0x11e) write(r1, &(0x7f00000004c0)='7', 0x1) bpf$MAP_CREATE(0x13000000, &(0x7f0000000500)=ANY=[], 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) socket$xdp(0x2c, 0x3, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000240)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 34.242588705s ago: executing program 41 (id=2684): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x9}, 0x204, 0x9, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000003c0)='./proc\x00', 0xa6) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/thread-self/fail-nth\x00', 0x2002, 0x11e) write(r1, &(0x7f00000004c0)='7', 0x1) bpf$MAP_CREATE(0x13000000, &(0x7f0000000500)=ANY=[], 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) socket$xdp(0x2c, 0x3, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000240)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 29.65188498s ago: executing program 0 (id=2728): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x841e, &(0x7f0000000140)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000180)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000740)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x181042, 0x65) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000840)={0x1, &(0x7f0000000880)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) select(0x40, &(0x7f00000008c0)={0xf, 0x6, 0x6, 0x8, 0x3ff, 0x1, 0xfff, 0xac}, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000900)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000940)='hybla', 0x5) bind$inet(r1, &(0x7f0000000980)={0x2, 0x4e24, @loopback}, 0x10) perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xd}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x9000000e, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) writev(r2, &(0x7f0000000a80)=[{&(0x7f0000000ac0)='4', 0x1}], 0x1) munmap(&(0x7f0000761000/0x2000)=nil, 0x2000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000b00)={'veth0_vlan\x00', 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000b40)={{{@in6=@empty, @in=@broadcast, 0x4e22, 0xd, 0x4e23, 0x8, 0x2, 0xe0, 0xc0, 0x3b, r3}, {0x6, 0x3, 0x80000000, 0x800, 0xe, 0x8000, 0x40, 0x1}, {0x1, 0x100000000, 0xfffffffffffeffff, 0x5}, 0xf4, 0x6e6bb8, 0x0, 0x0, 0x2, 0x2}, {{@in6=@private1, 0x4d3, 0x6c}, 0x2, @in=@private=0xa010100, 0x3503, 0x2, 0x0, 0xff, 0x0, 0x6, 0xffff}}, 0xe8) sendmmsg$inet(r1, &(0x7f0000000c40)=[{{&(0x7f0000000c80)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000cc0), 0x4c}}], 0x1, 0x20008000) pwrite64(r0, &(0x7f0000000d00)='2', 0x1, 0x84fed0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./file1\x00', 0x129042, 0x15) setuid(0xee01) mmap(&(0x7f0000389000/0x3000)=nil, 0x3000, 0x2, 0x28011, r4, 0x7000) 28.994400356s ago: executing program 0 (id=2737): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000010a800000100000003000000000000001800000000000000100100000e000000de46d1773b0000005a3c3361931252"], 0x30}, 0x4048000) write(r1, &(0x7f00000000c0)="94", 0x1) vmsplice(r4, &(0x7f0000000100)=[{&(0x7f0000000140)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000000240)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r0, r4, 0x8f5, 0x0) write$cgroup_devices(r4, 0x0, 0x8) write(r2, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000480)=0x480d, 0x4) 28.117276849s ago: executing program 0 (id=2750): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0xa, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100000100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc, 0x3, 0x401, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x1, 0x4, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffa, 0x4, 0x0, 0x4, 0x1, 0x9, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000005, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x8, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xf9, 0x7]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x27, 0x20002f7}) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x20800, 0x0, 0x6, 0x0, &(0x7f0000000240)=0x6}) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x400, 0x0, 0x3c9}, &(0x7f0000000100), &(0x7f0000000000), 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 27.892286674s ago: executing program 0 (id=2754): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x6, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x400, &(0x7f0000000200)={[{@noquota}, {@norecovery}, {@bh}, {@delalloc}, {@jqfmt_vfsold}, {@noquota}]}, 0x1, 0x4a6, &(0x7f0000000400)="$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") r1 = creat(&(0x7f00000008c0)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000009c0)='\f', 0x1, 0x8000c61) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x2002, 0xa) fallocate(r1, 0x0, 0x0, 0x2000402) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000a40)={0xc, r1, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) r4 = semget$private(0x0, 0x0, 0x48a) semop(r4, &(0x7f0000000000)=[{0x4, 0xfff6, 0x1000}, {0x4, 0xffff}], 0x2) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000140)={{0x2, 0xee01, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x1f}, 0x6, 0x1fffe00000000, 0x0, 0x0, 0x0, 0x0, 0x9}) sendmsg(r0, 0x0, 0x8040) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000380)=0xa40, 0x4) socket$kcm(0x2, 0xa, 0x2) 27.048912845s ago: executing program 0 (id=2765): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x9}, 0x204, 0x9, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000003c0)='./proc\x00', 0xa6) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/thread-self/fail-nth\x00', 0x2002, 0x11e) write(r1, &(0x7f00000004c0)='7', 0x1) bpf$MAP_CREATE(0x13000000, &(0x7f0000000500)=ANY=[], 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000240)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x3c}}, 0x4000) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_clone(0x80100, 0x0, 0x0, 0x0, 0x0, 0x0) 26.05195955s ago: executing program 0 (id=2774): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x56, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff356}, 0x0, 0x80000000, 0x0, 0x9, 0xae7, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000300)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'ip6tnl0\x00', 0x0}) recvmsg$can_raw(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/27, 0x1b}, {&(0x7f00000004c0)}], 0x2, &(0x7f0000000500)=""/164, 0xa4}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x1, 0x2, 0x7fffffff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48080}, 0x4000010) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = openat(r3, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x147042, 0xc) write(r4, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9f0000000c00000002000000000000000000000d000000000000"], 0x0, 0x26, 0x0, 0x1, 0x200}, 0x28) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0, 0x4}, 0x10005, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r5 = socket$inet_udp(0x2, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0) mount$bind(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x103496, 0x0) mount$bind(&(0x7f0000000800)='.\x00', &(0x7f0000000840)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0/../file0/../file0\x00') setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3\xa5e\x11\xf9\xa0\xba;\x9bH\x00e', 0xfffffffffffffffe) 25.935372613s ago: executing program 1 (id=2775): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfefffffffffffffd, 0x7}, 0x0, 0x0, 0x8000000, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080), 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x6, 0x7, 0x2, 0x7fff7ffc}]}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000203010000000000000000"], 0x1c}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7, &(0x7f0000000700)=[{}, {}], 0x10, 0x0, 0x0, 0x0, 0x0, 0x26, 0x8, 0x0, 0x0}}, 0x10) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) close_range(r3, r3, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000dc0)) 25.849411445s ago: executing program 1 (id=2776): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x10106, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x7}, 0x9696a46c4adce67c, 0x2, 0x790, 0x0, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) socket(0x10, 0x803, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x20000000) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4ea3, 0xe3, @mcast2, 0x9}, 0x1c) connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x14) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000010100000000000000000009fe8a081e57fc8666a51fc763d77269c5f03a2d02a253d6e0a096d385cc8240b5e6"], 0x10) sendmsg(r1, &(0x7f0000000180)={0x0, 0x952f, &(0x7f00000001c0)=[{&(0x7f0000000240)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1032}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) 25.602068491s ago: executing program 1 (id=2779): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0xc1c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x100) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830a}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./file2\x00', 0x2010410, &(0x7f0000000100)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f00000001c0)="$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") r0 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x200000, &(0x7f00000004c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@mblk_io_submit}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nobarrier}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000a80)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001000)='/proc/bus/input/devices\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f0000000580)={0x0, r0, r2, 0x0, 0x1, '\x00', {0x3, 0x101, 0x8, 0x7, 0x4, 0xff, 0x9, 0xa, {0x65, 0x6}, {0x7, 0x3}, {0x3, 0x9f}, 0x30000000, 0x6, 0x0, 0x3, 0x1, 0xf68, 0x2, 0xe, 0x7, 0xc, '\x00', 0x0, 0x7cf, 0x8000, 0x2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x8, &(0x7f0000001100)=ANY=[@ANYBLOB="1800000000000000000000008120000018120000", @ANYRES32, @ANYBLOB="fb00000000000098dd00001300000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000001140)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0xc}, 0x94) syz_genetlink_get_family_id$ethtool(0x0, r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x3, 0xc, 0x0, &(0x7f0000001240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x835, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x8c854}, 0x4080) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$rds(0x15, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000640), 0x4000) sendmsg$NFT_BATCH(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={0x0, 0xc4}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800052067854000000021600000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000034000380300000802c00018025000100bbac12c2587b820c25a3b1ad00ac4553f3c743e43ddd5c2376ba7af6cf97ac13d30000001400000010000100000000000000d20000000000000000"], 0xe4}}, 0x20008844) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file7\x00', 0x0) 23.298691889s ago: executing program 1 (id=2796): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x56, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff356}, 0x0, 0x80000000, 0x0, 0x9, 0xae7, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000300)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'ip6tnl0\x00', 0x0}) recvmsg$can_raw(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/27, 0x1b}, {&(0x7f00000004c0)}], 0x2, &(0x7f0000000500)=""/164, 0xa4}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x1, 0x2, 0x7fffffff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48080}, 0x4000010) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = openat(r3, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x147042, 0xc) write(r4, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9f0000000c00000002000000000000000000000d000000000000"], 0x0, 0x26, 0x0, 0x1, 0x200}, 0x28) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0, 0x4}, 0x10005, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r5 = socket$inet_udp(0x2, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0) mount$bind(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x103496, 0x0) mount$bind(&(0x7f0000000800)='.\x00', &(0x7f0000000840)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0/../file0/../file0\x00') setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3\xa5e\x11\xf9\xa0\xba;\x9bH\x00e', 0xfffffffffffffffe) 21.855445095s ago: executing program 1 (id=2802): socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x10106, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x7}, 0x9696a46c4adce67c, 0x2, 0x790, 0x0, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) socket(0x10, 0x803, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x20000000) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4ea3, 0xe3, @mcast2, 0x9}, 0x1c) syz_emit_ethernet(0x19e, &(0x7f0000000280)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x168, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x9, "bd3e6d4706598080a8030037ffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34116d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x3, 0x20, "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"}]}}}}}}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000010100000000000000000009fe8a081e57fc8666a51fc763d77269c5f03a2d02a253d6e0a096d385cc8240b5e6"], 0x10) sendmsg(r0, &(0x7f0000000180)={0x0, 0x952f, &(0x7f00000001c0)=[{&(0x7f0000000240)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1032}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) 21.65469433s ago: executing program 1 (id=2805): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x841e, &(0x7f0000000140)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000180)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000740)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x181042, 0x65) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000840)={0x1, &(0x7f0000000880)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) select(0x40, &(0x7f00000008c0)={0xf, 0x6, 0x6, 0x8, 0x3ff, 0x1, 0xfff, 0xac}, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000900)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000940)='hybla', 0x5) bind$inet(r1, &(0x7f0000000980)={0x2, 0x4e24, @loopback}, 0x10) perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xd}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x9000000e, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) writev(r2, &(0x7f0000000a80)=[{&(0x7f0000000ac0)='4', 0x1}], 0x1) munmap(&(0x7f0000761000/0x2000)=nil, 0x2000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000b00)={'veth0_vlan\x00', 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000b40)={{{@in6=@empty, @in=@broadcast, 0x4e22, 0xd, 0x4e23, 0x8, 0x2, 0xe0, 0xc0, 0x3b, r3}, {0x6, 0x3, 0x80000000, 0x800, 0xe, 0x8000, 0x40, 0x1}, {0x1, 0x100000000, 0xfffffffffffeffff, 0x5}, 0xf4, 0x6e6bb8, 0x0, 0x0, 0x2, 0x2}, {{@in6=@private1, 0x4d3, 0x6c}, 0x2, @in=@private=0xa010100, 0x3503, 0x2, 0x0, 0xff, 0x0, 0x6, 0xffff}}, 0xe8) sendmmsg$inet(r1, &(0x7f0000000c40)=[{{&(0x7f0000000c80)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000cc0), 0x4c}}], 0x1, 0x20008000) pwrite64(r0, &(0x7f0000000d00)='2', 0x1, 0x84fed0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000d80)={'wlan0\x00'}) setuid(0xee01) mmap(&(0x7f0000389000/0x3000)=nil, 0x3000, 0x2, 0x28011, 0xffffffffffffffff, 0x7000) 21.611080201s ago: executing program 42 (id=2805): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x841e, &(0x7f0000000140)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000180)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000740)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x181042, 0x65) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000840)={0x1, &(0x7f0000000880)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) select(0x40, &(0x7f00000008c0)={0xf, 0x6, 0x6, 0x8, 0x3ff, 0x1, 0xfff, 0xac}, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000900)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000940)='hybla', 0x5) bind$inet(r1, &(0x7f0000000980)={0x2, 0x4e24, @loopback}, 0x10) perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xd}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x9000000e, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) writev(r2, &(0x7f0000000a80)=[{&(0x7f0000000ac0)='4', 0x1}], 0x1) munmap(&(0x7f0000761000/0x2000)=nil, 0x2000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000b00)={'veth0_vlan\x00', 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000b40)={{{@in6=@empty, @in=@broadcast, 0x4e22, 0xd, 0x4e23, 0x8, 0x2, 0xe0, 0xc0, 0x3b, r3}, {0x6, 0x3, 0x80000000, 0x800, 0xe, 0x8000, 0x40, 0x1}, {0x1, 0x100000000, 0xfffffffffffeffff, 0x5}, 0xf4, 0x6e6bb8, 0x0, 0x0, 0x2, 0x2}, {{@in6=@private1, 0x4d3, 0x6c}, 0x2, @in=@private=0xa010100, 0x3503, 0x2, 0x0, 0xff, 0x0, 0x6, 0xffff}}, 0xe8) sendmmsg$inet(r1, &(0x7f0000000c40)=[{{&(0x7f0000000c80)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000cc0), 0x4c}}], 0x1, 0x20008000) pwrite64(r0, &(0x7f0000000d00)='2', 0x1, 0x84fed0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000d80)={'wlan0\x00'}) setuid(0xee01) mmap(&(0x7f0000389000/0x3000)=nil, 0x3000, 0x2, 0x28011, 0xffffffffffffffff, 0x7000) 10.83495522s ago: executing program 43 (id=2774): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x56, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff356}, 0x0, 0x80000000, 0x0, 0x9, 0xae7, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000300)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'ip6tnl0\x00', 0x0}) recvmsg$can_raw(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/27, 0x1b}, {&(0x7f00000004c0)}], 0x2, &(0x7f0000000500)=""/164, 0xa4}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x1, 0x2, 0x7fffffff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48080}, 0x4000010) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = openat(r3, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x147042, 0xc) write(r4, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9f0000000c00000002000000000000000000000d000000000000"], 0x0, 0x26, 0x0, 0x1, 0x200}, 0x28) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0, 0x4}, 0x10005, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r5 = socket$inet_udp(0x2, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0) mount$bind(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x103496, 0x0) mount$bind(&(0x7f0000000800)='.