last executing test programs: 1m4.871364925s ago: executing program 1 (id=12): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x20000000000, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000540)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000580)={'b', ' *:* ', 'm\x00'}, 0x8) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x802, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000005c0)={@loopback, @mcast1, @mcast1, 0x80006, 0x0, 0x5d, 0x200, 0x800001fe, 0x530371}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000640)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @mcast2, 0x6, 0x0, 0x40, 0x500, 0x480000000000000a, 0x400029}) sendmmsg$inet6(r2, &(0x7f0000000040), 0x40000000000017d, 0x888) r4 = dup(r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000011c0)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000001200)={&(0x7f0000001240)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000001280)=[{&(0x7f00000012c0)="dc", 0x1}], 0x1}, 0x48043) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r7, &(0x7f0000000200), &(0x7f00000002c0)=@tcp6=r5}, 0x20) sendmmsg$inet(r5, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="55a38844d895363578d6641b0831f68939c9d28dface0196a05150d3500514ea47caaf5532e1", 0x26}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="95cb00", 0x3}], 0x1}}], 0x2, 0x804) 1m4.443749257s ago: executing program 1 (id=13): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000008000e08000700000000780d0005800900010006b8fb4c"], 0xbc}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) io_submit(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x68520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xf}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0xdede}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000940)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc/sys/net/bridge/bridge-nf-call-iptables\x00', 0x0, 0x7d) read$watch_queue(r1, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f00000008c0)=0x3) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x12, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x52a9, 0x0, 0x0, 0x0, 0x401}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000300)='syzkaller\x00', 0x7fffffff, 0x25, &(0x7f0000000440)=""/37, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xa, 0xffffffff, 0x9}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000600)=[{0x1, 0x2, 0x7, 0x5}, {0x1, 0x3, 0x7, 0x1}, {0x1, 0x3, 0xa, 0x4}, {0x0, 0x1, 0xf, 0xb}, {0x2, 0x5, 0x4, 0x1}, {0x5, 0x4, 0x5, 0x2}, {0x3, 0x2, 0xa, 0xc}, {0x2, 0x2, 0xb, 0xa}, {0x5, 0x1, 0xe, 0x2}, {0x3, 0x3, 0x9, 0x7}], 0x10, 0x9}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000780)=@generic={&(0x7f0000000100)='./file0\x00', r3}, 0x18) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x2, &(0x7f00000007c0)={&(0x7f0000000800)=""/128, 0x80}) syz_open_procfs(r4, &(0x7f0000000880)='net/ip_tables_names\x00') ioctl$XFS_IOC_DIOINFO(0xffffffffffffffff, 0x800c581e, &(0x7f0000000200)) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x9, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) 1m4.165580774s ago: executing program 1 (id=19): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000008000e08000700000000780d0005800900010006b8fb4c"], 0xbc}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) io_submit(0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x68520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xf}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0xdede}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000940)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc/sys/net/bridge/bridge-nf-call-iptables\x00', 0x0, 0x7d) read$watch_queue(r2, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000008c0)=0x3) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x12, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x52a9, 0x0, 0x0, 0x0, 0x401}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000300)='syzkaller\x00', 0x7fffffff, 0x25, &(0x7f0000000440)=""/37, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xa, 0xffffffff, 0x9}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000600)=[{0x1, 0x2, 0x7, 0x5}, {0x1, 0x3, 0x7, 0x1}, {0x1, 0x3, 0xa, 0x4}, {0x0, 0x1, 0xf, 0xb}, {0x2, 0x5, 0x4, 0x1}, {0x5, 0x4, 0x5, 0x2}, {0x3, 0x2, 0xa, 0xc}, {0x2, 0x2, 0xb, 0xa}, {0x5, 0x1, 0xe, 0x2}, {0x3, 0x3, 0x9, 0x7}], 0x10, 0x9}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000780)=@generic={&(0x7f0000000100)='./file0\x00', r4}, 0x18) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x2, &(0x7f00000007c0)={&(0x7f0000000800)=""/128, 0x80}) syz_open_procfs(r5, &(0x7f0000000880)='net/ip_tables_names\x00') ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f0000000200)) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x9, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7], 0x90}}, 0x0) 1m3.278223926s ago: executing program 4 (id=24): unshare(0x68040000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xb, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x9}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x20008, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x200000101ffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x5, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="7a3f000000001200000000000000000095"], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/check_wx_pages\x00', 