\x00', &(0x7f0000000840)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0/../file0/../file0\x00') setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3\xa5e\x11\xf9\xa0\xba;\x9bH\x00e', 0xfffffffffffffffe) 3.445751904s ago: executing program 3 (id=2934): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000005c0)='27', 0x2) syz_open_dev$usbmon(&(0x7f0000000600), 0x5, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000900)) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = syz_clone(0x10002200, &(0x7f0000000380)="5f04b07a4b18b64fa682b5fc310ee99091215e1ee51b8ad09702b02c3a818c1f8867feb2be2562e848c04868734d96b36d32dccb107dd875de695b31382ca781eee1cec5a4476b2a084a57e82122369e9448afb7bb312bac254523065b161e0b0b24c0d077e93415acf65090cf3bdea96c8644e2de615902540bbc81e874325a769f83fe4ba82c6548c5cdce02fdcdb58ae9241ab1d05125822eaf21f541e9e6", 0xa0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000940)="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") perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0xe, 0x1, 0x8, 0x2, 0x0, 0x8000, 0x1400c, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x800, 0x5}, 0x410, 0x0, 0x7, 0x1, 0x0, 0x3d1d, 0x1, 0x0, 0x2762edf1, 0x0, 0x3}, r2, 0xb, 0xffffffffffffffff, 0x1) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f00001d0000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f000074e000/0x4000)=nil, &(0x7f000040b000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000640)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@RTM_NEWMDB={0x38, 0x54, 0x401, 0x0, 0x0, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x0, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x86dd}}}]}, 0x38}}, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x181f, &(0x7f0000000280)={0x0, 0x3f3c, 0x1000, 0x0, 0x1b5}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004015) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x100, 0x100, 0x1, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840), &(0x7f0000000880), 0xcff5, r8}, 0x38) r9 = io_uring_setup(0x4497, &(0x7f00000001c0)={0x0, 0x8251, 0xc000, 0x4, 0x400000c1, 0x0, r7}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0208000004"], 0x48) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x1) 3.346695427s ago: executing program 3 (id=2936): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) ioprio_get$pid(0x2, r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x10ecc8, 0xc, 0x40, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x4880) write$tun(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0xfdef) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x6}, 0x220, 0x2, 0xfffffffe, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r1, 0x2000000) fcntl$addseals(r1, 0x409, 0x7) r2 = msgget$private(0x0, 0x20) msgsnd(r2, &(0x7f0000000b80)=ANY=[@ANYBLOB="02150c00000000"], 0x8, 0x800) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000380), 0x4) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000240)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x44014}, 0x40000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x300884c, &(0x7f00000005c0), 0x1, 0x515, &(0x7f0000000b40)="$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") r5 = creat(&(0x7f00000001c0)='./file2\x00', 0x18c) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x100) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0xc, r5, 0x0, 0x4, 0x0, 0xfffffffffe000001}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_mreq(r7, 0x29, 0x1c, &(0x7f00000003c0)={@remote}, 0x78) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x80002, 0x0, 0x0, 0xc, 0x2}, @func_proto, @const={0xf, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x1}, 0x28) 2.436566219s ago: executing program 3 (id=2951): futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000380), 0x1, 0x50f, &(0x7f0000000fc0)="$eJzs3UFsI1cZAODfTpw42bRJSw8FQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZELN849ceeC4MalHJAWiEAbJA5GM54k3qy9sTaJncbfJ41m3ryx//9tMu+tX2y/AEbWzYjYj4iJiPggImaz87lsi3fbW3Ldo4MHK4cHD1Zy0Wq9/89cWp+ci47HJG5kz1mMiB9+N+InuSfjNnb3Npar1cp2Vp5v1rbmG7t7d9Zry2uVtcpmuby0uLTw9t23yhfW1ldrE9nRVz774/43f5akNZOd6WzHRWo3vXAcJzEeEd+/jGBDMJa1Z2LYifBM8hHxYkS8lt7/szGW/jQBgOus1ZqN1mxnGQC47vLpHFguX8rmAmYiny+V2nN4L8V0vlpvNG/fr+9srrbnyuaikL+/Xq0sZHOFc1HIJeXF9PikXD5VvhsRL0TELyan0nJppV5dHeZ/fABghN04Nf7/Z7I9/gMA11xx2AkAAANn/AeA0WP8B4DRY/wHgNHTHv+nhp0GADBAXv8DwOgx/gPASPnBe+8lW+sw+/7r1Q93dzbqH95ZrTQ2SrWdldJKfXurtFavr6Xf2VM76/mq9frW4pux89Hct7YazfnG7t69Wn1ns3kv/V7ve5VCetX+AFoGAPTywquf/iWXjMjvTKVbdKzlUBhqZsBlyw87AWBoxoadADA0VvuC0XWO1/imB+DzrsvavN0Uu31AqNVqtS4hJWAwbn3R/D+Mqo75f+8ChhFj/h9Gl/l/GF2tVq7fNf+j3wsBgKvNHD/Q420AL2b732Z/HPjx6ukrPrnMrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBqO1r/t5StBT4T+XypFPFcRMxFIXd/vVpZiIjnI+LPk4XJpLw45JwBgPPK/z2Xrf91a/aNmceqXrlxfDgRET/91fu//Gi52dz+U8RE7l+TR+ebn2Tny4PPHgA429E4ne47Xsg/OniwcrQNMp+H34mIYjv+4cFEHB7HH4/xdF+MQkRM/zuXldtyHXMX57H/cUS83K39uZhJ50DaK5+ejp/Efm6g8fOPxc+nde198m/xhQvIBUbNp0n/8263+y8fN9N95/1/slp6Me2hzi/r/5KnWjlM+8CT+Ef931iP/u9mvzHe/MP32kdT2YNPVnt++HHEl8YjjmIfdvQ/R/FzPeK/0Wf8v375ldd61bV+HXErusfvjDXfrG3NN3b37qzXltcqa5XNcnlpcWnh7btvlefTOer53qPBP965/XyvuqT90z3iF89o/9f6bP9v/vfBj776lPjfeL1b/Hy89JT4yW/i1/uMvzz9+2KvuiT+ao/2n/Xzv91n/M/+tvfEsuEAwPA0dvc2lqvVyvaIHvzuaqQxYgfj8YwPT35lh518r4Nv93/xy+eKNRHdq37+evuePlXVaj1TrF49xkXMugFXwfFNHxH/HXYyAAAAAAAAAAAAAABAV4P4dNSw2wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD19f8AAAD//+7Mzkc=") creat(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002"], 0x44}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) creat(&(0x7f0000000000)='./file1\x00', 0x80) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) write(r3, 0x0, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0xa0) 2.376595131s ago: executing program 3 (id=2952): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x8, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b637ddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) mkdirat(0xffffffffffffffff, &(0x7f0000000580)='./sys/module/kernel/parameters/panic\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kernel/parameters/panic\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1e, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000071121b100000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) read(r1, &(0x7f0000000140)=""/100, 0x64) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl(0xffffffffffffffff, 0xc0184d03, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x800000a, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x1, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0}, 0x20) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x6a, 0x1, 0x0, 0xc) syz_open_procfs(0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000680)={0x2, 0x0, &(0x7f00000006c0)={0x0, 0xa0}}, 0x0) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setns(0xffffffffffffffff, 0x0) add_key(&(0x7f0000001cc0)='rxrpc\x00', &(0x7f0000001d00), &(0x7f0000001d40)="000000000000000463656c6c00000001000000440000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004010203040000000405060708", 0x58, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)="1400000034005f76432127c23b84aa980b47564c", 0x14}], 0x1}, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) 2.324062792s ago: executing program 3 (id=2954): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x38, 0x9, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}]}]}, 0x38}}, 0x0) 2.306355142s ago: executing program 3 (id=2955): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000640)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) syz_ublk_setup_io_uring(0x4c8, &(0x7f0000000680)={0x0, 0x695d, 0x400, 0x1, 0xcf, 0x0, r0}, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000010400)) timer_settime(0x0, 0x0, &(0x7f0000010440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) perf_event_open(&(0x7f0000010700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext={0x4d5, 0x3ff}, 0x0, 0x20000, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$netlink(0x10, 0x3, 0x4) r3 = open(&(0x7f00000107c0)='./file0\x00', 0x60840, 0x0) r4 = syz_usb_connect(0x0, 0x55, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r1) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r5, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4044011}, 0x8c0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac3(r4, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x0, 0x29, 0xf6, {0xf6, 0x21, "2e12ca9cfd991bcd5f4d53c21685d11fe7b0c1b145346492b34e6df8c219299c21642f976ff497fe227a584079d23fc0628cdf9e852f9a930b178164d068808599b14f4b8108f4f5e96cbfa05fdcfe45fdfd031a5ffb70f900ddd40b3d68d6f365599b189c99e8e4d6cbe3c6023dfff9e0b4c2a5c9077a6e6eda495677a68220ae6bbe58cb56151bb339d24016377cc017296c6598e4b31d1bd1ebfc5f86b786f37a3d4d9c255f1f4d7206bdd1c434a882d6656ffcd06da1a68c52452a2a636f83590fb25009cee03aa4a762899f14a136acabaa4f169721a5906af660cae92b8426d5f0848188532faa93d0ff934abd849a8323"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41c}}}, &(0x7f0000000440)={0x44, &(0x7f0000000200)={0x40, 0xf, 0x71, "86fca23606ceee5b84a19692844ac6823156fa5a3dd632692eda2f0a159b74c21edb3834ad147069e994918b9101665c226cce5ceb0da0c2b4f90de48e16e2e76a2ae27d6d3d4d6a36cc279fda8d3c9b4191941f6fa115918858d462c0e5b87745eee26f9bb3693ebc21da21bcf9e09c2d"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x85}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000300)={0x20, 0x81, 0x2, "a8b6"}, &(0x7f0000000340)={0x20, 0x82, 0x3, '7&E'}, &(0x7f0000000380)={0x20, 0x83, 0x2, "6bc7"}, &(0x7f00000003c0)={0x20, 0x84, 0x2, "d36e"}, &(0x7f0000000400)={0x20, 0x85, 0x3, "d76875"}}) fcntl$setlease(r3, 0x400, 0x0) timerfd_gettime(r0, &(0x7f0000000640)) mkdir(0x0, 0x1ff) symlink(0x0, &(0x7f0000010a80)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') socket$inet_tcp(0x2, 0x1, 0x0) truncate(&(0x7f0000010ac0)='./file0\x00', 0x0) 2.110215208s ago: executing program 5 (id=2958): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{0x0}], 0x1) io_setup(0x4, &(0x7f00000011c0)=0x0) io_submit(r1, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000001440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, @perf_bp={0x0, 0xa}, 0x20b0, 0xc, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0xffffffff00000003}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)={0x14, 0x2, 0x6, 0x801, 0xe4340000}, 0x14}}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)={0x44, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000018c0)={0x0, 0xfffffffffffffe45, &(0x7f0000001900)={&(0x7f0000001940)=ANY=[@ANYBLOB="1c0000000706010200000000000000eef003eda2eb87680000"], 0x1c}, 0x1, 0x0, 0x0, 0x20040840}, 0x48810) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 1.981678311s ago: executing program 5 (id=2959): perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x108081, 0x400000, 0x100, 0x0, 0x0, 0x0, 0x400, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x26020480) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0xa) r1 = socket$can_raw(0x1d, 0x3, 0x1) close(r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="800000001500040027bd7000fddbdf250a1f4cfe", @ANYRES32=r2, @ANYBLOB="14000200fc01000000000000000000000000000008000900ffff000008000a000400000014000100ff020000200000000000000000000001080009000100008014000100fe8000000000000000000000000000aa1400020000000000000000000000ffff7f000001"], 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x44000000) perf_event_open(&(0x7f0000000840)={0x0, 0x80, 0x1, 0x0, 0x20, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x7dd9}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000300)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000340)={0x28, 0x0, 0x2710}, 0x10) r6 = accept(r4, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r7, &(0x7f0000000400), &(0x7f0000000440)=@tcp6=r6, 0x1}, 0x20) ppoll(&(0x7f0000000480)=[{r6, 0x61a2}], 0x1, 0x0, 0x0, 0x0) getsockopt$nfc_llcp(r3, 0x118, 0x4, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000008c0), &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000a00)) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x80000004, 0x4) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x440007, @ipv4={'\x00', '\xff\xff', @empty}, 0xd7}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[@ANYRESDEC], 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 1.858789474s ago: executing program 5 (id=2962): syz_emit_ethernet(0x15f, &(0x7f0000000280)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x129, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x9, "bd3e6d4706598080a8030037ffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34116d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x3, 0x18, "77f9290b6e87290b6e87f278e94724e20c43c95f9b49e04a64d614d4cc9d0d46d954fda9a75d076993e3b87aa99b2454a86662e37b42678a74974ddd50b21e499efae61e3a816a367d019bc7f892d8975f1fc8a3e27139041cd21d2d12f30ee6f029d8d73f80f9b19d138598345b9c0feda226b333c55c668fb17b5b39603ee66b8534f1fbf97e139d35762307516482a1787d8f3bb76940602a0104ac045b59510dfd944672de5f77c0e6136c06847bbe70dd65236ef4d112e88fabc57d02"}]}}}}}}, 0x0) 1.791344215s ago: executing program 5 (id=2964): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x6, 0x1011, &(0x7f0000000700)=""/4113, 0x41000, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x845c5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001740)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r1, &(0x7f0000001780)='270', 0x3) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x74, 0x160341) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000017c0)={0x0, 0x0}) r2 = syz_io_uring_setup(0x8b2, &(0x7f0000001c40)={0x0, 0xd64e, 0x400, 0x0, 0x2e1, 0x0, r1}, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f0000001d40)) io_uring_setup(0x5317, &(0x7f0000001d80)={0x0, 0x8df2, 0x40, 0x3, 0x335, 0x0, r2}) memfd_create(&(0x7f0000001800)='%\x00#D)\xdeA\x02\n,\x06\x89\x96\x8f\xd3F\x9fe\xf7\x9f\x9f\x0f\xeb\v\xc3\x86%0\x05\x9d4\xfa\x92H\x89m\x14>4\xe4\xb4m\fF\xaf\x9d&\x05\xcf\xc1HZ\x9a\xa3X\xaa;t\x12\'\xf5\x18PvY', 0x6) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x1f, 0xc, &(0x7f0000001940)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$kcm(0x2, 0x1, 0x84) mount_setattr(0xffffffffffffffff, 0x0, 0x8900, &(0x7f0000001a00)={0x0, 0x71}, 0x20) unshare(0x40000000) 1.714813807s ago: executing program 7 (id=2965): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x38, 0x9, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0x9, 0x1a, 'test\x00'}]}]}, 0x38}}, 0x0) 1.677322238s ago: executing program 7 (id=2967): bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x300) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r1) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000780)=0x14) sendmsg$nl_route(r1, &(0x7f00000007c0)={0x0, 0x3e, &(0x7f0000000800)={&(0x7f0000000840)=@newlink={0x40, 0x10, 0x437, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x704c3, 0xc4a48b7f26bf140b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x30000010) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f00000008c0)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x20081e, &(0x7f0000000080)={[{@nodelalloc}, {@nombcache}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000000c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000005c0)=@loop={'/dev/loop', 0x0}, 0xee01, &(0x7f0000000600)={0x8001fffffffffffd, 0x4, 0x1000000000000c8, 0x0, 0xfffffffffffffff7, 0xb2, 0x0, 0xfffffffffffffffc, 0xe}) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000940)=0x0) r5 = eventfd2(0x9, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="200000000214010023bd7000fddbdf25080004"], 0x20}, 0x1, 0x0, 0x0, 0x60408a0}, 0x488c0) io_submit(r4, 0x2, &(0x7f0000000c80)=[&(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2, 0x9, r3, &(0x7f0000000980)="9bb8c99ab4760ef0fc4f086d8abef7ded0fe325c1ebf4921d034f2c3d0da95a8618e42b753db5756db262b7ee053992a3e7f5715dd918a0f5e190239a1fde1c1722d5bb85754318730ff7904959c4b50cd895bd35f69c521f957517832f38fcbc3ca0fefbab8a2056f9c944914c2f4bb36e3265768f224b4c45cf8946a24ffcee3251592386702cdd608ac60005f5f9489a0fe6e9c8cdcad0daa2a85a4a847c2e6a3ae2d137dd411a4d46db30261c777a1bacb0d9c5babb56e43a85288554620a9137e5e7994bba1d2951f1e0eb7cd6cdc3ec541a529b2db3dceb6362a9fe87592e81422830f46f2d4d1b24c7febf054", 0xf0, 0x9, 0x0, 0x0, r5}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x8, 0xff, r6, &(0x7f0000000b80)="6d57be203be37e3cbd60bc1cf55e78b30be782816b8a8e5ee4ec1ddbb575c64b1d2f43ea022189aa675ad0f6b3cc61cbbaaf367c42a47641acdcbcba6289679f134ff089b51ef6f56cbcbd2b44af708a6c75dc2243ed7be60db31b161b215e92cfe41dd37156b55a8c515ad68b8c66f72b34d7c3a4960ffe51e9a8acabf12cd03fc8c0ef2d97b6da6d09bf7b8a5e23f9dae552fb2bb3b62b3d33b016f6ca42bea0d01da5", 0xa4, 0x7fffffff}]) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 1.486421983s ago: executing program 4 (id=2970): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0xfffffff9, 0x161, 0x17, "00020000f7fd00"}) r3 = syz_open_pts(r2, 0xc0000) ioctl$sock_inet_udp_SIOCINQ(r3, 0x80045440, &(0x7f0000000280)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x308}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%pS \x00'}, 0x20) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x4) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x40, '\x00', r6, r7, 0x4, 0x1}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xfffffdc4, 0x2, {{0x5, 0xa, 0x1, 0x69d9, 0x9, 0x5}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xfffffffffffffffe}]}}}]}, 0x58}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000000101010100000000000000000200fffd240002800c000280050001000100000005000100e000000208000200e00000010c001980080002001905000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x8041}, 0x0) move_pages(0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000440), 0x4) socket$unix(0x1, 0x1, 0x0) 1.467512174s ago: executing program 7 (id=2971): openat(0xffffffffffffff9c, 0x0, 0x0, 0x2) perf_event_open(0x0, 0x0, 0xfff8000000000000, 0xffffffffffffffff, 0x1) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000800)={[0x2]}, 0x8, 0x80000) readv(r0, &(0x7f0000000840)=[{&(0x7f0000000880)=""/128, 0x80}], 0x1) timer_create(0x0, &(0x7f0000000900)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000940)=0x0) timer_settime(r1, 0x1, &(0x7f0000000980)={{}, {0x0, 0x989680}}, 0x0) 1.267615649s ago: executing program 5 (id=2972): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7, 0xfffffffffffffff0}, 0x3830, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xfe}, [@printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0x3000000}}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x9, 0x0, 0x0) 1.266189889s ago: executing program 4 (id=2973): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x400, &(0x7f0000000200)={[{@noquota}, {@norecovery}, {@bh}, {@delalloc}, {@jqfmt_vfsold}, {@noquota}]}, 0x1, 0x4a6, &(0x7f0000000400)="$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") r1 = creat(&(0x7f00000008c0)='./bus\x00', 0x182) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x2, @perf_bp={0x0, 0x1}, 0x9679149b910765de, 0x80000000, 0xfffffffd, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000009c0)='\f', 0x1, 0x8000c61) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x2002, 0xa) fallocate(r1, 0x0, 0x0, 0x2000402) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000a40)={0xc, r1, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r4 = semget$private(0x0, 0x0, 0x48a) semop(r4, &(0x7f0000000000)=[{0x4, 0xfff6, 0x1000}, {0x4, 0xffff}], 0x2) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000140)={{0x2, 0xee01, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x1f}, 0x6, 0x1fffe00000000, 0x0, 0x0, 0x0, 0x0, 0x9}) sendmsg(r0, 0x0, 0x8040) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000a80)=0x2, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000ac0)={'syzkaller1\x00', @link_local}) 594.731705ms ago: executing program 6 (id=2980): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfefffffffffffffd, 0x7}, 0x0, 0x0, 0x8000000, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000030a01080000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080), 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x6, 0x7, 0x2, 0x7fff7ffc}]}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000203010000000000000000"], 0x1c}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7, &(0x7f0000000700)=[{}, {}], 0x10, 0x0, 0x0, 0x0, 0x0, 0x26, 0x8, 0x0, 0x0}}, 0x10) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) close_range(r3, r3, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000dc0)) 499.572978ms ago: executing program 6 (id=2981): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x8, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b637ddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) mkdirat(0xffffffffffffffff, &(0x7f0000000580)='./sys/module/kernel/parameters/panic\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kernel/parameters/panic\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1e, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000071121b100000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) read(r1, &(0x7f0000000140)=""/100, 0x64) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl(0xffffffffffffffff, 0xc0184d03, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x800000a, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x1, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0}, 0x20) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x6a, 0x1, 0x0, 0xc) syz_open_procfs(0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000680)={0x2, 0x0, &(0x7f00000006c0)={0x0, 0xa0}}, 0x0) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setns(0xffffffffffffffff, 0x0) add_key(&(0x7f0000001cc0)='rxrpc\x00', &(0x7f0000001d00), &(0x7f0000001d40)="000000000000000463656c6c00000001000000440000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004010203040000000405060708", 0x58, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)="1400000034005f76432127c23b84aa980b47564c", 0x14}], 0x1}, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) 459.532319ms ago: executing program 5 (id=2982): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x6, 0x1011, &(0x7f0000000700)=""/4113, 0x41000, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x845c5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001740)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r1, &(0x7f0000001780)='270', 0x3) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x74, 0x160341) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000017c0)={0x0, 0x0}) r2 = syz_io_uring_setup(0x8b2, &(0x7f0000001c40)={0x0, 0xd64e, 0x400, 0x0, 0x2e1, 0x0, r1}, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f0000001d40)) io_uring_setup(0x5317, &(0x7f0000001d80)={0x0, 