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000340)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000680)=[{{&(0x7f0000000700)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000780)="eb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x200080fc) sendmsg$can_bcm(r0, &(0x7f0000000d00)={&(0x7f0000000ac0), 0x10, &(0x7f0000000b80)={&(0x7f0000000b00)={0x5, 0x0, 0x3, {0x0, 0x2710}, {}, {0x3, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x3}, 0x39, 0x2, 0x0, 0x0, "7f90b3859492eb12c8a771d4674a8bda4d152a40a836c9035385085e56f0e0c6050a32c5b5e23840c92fab4afcb36006d563db067466756eb043e8ba12a86051"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x20004804) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888}, 0x20000880) read(r0, &(0x7f0000000140)=""/100, 0x64) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x3, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, r0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000300850000006900000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0xf, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000003c0)={0x0, 0x5, 0xb2ad}, 0x8) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$kcm(0xa, 0x2, 0x3a) recvmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r6, &(0x7f00000007c0)={&(0x7f0000000800)=@in6={0xa, 0x6000, 0x0, @mcast2, 0x38}, 0x80, &(0x7f0000000880)=[{&(0x7f00000008c0)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) r7 = perf_event_open(&(0x7f0000000d40)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)={0x24, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4050) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x64, 0x0) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000bc0)=@newsa={0x138, 0x18, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80, 0x2f}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x40000000000}, {}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x40}, [@algo_comp={0xfefb, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 1m2.35091779s ago: executing program 4 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='bReques', 0x7) 1m2.278436242s ago: executing program 4 (id=28): syz_emit_ethernet(0x42, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$inet6(0xa, 0x80003, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, 0x0, 0x20000000) close(0xffffffffffffffff) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x1) open_by_handle_at(r0, &(0x7f0000000100)=@orangefs={0x14, 0x1, {"5f7caa7eeea71af3b5fa1019e8b6cbb0", 0x1}}, 0x80001) 1m2.277850772s ago: executing program 4 (id=29): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x200008, &(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000680)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000001f00)='./file0\x00', 0x80a, &(0x7f0000001f40)={[{@quota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@errors_remount}, {@sysvgroups}]}, 0x3, 0x79b, &(0x7f0000001fc0)="$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") perf_event_open(&(0x7f0000002780)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0423, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004, 0x4, @perf_config_ext={0x4, 0x7f}, 0x2012, 0x0, 0x7ffff, 0x5, 0x2, 0x3, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r1 = syz_usbip_server_init(0x3) perf_event_open(&(0x7f0000002800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000004, 0x0, 0x9, 0x800002, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000002880)='ext4\x00', &(0x7f00000028c0)='./file0\x00', 0x810, &(0x7f0000002900)={[{@errors_remount}, {@bsdgroups}]}, 0x8, 0x4fe, &(0x7f0000002940)="$eJzs3c9vG1kdAPDvTOImm3U3XdgDIGDLslDQqs6P7kYrONC9gNBqJcSKE4duSNwoil1HcVKa0ENy5I5EJU7wJ3DjgNQTB27c4MalHJAqqEANUg9GM54mJoljs03iJv58pPHMe+P4+57t957nJc4LYGhdjYjtiLgUEZ9ExGSRnxRb3Gxv2f2ePrm/sPvk/kISrdbH/0jy81ledPxM5tXiMccj4offi/hJcjhuc3NrZb5Wq64V6an1+upUc3Pr+nJa5MzOzcxNv3/jvdkTq+ub9d8+/u7yhz/6/e++9OhP29/8WVas8s8v5+c663GS2lUvRbkjbzQiPjyNYAMyWrx/OH+y1vaZiHgrb/+TMZK/mv05olkDAOdAqzUZrcnONABw0WXX/+VI0koxF1CONK1U2nN4b8REWms019+ZbGzcWYx8DutKlNLby7XqdDFXeCVKSZaeyY/307MH0jci4vWI+MXYK3m6stCoLQ7ygw8ADLFXD4z//x5rj/8AwAU3PugCAABnzvgPAMPH+A8Aw+f/GP/7/3YgAPBSc/0PAMPH+A8Aw6fn+L9zNuUAAM7EDz76KNtau8X/v168u7nx7fLd64vV5kqlvrFQWWisrVaWGo2lWrWy0Gr1erxao7E68+5esrm5dave2Lizfmu5Pr9UvVUtnXJ9AIDeXn/z4V+SiNj+1iv5Fh1rORir4WJLB10AYGBGBl0AYGB8nweGVx/X+KYB4ILrtZZn1z8RemDxVzivrn3e/D8MK/P/MLw+3fz/d068HMDZM/8Pw6vVSqz5DwBDxhw/8EK//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAhVc63JK3ka4FvZ7dppRJxOSKuRCm5vVyrTkfEaxHx57HSWJaeGXShAYAXlP49Kdb/ujb5dvng2UvJf8byfUT89Fcf//Le/Pr62kyW/8+9/PUHRf7spUFUAADodPNwVnucLvYdF/JPn9xfeL6dZREff9BeXDSLu1ts7TOjMZrvx6MUERP/Sop0W/Z5ZeQE4m/vRMTn9ut/ryNCOZ8Daa98ejB+FvvyKcTff/4Pxk//J36an8v2pfy5+OwJlAWGzcMP2v1k0fayJla0vzSu5vuj2/943kO9uOf93+6h/i/d6/9GDsVP8jZ/dS99fEkev/uH7x/KbE22z+1EfGH0qPjJXvykS//7dp91/OsXv/xWt3OtX0dci6Pjt9XzbnZqvb461dzcur5cn1+qLlXvzM7OzcxNv3/jvdmpfI66ffvHAw//rFjm/rWuz81OxESX+OM96v+1Puv/m2ef/Pgrx8T/xlePfv3fOCZ+NiZ+vc/48xM3uy7fncVf7FL/Xq//O33Gf/S3rcU+7woAnIHm5tbKfK1WXetxkH3W7HUfB+fzILYjXoJi9DpIi7fsy1KeC35wTKeRnlHnBJyq/UY/6JIAAAAAAAAAAAAAAADdNDe3VsbidL9ONOg6AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9NwAA//8tM9Id") write$usbip_server(r1, &(0x7f0000002e40)=@ret_submit={{0x3, 0x96, 0x0, 0x1, 0x800}, 0x8, 0x0, 0x7}, 0x30) socket(0x10, 0x803, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000002e80), &(0x7f0000002ec0)=0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002f00)={0x0, 0x0}, &(0x7f0000002f40)=0xc) setresuid(0x0, r3, r3) syz_mount_image$ext4(&(0x7f0000002f80)='ext4\x00', &(0x7f0000002fc0)='./file1\x00', 0x200000, &(0x7f00000018c0)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@bsdgroups}, {@noblock_validity}, {@errors_remount}, {@user_xattr}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0x7f}}], [{@pcr={'pcr', 0x3d, 0x6}}, {@smackfstransmute={'smackfstransmute', 0x3d, '%+'}}, {@uid_lt={'uid<', r3}}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@subj_role={'subj_role', 0x3d, 'system_u'}}, {@smackfshat={'smackfshat', 0x3d, 'noblock_validity'}}, {@subj_role={'subj_role', 0x3d, 'acl'}}, {@uid_eq={'uid', 0x3d, r3}}]}, 0xfd, 0x57e, &(0x7f00000031c0)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000a40)={0x1, &(0x7f0000000a80)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) file_getattr(0xffffffffffffff9c, 0x0, &(0x7f0000000ac0), 0x18, 0x1000) munlockall() openat$snapshot(0xffffffffffffff9c, &(0x7f0000001780), 0x800, 0x0) syz_mount_image$iso9660(&(0x7f0000000bc0), &(0x7f0000000c00)='./file0\x00', 0x4400, &(0x7f0000000c40)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa19, &(0x7f0000000cc0)="$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") r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newtaction={0x6c, 0x30, 0xb, 0x5, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x10000, 0x400}}, @TCA_CT_MARK={0x8, 0x5, 0xb}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) openat(0xffffffffffffff9c, &(0x7f0000001700)='./file1\x00', 0x48042, 0x8c) openat(0xffffffffffffff9c, &(0x7f0000001740)='./file1\x00', 0x401c2, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64], 0x4, 0x1f5, &(0x7f0000000240)="$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") 1m0.430808549s ago: executing program 4 (id=34): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000008000e08000700000000780d0005800900010006b8fb4c"], 0xbc}}, 0x0) io_submit(0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x68520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xf}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0xdede}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000940)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc/sys/net/bridge/bridge-nf-call-iptables\x00', 0x0, 0x7d) read$watch_queue(r2, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000008c0)=0x3) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x12, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x52a9, 0x0, 0x0, 0x0, 0x401}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000300)='syzkaller\x00', 0x7fffffff, 0x25, &(0x7f0000000440)=""/37, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xa, 0xffffffff, 0x9}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000600)=[{0x1, 0x2, 0x7, 0x5}, {0x1, 0x3, 0x7, 0x1}, {0x1, 0x3, 0xa, 0x4}, {0x0, 0x1, 0xf, 0xb}, {0x2, 0x5, 0x4, 0x1}, {0x5, 0x4, 0x5, 0x2}, {0x3, 0x2, 0xa, 0xc}, {0x2, 0x2, 0xb, 0xa}, {0x5, 0x1, 0xe, 0x2}, {0x3, 0x3, 0x9, 0x7}], 0x10, 0x9}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000780)=@generic={&(0x7f0000000100)='./file0\x00', r4}, 0x18) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x2, &(0x7f00000007c0)={&(0x7f0000000800)=""/128, 0x80}) syz_open_procfs(r5, &(0x7f0000000880)='net/ip_tables_names\x00') ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f0000000200)) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x9, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7], 0x90}}, 0x0) 1m0.00958267s ago: executing program 4 (id=39): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = gettid() ioctl(r0, 0x101, &(0x7f0000000240)="489fef424d832adc339fb527a386311ded9ce5") perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, r1, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x82, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000001000)='(pu&\"\xf9\x81\xa8\"') bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x68, 0x0, 0x0, 0x67, 0x0, @multicast1, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x24, 0xfffc, 0x0, 0x0, 0x5c, 0x0, @remote, @rand_addr=0xe0000000}}}}}}, 0x0) 50.717538606s ago: executing program 2 (id=87): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = gettid() ioctl(r0, 0x101, &(0x7f0000000240)="489fef424d832adc339fb527a386311ded9ce5") perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, r1, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x82, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000001000)='(pu&\"\xf9\x81\xa8\"') bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x200000000000011, 0x2, 0xd) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e64, @broadcast}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r4, 0x1) ppoll(&(0x7f00000002c0)=[{r4, 0x8292}], 0x1, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(r6, 0x84, 0x84, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e22, 0x7fffffff, @empty, 0x5}}, 0x4e21}, &(0x7f0000000b00)=0x90) bind$packet(r3, &(0x7f0000000100)={0x11, 0x800, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x68, 0x0, 0x0, 0x67, 0x0, @multicast1, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x24, 0xfffc, 0x0, 0x0, 0x5c, 0x0, @remote, @rand_addr=0xe0000000}}}}}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='auxv\x00') r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) pread64(r7, 0x0, 