0x8df2, 0x40, 0x3, 0x335, 0x0, r2}) memfd_create(&(0x7f0000001800)='%\x00#D)\xdeA\x02\n,\x06\x89\x96\x8f\xd3F\x9fe\xf7\x9f\x9f\x0f\xeb\v\xc3\x86%0\x05\x9d4\xfa\x92H\x89m\x14>4\xe4\xb4m\fF\xaf\x9d&\x05\xcf\xc1HZ\x9a\xa3X\xaa;t\x12\'\xf5\x18PvY', 0x6) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x1f, 0xc, &(0x7f0000001940)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$kcm(0x2, 0x1, 0x84) mount_setattr(0xffffffffffffffff, 0x0, 0x8900, &(0x7f0000001a00)={0x0, 0x71}, 0x20) unshare(0x40000000) 440.627619ms ago: executing program 7 (id=2983): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000140), 0x40, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x80, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) close(0x3) 377.854181ms ago: executing program 7 (id=2984): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{0x0}], 0x1) io_setup(0x4, &(0x7f00000011c0)=0x0) io_submit(r1, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000001440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, @perf_bp={0x0, 0xa}, 0x20b0, 0xc, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0xffffffff00000003}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)={0x14, 0x2, 0x6, 0x801, 0xe4340000}, 0x14}}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)={0x44, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000018c0)={0x0, 0xfffffffffffffe45, &(0x7f0000001900)={&(0x7f0000001940)=ANY=[@ANYBLOB="1c0000000706010200000000000000eef003eda2eb87680000"], 0x1c}, 0x1, 0x0, 0x0, 0x20040840}, 0x48810) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 376.000061ms ago: executing program 6 (id=2985): syz_emit_ethernet(0x17f, &(0x7f0000000280)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x149, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x9, "bd3e6d4706598080a8030037ffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34116d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x3, 0x1c, "77f9290b6e87290b6e87f278e94724e20c43c95f9b49e04a64d614d4cc9d0d46d954fda9a75d076993e3b87aa99b2454a86662e37b42678a74974ddd50b21e499efae61e3a816a367d019bc7f892d8975f1fc8a3e27139041cd21d2d12f30ee6f029d8d73f80f9b19d138598345b9c0feda226b333c55c668fb17b5b39603ee66b8534f1fbf97e139d35762307516482a1787d8f3bb76940602a0104ac045b59510dfd944672de5f77c0e6136c06847bbe70dd65236ef4d112e88fabc57d02a2a380eb697adf4e1d9090705f85ddf041bc076775f5d27555d3f60c44192fa9"}]}}}}}}, 0x0) 351.117861ms ago: executing program 6 (id=2986): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0xbc735, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x28, 0xc475}, 0x10026, 0x10003, 0xfffffff8, 0x8, 0x100006, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r0, 0x21, 0x0, 0x700) 294.150003ms ago: executing program 4 (id=2987): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f00000004c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000500)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000540)={r2, @in6={{0xa, 0x4e61, 0x0, @mcast1, 0x80000000}}}, &(0x7f0000000600)=0x84) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000080)={r3, 0x1ff, 0xd}, 0x8) 255.639494ms ago: executing program 4 (id=2988): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x48, 0x2, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x38, 0x9, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0x9, 0x1a, 'test\x00'}]}]}, 0x38}}, 0x0) 225.527174ms ago: executing program 6 (id=2989): ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {}]}) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xbc) (async) r1 = dup2(r0, r0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0xfff, 0x0, &(0x7f00000000c0)=[r0]}, 0x1) fsync(r1) (async) r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x5, 0x2, 0x80010, r2, 0x0) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000001c0)={@local, 0x0}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x80, 0x8000, 0xfe3, 0x2, {{0x6, 0x4, 0x0, 0x6, 0x18, 0x67, 0x0, 0x9, 0x4, 0x0, @remote, @broadcast, {[@noop]}}}}}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, r3, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9c}]}, @ETHTOOL_A_FEATURES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x800) (async) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000480)=@assoc_value={0x2, 0x3}, 0x8) (async) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x21) syz_genetlink_get_family_id$smc(&(0x7f00000004c0), r1) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r1) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xeec8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000009c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000680)={0x2e8, r3, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_OURS={0x2bc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x31, 0x5, "c4a7c5152a01c26027af6ecb2d9696c08a1451655227c32a033fbc694e82d38ad85ea676fc54a177234724227e"}, @ETHTOOL_A_BITSET_BITS={0x174, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$[\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'netdevsim0\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '$&,\'^&-\xc7)]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'SMC_PNETID\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x100}, @ETHTOOL_A_BITSET_VALUE={0x52, 0x4, "1981ef4d4c5b0617a4bf6fd1a94a699634f682dc42939c355562c400d2978b35bc2223ce2fdc79f00f8514e713fcb9f83a947b7426748cb1e3f507e1db6d904d5a0aaa1feaec0525e22d3043dd88"}, @ETHTOOL_A_BITSET_VALUE={0x11, 0x4, "0df910496523c08d16c74846a7"}, @ETHTOOL_A_BITSET_MASK={0x9f, 0x5, "3a3af6d8acb2e9ef1495f3a509d5e0dcd0524895111d80d50a353806c49fddea7baa664eb2cc71fa13297d71f67a9b994d23c6ef9f3881d0406d5ea27d5fd44d8cedbd538a4734a7c41ed50a474b4bb4bc98d73a3783b654f551a5aef17107233a7b0185031e77d4f1d420d52bac789bab435ffa738f3373967705ab9fa5b5eba38e5a01fc92c13e3fffa14438b543ff4951747a770ad4c76f03d5"}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xc}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x7}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, r8, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x1) (async) getsockopt$inet_sctp6_SCTP_REMOTE_UDP_ENCAPS_PORT(r1, 0x84, 0x84, &(0x7f0000000b40)={0x2, @in6={{0xa, 0x4e22, 0x10, @mcast2, 0x1}}, 0x4e23}, &(0x7f0000000c00)=0x90) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000c40)={r9, 0x6}, &(0x7f0000000c80)=0x8) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r2) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x60, r10, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x6}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x9}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x7}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x2c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x7}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x5}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x8}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x2}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x6}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4814) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x28) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e80), r1) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x28, r11, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) (async) r12 = getpgrp(0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000f80)=r12) 224.626385ms ago: executing program 7 (id=2990): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x841e, &(0x7f0000000140)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000180)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000740)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x181042, 0x65) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000840)={0x1, &(0x7f0000000880)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) select(0x40, &(0x7f00000008c0)={0xf, 0x6, 0x6, 0x8, 0x3ff, 0x1, 0xfff, 0xac}, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000900)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000940)='hybla', 0x5) bind$inet(r1, &(0x7f0000000980)={0x2, 0x4e24, @loopback}, 0x10) perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xd}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x9000000e, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) writev(r2, &(0x7f0000000a80)=[{&(0x7f0000000ac0)='4', 0x1}], 0x1) munmap(&(0x7f0000761000/0x2000)=nil, 0x2000) pwrite64(r0, &(0x7f0000000d00)='2', 0x1, 0x84fed0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./file1\x00', 0x129042, 0x15) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000d80)={'wlan0\x00'}) setuid(0xee01) mmap(&(0x7f0000389000/0x3000)=nil, 0x3000, 0x2, 0x28011, r3, 0x7000) 172.569076ms ago: executing program 4 (id=2991): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfefffffffffffffd, 0x7}, 0x0, 0x0, 0x8000000, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000030a010800000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080), 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x6, 0x7, 0x2, 0x7fff7ffc}]}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000203010000000000000000"], 0x1c}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7, &(0x7f0000000700)=[{}, {}], 0x10, 0x0, 0x0, 0x0, 0x0, 0x26, 0x8, 0x0, 0x0}}, 0x10) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) close_range(r3, r3, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000dc0)) 108.690997ms ago: executing program 6 (id=2992): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x841e, &(0x7f0000000140)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000180)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000740)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x181042, 0x65) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000840)={0x1, &(0x7f0000000880)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) select(0x40, &(0x7f00000008c0)={0xf, 0x6, 0x6, 0x8, 0x3ff, 0x1, 0xfff, 0xac}, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000900)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000940)='hybla', 0x5) bind$inet(r1, &(0x7f0000000980)={0x2, 0x4e24, @loopback}, 0x10) perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xd}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x9000000e, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) writev(r2, &(0x7f0000000a80)=[{&(0x7f0000000ac0)='4', 0x1}], 0x1) munmap(&(0x7f0000761000/0x2000)=nil, 0x2000) pwrite64(r0, &(0x7f0000000d00)='2', 0x1, 0x84fed0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./file1\x00', 0x129042, 0x15) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000d80)={'wlan0\x00'}) setuid(0xee01) mmap(&(0x7f0000389000/0x3000)=nil, 0x3000, 0x2, 0x28011, r3, 0x7000) 0s ago: executing program 4 (id=2993): openat(0xffffffffffffff9c, 0x0, 0x0, 0x2) perf_event_open(0x0, 0x0, 0xfff8000000000000, 0xffffffffffffffff, 0x1) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000800)={[0x2]}, 0x8, 0x80000) readv(r0, &(0x7f0000000840)=[{&(0x7f0000000880)=""/128, 0x80}], 0x1) timer_create(0x0, &(0x7f0000000900)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000940)=0x0) timer_settime(r1, 0x1, &(0x7f0000000980)={{}, {0x0, 0x989680}}, 0x0) kernel console output (not intermixed with test programs): ): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.848123][T13881] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.105929][T13776] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 312.110173][T13776] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 312.112918][T13776] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 312.124820][T13776] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 312.129134][T13776] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 312.137773][T13776] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 312.141931][T13776] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 312.150887][T13776] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 312.257313][T13596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.309664][T13776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.342154][T13776] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.348612][ T3432] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.348647][ T3432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.360455][T11115] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.360489][T11115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.391641][T13987] loop2: detected capacity change from 0 to 512 [ 312.391980][T13987] EXT4-fs: Ignoring removed bh option [ 312.417935][T13987] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 312.438660][T13986] loop1: detected capacity change from 0 to 512 [ 312.445535][T13987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.445681][T13987] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.475175][T13986] EXT4-fs: Ignoring removed bh option [ 312.480218][T13986] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 312.535018][T13986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.535359][T13986] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.562616][T14002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2609'. [ 312.759163][T13530] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.783318][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 312.783378][ T29] audit: type=1400 audit(1791938946.078:3288): avc: denied { allowed } for pid=13973 comm="syz.3.2606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 312.807960][T13776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.819748][ T29] audit: type=1400 audit(1791938946.128:3289): avc: denied { create } for pid=13973 comm="syz.3.2606" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 312.819851][ T29] audit: type=1400 audit(1791938946.128:3290): avc: denied { map } for pid=13973 comm="syz.3.2606" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40818 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 312.819918][ T29] audit: type=1400 audit(1791938946.128:3291): avc: denied { read write } for pid=13973 comm="syz.3.2606" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40818 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 312.870910][T13596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.881744][ T29] audit: type=1400 audit(1791938946.178:3292): avc: denied { create } for pid=13973 comm="syz.3.2606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 312.967956][ T29] audit: type=1400 audit(1791938946.268:3293): avc: denied { write } for pid=14028 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 312.975210][ T29] audit: type=1400 audit(1791938946.278:3294): avc: denied { create } for pid=14025 comm="syz.0.2611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 312.976257][ T29] audit: type=1400 audit(1791938946.278:3295): avc: denied { read } for pid=14025 comm="syz.0.2611" dev="nsfs" ino=4026532857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 312.976400][ T29] audit: type=1400 audit(1791938946.278:3296): avc: denied { open } for pid=14025 comm="syz.0.2611" path="net:[4026532857]" dev="nsfs" ino=4026532857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 313.087457][ T29] audit: type=1400 audit(1791938946.388:3297): avc: denied { write } for pid=14050 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.136421][T14030] loop1: detected capacity change from 0 to 512 [ 313.142994][T14030] EXT4-fs: Ignoring removed bh option [ 313.160532][T14030] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 313.220779][T14030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.221308][T14030] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.371932][T13776] veth0_vlan: entered promiscuous mode [ 313.382722][T13776] veth1_vlan: entered promiscuous mode [ 313.444615][T14091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2620'. [ 313.469121][T13776] veth0_macvtap: entered promiscuous mode [ 313.470801][T13776] veth1_macvtap: entered promiscuous mode [ 313.488117][T13776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.493726][T14094] FAULT_INJECTION: forcing a failure. [ 313.493726][T14094] name failslab, interval 1, probability 0, space 0, times 0 [ 313.493754][T14094] CPU: 0 UID: 0 PID: 14094 Comm: syz.2.2621 Not tainted syzkaller #0 PREEMPT(lazy) [ 313.493849][T14094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 313.493864][T14094] Call Trace: [ 313.493870][T14094] [ 313.493877][T14094] __dump_stack+0x1d/0x30 [ 313.493902][T14094] dump_stack_lvl+0x95/0xd0 [ 313.493923][T14094] dump_stack+0x15/0x1b [ 313.493990][T14094] should_fail_ex+0x262/0x280 [ 313.494022][T14094] ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 313.494057][T14094] should_failslab+0x8c/0xb0 [ 313.494093][T14094] __kmalloc_noprof+0xd0/0x4d0 [ 313.494166][T14094] ? avc_has_perm_noaudit+0xac/0x160 [ 313.494212][T14094] ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 313.494355][T14094] genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 313.494443][T14094] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 313.494475][T14094] ? selinux_capable+0x31/0x40 [ 313.494509][T14094] ? security_capable+0x7b/0x90 [ 313.494580][T14094] ? ns_capable+0x80/0xb0 [ 313.494603][T14094] genl_rcv_msg+0x42f/0x470 [ 313.494632][T14094] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 313.494702][T14094] netlink_rcv_skb+0x11e/0x220 [ 313.494724][T14094] ? __pfx_genl_rcv_msg+0x10/0x10 [ 313.494757][T14094] genl_rcv+0x28/0x40 [ 313.494784][T14094] netlink_unicast+0x5a9/0x680 [ 313.494892][T14094] netlink_sendmsg+0x5be/0x6f0 [ 313.494996][T14094] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.495019][T14094] ____sys_sendmsg+0x532/0x580 [ 313.495049][T14094] ___sys_sendmsg+0x195/0x1e0 [ 313.495105][T14094] __x64_sys_sendmsg+0xd4/0x160 [ 313.495256][T14094] x64_sys_call+0x22ab/0x2550 [ 313.495283][T14094] do_syscall_64+0x112/0x360 [ 313.495365][T14094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.495450][T14094] RIP: 0033:0x7f344365e2d9 [ 313.495468][T14094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.495544][T14094] RSP: 002b:00007f34420b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.495567][T14094] RAX: ffffffffffffffda RBX: 00007f34438e5fa0 RCX: 00007f344365e2d9 [ 313.495584][T14094] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 313.495599][T14094] RBP: 00007f34420b7090 R08: 0000000000000000 R09: 0000000000000000 [ 313.495614][T14094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.495673][T14094] R13: 00007f34438e6038 R14: 00007f34438e5fa0 R15: 00007ffcba105be8 [ 313.495694][T14094] [ 313.495823][T13776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.673701][ T42] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.673744][ T42] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.673779][ T42] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.673888][ T42] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.839446][T13530] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.920695][T14122] loop2: detected capacity change from 0 to 512 [ 313.921609][T14122] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 313.921622][T14122] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 313.951936][T14122] EXT4-fs (loop2): 1 truncate cleaned up [ 313.952302][T14122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.978192][T14107] loop0: detected capacity change from 0 to 512 [ 313.997807][T14107] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.2619: iget: bad extended attribute block 134217728 [ 313.997868][T14107] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 313.999487][T14107] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.2619: couldn't read orphan inode 15 (err -117) [ 313.999521][T14107] loop0: lost filesystem error report for type 5 error -117 [ 314.000212][T14107] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.002761][T14107] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.090425][T14117] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65 sclass=netlink_audit_socket pid=14117 comm=syz.4.2588 [ 314.262056][ T3023] 8021q: adding VLAN 0 to HW filter on device eth5 [ 314.501822][T14164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2629'. [ 314.629939][T14172] loop1: detected capacity change from 0 to 512 [ 314.665924][T14172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.666204][T14172] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.671522][T14168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2630'. [ 314.779765][T13596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.863356][T14192] loop0: detected capacity change from 0 to 512 [ 314.886771][T14192] EXT4-fs: Ignoring removed bh option [ 314.903321][T14192] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 314.915802][T14172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=14172 comm=syz.1.2631 [ 314.915842][T14172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=14172 comm=syz.1.2631 [ 314.915866][T14172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=14172 comm=syz.1.2631 [ 314.915890][T14172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=14172 comm=syz.1.2631 [ 314.915916][T14172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=14172 comm=syz.1.2631 [ 314.915947][T14172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=14172 comm=syz.1.2631 [ 314.915973][T14172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=14172 comm=syz.1.2631 [ 314.916000][T14172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=14172 comm=syz.1.2631 [ 314.916044][T14172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=14172 comm=syz.1.2631 [ 314.999281][T14192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.000211][T14192] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.038758][T13530] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.128445][T14217] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 315.128487][T14217] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 315.128520][T14217] vhci_hcd vhci_hcd.0: Device attached [ 315.281258][T12292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.293162][T14219] EXT4-fs: Ignoring removed bh option [ 315.312297][T14219] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 315.363891][T14219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.364551][T14219] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.373886][T11913] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 315.501045][T14255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2643'. [ 315.556418][T13776] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.735399][T14220] vhci_hcd: connection reset by peer [ 315.735792][ T3432] vhci_hcd vhci_hcd.2: stop threads [ 315.735811][ T3432] vhci_hcd vhci_hcd.2: release socket [ 315.735833][ T3432] vhci_hcd vhci_hcd.2: disconnect device [ 315.750383][T14278] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2648'. [ 315.884801][T14245] EXT4-fs: Ignoring removed bh option [ 315.958602][T14245] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.094148][T14303] EXT4-fs: Ignoring removed bh option [ 316.098091][T14303] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 316.191489][T14303] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.194941][T14303] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.354123][T14335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2654'. [ 316.413163][T13530] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.490681][T14355] set_capacity_and_notify: 4 callbacks suppressed [ 316.490699][T14355] loop1: detected capacity change from 0 to 512 [ 316.491693][T14355] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 316.491762][T14355] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 316.495004][T14355] EXT4-fs (loop1): 1 truncate cleaned up [ 316.536898][T14355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.570081][T14344] loop4: detected capacity change from 0 to 512 [ 316.584420][T14344] EXT4-fs: Ignoring removed bh option [ 316.587230][T14344] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 316.634975][T14344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.635434][T14344] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.736284][T13596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.784512][T14369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2662'. [ 317.031828][T13530] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.062235][T13776] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.169882][T14411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2667'. [ 317.257244][T14426] loop4: detected capacity change from 0 to 512 [ 317.358190][T14438] loop1: detected capacity change from 0 to 512 [ 317.371528][T14438] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 317.371548][T14438] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 317.375965][T14438] EXT4-fs (loop1): 1 truncate cleaned up [ 317.376406][T14438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.449761][T14442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2677'. [ 317.784442][ T29] kauditd_printk_skb: 627 callbacks suppressed [ 317.784457][ T29] audit: type=1326 audit(1791938951.088:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.1.2675" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fadf5ddeb0e code=0x7ffc0000 [ 317.786398][ T29] audit: type=1326 audit(1791938951.088:3926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.1.2675" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fadf5ddeb0e code=0x7ffc0000 [ 317.788339][ T29] audit: type=1326 audit(1791938951.088:3927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.1.2675" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fadf5ddeb0e code=0x7ffc0000 [ 317.790781][ T29] audit: type=1326 audit(1791938951.088:3928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.1.2675" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fadf5ddeb0e code=0x7ffc0000 [ 317.793695][ T29] audit: type=1326 audit(1791938951.088:3929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.1.2675" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fadf5ddeb0e code=0x7ffc0000 [ 317.826785][ T29] audit: type=1326 audit(1791938951.128:3930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.1.2675" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fadf5ddeb0e code=0x7ffc0000 [ 317.879800][ T29] audit: type=1326 audit(1791938951.188:3931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.1.2675" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fadf5ddeb0e code=0x7ffc0000 [ 317.906054][ T29] audit: type=1326 audit(1791938951.208:3932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.1.2675" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fadf5ddeb0e code=0x7ffc0000 [ 317.931861][ T29] audit: type=1326 audit(1791938951.238:3933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.1.2675" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fadf5ddeb0e code=0x7ffc0000 [ 317.957642][ T29] audit: type=1326 audit(1791938951.268:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.1.2675" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fadf5ddeb0e code=0x7ffc0000 [ 317.970683][T14475] loop0: detected capacity change from 0 to 512 [ 318.018589][T14475] EXT4-fs: Ignoring removed bh option [ 318.039783][T14475] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 318.156619][T14475] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.180570][T14475] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.292785][T13530] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.328559][T14440] loop4: detected capacity change from 0 to 1024 [ 318.333348][T14440] EXT4-fs: Ignoring removed bh option [ 318.364023][T14503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2682'. [ 318.392070][T14440] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.528610][ T117] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.610765][ T117] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.613038][T12292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.664777][ T117] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.667752][T13776] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.709537][ T117] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.750449][T14532] loop4: detected capacity change from 0 to 512 [ 318.868321][ T117] bridge_slave_1: left allmulticast mode [ 318.868380][ T117] bridge_slave_1: left promiscuous mode [ 318.868472][ T117] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.885684][ T117] bridge_slave_0: left allmulticast mode [ 318.885708][ T117] bridge_slave_0: left promiscuous mode [ 318.885933][ T117] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.055419][T14546] loop4: detected capacity change from 0 to 512 [ 319.077245][T14546] EXT4-fs: Ignoring removed bh option [ 319.081263][T14546] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 319.114587][ T117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.115861][ T117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.116749][ T117] bond0 (unregistering): Released all slaves [ 319.122865][T14548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2690'. [ 319.133072][T14546] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.135657][T14546] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.197096][ T117] hsr_slave_0: left promiscuous mode [ 319.198617][ T117] hsr_slave_1: left promiscuous mode [ 319.199207][ T117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.199223][ T117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.199700][ T117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.199712][ T117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.245901][T14578] loop0: detected capacity change from 0 to 128 [ 319.248877][T14578] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 319.249036][T14578] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.280447][ T117] veth1_macvtap: left promiscuous mode [ 319.280474][ T117] veth0_macvtap: left promiscuous mode [ 319.280570][ T117] veth1_vlan: left promiscuous mode [ 319.280605][ T117] veth0_vlan: left promiscuous mode [ 319.422225][ T117] team0 (unregistering): Port device team_slave_1 removed [ 319.432178][ T117] team0 (unregistering): Port device team_slave_0 removed [ 319.534676][T13776] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.587244][T14599] loop4: detected capacity change from 0 to 512 [ 319.589268][T14599] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 319.589284][T14599] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 319.589828][T14518] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.589865][T14518] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.589942][T14518] bridge_slave_0: entered allmulticast mode [ 319.590890][T14599] EXT4-fs (loop4): 1 truncate cleaned up [ 319.593179][T14518] bridge_slave_0: entered promiscuous mode [ 319.593302][T14599] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.597899][T14518] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.597931][T14518] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.598072][T14518] bridge_slave_1: entered allmulticast mode [ 319.598603][T14518] bridge_slave_1: entered promiscuous mode [ 319.711814][T14518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.714990][T14518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.734326][T14518] team0: Port device team_slave_0 added [ 319.736758][T14518] team0: Port device team_slave_1 added [ 319.779585][T14518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.779603][T14518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.779635][T14518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.788042][T14518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.788057][T14518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.788087][T14518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.823808][T14518] hsr_slave_0: entered promiscuous mode [ 319.824214][T14518] hsr_slave_1: entered promiscuous mode [ 319.824378][T14518] debugfs: 'hsr0' already exists in 'hsr' [ 319.824392][T14518] Cannot create hsr debugfs directory [ 320.050895][T13776] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.105605][T14626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2694'. [ 320.112573][T12292] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 320.297382][T14518] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 320.298066][T14631] EXT4-fs: Ignoring removed bh option [ 320.301347][T14518] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 320.307110][T14518] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 320.316116][T14518] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 320.317240][T14518] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 320.327458][T14518] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 320.327990][T14518] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 320.335477][T14518] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 320.363042][T14518] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.363078][T14518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.363226][T14518] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.363257][T14518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.400445][T11913] usb 5-1: enqueue for inactive port 0 [ 320.400471][T11913] usb 5-1: enqueue for inactive port 0 [ 320.402466][T14631] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 320.417594][T14664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2700'. [ 320.457739][T14518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.472053][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.472974][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.473920][T11913] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 320.512573][T14631] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.515885][T14631] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.549448][T14518] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.557206][ T117] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.557248][ T117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.563464][ T117] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.563501][ T117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.679798][ T3023] 8021q: adding VLAN 0 to HW filter on device eth6 [ 320.962416][T14518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.976159][T13776] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.001425][T14647] EXT4-fs: Ignoring removed bh option [ 321.068063][T14647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.093847][T14711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2704'. [ 321.153168][T14710] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.2703: iget: bad extended attribute block 134217728 [ 321.153278][T14710] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 321.153626][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 321.153645][ C1] EXT4-fs (loop1): initial error at time 1791938954: ext4_orphan_get:1403: inode 15 [ 321.153692][ C1] EXT4-fs (loop1): last error at time 1791938954: ext4_orphan_get:1403: inode 15 [ 321.157142][T14710] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.2703: couldn't read orphan inode 15 (err -117) [ 321.157237][T14710] loop1: lost filesystem error report for type 5 error -117 [ 321.162225][T14710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.171642][T14710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.324904][T14518] veth0_vlan: entered promiscuous mode [ 321.333422][T14518] veth1_vlan: entered promiscuous mode [ 321.368388][T14518] veth0_macvtap: entered promiscuous mode [ 321.370097][T14518] veth1_macvtap: entered promiscuous mode [ 321.379503][T14518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.385621][T14518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.390758][ T401] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.390830][ T401] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.391072][ T401] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.391108][ T401] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.401950][T14747] EXT4-fs: Ignoring removed bh option [ 321.408691][T14747] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 321.439071][T14747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.439196][T14747] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.551407][T12292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.612490][T14763] set_capacity_and_notify: 5 callbacks suppressed [ 321.612518][T14763] loop0: detected capacity change from 0 to 512 [ 321.707023][ T3023] 8021q: adding VLAN 0 to HW filter on device eth7 [ 321.764471][T14774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2710'. [ 321.784305][T13776] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.817066][T14784] ip_tables: iptables: counters copy to user failed while replacing table [ 321.926293][ T3023] 8021q: adding VLAN 0 to HW filter on device eth8 [ 321.967038][T14793] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 322.087879][T14811] loop1: detected capacity change from 0 to 1024 [ 322.088212][T14811] EXT4-fs: Ignoring removed nobh option [ 322.088530][T14811] EXT4-fs: Ignoring removed bh option [ 322.088555][T14811] EXT4-fs: Ignoring removed nomblk_io_submit option [ 322.105334][T14811] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.174130][T13530] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.231939][T14797] loop6: detected capacity change from 0 to 512 [ 322.249693][T14797] EXT4-fs: Ignoring removed bh option [ 322.252558][T14797] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 322.293511][T14834] loop0: detected capacity change from 0 to 512 [ 322.346766][T14823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2717'. [ 322.357905][T14797] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.358720][T14797] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.592639][T14866] loop1: detected capacity change from 0 to 512 [ 322.606816][T14866] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 322.621831][T14866] EXT4-fs (loop1): 1 orphan inode deleted [ 322.622309][T14866] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.622557][T14866] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.625838][T14844] loop0: detected capacity change from 0 to 512 [ 322.642275][T14844] EXT4-fs: Ignoring removed bh option [ 322.645532][T14844] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 322.654619][ T42] EXT4-fs error (device loop1): ext4_release_dquot:7106: comm kworker/u8:2: Failed to release dquot type 1 [ 322.677418][T14844] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.677546][T14844] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.779380][T13530] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.816015][T14518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.823231][T14879] loop1: detected capacity change from 0 to 512 [ 322.826759][T14879] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 322.826775][T14879] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 322.828369][T14879] EXT4-fs (loop1): 1 truncate cleaned up [ 322.828923][T14879] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.845998][ T29] kauditd_printk_skb: 436 callbacks suppressed [ 322.846040][ T29] audit: type=1400 audit(1791938956.148:4370): avc: denied { write } for pid=14877 comm="syz.1.2725" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 322.859933][ T29] audit: type=1326 audit(1791938956.158:4371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14877 comm="syz.1.2725" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf5e1e2d9 code=0x7ffc0000 [ 322.860535][ T29] audit: type=1326 audit(1791938956.158:4372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14877 comm="syz.1.2725" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf5e1e2d9 code=0x7ffc0000 [ 322.860760][ T29] audit: type=1326 audit(1791938956.158:4373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14877 comm="syz.1.2725" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf5e1e2d9 code=0x7ffc0000 [ 322.861830][ T29] audit: type=1326 audit(1791938956.158:4374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14877 comm="syz.1.2725" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fadf5e1e2d9 code=0x7ffc0000 [ 322.862866][ T29] audit: type=1326 audit(1791938956.158:4375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14877 comm="syz.1.2725" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf5e1e2d9 code=0x7ffc0000 [ 322.863117][ T29] audit: type=1326 audit(1791938956.158:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14877 comm="syz.1.2725" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf5e1e2d9 code=0x7ffc0000 [ 322.863271][ T29] audit: type=1326 audit(1791938956.158:4377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14877 comm="syz.1.2725" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf5e1e2d9 code=0x7ffc0000 [ 322.865019][ T29] audit: type=1326 audit(1791938956.158:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14877 comm="syz.1.2725" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fadf5e1e2d9 code=0x7ffc0000 [ 322.865952][ T29] audit: type=1326 audit(1791938956.158:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14877 