0x0, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$eJzs3UFrXNUeAPD/nSR9aZu+pO+9RV/BWmwlLdqZpLFtcFEriK4Kat3HmExCyCQTMpO2CUVS/ACCiAquXLkR/ACC9COIUNC9iCiirS5cqCMzudPWOJMETHNx5veD03vOPTPzP6eTOXPPPZe5AXSt4xFxKSJ6IuJ0RAym+3NpivWNVH/c3Ts3puopiVrtyg9JJOm+5msl6fZg+rT+iHj5hYjXkr/GrayuzU+WSsXltFyoLiwVKqtrZ+YWJmeLs8XFsbHR8+MXxs+Nj+xaXy8+9807b374/MVPn7z21cR3p16vN2sgrXuwH7tpo+t9jf+Lpt6IWH4YwTLQk/anL+uGAACwI/Vj/P9ExGON4//B6GkczQEAAACdpPbMQPyaRNQAAACAjpVrXAOb5PLptQADkcvl8xvX8P4vDuRK5Ur1iZnyyuL0xrWyQ9GXm5krFUfSa4WHoi+pl0cb+fvls5vKYxFxOCLeHtzfKOenyqXprE9+AAAAQJc4uGn+//PgxvwfAAAA6DBDWTcAAAAAeOjM/wEAAKDzmf8DAABAR3vx8uV6qjXvfz19dXVlvnz1zHSxMp9fWJnKT5WXl/Kz5fJs4zf7FrZ7vVK5vPRULK5cL1SLlWqhsro2sVBeWaxONO7rPVF0n2gAAADYe4cfvfVlEhHrT+9vpLp9aZ25OnS2XNYNADLTk3UDgMz0Zt0AIDPm+ECyTX1/u4rPdr8tAADAwzH8f+v/0K2s/0P3sv4P3cv6P3Qvc3zA+j8AAHS+gUZKcvl0LXAgcrl8PuJQ47YAfcnMXKk4EhH/jogvBvv+VS+PZt1oAAAAAAAAAAAAAAAAAAAAAAAAAPiHqdWSqAEAAAAdLSL3bZLe/2t48OTA5vMD+5JfBhvbiLj2/pV3r09Wq8uj9f0/3ttffS/dfzaLMxgAAADAZs15enMeDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC76e6dG1PNtJdxv382IoZaxe+N/sa2P/oi4sBPSfQ+8LwkInp2If76zYg40ip+Um9WDKWt2Bw/FxH7M45/cBfiQze7VR9/LrX6/OXieGPb+vPXm6a/q/34l7s3/vW0Gf8O7TDG0dsfF9rGvxlxtLf1+NOMn7SJf2KH8V99ZW2tXV3tg4jhlt8/yZ9iFaoLS4XK6tqZuYXJ2eJscXFsbPT8+IXxc+MjhZm5UjH9t2WMtx755Pet+n+gTfyhbfp/cof9/+329Tv/3SL+qROt3/8jW8Sv/008nn4P1OuHm/n1jfyDjn30+bGt+j/dpv/bvf+ndtj/0y+98fUOHwoA7IHK6tr8ZKlUXJaRkZG5l8l6ZAIAAHbb/YP+rFsCAAAAAAAAAAAAAAAAAAAA3Wsvfk4s6z4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzEHwEAAP//0wfUAw==") setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) 49.843850309s ago: executing program 2 (id=102): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xed3}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001a00)=@newsa={0x13c, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20, 0x7, 0x4e24, 0x0, 0xa, 0x20, 0x20, 0x1d}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x6, 0x7f}, {0x0, 0xffffffffffffffff, 0x4}, {0xf6, 0x4, 0x8}, 0x0, 0x34ff, 0x2, 0x1, 0xbe, 0x40}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x804) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001bc0)=ANY=[@ANYBLOB, @ANYRES16], 0x7c}, 0x1, 0x0, 0x0, 0x20004880}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001c40)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) socket$inet6(0xa, 0x3, 0x3) r1 = socket(0x25, 0x800, 0xb) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000001c80)=0x1, 0x4) epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) connect$inet6(r1, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000001cc0)={0x78, @dev={0xac, 0x14, 0x14, 0x1b}, 0x4e22, 0x3, 'sed\x00', 0x3eac60c95784fb2b, 0x2, 0xf}, 0x2c) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000001d00)=ANY=[]) r3 = accept4(r2, 0x0, 0x0, 0x80800) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) creat(0x0, 0x1f0) sendmsg$nl_route_sched(r3, &(0x7f0000001d40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001e00)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0x8, 0x4}, {0x3, 0x4}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r4, @ANYBLOB="010000000200"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r5, &(0x7f0000000840)="03", &(0x7f0000000880), 0x2000000}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000880)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31040000000900010073797a30000000000800054000000021380000001d0a03000000000000000000070000000900010073797a3000000000090002"], 0xbc}}, 0x48004) socket$nl_netfilter(0x10, 0x3, 0xc) 49.545640097s ago: executing program 2 (id=94): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000008000e08000700000000780d0005800900010006b8fb4c"], 0xbc}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) io_submit(0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x68520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xf}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0xdede}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000940)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x0, 0x0) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f00000008c0)=0x3) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x12, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x52a9, 0x0, 0x0, 0x0, 0x401}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000300)='syzkaller\x00', 0x7fffffff, 0x25, &(0x7f0000000440)=""/37, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xa, 0xffffffff, 0x9}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000600)=[{0x1, 0x2, 0x7, 0x5}, {0x1, 0x3, 0x7, 0x1}, {0x1, 0x3, 0xa, 0x4}, {0x0, 0x1, 0xf, 0xb}, {0x2, 0x5, 0x4, 0x1}, {0x5, 0x4, 0x5, 0x2}, {0x3, 0x2, 0xa, 0xc}, {0x2, 0x2, 0xb, 0xa}, {0x5, 0x1, 0xe, 0x2}, {0x3, 0x3, 0x9, 0x7}], 0x10, 0x9}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000780)=@generic={&(0x7f0000000100)='./file0\x00', r3}, 0x18) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x2, &(0x7f00000007c0)={&(0x7f0000000800)=""/128, 0x80}) syz_open_procfs(r4, &(0x7f0000000880)='net/ip_tables_names\x00') ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x9, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) 49.092778759s ago: executing program 32 (id=19): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000008000e08000700000000780d0005800900010006b8fb4c"], 0xbc}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) io_submit(0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x68520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xf}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0xdede}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000940)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc/sys/net/bridge/bridge-nf-call-iptables\x00', 