comm="syz.1.2725" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf5e1e2d9 code=0x7ffc0000 [ 323.039878][T14885] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2727'. [ 323.139929][T12292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.221310][T14890] loop0: detected capacity change from 0 to 512 [ 323.237930][T14890] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 323.237948][T14890] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 323.241006][T14890] EXT4-fs (loop0): 1 truncate cleaned up [ 323.241495][T14890] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.327771][T13530] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.364591][T14902] selinux_netlink_send: 24 callbacks suppressed [ 323.364648][T14902] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14902 comm=syz.3.2729 [ 323.445203][T14912] loop6: detected capacity change from 0 to 512 [ 323.667917][T14936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2732'. [ 323.742545][T12292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.907876][T14953] loop4: detected capacity change from 0 to 512 [ 323.929597][T14953] EXT4-fs: Ignoring removed bh option [ 323.940727][T14953] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 324.005116][T14953] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.103108][T14979] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65 sclass=netlink_audit_socket pid=14979 comm=syz.6.2741 [ 324.253176][T14958] EXT4-fs: Ignoring removed bh option [ 324.547141][T15028] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2749'. [ 324.729816][T15055] FAULT_INJECTION: forcing a failure. [ 324.729816][T15055] name failslab, interval 1, probability 0, space 0, times 0 [ 324.729965][T15055] CPU: 1 UID: 0 PID: 15055 Comm: syz.6.2752 Not tainted syzkaller #0 PREEMPT(lazy) [ 324.729995][T15055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 324.730010][T15055] Call Trace: [ 324.730019][T15055] [ 324.730027][T15055] __dump_stack+0x1d/0x30 [ 324.730051][T15055] dump_stack_lvl+0x95/0xd0 [ 324.730075][T15055] dump_stack+0x15/0x1b [ 324.730094][T15055] should_fail_ex+0x262/0x280 [ 324.730125][T15055] should_failslab+0x8c/0xb0 [ 324.730159][T15055] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 324.730194][T15055] ? shmem_alloc_inode+0x34/0x50 [ 324.730214][T15055] ? shmem_alloc_inode+0x34/0x50 [ 324.730233][T15055] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 324.730253][T15055] shmem_alloc_inode+0x34/0x50 [ 324.730271][T15055] alloc_inode+0x40/0x170 [ 324.730294][T15055] new_inode+0x1d/0xe0 [ 324.730321][T15055] shmem_get_inode+0x250/0x7b0 [ 324.730345][T15055] __shmem_file_setup+0x14f/0x260 [ 324.730375][T15055] shmem_zero_setup+0x66/0xe0 [ 324.730404][T15055] mmap_region+0x1ad6/0x2310 [ 324.730451][T15055] do_mmap+0xa20/0xc70 [ 324.730470][T15055] vm_mmap_pgoff+0x183/0x2d0 [ 324.730498][T15055] ksys_mmap_pgoff+0xc1/0x310 [ 324.730519][T15055] ? __x64_sys_mmap+0x49/0x70 [ 324.730553][T15055] x64_sys_call+0x23b3/0x2550 [ 324.730580][T15055] do_syscall_64+0x112/0x360 [ 324.730605][T15055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.730627][T15055] RIP: 0033:0x7fd15e48e2d9 [ 324.730646][T15055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.730668][T15055] RSP: 002b:00007fd15cee7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 324.730688][T15055] RAX: ffffffffffffffda RBX: 00007fd15e715fa0 RCX: 00007fd15e48e2d9 [ 324.730702][T15055] RDX: 0000000002000007 RSI: 0000000008000002 RDI: 000000110c230000 [ 324.730715][T15055] RBP: 00007fd15e525888 R08: ffffffffffffffff R09: 0000000000000000 [ 324.730729][T15055] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 324.730746][T15055] R13: 00007fd15e716038 R14: 00007fd15e715fa0 R15: 00007ffc325d31b8 [ 324.730766][T15055] [ 324.970142][T15073] EXT4-fs: Ignoring removed bh option [ 324.971961][T15073] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 324.989890][T15073] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.129903][T15066] EXT4-fs: Ignoring removed bh option [ 325.135287][T15066] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 325.179449][T15097] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 325.179467][T15097] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 325.180547][T15097] EXT4-fs (loop4): 1 truncate cleaned up [ 325.219519][T15066] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.487832][T15117] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2761'. [ 325.861857][T15159] FAULT_INJECTION: forcing a failure. [ 325.861857][T15159] name failslab, interval 1, probability 0, space 0, times 0 [ 325.861967][T15159] CPU: 1 UID: 0 PID: 15159 Comm: syz.0.2765 Not tainted syzkaller #0 PREEMPT(lazy) [ 325.861993][T15159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 325.862088][T15159] Call Trace: [ 325.862095][T15159] [ 325.862104][T15159] __dump_stack+0x1d/0x30 [ 325.862137][T15159] dump_stack_lvl+0x95/0xd0 [ 325.862159][T15159] dump_stack+0x15/0x1b [ 325.862179][T15159] should_fail_ex+0x262/0x280 [ 325.862279][T15159] should_failslab+0x8c/0xb0 [ 325.862399][T15159] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 325.862442][T15159] ? sidtab_sid2str_get+0xa0/0x130 [ 325.862472][T15159] ? sidtab_sid2str_get+0xa0/0x130 [ 325.862504][T15159] ? irqentry_exit+0x58f/0x610 [ 325.862572][T15159] kmemdup_noprof+0x2b/0x70 [ 325.862656][T15159] sidtab_sid2str_get+0xa0/0x130 [ 325.862683][T15159] security_sid_to_context_core+0x179/0x2d0 [ 325.862710][T15159] security_sid_to_context+0x27/0x40 [ 325.862738][T15159] avc_audit_post_callback+0x9d/0x520 [ 325.862858][T15159] ? audit_log_lsm_data+0x759/0xbb0 [ 325.862956][T15159] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 325.862993][T15159] common_lsm_audit+0x1ba/0x230 [ 325.863078][T15159] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 325.863114][T15159] ? avc_denied+0xe4/0x100 [ 325.863169][T15159] slow_avc_audit+0x14c/0x190 [ 325.863203][T15159] avc_has_perm+0x144/0x190 [ 325.863262][T15159] __file_map_prot_check+0x1be/0x250 [ 325.863360][T15159] selinux_mmap_file+0x19e/0x1e0 [ 325.863387][T15159] ? __schedule+0x79e/0xd20 [ 325.863418][T15159] security_mmap_file+0x167/0x1b0 [ 325.863450][T15159] vm_mmap_pgoff+0x99/0x2d0 [ 325.863565][T15159] ? xfd_validate_state+0x45/0xf0 [ 325.863625][T15159] ksys_mmap_pgoff+0xc1/0x310 [ 325.863647][T15159] ? __x64_sys_mmap+0x49/0x70 [ 325.863717][T15159] x64_sys_call+0x23b3/0x2550 [ 325.863746][T15159] do_syscall_64+0x112/0x360 [ 325.863775][T15159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.863801][T15159] RIP: 0033:0x7f6bfa0be2d9 [ 325.863859][T15159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.863925][T15159] RSP: 002b:00007f6bf8b17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 325.863947][T15159] RAX: ffffffffffffffda RBX: 00007f6bfa345fa0 RCX: 00007f6bfa0be2d9 [ 325.863963][T15159] RDX: 0000000002000007 RSI: 0000000008000002 RDI: 000000110c230000 [ 325.863977][T15159] RBP: 00007f6bfa155888 R08: ffffffffffffffff R09: 0000000000000000 [ 325.864046][T15159] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 325.864062][T15159] R13: 00007f6bfa346038 R14: 00007f6bfa345fa0 R15: 00007ffca27ad8b8 [ 325.864082][T15159] [ 325.930259][T15165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2767'. [ 325.997542][T15172] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15172 comm=syz.0.2765 [ 326.012955][T15177] EXT4-fs: Ignoring removed nobh option [ 326.013110][T15177] EXT4-fs: Ignoring removed bh option [ 326.013149][T15177] EXT4-fs: Ignoring removed nomblk_io_submit option [ 326.043280][T15177] FAULT_INJECTION: forcing a failure. [ 326.043280][T15177] name failslab, interval 1, probability 0, space 0, times 0 [ 326.043310][T15177] CPU: 0 UID: 0 PID: 15177 Comm: syz.4.2768 Not tainted syzkaller #0 PREEMPT(lazy) [ 326.043378][T15177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 326.043392][T15177] Call Trace: [ 326.043401][T15177] [ 326.043410][T15177] __dump_stack+0x1d/0x30 [ 326.043454][T15177] dump_stack_lvl+0x95/0xd0 [ 326.043477][T15177] dump_stack+0x15/0x1b [ 326.043552][T15177] should_fail_ex+0x262/0x280 [ 326.043581][T15177] ? ext4_xattr_block_set+0x23b/0x1950 [ 326.043614][T15177] should_failslab+0x8c/0xb0 [ 326.043708][T15177] __kmalloc_noprof+0xd0/0x4d0 [ 326.043743][T15177] ? ext4_xattr_block_set+0x23b/0x1950 [ 326.043776][T15177] ext4_xattr_block_set+0x23b/0x1950 [ 326.043903][T15177] ? memcmp+0x5e/0x90 [ 326.043965][T15177] ext4_expand_extra_isize_ea+0xbc8/0x11a0 [ 326.044013][T15177] __ext4_expand_extra_isize+0x246/0x280 [ 326.044053][T15177] __ext4_mark_inode_dirty+0x2d8/0x410 [ 326.044135][T15177] ext4_dirty_inode+0x92/0xc0 [ 326.044210][T15177] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 326.044259][T15177] __mark_inode_dirty+0x164/0x700 [ 326.044294][T15177] file_update_time_flags+0x299/0x2d0 [ 326.044383][T15177] kiocb_modified+0x59/0x70 [ 326.044444][T15177] ext4_buffered_write_iter+0x1f5/0x480 [ 326.044479][T15177] ext4_file_write_iter+0x36e/0x1020 [ 326.044511][T15177] ? __rcu_read_unlock+0x4e/0x70 [ 326.044618][T15177] ? get_pid_task+0x92/0xc0 [ 326.044640][T15177] ? avc_policy_seqno+0x15/0x30 [ 326.044700][T15177] ? selinux_file_permission+0x1dc/0x310 [ 326.044733][T15177] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 326.044774][T15177] vfs_write+0x57f/0x9a0 [ 326.044814][T15177] __x64_sys_pwrite64+0xfd/0x150 [ 326.044866][T15177] x64_sys_call+0x23be/0x2550 [ 326.044893][T15177] do_syscall_64+0x112/0x360 [ 326.044922][T15177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.044946][T15177] RIP: 0033:0x7f4d98d2e2d9 [ 326.045016][T15177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.045037][T15177] RSP: 002b:00007f4d97787028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 326.045086][T15177] RAX: ffffffffffffffda RBX: 00007f4d98fb5fa0 RCX: 00007f4d98d2e2d9 [ 326.045102][T15177] RDX: 0000000000000001 RSI: 0000200000001540 RDI: 0000000000000004 [ 326.045117][T15177] RBP: 00007f4d97787090 R08: 0000000000000000 R09: 0000000000000000 [ 326.045132][T15177] R10: 000000000084fed0 R11: 0000000000000246 R12: 0000000000000001 [ 326.045147][T15177] R13: 00007f4d98fb6038 R14: 00007f4d98fb5fa0 R15: 00007ffdecfd9038 [ 326.045217][T15177] [ 326.253747][T15188] FAULT_INJECTION: forcing a failure. [ 326.253747][T15188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.253847][T15188] CPU: 0 UID: 0 PID: 15188 Comm: syz.6.2770 Not tainted syzkaller #0 PREEMPT(lazy) [ 326.253902][T15188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 326.253915][T15188] Call Trace: [ 326.253923][T15188] [ 326.253939][T15188] __dump_stack+0x1d/0x30 [ 326.253964][T15188] dump_stack_lvl+0x95/0xd0 [ 326.253989][T15188] dump_stack+0x15/0x1b [ 326.254011][T15188] should_fail_ex+0x262/0x280 [ 326.254100][T15188] should_fail+0xb/0x20 [ 326.254157][T15188] should_fail_usercopy+0x1a/0x20 [ 326.254188][T15188] _copy_from_iter+0xcc/0xe70 [ 326.254220][T15188] ? __alloc_skb+0x516/0x6f0 [ 326.254244][T15188] ? __alloc_skb+0x209/0x6f0 [ 326.254270][T15188] netlink_sendmsg+0x4a4/0x6f0 [ 326.254297][T15188] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.254322][T15188] sock_write_iter+0x2c5/0x2f0 [ 326.254478][T15188] do_iter_readv_writev+0x4f6/0x5a0 [ 326.254540][T15188] vfs_writev+0x2d3/0x8c0 [ 326.254565][T15188] ? get_pid_task+0x92/0xc0 [ 326.254603][T15188] do_writev+0xe9/0x210 [ 326.254628][T15188] __x64_sys_writev+0x45/0x50 [ 326.254666][T15188] x64_sys_call+0x23c9/0x2550 [ 326.254694][T15188] do_syscall_64+0x112/0x360 [ 326.254723][T15188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.254932][T15188] RIP: 0033:0x7fd15e48e2d9 [ 326.254950][T15188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.255012][T15188] RSP: 002b:00007fd15cee7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 326.255034][T15188] RAX: ffffffffffffffda RBX: 00007fd15e715fa0 RCX: 00007fd15e48e2d9 [ 326.255049][T15188] RDX: 0000000000000001 RSI: 0000200000000540 RDI: 0000000000000004 [ 326.255064][T15188] RBP: 00007fd15cee7090 R08: 0000000000000000 R09: 0000000000000000 [ 326.255085][T15188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.255099][T15188] R13: 00007fd15e716038 R14: 00007fd15e715fa0 R15: 00007ffc325d31b8 [ 326.255198][T15188] [ 326.725187][ T3023] 8021q: adding VLAN 0 to HW filter on device eth9 [ 326.791163][T15204] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2773'. [ 326.954613][ T3023] 8021q: adding VLAN 0 to HW filter on device eth10 [ 327.160595][T15236] FAULT_INJECTION: forcing a failure. [ 327.160595][T15236] name fail_futex, interval 1, probability 0, space 0, times 0 [ 327.160682][T15236] CPU: 0 UID: 0 PID: 15236 Comm: syz.6.2777 Not tainted syzkaller #0 PREEMPT(lazy) [ 327.160712][T15236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 327.160728][T15236] Call Trace: [ 327.160774][T15236] [ 327.160784][T15236] __dump_stack+0x1d/0x30 [ 327.160891][T15236] dump_stack_lvl+0x95/0xd0 [ 327.160918][T15236] dump_stack+0x15/0x1b [ 327.160943][T15236] should_fail_ex+0x262/0x280 [ 327.160983][T15236] should_fail+0xb/0x20 [ 327.161063][T15236] get_futex_key+0x12d/0xb10 [ 327.161169][T15236] ? __schedule+0x79e/0xd20 [ 327.161205][T15236] futex_wake+0x89/0x400 [ 327.161233][T15236] do_futex+0x3f8/0x460 [ 327.161372][T15236] ? irqentry_exit+0x7d/0x610 [ 327.161399][T15236] __se_sys_futex+0x2f6/0x370 [ 327.161474][T15236] __x64_sys_futex+0x78/0x90 [ 327.161540][T15236] x64_sys_call+0x22e2/0x2550 [ 327.161571][T15236] do_syscall_64+0x112/0x360 [ 327.161652][T15236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.161699][T15236] RIP: 0033:0x7fd15e48e2d9 [ 327.161745][T15236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.161767][T15236] RSP: 002b:00007fd15cee70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 327.161811][T15236] RAX: ffffffffffffffda RBX: 00007fd15e715fa8 RCX: 00007fd15e48e2d9 [ 327.161829][T15236] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd15e715fac [ 327.161845][T15236] RBP: 00007fd15e715fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 327.161861][T15236] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 327.161874][T15236] R13: 00007fd15e716038 R14: 00007ffc325d30d0 R15: 00007ffc325d31b8 [ 327.161902][T15236] [ 327.240638][T15256] set_capacity_and_notify: 7 callbacks suppressed [ 327.240654][T15256] loop4: detected capacity change from 0 to 512 [ 327.285742][ T3023] 8021q: adding VLAN 0 to HW filter on device eth12 [ 327.309275][T15256] EXT4-fs error (device loop4): __ext4_iget:5592: inode #2: block 50331648: comm syz.4.2778: invalid block [ 327.309307][T15256] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 327.309537][T15256] EXT4-fs (loop4): get root inode failed [ 327.309551][T15256] EXT4-fs (loop4): mount failed [ 327.346974][T15258] loop6: detected capacity change from 0 to 512 [ 327.465746][T15253] loop1: detected capacity change from 0 to 128 [ 327.506563][T15265] FAULT_INJECTION: forcing a failure. [ 327.506563][T15265] name failslab, interval 1, probability 0, space 0, times 0 [ 327.506592][T15265] CPU: 0 UID: 0 PID: 15265 Comm: syz.6.2781 Not tainted syzkaller #0 PREEMPT(lazy) [ 327.506616][T15265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 327.506685][T15265] Call Trace: [ 327.506692][T15265] [ 327.506700][T15265] __dump_stack+0x1d/0x30 [ 327.506724][T15265] dump_stack_lvl+0x95/0xd0 [ 327.506786][T15265] dump_stack+0x15/0x1b [ 327.506810][T15265] should_fail_ex+0x262/0x280 [ 327.506842][T15265] ? __get_vm_area_node+0x125/0x1f0 [ 327.506922][T15265] should_failslab+0x8c/0xb0 [ 327.506953][T15265] __kmalloc_cache_node_noprof+0x81/0x420 [ 327.506990][T15265] ? __get_vm_area_node+0x125/0x1f0 [ 327.507043][T15265] __get_vm_area_node+0x125/0x1f0 [ 327.507074][T15265] get_vm_area+0x65/0x90 [ 327.507105][T15265] ? arena_map_alloc+0x1de/0x4f0 [ 327.507198][T15265] arena_map_alloc+0x1de/0x4f0 [ 327.507229][T15265] map_create+0xaf2/0xfe0 [ 327.507263][T15265] __sys_bpf+0x99a/0xc30 [ 327.507309][T15265] ? vfs_write+0x770/0x9a0 [ 327.507343][T15265] __x64_sys_bpf+0x69/0x80 [ 327.507365][T15265] x64_sys_call+0xf26/0x2550 [ 327.507482][T15265] do_syscall_64+0x112/0x360 [ 327.507512][T15265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.507533][T15265] RIP: 0033:0x7fd15e48e2d9 [ 327.507548][T15265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.507624][T15265] RSP: 002b:00007fd15cee7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 327.507699][T15265] RAX: ffffffffffffffda RBX: 00007fd15e715fa0 RCX: 00007fd15e48e2d9 [ 327.507717][T15265] RDX: 0000000000000031 RSI: 00002000000000c0 RDI: 0000000000000000 [ 327.507733][T15265] RBP: 00007fd15cee7090 R08: 0000000000000000 R09: 0000000000000000 [ 327.507747][T15265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.507762][T15265] R13: 00007fd15e716038 R14: 00007fd15e715fa0 R15: 00007ffc325d31b8 [ 327.507786][T15265] [ 327.843879][ T3023] 8021q: adding VLAN 0 to HW filter on device eth11 [ 327.894911][T15277] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15277 comm=syz.6.2784 [ 327.966899][ T29] kauditd_printk_skb: 656 callbacks suppressed [ 327.966915][ T29] audit: type=1400 audit(1791938961.268:5036): avc: denied { shutdown } for pid=15286 comm="syz.3.2785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 327.967675][ T29] audit: type=1400 audit(1791938961.268:5037): avc: denied { getopt } for pid=15286 comm="syz.3.2785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 327.967774][ T29] audit: type=1400 audit(1791938961.268:5038): avc: denied { connect } for pid=15286 comm="syz.3.2785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 327.967798][ T29] audit: type=1400 audit(1791938961.268:5039): avc: denied { name_connect } for pid=15286 comm="syz.3.2785" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 328.187878][ T29] audit: type=1400 audit(1791938961.488:5040): avc: denied { write } for pid=15290 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.228921][ T29] audit: type=1400 audit(1791938961.528:5041): avc: denied { write } for pid=15303 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.281104][ T3023] 8021q: adding VLAN 0 to HW filter on device eth14 [ 328.459275][T15315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2787'. [ 328.482524][ T29] audit: type=1400 audit(1791938961.778:5042): avc: denied { write } for pid=15306 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.560942][ T29] audit: type=1400 audit(1791938961.858:5043): avc: denied { write } for pid=15322 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.775338][ T29] audit: type=1400 audit(1791938962.078:5044): avc: denied { write } for pid=15329 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.833711][ T29] audit: type=1400 audit(1791938962.138:5045): avc: denied { write } for pid=15345 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.272190][T15362] loop6: detected capacity change from 0 to 512 [ 329.530160][ T3023] 8021q: adding VLAN 0 to HW filter on device eth13 [ 329.635841][T15385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2796'. [ 329.674355][T15396] loop4: detected capacity change from 0 to 512 [ 329.692690][T15396] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.2797: iget: bad extended attribute block 134217728 [ 329.692726][T15396] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 329.693648][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 329.693668][ C0] EXT4-fs (loop4): initial error at time 1791938962: ext4_orphan_get:1403: inode 15 [ 329.693700][ C0] EXT4-fs (loop4): last error at time 1791938962: ext4_orphan_get:1403: inode 15 [ 329.696922][T15396] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.2797: couldn't read orphan inode 15 (err -117) [ 329.696987][T15396] loop4: lost filesystem error report for type 5 error -117 [ 330.102043][ T3023] 8021q: adding VLAN 0 to HW filter on device eth15 [ 330.637479][T15431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2800'. [ 331.013903][T15446] loop4: detected capacity change from 0 to 512 [ 331.034421][ T3023] 8021q: adding VLAN 0 to HW filter on device eth16 [ 331.091840][ T401] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.185542][ T401] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.282936][ T401] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.386188][ T401] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.007410][T15483] loop6: detected capacity change from 0 to 512 [ 332.012811][T15483] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 332.012826][T15483] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 332.044637][T15483] EXT4-fs (loop6): 1 truncate cleaned up [ 332.075489][ T401] bridge_slave_1: left allmulticast mode [ 332.075509][ T401] bridge_slave_1: left promiscuous mode [ 332.075663][ T401] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.078634][ T401] bridge_slave_0: left allmulticast mode [ 332.078729][ T401] bridge_slave_0: left promiscuous mode [ 332.078814][ T401] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.265765][ T401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.287052][ T401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.303399][ T401] bond0 (unregistering): Released all slaves [ 332.437446][ T401] hsr_slave_0: left promiscuous mode [ 332.452252][ T401] hsr_slave_1: left promiscuous mode [ 332.452892][ T401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.452909][ T401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.479126][ T401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.479146][ T401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.483585][T15501] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2809'. [ 332.508215][ T401] veth1_macvtap: left promiscuous mode [ 332.508248][ T401] veth0_macvtap: left promiscuous mode [ 332.508368][ T401] veth1_vlan: left promiscuous mode [ 332.508408][ T401] veth0_vlan: left promiscuous mode [ 332.807346][ T401] team0 (unregistering): Port device team_slave_1 removed [ 332.811641][ T401] team0 (unregistering): Port device team_slave_0 removed [ 332.841025][T15470] xt_ecn: cannot match TCP bits for non-tcp packets [ 332.892685][T15522] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2811'. [ 332.944924][T15449] pimreg: entered allmulticast mode [ 333.088444][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 333.088460][ T29] audit: type=1400 audit(1791938966.388:5206): avc: denied { tracepoint } for pid=15539 comm="syz.6.2812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 333.170070][ T29] audit: type=1400 audit(1791938966.468:5207): avc: denied { write } for pid=15539 comm="syz.6.2812" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 333.177874][T15541] loop6: detected capacity change from 0 to 512 [ 333.181406][ T29] audit: type=1400 audit(1791938966.478:5208): avc: denied { mounton } for pid=15539 comm="syz.6.2812" path="/37/file0" dev="tmpfs" ino=215 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 333.238416][ T29] audit: type=1400 audit(1791938966.538:5209): avc: denied { write } for pid=15534 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 333.267274][ T29] audit: type=1400 audit(1791938966.568:5210): avc: denied { mount } for pid=15539 comm="syz.6.2812" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 333.284016][ T29] audit: type=1400 audit(1791938966.578:5211): avc: denied { write } for pid=15539 comm="syz.6.2812" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 333.284054][ T29] audit: type=1400 audit(1791938966.578:5212): avc: denied { add_name } for pid=15539 comm="syz.6.2812" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 333.284080][ T29] audit: type=1400 audit(1791938966.578:5213): avc: denied { create } for pid=15539 comm="syz.6.2812" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 333.288298][ T29] audit: type=1400 audit(1791938966.578:5214): avc: denied { append } for pid=15539 comm="syz.6.2812" name="file2" dev="loop6" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 333.358825][T15460] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.358858][T15460] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.358925][T15460] bridge_slave_0: entered allmulticast mode [ 333.361144][T15460] bridge_slave_0: entered promiscuous mode [ 333.368916][T15460] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.368949][T15460] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.369018][T15460] bridge_slave_1: entered allmulticast mode [ 333.371853][T15460] bridge_slave_1: entered promiscuous mode [ 333.383325][T15559] loop4: detected capacity change from 0 to 512 [ 333.397168][ T29] audit: type=1400 audit(1791938966.698:5215): avc: denied { create } for pid=15547 comm="syz.4.2813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 333.431906][T15460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.433003][T15460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.496721][T15460] team0: Port device team_slave_0 added [ 333.504197][T15460] team0: Port device team_slave_1 added [ 333.554519][T15460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.554533][T15460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.554566][T15460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.562704][T15460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.562720][T15460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.562751][T15460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.671307][T15460] hsr_slave_0: entered promiscuous mode [ 333.679478][T15460] hsr_slave_1: entered promiscuous mode [ 333.956259][T15579] loop4: detected capacity change from 0 to 512 [ 333.972845][T15579] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.2814: iget: bad extended attribute block 134217728 [ 333.973065][T15579] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 333.973224][T15579] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.2814: couldn't read orphan inode 15 (err -117) [ 333.973249][T15579] loop4: lost filesystem error report for type 5 error -117 [ 334.672438][T15460] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 334.699051][T15460] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 334.699684][T15460] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 334.707281][T15460] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 334.707849][T15460] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 334.749717][T15460] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 334.752871][T15460] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 334.764274][T15460] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 334.911553][T15460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.932306][T15460] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.938626][ T117] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.938662][ T117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.953483][ T3432] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.953518][ T3432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.112039][T15638] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2820'. [ 335.129813][T15621] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15621 comm=syz.4.2818 [ 335.299217][T15460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.377990][ T3023] 8021q: adding VLAN 0 to HW filter on device eth17 [ 335.441343][T15658] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2821'. [ 335.573495][T15460] veth0_vlan: entered promiscuous mode [ 335.583587][T15460] veth1_vlan: entered promiscuous mode [ 335.615646][T15460] veth0_macvtap: entered promiscuous mode [ 335.621661][T15460] veth1_macvtap: entered promiscuous mode [ 335.643008][T15460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.652414][T15460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.725258][ T3023] 8021q: adding VLAN 0 to HW filter on device eth18 [ 335.753709][ T117] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.754655][ T117] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.754727][ T117] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.754761][ T117] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.563482][T15777] loop4: detected capacity change from 0 to 512 [ 336.590447][T15777] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.2828: iget: bad extended attribute block 134217728 [ 336.590537][T15777] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 336.590921][T15777] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.2828: couldn't read orphan inode 15 (err -117) [ 336.591085][T15777] loop4: lost filesystem error report for type 5 error -117 [ 336.751907][T15797] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2830'. [ 336.902075][T15802] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2831'. [ 337.014202][T15819] FAULT_INJECTION: forcing a failure. [ 337.014202][T15819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.014232][T15819] CPU: 0 UID: 0 PID: 15819 Comm: syz.5.2833 Not tainted syzkaller #0 PREEMPT(lazy) [ 337.014256][T15819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 337.014269][T15819] Call Trace: [ 337.014276][T15819] [ 337.014316][T15819] __dump_stack+0x1d/0x30 [ 337.014344][T15819] dump_stack_lvl+0x95/0xd0 [ 337.014429][T15819] dump_stack+0x15/0x1b [ 337.014452][T15819] should_fail_ex+0x262/0x280 [ 337.014479][T15819] should_fail+0xb/0x20 [ 337.014503][T15819] should_fail_usercopy+0x1a/0x20 [ 337.014547][T15819] _copy_from_user+0x1c/0xb0 [ 337.014583][T15819] __sys_bind+0x106/0x290 [ 337.014610][T15819] __x64_sys_bind+0x3f/0x50 [ 337.014630][T15819] x64_sys_call+0x1ac7/0x2550 [ 337.014670][T15819] do_syscall_64+0x112/0x360 [ 337.014697][T15819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.014733][T15819] RIP: 0033:0x7f751743e2d9 [ 337.014748][T15819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.014770][T15819] RSP: 002b:00007f7515e97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 337.014793][T15819] RAX: ffffffffffffffda RBX: 00007f75176c5fa0 RCX: 00007f751743e2d9 [ 337.014809][T15819] RDX: 0000000000000010 RSI: 0000200000001e40 RDI: 0000000000000003 [ 337.014861][T15819] RBP: 00007f7515e97090 R08: 0000000000000000 R09: 0000000000000000 [ 337.014877][T15819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.014890][T15819] R13: 00007f75176c6038 R14: 00007f75176c5fa0 R15: 00007fff136c1018 [ 337.014908][T15819] [ 337.276592][T15822] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15822 comm=syz.6.2834 [ 337.325844][T15828] FAULT_INJECTION: forcing a failure. [ 337.325844][T15828] name fail_futex, interval 1, probability 0, space 0, times 0 [ 337.325881][T15828] CPU: 1 UID: 0 PID: 15828 Comm: syz.6.2834 Not tainted syzkaller #0 PREEMPT(lazy) [ 337.325981][T15828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 337.325997][T15828] Call Trace: [ 337.326004][T15828] [ 337.326013][T15828] __dump_stack+0x1d/0x30 [ 337.326043][T15828] dump_stack_lvl+0x95/0xd0 [ 337.326070][T15828] dump_stack+0x15/0x1b [ 337.326094][T15828] should_fail_ex+0x262/0x280 [ 337.326175][T15828] should_fail+0xb/0x20 [ 337.326345][T15828] get_futex_key+0x12d/0xb10 [ 337.326380][T15828] futex_wait_setup+0x49/0x3e0 [ 337.326466][T15828] ? __cgroup_account_cputime+0x83/0xa0 [ 337.326496][T15828] ? update_se+0xc1/0x3b0 [ 337.326525][T15828] __futex_wait+0xa9/0x260 [ 337.326556][T15828] ? __pfx_futex_wake_mark+0x10/0x10 [ 337.326582][T15828] futex_wait+0x98/0x1c0 [ 337.326643][T15828] do_futex+0x391/0x460 [ 337.326683][T15828] __se_sys_futex+0x2f6/0x370 [ 337.326723][T15828] __x64_sys_futex+0x78/0x90 [ 337.326827][T15828] x64_sys_call+0x22e2/0x2550 [ 337.326891][T15828] do_syscall_64+0x112/0x360 [ 337.326923][T15828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.327041][T15828] RIP: 0033:0x7fd15e48e2d9 [ 337.327057][T15828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.327078][T15828] RSP: 002b:00007fd15cec60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 337.327111][T15828] RAX: ffffffffffffffda RBX: 00007fd15e716098 RCX: 00007fd15e48e2d9 [ 337.327187][T15828] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd15e716098 [ 337.327204][T15828] RBP: 00007fd15e716090 R08: 0000000000000000 R09: 0000000000000000 [ 337.327226][T15828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.327245][T15828] R13: 00007fd15e716128 R14: 00007ffc325d30d0 R15: 00007ffc325d31b8 [ 337.327265][T15828] [ 337.573068][ T3023] 8021q: adding VLAN 0 to HW filter on device eth19 [ 337.622625][T15844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2838'. [ 337.822635][ T3023] 8021q: adding VLAN 0 to HW filter on device eth20 [ 338.145219][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 338.145235][ T29] audit: type=1400 audit(1791938971.448:5295): avc: denied { write } for pid=15880 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 338.218662][ T29] audit: type=1400 audit(1791938971.518:5296): avc: denied { write } for pid=15896 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 338.423216][ T29] audit: type=1400 audit(1791938971.718:5297): avc: denied { write } for pid=15899 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 338.447280][T15906] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2844'. [ 338.487444][ T29] audit: type=1400 audit(1791938971.788:5298): avc: denied { write } for pid=15915 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 338.606719][ T29] audit: type=1326 audit(1791938971.908:5299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15927 comm="syz.3.2845" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20352be2d9 code=0x7ffc0000 [ 338.608189][ T29] audit: type=1326 audit(1791938971.908:5300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15927 comm="syz.3.2845" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20352be2d9 code=0x7ffc0000 [ 338.608222][ T29] audit: type=1326 audit(1791938971.908:5301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15927 comm="syz.3.2845" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20352be2d9 code=0x7ffc0000 [ 338.608326][ T29] audit: type=1326 audit(1791938971.908:5302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15927 comm="syz.3.2845" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20352be2d9 code=0x7ffc0000 [ 338.608357][ T29] audit: type=1326 audit(1791938971.908:5303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15927 comm="syz.3.2845" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f20352be2d9 code=0x7ffc0000 [ 338.609047][ T29] audit: type=1326 audit(1791938971.908:5304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15927 comm="syz.3.2845" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20352be2d9 code=0x7ffc0000 [ 338.610459][T15928] loop5: detected capacity change from 0 to 512 [ 338.639170][T15928] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 338.639187][T15928] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 338.716632][T15928] EXT4-fs (loop5): 1 truncate cleaned up [ 338.976978][T15951] FAULT_INJECTION: forcing a failure. [ 338.976978][T15951] name failslab, interval 1, probability 0, space 0, times 0 [ 338.977116][T15951] CPU: 0 UID: 0 PID: 15951 Comm: syz.6.2848 Not tainted syzkaller #0 PREEMPT(lazy) [ 338.977141][T15951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 338.977152][T15951] Call Trace: [ 338.977160][T15951] [ 338.977168][T15951] __dump_stack+0x1d/0x30 [ 338.977195][T15951] dump_stack_lvl+0x95/0xd0 [ 338.977219][T15951] dump_stack+0x15/0x1b [ 338.977242][T15951] should_fail_ex+0x262/0x280 [ 338.977273][T15951] ? vm_area_alloc+0x2c/0xb0 [ 338.977307][T15951] should_failslab+0x8c/0xb0 [ 338.977343][T15951] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 338.977378][T15951] ? vm_area_alloc+0x2c/0xb0 [ 338.977413][T15951] vm_area_alloc+0x2c/0xb0 [ 338.977447][T15951] mmap_region+0x1279/0x2310 [ 338.977511][T15951] do_mmap+0xa20/0xc70 [ 338.977534][T15951] vm_mmap_pgoff+0x183/0x2d0 [ 338.977567][T15951] ksys_mmap_pgoff+0xc1/0x310 [ 338.977590][T15951] ? __x64_sys_mmap+0x49/0x70 [ 338.977626][T15951] x64_sys_call+0x23b3/0x2550 [ 338.977665][T15951] do_syscall_64+0x112/0x360 [ 338.977695][T15951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.977719][T15951] RIP: 0033:0x7fd15e48e2d9 [ 338.977735][T15951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.977753][T15951] RSP: 002b:00007fd15cee7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 338.977773][T15951] RAX: ffffffffffffffda RBX: 00007fd15e715fa0 RCX: 00007fd15e48e2d9 [ 338.977787][T15951] RDX: 0000000002000007 RSI: 0000000008000002 RDI: 000000110c230000 [ 338.977801][T15951] RBP: 00007fd15e525888 R08: ffffffffffffffff R09: 0000000000000000 [ 338.977815][T15951] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 338.977829][T15951] R13: 00007fd15e716038 R14: 00007fd15e715fa0 R15: 00007ffc325d31b8 [ 338.977848][T15951] [ 339.385940][T15460] EXT4-fs unmount: 27 callbacks suppressed [ 339.385985][T15460] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.530059][T15969] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15969 comm=syz.4.2852 [ 339.667947][T15968] loop6: detected capacity change from 0 to 512 [ 339.702385][T15968] EXT4-fs: Ignoring removed bh option [ 339.723373][T15968] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 339.774707][T15968] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.777503][T15968] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.967398][T16010] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2856'. [ 340.239853][T14518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.298533][T16047] loop6: detected capacity change from 0 to 512 [ 340.300708][T16047] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 340.300725][T16047] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 340.303414][T16047] EXT4-fs (loop6): 1 truncate cleaned up [ 340.304227][T16047] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.752667][T14518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.788347][T16085] loop6: detected capacity change from 0 to 1024 [ 340.800477][T16085] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 340.813768][T16085] JBD2: no valid journal superblock found [ 340.813782][T16085] EXT4-fs (loop6): Could not load journal inode [ 340.975642][T16085] loop6: detected capacity change from 0 to 1024 [ 341.022421][T16085] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.179898][T14518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.235173][T16073] loop4: detected capacity change from 0 to 1024 [ 341.324839][T15983] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2854'. [ 341.612611][T16123] FAULT_INJECTION: forcing a failure. [ 341.612611][T16123] name failslab, interval 1, probability 0, space 0, times 0 [ 341.612670][T16123] CPU: 1 UID: 0 PID: 16123 Comm: syz.5.2869 Not tainted syzkaller #0 PREEMPT(lazy) [ 341.612699][T16123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 341.612714][T16123] Call Trace: [ 341.612724][T16123] [ 341.612734][T16123] __dump_stack+0x1d/0x30 [ 341.612764][T16123] dump_stack_lvl+0x95/0xd0 [ 341.612790][T16123] dump_stack+0x15/0x1b [ 341.612821][T16123] should_fail_ex+0x262/0x280 [ 341.612853][T16123] should_failslab+0x8c/0xb0 [ 341.612891][T16123] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 341.612929][T16123] ? shmem_alloc_inode+0x34/0x50 [ 341.612953][T16123] ? shmem_alloc_inode+0x34/0x50 [ 341.612978][T16123] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 341.613001][T16123] shmem_alloc_inode+0x34/0x50 [ 341.613024][T16123] alloc_inode+0x40/0x170 [ 341.613049][T16123] new_inode+0x1d/0xe0 [ 341.613076][T16123] shmem_get_inode+0x250/0x7b0 [ 341.613101][T16123] __shmem_file_setup+0x14f/0x260 [ 341.613139][T16123] shmem_zero_setup+0x66/0xe0 [ 341.613171][T16123] mmap_region+0x1ad6/0x2310 [ 341.613224][T16123] do_mmap+0xa20/0xc70 [ 341.613249][T16123] vm_mmap_pgoff+0x183/0x2d0 [ 341.613282][T16123] ksys_mmap_pgoff+0xc1/0x310 [ 341.613304][T16123] ? __x64_sys_mmap+0x49/0x70 [ 341.613340][T16123] x64_sys_call+0x23b3/0x2550 [ 341.613369][T16123] do_syscall_64+0x112/0x360 [ 341.613397][T16123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.613422][T16123] RIP: 0033:0x7f751743e2d9 [ 341.613440][T16123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.613462][T16123] RSP: 002b:00007f7515e97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 341.613485][T16123] RAX: ffffffffffffffda RBX: 00007f75176c5fa0 RCX: 00007f751743e2d9 [ 341.613501][T16123] RDX: 0000000002000007 RSI: 0000000008000002 RDI: 000000110c230000 [ 341.613517][T16123] RBP: 00007f75174d5888 R08: ffffffffffffffff R09: 0000000000000000 [ 341.613533][T16123] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 341.613549][T16123] R13: 00007f75176c6038 R14: 00007f75176c5fa0 R15: 00007fff136c1018 [ 341.613571][T16123] [ 341.676106][T16130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2867'. [ 341.940808][T16142] loop4: detected capacity change from 0 to 512 [ 341.956594][T16142] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 341.956610][T16142] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 341.957542][T16132] loop6: detected capacity change from 0 to 512 [ 341.957909][T16142] EXT4-fs (loop4): 1 truncate cleaned up [ 341.958373][T16142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.116843][ T117] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.125174][T16132] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.173240][ T117] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.231470][ T117] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.272339][ T117] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.355827][T14518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.397765][ T117] bridge_slave_1: left allmulticast mode [ 342.397789][ T117] bridge_slave_1: left promiscuous mode [ 342.397918][ T117] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.398963][ T117] bridge_slave_0: left allmulticast mode [ 342.399059][ T117] bridge_slave_0: left promiscuous mode [ 342.399163][ T117] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.483548][ T117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.501474][ T117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.502292][ T117] bond0 (unregistering): Released all slaves [ 342.531049][ T117] hsr_slave_0: left promiscuous mode [ 342.539716][ T117] hsr_slave_1: left promiscuous mode [ 342.540166][ T117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.540355][ T117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.540795][ T117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.540810][ T117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.543824][ T117] veth1_macvtap: left promiscuous mode [ 342.543850][ T117] veth0_macvtap: left promiscuous mode [ 342.650405][ T117] team0 (unregistering): Port device team_slave_1 removed [ 342.666373][ T117] team0 (unregistering): Port device team_slave_0 removed [ 342.699809][T13776] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.770499][T16176] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2878'. [ 343.188179][ T29] kauditd_printk_skb: 634 callbacks suppressed [ 343.188205][ T29] audit: type=1400 audit(1791938976.488:5937): avc: denied { write } for pid=16182 comm="syz.4.2880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 343.257873][T16185] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65 sclass=netlink_audit_socket pid=16185 comm=syz.4.2880 [ 343.364239][ T29] audit: type=1400 audit(1791938976.668:5938): avc: denied { create } for pid=16197 comm="syz.5.2882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 343.373188][T16198] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2882'. [ 343.420629][ T29] audit: type=1400 audit(1791938976.718:5939): avc: denied { create } for pid=16197 comm="syz.5.2882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 343.859475][ T29] audit: type=1400 audit(1791938977.158:5940): avc: denied { read } for pid=16203 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 343.859511][ T29] audit: type=1400 audit(1791938977.158:5941): avc: denied { read open } for pid=16203 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 343.859686][ T29] audit: type=1400 audit(1791938977.158:5942): avc: denied { getattr } for pid=16203 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 343.966547][ T29] audit: type=1400 audit(1791938977.268:5943): avc: denied { create } for pid=16205 comm="syz.6.2883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 344.001772][ T29] audit: type=1400 audit(1791938977.268:5944): avc: denied { connect } for pid=16205 comm="syz.6.2883" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 344.001798][ T29] audit: type=1400 audit(1791938977.308:5945): avc: denied { setopt } for pid=16205 comm="syz.6.2883" laddr=fe80::dc35:f9ff:fef6:f132 lport=60 faddr=ff02::1 fport=20131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 344.013646][T16146] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.013680][T16146] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.013802][T16146] bridge_slave_0: entered allmulticast mode [ 344.014249][T16146] bridge_slave_0: entered promiscuous mode [ 344.021593][T16146] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.021635][T16146] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.021692][T16146] bridge_slave_1: entered allmulticast mode [ 344.022369][T16146] bridge_slave_1: entered promiscuous mode [ 344.050819][ T29] audit: type=1400 audit(1791938977.328:5946): avc: denied { write } for pid=16205 comm="syz.6.2883" laddr=fe80::dc35:f9ff:fef6:f132 lport=60 faddr=ff02::1 fport=20131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 344.105992][T16146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.115625][T16146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.183661][T16222] tipc: Started in network mode [ 344.183705][T16222] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 344.183758][T16222] tipc: Enabled bearer , priority 0 [ 344.184161][T16222] tipc: Disabling bearer [ 344.380231][T16226] loop5: detected capacity change from 0 to 512 [ 344.393467][T16226] EXT4-fs: Ignoring removed bh option [ 344.401031][T16226] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 344.432578][T16226] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.435611][T16226] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.495179][T16146] team0: Port device team_slave_0 added [ 344.495767][ T3023] 8021q: adding VLAN 0 to HW filter on device eth21 [ 344.512223][T16146] team0: Port device team_slave_1 added [ 344.609128][T16146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.609146][T16146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.609177][T16146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.617362][T16146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.617378][T16146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.617409][T16146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.630045][T16239] loop4: detected capacity change from 0 to 512 [ 344.630634][T16239] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 344.630648][T16239] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 344.631778][T16239] EXT4-fs (loop4): 1 truncate cleaned up [ 344.632184][T16239] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.697760][T16146] hsr_slave_0: entered promiscuous mode [ 344.698197][T16146] hsr_slave_1: entered promiscuous mode [ 344.705091][T16146] debugfs: 'hsr0' already exists in 'hsr' [ 344.705107][T16146] Cannot create hsr debugfs directory [ 344.809393][T16247] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2889'. [ 344.958162][T15460] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.987211][ T3023] 8021q: adding VLAN 0 to HW filter on device eth22 [ 345.178414][T13776] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.302798][ T3023] 8021q: adding VLAN 0 to HW filter on device eth23 [ 345.362461][T16146] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 345.365452][T16146] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 345.366228][T16146] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 345.373366][T16146] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 345.374462][T16146] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 345.379838][T16146] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 345.380441][T16146] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 345.387061][T16146] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 345.480623][T16288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2893'. [ 345.481878][T16146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.491676][T16146] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.496958][ T3432] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.496993][ T3432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.502056][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.502090][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.569033][ T3023] 8021q: adding VLAN 0 to HW filter on device eth24 [ 345.734573][T16146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.980348][T16358] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65 sclass=netlink_audit_socket pid=16358 comm=syz.5.2895 [ 346.010301][T16146] veth0_vlan: entered promiscuous mode [ 346.013065][T16146] veth1_vlan: entered promiscuous mode [ 346.035920][T16146] veth0_macvtap: entered promiscuous mode [ 346.037616][T16146] veth1_macvtap: entered promiscuous mode [ 346.056321][T16146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.060985][T16146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.082706][ T401] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.082747][ T401] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.082844][ T401] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.082876][ T401] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.188413][T16384] loop6: detected capacity change from 0 to 512 [ 346.202467][T16384] EXT4-fs: Ignoring removed bh option [ 346.203245][T16384] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 346.239293][T16384] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.239697][T16384] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.331108][T16402] FAULT_INJECTION: forcing a failure. [ 346.331108][T16402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.331142][T16402] CPU: 1 UID: 0 PID: 16402 Comm: syz.5.2901 Not tainted syzkaller #0 PREEMPT(lazy) [ 346.331200][T16402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 346.331213][T16402] Call Trace: [ 346.331219][T16402] [ 346.331226][T16402] __dump_stack+0x1d/0x30 [ 346.331254][T16402] dump_stack_lvl+0x95/0xd0 [ 346.331333][T16402] dump_stack+0x15/0x1b [ 346.331354][T16402] should_fail_ex+0x262/0x280 [ 346.331409][T16402] should_fail+0xb/0x20 [ 346.331438][T16402] should_fail_usercopy+0x1a/0x20 [ 346.331470][T16402] _copy_to_user+0x20/0xa0 [ 346.331503][T16402] simple_read_from_buffer+0xb5/0x130 [ 346.331556][T16402] proc_fail_nth_read+0x10e/0x150 [ 346.331586][T16402] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 346.331613][T16402] vfs_read+0x18e/0x7c0 [ 346.331719][T16402] ? vt_ioctl+0x747/0x1910 [ 346.331750][T16402] ? __rcu_read_unlock+0x4e/0x70 [ 346.331838][T16402] ? __fget_files+0x184/0x1c0 [ 346.331863][T16402] ? mutex_lock+0x57/0x90 [ 346.331903][T16402] ksys_read+0xdc/0x1a0 [ 346.331964][T16402] __x64_sys_read+0x40/0x50 [ 346.332045][T16402] x64_sys_call+0x2135/0x2550 [ 346.332072][T16402] do_syscall_64+0x112/0x360 [ 346.332101][T16402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.332133][T16402] RIP: 0033:0x7f75173feb0e [ 346.332151][T16402] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 346.332171][T16402] RSP: 002b:00007f7515e96fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 346.332191][T16402] RAX: ffffffffffffffda RBX: 00007f7515e976c0 RCX: 00007f75173feb0e [ 346.332208][T16402] RDX: 000000000000000f RSI: 00007f7515e970a0 RDI: 0000000000000004 [ 346.332234][T16402] RBP: 00007f7515e97090 R08: 0000000000000000 R09: 0000000000000000 [ 346.332299][T16402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.332312][T16402] R13: 00007f75176c6038 R14: 00007f75176c5fa0 R15: 00007fff136c1018 [ 346.332329][T16402] [ 346.366799][T16406] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2900'. [ 346.405260][T16408] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2903'. [ 346.601909][T14518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.747407][T16435] xt_hashlimit: size too large, truncated to 1048576 [ 346.780709][T16421] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65 sclass=netlink_audit_socket pid=16421 comm=syz.4.2907 [ 346.968757][T16424] loop6: detected capacity change from 0 to 512 [ 347.200964][T16474] FAULT_INJECTION: forcing a failure. [ 347.200964][T16474] name failslab, interval 1, probability 0, space 0, times 0 [ 347.201079][T16474] CPU: 0 UID: 0 PID: 16474 Comm: syz.6.2911 Not tainted syzkaller #0 PREEMPT(lazy) [ 347.201109][T16474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 347.201160][T16474] Call Trace: [ 347.201167][T16474] [ 347.201174][T16474] __dump_stack+0x1d/0x30 [ 347.201251][T16474] dump_stack_lvl+0x95/0xd0 [ 347.201349][T16474] dump_stack+0x15/0x1b [ 347.201429][T16474] should_fail_ex+0x262/0x280 [ 347.201461][T16474] ? __proc_create+0x3f1/0x6b0 [ 347.201540][T16474] should_failslab+0x8c/0xb0 [ 347.201577][T16474] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 347.201615][T16474] ? ida_alloc_range+0x6f4/0x730 [ 347.201665][T16474] ? __proc_create+0x3f1/0x6b0 [ 347.201696][T16474] __proc_create+0x3f1/0x6b0 [ 347.201727][T16474] ? rb_insert_color+0x25c/0x2a0 [ 347.201796][T16474] proc_create_reg+0x87/0xe0 [ 347.201910][T16474] proc_create_net_data+0x59/0x100 [ 347.201939][T16474] udp4_proc_init_net+0x45/0x60 [ 347.202111][T16474] ops_init+0x22a/0x2e0 [ 347.202135][T16474] setup_net+0x9f/0x230 [ 347.202167][T16474] copy_net_ns+0x333/0x490 [ 347.202202][T16474] create_new_namespaces+0x1f6/0x420 [ 347.202253][T16474] unshare_nsproxy_namespaces+0x115/0x150 [ 347.202294][T16474] ksys_unshare+0x3fd/0x6f0 [ 347.202326][T16474] __x64_sys_unshare+0x1f/0x30 [ 347.202368][T16474] x64_sys_call+0x1e33/0x2550 [ 347.202397][T16474] do_syscall_64+0x112/0x360 [ 347.202429][T16474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.202453][T16474] RIP: 0033:0x7fd15e48e2d9 [ 347.202472][T16474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.202492][T16474] RSP: 002b:00007fd15cee7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 347.202513][T16474] RAX: ffffffffffffffda RBX: 00007fd15e715fa0 RCX: 00007fd15e48e2d9 [ 347.202527][T16474] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 347.202618][T16474] RBP: 00007fd15e525888 R08: 0000000000000000 R09: 0000000000000000 [ 347.202634][T16474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.202650][T16474] R13: 00007fd15e716038 R14: 00007fd15e715fa0 R15: 00007ffc325d31b8 [ 347.202705][T16474] [ 347.278369][T16449] FAULT_INJECTION: forcing a failure. [ 347.278369][T16449] name failslab, interval 1, probability 0, space 0, times 0 [ 347.278451][T16449] CPU: 0 UID: 0 PID: 16449 Comm: syz.4.2910 Not tainted syzkaller #0 PREEMPT(lazy) [ 347.278480][T16449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 347.278528][T16449] Call Trace: [ 347.278536][T16449] [ 347.278546][T16449] __dump_stack+0x1d/0x30 [ 347.278572][T16449] dump_stack_lvl+0x95/0xd0 [ 347.278641][T16449] dump_stack+0x15/0x1b [ 347.278666][T16449] should_fail_ex+0x262/0x280 [ 347.278699][T16449] should_failslab+0x8c/0xb0 [ 347.278786][T16449] __kvmalloc_node_noprof+0x168/0x5c0 [ 347.278951][T16449] ? io_alloc_cache_init+0x36/0xb0 [ 347.278982][T16449] ? io_alloc_cache_init+0x36/0xb0 [ 347.279126][T16449] io_alloc_cache_init+0x36/0xb0 [ 347.279157][T16449] io_ring_ctx_alloc+0x2e5/0x650 [ 347.279194][T16449] io_uring_create+0x4d/0x4f0 [ 347.279237][T16449] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 347.279357][T16449] __x64_sys_io_uring_setup+0x31/0x40 [ 347.279393][T16449] x64_sys_call+0x1fbf/0x2550 [ 347.279450][T16449] do_syscall_64+0x112/0x360 [ 347.279482][T16449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.279548][T16449] RIP: 0033:0x7f4d98d2e2d9 [ 347.279567][T16449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.279588][T16449] RSP: 002b:00007f4d97786fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 347.279611][T16449] RAX: ffffffffffffffda RBX: 0000200000001c40 RCX: 00007f4d98d2e2d9 [ 347.279629][T16449] RDX: 0000200000001d00 RSI: 0000200000001c40 RDI: 00000000000008b2 [ 347.279645][T16449] RBP: 00007f4d98dc5888 R08: 0000000000000000 R09: 0000000000000000 [ 347.279735][T16449] R10: 0000200000001d40 R11: 0000000000000206 R12: 0000200000001d00 [ 347.279751][T16449] R13: 0000200000001d40 R14: 0000200000001cc0 R15: 00007ffdecfd9038 [ 347.279773][T16449] [ 347.625706][T16494] FAULT_INJECTION: forcing a failure. [ 347.625706][T16494] name failslab, interval 1, probability 0, space 0, times 0 [ 347.631590][T16494] CPU: 0 UID: 0 PID: 16494 Comm: syz.5.2913 Not tainted syzkaller #0 PREEMPT(lazy) [ 347.631698][T16494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 347.631712][T16494] Call Trace: [ 347.631720][T16494] [ 347.631729][T16494] __dump_stack+0x1d/0x30 [ 347.631757][T16494] dump_stack_lvl+0x95/0xd0 [ 347.631831][T16494] dump_stack+0x15/0x1b [ 347.631853][T16494] should_fail_ex+0x262/0x280 [ 347.631883][T16494] ? skb_clone+0x151/0x1f0 [ 347.631910][T16494] should_failslab+0x8c/0xb0 [ 347.632007][T16494] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 347.632041][T16494] ? skb_clone+0x151/0x1f0 [ 347.632068][T16494] skb_clone+0x151/0x1f0 [ 347.632107][T16494] nfnetlink_rcv+0x310/0x1740 [ 347.632204][T16494] ? irqentry_exit+0x58f/0x610 [ 347.632226][T16494] ? kmem_cache_free+0x106/0x3b0 [ 347.632248][T16494] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 347.632289][T16494] ? __dev_queue_xmit+0x151/0x1ec0 [ 347.632376][T16494] ? __dev_queue_xmit+0x151/0x1ec0 [ 347.632409][T16494] ? __local_bh_enable_ip+0xc/0x80 [ 347.632433][T16494] ? __dev_queue_xmit+0x1361/0x1ec0 [ 347.632460][T16494] ? __dev_queue_xmit+0x151/0x1ec0 [ 347.632492][T16494] ? ref_tracker_free+0x380/0x3f0 [ 347.632520][T16494] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 347.632564][T16494] netlink_unicast+0x5a9/0x680 [ 347.632602][T16494] netlink_sendmsg+0x5be/0x6f0 [ 347.632727][T16494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.632752][T16494] ____sys_sendmsg+0x532/0x580 [ 347.632783][T16494] ___sys_sendmsg+0x195/0x1e0 [ 347.632809][T16494] ? _raw_spin_unlock+0x9/0x30 [ 347.632880][T16494] __x64_sys_sendmsg+0xd4/0x160 [ 347.632910][T16494] x64_sys_call+0x22ab/0x2550 [ 347.632938][T16494] do_syscall_64+0x112/0x360 [ 347.632979][T16494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.633062][T16494] RIP: 0033:0x7f751743e2d9 [ 347.633080][T16494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.633100][T16494] RSP: 002b:00007f7515e97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.633122][T16494] RAX: ffffffffffffffda RBX: 00007f75176c5fa0 RCX: 00007f751743e2d9 [ 347.633138][T16494] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 347.633161][T16494] RBP: 00007f7515e97090 R08: 0000000000000000 R09: 0000000000000000 [ 347.633175][T16494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.633188][T16494] R13: 00007f75176c6038 R14: 00007f75176c5fa0 R15: 00007fff136c1018 [ 347.633208][T16494] [ 347.770968][T16496] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2915'. [ 347.779718][T16506] loop5: detected capacity change from 0 to 512 [ 347.810602][T16506] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 347.810619][T16506] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 347.825486][T16506] EXT4-fs (loop5): 1 truncate cleaned up [ 347.825881][T16506] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.871748][T15460] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.976940][T16515] loop5: detected capacity change from 0 to 512 [ 347.987313][T16515] EXT4-fs: Ignoring removed bh option [ 347.988994][T16515] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 348.044647][T16515] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.044728][T16515] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.076644][T16520] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2917'. [ 348.142624][T16529] FAULT_INJECTION: forcing a failure. [ 348.142624][T16529] name failslab, interval 1, probability 0, space 0, times 0 [ 348.142656][T16529] CPU: 0 UID: 0 PID: 16529 Comm: syz.4.2918 Not tainted syzkaller #0 PREEMPT(lazy) [ 348.142684][T16529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 348.142698][T16529] Call Trace: [ 348.142766][T16529] [ 348.142774][T16529] __dump_stack+0x1d/0x30 [ 348.142803][T16529] dump_stack_lvl+0x95/0xd0 [ 348.142829][T16529] dump_stack+0x15/0x1b [ 348.142850][T16529] should_fail_ex+0x262/0x280 [ 348.142884][T16529] ? __alloc_skb+0x2e0/0x6f0 [ 348.142909][T16529] should_failslab+0x8c/0xb0 [ 348.142943][T16529] kmem_cache_alloc_node_noprof+0x82/0x400 [ 348.143079][T16529] ? __alloc_skb+0x2e0/0x6f0 [ 348.143103][T16529] __alloc_skb+0x2e0/0x6f0 [ 348.143125][T16529] ? __d_rehash+0x124/0x1d0 [ 348.143160][T16529] ? __alloc_skb+0x209/0x6f0 [ 348.143200][T16529] alloc_skb_with_frags+0x7e/0x3d0 [ 348.143224][T16529] ? __rcu_read_unlock+0x4e/0x70 [ 348.143296][T16529] ? avc_has_perm_noaudit+0xac/0x160 [ 348.143328][T16529] sock_alloc_send_pskb+0x44d/0x500 [ 348.143357][T16529] ? selinux_file_open+0x2e8/0x330 [ 348.143430][T16529] tun_get_user+0x987/0x28e0 [ 348.143463][T16529] ? avc_has_perm_noaudit+0xac/0x160 [ 348.143492][T16529] ? ref_tracker_alloc+0x1eb/0x2f0 [ 348.143526][T16529] tun_chr_write_iter+0x15a/0x210 [ 348.143609][T16529] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 348.143643][T16529] vfs_write+0x57f/0x9a0 [ 348.143724][T16529] ksys_write+0xdc/0x1a0 [ 348.143777][T16529] __x64_sys_write+0x40/0x50 [ 348.143880][T16529] x64_sys_call+0x154e/0x2550 [ 348.143971][T16529] do_syscall_64+0x112/0x360 [ 348.144002][T16529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.144026][T16529] RIP: 0033:0x7f4d98ceeb0e [ 348.144043][T16529] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 348.144107][T16529] RSP: 002b:00007f4d97786fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 348.144186][T16529] RAX: ffffffffffffffda RBX: 00007f4d977876c0 RCX: 00007f4d98ceeb0e [ 348.144233][T16529] RDX: 000000000000fdef RSI: 0000200000000980 RDI: 00000000000000c8 [ 348.144287][T16529] RBP: 00007f4d97787090 R08: 0000000000000000 R09: 0000000000000000 [ 348.144303][T16529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.144315][T16529] R13: 00007f4d98fb6038 R14: 00007f4d98fb5fa0 R15: 00007ffdecfd9038 [ 348.144334][T16529] [ 348.295006][T15460] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.535341][ T29] kauditd_printk_skb: 562 callbacks suppressed [ 348.535359][ T29] audit: type=1400 audit(1791938981.838:6509): avc: denied { write } for pid=16526 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.550970][ T29] audit: type=1400 audit(1791938981.848:6510): avc: denied { write } for pid=16536 comm="syz.5.2920" name="001" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 348.628026][ T29] audit: type=1400 audit(1791938981.928:6511): avc: denied { write } for pid=16558 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.629460][T16552] loop5: detected capacity change from 0 to 512 [ 348.636053][ T29] audit: type=1400 audit(1791938981.938:6512): avc: denied { mounton } for pid=16536 comm="syz.5.2920" path="/29/file0" dev="tmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 348.732997][T16552] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.2920: iget: bad extended attribute block 134217728 [ 348.733030][T16552] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 348.733198][T16552] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.2920: couldn't read orphan inode 15 (err -117) [ 348.733274][T16552] loop5: lost filesystem error report for type 5 error -117 [ 348.733860][T16552] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.734840][T16552] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.822208][ T29] audit: type=1400 audit(1791938982.118:6513): avc: denied { unmount } for pid=16146 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 348.828002][ T29] audit: type=1400 audit(1791938982.128:6514): avc: denied { setopt } for pid=16562 comm="syz.4.2926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 348.836214][ T29] audit: type=1400 audit(1791938982.138:6515): avc: denied { getopt } for pid=16562 comm="syz.4.2926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 348.836243][ T29] audit: type=1400 audit(1791938982.138:6516): avc: denied { connect } for pid=16562 comm="syz.4.2926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 348.836267][ T29] audit: type=1400 audit(1791938982.138:6517): avc: denied { name_connect } for pid=16562 comm="syz.4.2926" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 348.876233][T16563] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2927'. [ 348.938132][ T29] audit: type=1400 audit(1791938982.238:6518): avc: denied { mount } for pid=16562 comm="syz.4.2926" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 349.040354][T16593] loop4: detected capacity change from 0 to 512 [ 349.065357][T16593] EXT4-fs: Ignoring removed bh option [ 349.065714][T16593] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 349.086739][T16593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.086886][T16593] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.125837][T16599] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2932'. [ 349.441308][T16619] loop6: detected capacity change from 0 to 512 [ 349.472461][T16619] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 349.517666][T16619] EXT4-fs error (device loop6): ext4_acquire_dquot:7070: comm syz.6.2935: Failed to acquire dquot type 1 [ 349.517726][T16619] loop6: lost filesystem error report for type 5 error -117 [ 349.523627][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 349.523648][ C0] EXT4-fs (loop6): last error at time 1791938982: ext4_acquire_dquot:7070 [ 349.524007][T16619] EXT4-fs (loop6): 1 truncate cleaned up [ 349.526151][T16619] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 349.556783][T14518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 349.574747][T16644] FAULT_INJECTION: forcing a failure. [ 349.574747][T16644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.574790][T16644] CPU: 0 UID: 0 PID: 16644 Comm: syz.7.2938 Not tainted syzkaller #0 PREEMPT(lazy) [ 349.574817][T16644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 349.574831][T16644] Call Trace: [ 349.574839][T16644] [ 349.574847][T16644] __dump_stack+0x1d/0x30 [ 349.574905][T16644] dump_stack_lvl+0x95/0xd0 [ 349.574929][T16644] dump_stack+0x15/0x1b [ 349.574973][T16644] should_fail_ex+0x262/0x280 [ 349.575005][T16644] should_fail+0xb/0x20 [ 349.575094][T16644] should_fail_usercopy+0x1a/0x20 [ 349.575127][T16644] _copy_to_user+0x20/0xa0 [ 349.575201][T16644] simple_read_from_buffer+0xb5/0x130 [ 349.575228][T16644] proc_fail_nth_read+0x10e/0x150 [ 349.575269][T16644] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 349.575295][T16644] vfs_read+0x18e/0x7c0 [ 349.575380][T16644] ? __rcu_read_unlock+0x4e/0x70 [ 349.575456][T16644] ? __fget_files+0x184/0x1c0 [ 349.575483][T16644] ? mutex_lock+0x57/0x90 [ 349.575520][T16644] ksys_read+0xdc/0x1a0 [ 349.575584][T16644] __x64_sys_read+0x40/0x50 [ 349.575623][T16644] x64_sys_call+0x2135/0x2550 [ 349.575652][T16644] do_syscall_64+0x112/0x360 [ 349.575681][T16644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.575757][T16644] RIP: 0033:0x7fa7c139eb0e [ 349.575776][T16644] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 349.575797][T16644] RSP: 002b:00007fa7bfe36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 349.575885][T16644] RAX: ffffffffffffffda RBX: 00007fa7bfe376c0 RCX: 00007fa7c139eb0e [ 349.575902][T16644] RDX: 000000000000000f RSI: 00007fa7bfe370a0 RDI: 0000000000000006 [ 349.575916][T16644] RBP: 00007fa7bfe37090 R08: 0000000000000000 R09: 0000000000000000 [ 349.575930][T16644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.575983][T16644] R13: 00007fa7c1666038 R14: 00007fa7c1665fa0 R15: 00007ffec6141df8 [ 349.576003][T16644] [ 349.848122][T16666] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2943'. [ 349.867148][T16663] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2942'. [ 349.946146][T13776] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.974866][ T3432] IPVS: starting estimator thread 0... [ 350.065464][T16683] IPVS: using max 2544 ests per chain, 127200 per kthread [ 350.532245][T16707] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2956'. [ 350.615364][T16709] loop6: detected capacity change from 0 to 512 [ 350.632442][T16709] EXT4-fs: Ignoring removed bh option [ 350.644062][T16709] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 350.676697][T16712] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2958'. [ 350.683564][T16709] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.684913][T16709] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.769625][T16719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2960'. [ 350.830910][T16721] loop7: detected capacity change from 0 to 1024 [ 350.831343][T16721] EXT4-fs: inline encryption not supported [ 350.831379][T16721] EXT4-fs: inline encryption not supported [ 350.831404][T16721] EXT4-fs: Ignoring removed nomblk_io_submit option [ 350.835741][T16719] loop4: detected capacity change from 0 to 512 [ 350.857968][T16719] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 350.868173][T14544] udevd[14544]: incorrect ext4 checksum on /dev/loop4 [ 350.895570][T14518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.901543][T16721] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 350.901646][T16721] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.939852][T16721] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.2961: bg 0: block 112: padding at end of block bitmap is not set [ 350.940140][T16721] EXT4-fs (loop7): Remounting filesystem read-only [ 350.972788][T16146] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 351.081783][T16735] loop7: detected capacity change from 0 to 512 [ 351.100349][T16735] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.100424][T16735] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 351.134754][T16740] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2968'. [ 351.176163][T16727] FAULT_INJECTION: forcing a failure. [ 351.176163][T16727] name failslab, interval 1, probability 0, space 0, times 0 [ 351.176196][T16727] CPU: 0 UID: 0 PID: 16727 Comm: syz.5.2964 Not tainted syzkaller #0 PREEMPT(lazy) [ 351.176267][T16727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 351.176284][T16727] Call Trace: [ 351.176292][T16727] [ 351.176301][T16727] __dump_stack+0x1d/0x30 [ 351.176359][T16727] dump_stack_lvl+0x95/0xd0 [ 351.176382][T16727] dump_stack+0x15/0x1b [ 351.176456][T16727] should_fail_ex+0x262/0x280 [ 351.176490][T16727] should_failslab+0x8c/0xb0 [ 351.176529][T16727] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 351.176646][T16727] ? fib_notifier_ops_register+0x2b/0x150 [ 351.176748][T16727] ? fib_notifier_ops_register+0x2b/0x150 [ 351.176786][T16727] kmemdup_noprof+0x2b/0x70 [ 351.176816][T16727] fib_notifier_ops_register+0x2b/0x150 [ 351.176892][T16727] ipmr_net_init+0x79/0x420 [ 351.176918][T16727] ? udp_pernet_init+0x5d3/0x630 [ 351.176998][T16727] ops_init+0x22a/0x2e0 [ 351.177021][T16727] setup_net+0x9f/0x230 [ 351.177060][T16727] copy_net_ns+0x333/0x490 [ 351.177098][T16727] create_new_namespaces+0x1f6/0x420 [ 351.177164][T16727] unshare_nsproxy_namespaces+0x115/0x150 [ 351.177204][T16727] ksys_unshare+0x3fd/0x6f0 [ 351.177298][T16727] __x64_sys_unshare+0x1f/0x30 [ 351.177402][T16727] x64_sys_call+0x1e33/0x2550 [ 351.177429][T16727] do_syscall_64+0x112/0x360 [ 351.177504][T16727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.177597][T16727] RIP: 0033:0x7f751743e2d9 [ 351.177617][T16727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.177639][T16727] RSP: 002b:00007f7515e97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 351.177665][T16727] RAX: ffffffffffffffda RBX: 00007f75176c5fa0 RCX: 00007f751743e2d9 [ 351.177683][T16727] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 351.177739][T16727] RBP: 00007f75174d5888 R08: 0000000000000000 R09: 0000000000000000 [ 351.177755][T16727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.177771][T16727] R13: 00007f75176c6038 R14: 00007f75176c5fa0 R15: 00007fff136c1018 [ 351.177794][T16727] [ 351.261901][T16146] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.266536][T16746] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2970'. [ 351.559597][T16752] loop4: detected capacity change from 0 to 512 [ 351.574223][T16752] EXT4-fs: Ignoring removed bh option [ 351.597277][T16752] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 351.681373][T16752] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.681457][T16752] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.686318][T16759] loop6: detected capacity change from 0 to 512 [ 351.742275][T16759] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.862030][T14518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.298351][T16828] 9p: Bad value for 'wfdno' [ 352.436336][T13776] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.516947][T16861] loop7: detected capacity change from 0 to 512 [ 352.519760][T16861] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 352.519778][T16861] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 352.557052][T16861] EXT4-fs (loop7): 1 truncate cleaned up [ 352.557416][T16861] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.590169][T16866] loop6: detected capacity change from 0 to 512 [ 352.602930][T16825] FAULT_INJECTION: forcing a failure. [ 352.602930][T16825] name failslab, interval 1, probability 0, space 0, times 0 [ 352.602964][T16825] CPU: 1 UID: 0 PID: 16825 Comm: syz.5.2982 Not tainted syzkaller #0 PREEMPT(lazy) [ 352.602991][T16825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 352.603059][T16825] Call Trace: [ 352.603068][T16825] [ 352.603078][T16825] __dump_stack+0x1d/0x30 [ 352.603138][T16825] dump_stack_lvl+0x95/0xd0 [ 352.603163][T16825] dump_stack+0x15/0x1b [ 352.603188][T16825] should_fail_ex+0x262/0x280 [ 352.603221][T16825] ? __proc_create+0x3f1/0x6b0 [ 352.603334][T16825] should_failslab+0x8c/0xb0 [ 352.603365][T16825] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 352.603461][T16825] ? __memcg_slab_post_alloc_hook+0x367/0x8d0 [ 352.603552][T16825] ? __proc_create+0x3f1/0x6b0 [ 352.603586][T16825] __proc_create+0x3f1/0x6b0 [ 352.603619][T16825] proc_create_reg+0x87/0xe0 [ 352.603650][T16825] proc_create_net_data+0x59/0x100 [ 352.603689][T16866] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 352.603742][T16825] ipmr_net_init+0x257/0x420 [ 352.603762][T16825] ? udp_pernet_init+0x5d3/0x630 [ 352.603793][T16825] ops_init+0x22a/0x2e0 [ 352.603781][T16866] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 352.603895][T16825] ================================================================== [ 352.603928][T16825] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 352.603970][T16825] [ 352.603976][T16825] write to 0xffffffff86e8b7d8 of 8 bytes by task 16866 on cpu 0: [ 352.603991][T16825] data_alloc+0x308/0x380 [ 352.604016][T16825] prb_reserve+0x8e3/0xaf0 [ 352.604046][T16825] vprintk_store+0x54e/0x910 [ 352.604074][T16825] vprintk_emit+0x1a4/0x610 [ 352.604105][T16825] vprintk_default+0x26/0x30 [ 352.604136][T16825] vprintk+0x1d/0x30 [ 352.604155][T16825] _printk+0x79/0xa0 [ 352.604171][T16825] __ext4_msg+0x1aa/0x1c0 [ 352.604204][T16825] ext4_check_journal_data_mode+0x183/0x210 [ 352.604243][T16825] ext4_fill_super+0x1be3/0x37b0 [ 352.604280][T16825] get_tree_bdev_flags+0x291/0x300 [ 352.604314][T16825] get_tree_bdev+0x1f/0x30 [ 352.604348][T16825] ext4_get_tree+0x1c/0x30 [ 352.604380][T16825] vfs_get_tree+0x57/0x1d0 [ 352.604415][T16825] do_new_mount+0x288/0x730 [ 352.604438][T16825] path_mount+0x4ad/0xb90 [ 352.604459][T16825] __se_sys_mount+0x28c/0x2e0 [ 352.604484][T16825] __x64_sys_mount+0x67/0x80 [ 352.604508][T16825] x64_sys_call+0xc3b/0x2550 [ 352.604533][T16825] do_syscall_64+0x112/0x360 [ 352.604561][T16825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.604586][T16825] [ 352.604593][T16825] read to 0xffffffff86e8b7d8 of 8 bytes by task 16825 on cpu 1: [ 352.604613][T16825] prb_reserve+0x21a/0xaf0 [ 352.604643][T16825] vprintk_store+0x54e/0x910 [ 352.604676][T16825] vprintk_emit+0x1a4/0x610 [ 352.604710][T16825] vprintk_default+0x26/0x30 [ 352.604737][T16825] vprintk+0x1d/0x30 [ 352.604758][T16825] _printk+0x79/0xa0 [ 352.604778][T16825] __show_trace_log_lvl+0x460/0x560 [ 352.604817][T16825] __dump_stack+0x1d/0x30 [ 352.604841][T16825] dump_stack_lvl+0x95/0xd0 [ 352.604866][T16825] dump_stack+0x15/0x1b [ 352.604887][T16825] should_fail_ex+0x262/0x280 [ 352.604912][T16825] should_failslab+0x8c/0xb0 [ 352.604948][T16825] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 352.604983][T16825] __proc_create+0x3f1/0x6b0 [ 352.605014][T16825] proc_create_reg+0x87/0xe0 [ 352.605046][T16825] proc_create_net_data+0x59/0x100 [ 352.605078][T16825] ipmr_net_init+0x257/0x420 [ 352.605100][T16825] ops_init+0x22a/0x2e0 [ 352.605116][T16825] setup_net+0x9f/0x230 [ 352.605144][T16825] copy_net_ns+0x333/0x490 [ 352.605171][T16825] create_new_namespaces+0x1f6/0x420 [ 352.605202][T16825] unshare_nsproxy_namespaces+0x115/0x150 [ 352.605233][T16825] ksys_unshare+0x3fd/0x6f0 [ 352.605261][T16825] __x64_sys_unshare+0x1f/0x30 [ 352.605291][T16825] x64_sys_call+0x1e33/0x2550 [ 352.605318][T16825] do_syscall_64+0x112/0x360 [ 352.605344][T16825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.605364][T16825] [ 352.605369][T16825] value changed: 0x000000000003a578 -> 0x00000000000d55c8 [ 352.605383][T16825] [ 352.605388][T16825] Reported by Kernel Concurrency Sanitizer on: [ 352.605400][T16825] CPU: 1 UID: 0 PID: 16825 Comm: syz.5.2982 Not tainted syzkaller #0 PREEMPT(lazy) [ 352.605430][T16825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 352.605445][T16825] ================================================================== [ 352.603812][T16825] setup_net+0x9f/0x230 [ 352.605488][T16825] copy_net_ns+0x333/0x490 [ 352.605559][T16825] create_new_namespaces+0x1f6/0x420 [ 352.605595][T16825] unshare_nsproxy_namespaces+0x115/0x150 [ 352.605633][T16825] ksys_unshare+0x3fd/0x6f0 [ 352.605709][T16825] __x64_sys_unshare+0x1f/0x30 [ 352.605737][T16825] x64_sys_call+0x1e33/0x2550 [ 352.605766][T16825] do_syscall_64+0x112/0x360 [ 352.605799][T16825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.605823][T16825] RIP: 0033:0x7f751743e2d9 [ 352.605842][T16825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.605860][T16825] RSP: 002b:00007f7515e97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 352.605879][T16825] RAX: ffffffffffffffda RBX: 00007f75176c5fa0 RCX: 00007f751743e2d9 [ 352.605895][T16825] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 352.605911][T16825] RBP: 00007f75174d5888 R08: 0000000000000000 R09: 0000000000000000 [ 352.605943][T16825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.605959][T16825] R13: 00007f75176c6038 R14: 00007f75176c5fa0 R15: 00007fff136c1018 [ 352.605981][T16825] [ 352.607369][T16866] EXT4-fs (loop6): 1 truncate cleaned up [ 352.607785][T16866] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.900245][T14518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.088968][T16146] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.598526][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 353.598543][ T29] audit: type=1400 audit(1791938986.898:6752): avc: denied { write } for pid=16918 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 353.639986][ T29] audit: type=1400 audit(1791938986.938:6753): avc: denied { write } for pid=16929 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.378525][ T29] audit: type=1400 audit(1791938987.678:6754): avc: denied { write } for pid=16932 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.413552][ T29] audit: type=1400 audit(1791938987.708:6755): avc: denied { write } for pid=16943 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.496583][ T29] audit: type=1400 audit(1791938987.798:6756): avc: denied { write } for pid=16946 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.533046][ T29] audit: type=1400 audit(1791938987.828:6757): avc: denied { write } for pid=16957 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.612619][ T29] audit: type=1400 audit(1791938987.908:6758): avc: denied { write } for pid=16960 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.642677][ T29] audit: type=1400 audit(1791938987.938:6759): avc: denied { write } for pid=16971 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.104397][ T29] audit: type=1400 audit(1791938988.408:6760): avc: denied { write } for pid=16976 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.141176][ T29] audit: type=1400 audit(1791938988.448:6761): avc: denied { write } for pid=16987 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.511703][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 360.511718][ T29] audit: type=1400 audit(1791938993.808:6768): avc: denied { write } for pid=17034 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.550176][ T29] audit: type=1400 audit(1791938993.848:6769): avc: denied { write } for pid=17045 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.659705][ T29] audit: type=1400 audit(1791938993.958:6770): avc: denied { write } for pid=17048 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.694489][ T29] audit: type=1400 audit(1791938993.998:6771): avc: denied { write } for pid=17059 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.781725][ T29] audit: type=1400 audit(1791938994.078:6772): avc: denied { write } for pid=17062 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.813633][ T29] audit: type=1400 audit(1791938994.118:6773): avc: denied { write } for pid=17073 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.055210][ T29] audit: type=1400 audit(1791938994.358:6774): avc: denied { write } for pid=17076 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.072352][ T29] audit: type=1400 audit(1791938994.368:6775): avc: denied { write } for pid=17087 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1