0x0, 0x7d) read$watch_queue(r2, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000008c0)=0x3) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x12, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x52a9, 0x0, 0x0, 0x0, 0x401}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000300)='syzkaller\x00', 0x7fffffff, 0x25, &(0x7f0000000440)=""/37, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xa, 0xffffffff, 0x9}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000600)=[{0x1, 0x2, 0x7, 0x5}, {0x1, 0x3, 0x7, 0x1}, {0x1, 0x3, 0xa, 0x4}, {0x0, 0x1, 0xf, 0xb}, {0x2, 0x5, 0x4, 0x1}, {0x5, 0x4, 0x5, 0x2}, {0x3, 0x2, 0xa, 0xc}, {0x2, 0x2, 0xb, 0xa}, {0x5, 0x1, 0xe, 0x2}, {0x3, 0x3, 0x9, 0x7}], 0x10, 0x9}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000780)=@generic={&(0x7f0000000100)='./file0\x00', r4}, 0x18) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x2, &(0x7f00000007c0)={&(0x7f0000000800)=""/128, 0x80}) syz_open_procfs(r5, &(0x7f0000000880)='net/ip_tables_names\x00') ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f0000000200)) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x9, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7], 0x90}}, 0x0) 48.858903394s ago: executing program 2 (id=103): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x20000000000, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000540)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000580)={'b', ' *:* ', 'm\x00'}, 0x8) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x802, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000005c0)={@loopback, @mcast1, @mcast1, 0x80006, 0x0, 0x5d, 0x200, 0x800001fe, 0x530371}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000640)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @mcast2, 0x6, 0x0, 0x40, 0x500, 0x480000000000000a, 0x400029}) sendmmsg$inet6(r2, &(0x7f0000000040), 0x40000000000017d, 0x888) r4 = dup(r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000011c0)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000001200)={&(0x7f0000001240)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000001280)=[{&(0x7f00000012c0)="dc", 0x1}], 0x1}, 0x48043) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r7, &(0x7f0000000200), &(0x7f00000002c0)=@tcp6=r5}, 0x20) sendmmsg$inet(r5, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="55a38844d895363578d6641b0831f68939c9d28dface0196a05150d3500514ea47caaf5532e1", 0x26}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="95cb00", 0x3}], 0x1}}], 0x2, 0x804) r8 = dup(r0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000001300)={0x2, &(0x7f0000001340)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x16}]}, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r8, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x140b, 0x100, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}}, 0x20000040) 48.322118758s ago: executing program 2 (id=104): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000008000e08000700000000780d0005800900010006b8fb4c"], 0xbc}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) io_submit(0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x68520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xf}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0xdede}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000940)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc/sys/net/bridge/bridge-nf-call-iptables\x00', 0x0, 0x7d) read$watch_queue(r2, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000008c0)=0x3) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x12, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x52a9, 0x0, 0x0, 0x0, 0x401}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000300)='syzkaller\x00', 0x7fffffff, 0x25, &(0x7f0000000440)=""/37, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xa, 0xffffffff, 0x9}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000600)=[{0x1, 0x2, 0x7, 0x5}, {0x1, 0x3, 0x7, 0x1}, {0x1, 0x3, 0xa, 0x4}, {0x0, 0x1, 0xf, 0xb}, {0x2, 0x5, 0x4, 0x1}, {0x5, 0x4, 0x5, 0x2}, {0x3, 0x2, 0xa, 0xc}, {0x2, 0x2, 0xb, 0xa}, {0x5, 0x1, 0xe, 0x2}, {0x3, 0x3, 0x9, 0x7}], 0x10, 0x9}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000780)=@generic={&(0x7f0000000100)='./file0\x00', r4}, 0x18) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x2, &(0x7f00000007c0)={&(0x7f0000000800)=""/128, 0x80}) syz_open_procfs(r5, &(0x7f0000000880)='net/ip_tables_names\x00') ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f0000000200)) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x9, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7], 0x90}}, 0x0) 47.779710362s ago: executing program 2 (id=115): perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xb, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x9}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) 44.667984111s ago: executing program 33 (id=39): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = gettid() ioctl(r0, 0x101, &(0x7f0000000240)="489fef424d832adc339fb527a386311ded9ce5") perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, r1, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x82, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000001000)='(pu&\"\xf9\x81\xa8\"') bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x68, 0x0, 0x0, 0x67, 0x0, @multicast1, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x24, 0xfffc, 0x0, 0x0, 0x5c, 0x0, @remote, @rand_addr=0xe0000000}}}}}}, 0x0) 41.248180578s ago: executing program 3 (id=130): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000001280)=0xd9e, 0x4) bind$inet(r1, &(0x7f00000012c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000001300)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000001340), 0x800001d, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) getsockopt(r0, 0x400000000000003a, 0x1, 0x0, 0x0) 40.678266893s ago: executing program 3 (id=134): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000001280)=0xd9e, 0x4) bind$inet(r1, &(0x7f00000012c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000001300)={0x2, 0x0, @multicast1}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt(r0, 0x400000000000003a, 0x1, 0x0, 0x0) 40.538699377s ago: executing program 3 (id=135): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) io_submit(0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x68520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xf}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0xdede}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000940)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc/sys/net/bridge/bridge-nf-call-iptables\x00', 0x0, 0x7d) read$watch_queue(r2, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000008c0)=0x3) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x12, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x52a9, 0x0, 0x0, 0x0, 0x401}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000300)='syzkaller\x00', 0x7fffffff, 0x25, &(0x7f0000000440)=""/37, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xa, 0xffffffff, 0x9}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000600)=[{0x1, 0x2, 0x7, 0x5}, {0x1, 0x3, 0x7, 0x1}, {0x1, 0x3, 0xa, 0x4}, {0x0, 0x1, 0xf, 0xb}, {0x2, 0x5, 0x4, 0x1}, {0x5, 0x4, 0x5, 0x2}, {0x3, 0x2, 0xa, 0xc}, {0x2, 0x2, 0xb, 0xa}, {0x5, 0x1, 0xe, 0x2}, {0x3, 0x3, 0x9, 0x7}], 0x10, 0x9}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000780)=@generic={&(0x7f0000000100)='./file0\x00', r4}, 0x18) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x2, &(0x7f00000007c0)={&(0x7f0000000800)=""/128, 0x80}) syz_open_procfs(r5, &(0x7f0000000880)='net/ip_tables_names\x00') ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f0000000200)) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x9, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7], 0x90}}, 0x0) 39.99890668s ago: executing program 3 (id=136): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000008000e08000700000000780d0005800900010006b8fb4c"], 0xbc}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) io_submit(0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x68520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xf}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0xdede}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000940)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x0, 0x0) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f00000008c0)=0x3) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x12, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x52a9, 0x0, 0x0, 0x0, 0x401}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000300)='syzkaller\x00', 0x7fffffff, 0x25, &(0x7f0000000440)=""/37, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xa, 0xffffffff, 0x9}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000600)=[{0x1, 0x2, 0x7, 0x5}, {0x1, 0x3, 0x7, 0x1}, {0x1, 0x3, 0xa, 0x4}, {0x0, 0x1, 0xf, 0xb}, {0x2, 0x5, 0x4, 0x1}, {0x5, 0x4, 0x5, 0x2}, {0x3, 0x2, 0xa, 0xc}, {0x2, 0x2, 0xb, 0xa}, {0x5, 0x1, 0xe, 0x2}, {0x3, 0x3, 0x9, 0x7}], 0x10, 0x9}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000780)=@generic={&(0x7f0000000100)='./file0\x00', r3}, 0x18) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x2, &(0x7f00000007c0)={&(0x7f0000000800)=""/128, 0x80}) syz_open_procfs(r4, &(0x7f0000000880)='net/ip_tables_names\x00') ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x9, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) 39.383553835s ago: executing program 3 (id=145): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000008000e08000700000000780d0005800900010006b8fb4c"], 0xbc}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) io_submit(0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x68520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xf}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0xdede}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000940)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc/sys/net/bridge/bridge-nf-call-iptables\x00', 0x0, 0x7d) read$watch_queue(r2, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000008c0)=0x3) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x12, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x52a9, 0x0, 0x0, 0x0, 0x401}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000300)='syzkaller\x00', 0x7fffffff, 0x25, &(0x7f0000000440)=""/37, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xa, 0xffffffff, 0x9}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000600)=[{0x1, 0x2, 0x7, 0x5}, {0x1, 0x3, 0x7, 0x1}, {0x1, 0x3, 0xa, 0x4}, {0x0, 0x1, 0xf, 0xb}, {0x2, 0x5, 0x4, 0x1}, {0x5, 0x4, 0x5, 0x2}, {0x3, 0x2, 0xa, 0xc}, {0x2, 0x2, 0xb, 0xa}, {0x5, 0x1, 0xe, 0x2}, {0x3, 0x3, 0x9, 0x7}], 0x10, 0x9}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000780)=@generic={&(0x7f0000000100)='./file0\x00', r4}, 0x18) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x2, &(0x7f00000007c0)={&(0x7f0000000800)=""/128, 0x80}) syz_open_procfs(r5, &(0x7f0000000880)='net/ip_tables_names\x00') ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f0000000200)) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x9, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7], 0x90}}, 0x0) 39.166491581s ago: executing program 3 (id=148): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x20000000000, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000540)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000580)={'b', ' *:* ', 'm\x00'}, 0x8) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x802, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000005c0)={@loopback, @mcast1, @mcast1, 0x80006, 0x0, 0x5d, 0x200, 0x800001fe, 0x530371}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000640)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @mcast2, 0x6, 0x0, 0x40, 0x500, 0x480000000000000a, 0x400029}) sendmmsg$inet6(r2, &(0x7f0000000040), 0x40000000000017d, 0x888) r4 = dup(r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000011c0)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000001200)={&(0x7f0000001240)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000001280)=[{&(0x7f00000012c0)="dc", 0x1}], 0x1}, 0x48043) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000200), &(0x7f00000002c0)=@tcp6=r5}, 0x20) sendmmsg$inet(r5, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="55a38844d895363578d6641b0831f68939c9d28dface0196a05150d3500514ea47caaf5532e1", 0x26}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="95cb00", 0x3}], 0x1}}], 0x2, 0x804) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000001300)={0x2, &(0x7f0000001340)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x16}]}, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x140b, 0x100, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}}, 0x20000040) 32.336986716s ago: executing program 34 (id=115): perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xb, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x9}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) 25.219462037s ago: executing program 5 (id=217): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$printer(0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0xc3, &(0x7f0000000300)=""/195}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x300) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x240c, 0x1224, 0xfffffff9, 0x8, 0x8, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x5, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r2 = openat(0xffffffffffffff9c, &(0x7f0000001ac0)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000001b00)=0x20) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) syz_clone3(&(0x7f0000000080)={0x104901400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 23.483378171s ago: executing program 35 (id=148): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x20000000000, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000540)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000580)={'b', ' *:* ', 'm\x00'}, 0x8) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x802, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000005c0)={@loopback, @mcast1, @mcast1, 0x80006, 0x0, 0x5d, 0x200, 0x800001fe, 0x530371}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000640)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @mcast2, 0x6, 0x0, 0x40, 0x500, 0x480000000000000a, 0x400029}) sendmmsg$inet6(r2, &(0x7f0000000040), 0x40000000000017d, 0x888) r4 = dup(r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000011c0)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000001200)={&(0x7f0000001240)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000001280)=[{&(0x7f00000012c0)="dc", 0x1}], 0x1}, 0x48043) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000200), &(0x7f00000002c0)=@tcp6=r5}, 0x20) sendmmsg$inet(r5, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="55a38844d895363578d6641b0831f68939c9d28dface0196a05150d3500514ea47caaf5532e1", 0x26}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="95cb00", 0x3}], 0x1}}], 0x2, 0x804) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000001300)={0x2, &(0x7f0000001340)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x16}]}, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x140b, 0x100, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}}, 0x20000040) 22.968199004s ago: executing program 5 (id=226): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000008000e08000700000000780d0005800900010006b8fb4c"], 0xbc}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) io_submit(0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x68520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xf}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0xdede}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000940)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x0, 0x0) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f00000008c0)=0x3) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x12, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x52a9, 0x0, 0x0, 0x0, 0x401}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000300)='syzkaller\x00', 0x7fffffff, 0x25, &(0x7f0000000440)=""/37, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xa, 0xffffffff, 0x9}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000600)=[{0x1, 0x2, 0x7, 0x5}, {0x1, 0x3, 0x7, 0x1}, {0x1, 0x3, 0xa, 0x4}, {0x0, 0x1, 0xf, 0xb}, {0x2, 0x5, 0x4, 0x1}, {0x5, 0x4, 0x5, 0x2}, {0x3, 0x2, 0xa, 0xc}, {0x2, 0x2, 0xb, 0xa}, {0x5, 0x1, 0xe, 0x2}, {0x3, 0x3, 0x9, 0x7}], 0x10, 0x9}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000780)=@generic={&(0x7f0000000100)='./file0\x00', r3}, 0x18) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, r4, 0x2, &(0x7f00000007c0)={&(0x7f0000000800)=""/128, 0x80}) syz_open_procfs(r4, &(0x7f0000000880)='net/ip_tables_names\x00') ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f0000000200)) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x9, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) 21.900589872s ago: executing program 5 (id=232): syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0xa27}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x11, 0x90, [0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f00000003c0)=0x400, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'geneve0\x00'}) write$tcp_mem(r3, &(0x7f00000006c0)={0x6b8b, 0x20, 0x7, 0x20, 0xfffffffffffffffa}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x1, 0x6e, 0x7, 0xb3}, {0x2, 0xf9, 0x9f, 0xc216}, {0xa, 0x8, 0x0, 0xdb3}, {0x3, 0xff, 0x9, 0x7ef6}, {0x4, 0x7, 0x1, 0x9c}]}) memfd_secret(0x80000) 20.962707476s ago: executing program 5 (id=235): syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x11, 0x90, [0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000280), 0x10106, 0x2, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000003c0)=0x400, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'geneve0\x00'}) write$tcp_mem(r4, &(0x7f00000006c0)={0x6b8b, 0x20, 0x7, 0x20, 0xfffffffffffffffa}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x1, 0x6e, 0x7, 0xb3}, {0x2, 0xf9, 0x9f, 0xc216}, {0xa, 0x8, 0x0, 0xdb3}, {0x3, 0xff, 0x9, 0x7ef6}, {0x4, 0x7, 0x1, 0x9c}]}) memfd_secret(0x80000) 19.075093133s ago: executing program 0 (id=238): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000008000e08000700000000780d0005800900010006b8fb4c"], 0xbc}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) io_submit(0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x68520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xf}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0xdede}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000940)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x0, 0x0) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f00000008c0)=0x3) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x12, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x52a9, 0x0, 0x0, 0x0, 0x401}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000300)='syzkaller\x00', 0x7fffffff, 0x25, &(0x7f0000000440)=""/37, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xa, 0xffffffff, 0x9}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000600)=[{0x1, 0x2, 0x7, 0x5}, {0x1, 0x3, 0x7, 0x1}, {0x1, 0x3, 0xa, 0x4}, {0x0, 0x1, 0xf, 0xb}, {0x2, 0x5, 0x4, 0x1}, {0x5, 0x4, 0x5, 0x2}, {0x3, 0x2, 0xa, 0xc}, {0x2, 0x2, 0xb, 0xa}, {0x5, 0x1, 0xe, 0x2}, {0x3, 0x3, 0x9, 0x7}], 0x10, 0x9}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000780)=@generic={&(0x7f0000000100)='./file0\x00', r3}, 0x18) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, r4, 0x2, &(0x7f00000007c0)={&(0x7f0000000800)=""/128, 0x80}) syz_open_procfs(r4, &(0x7f0000000880)='net/ip_tables_names\x00') ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f0000000200)) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x9, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) 18.775235531s ago: executing program 5 (id=240): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000008000e08000700000000780d0005800900010006b8fb4c"], 0xbc}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) io_submit(0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x68520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xf}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0xdede}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000940)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc/sys/net/bridge/bridge-nf-call-iptables\x00', 0x0, 0x7d) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000008c0)=0x3) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000780)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x2, &(0x7f00000007c0)={&(0x7f0000000800)=""/128, 0x80}) ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f0000000200)) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x9, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) socket$nl_route(0x10, 0x3, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000000)=0x1) 18.128974638s ago: executing program 5 (id=242): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000012c0)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4f2040d2}}, {@auto_da_alloc}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbd0, &(0x7f0000002380)="$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") open(0x0, 0x24842, 0x1a6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x9) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x307b87f, 0x0, 0x3, 0x0, &(0x7f0000000240)) 17.624557181s ago: executing program 0 (id=244): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@rand_addr=0x64010102, 0x1000, 0xffff, 0x200, 0x0, 0x2, 0x0, 0x20, 0x87}, {0x2, 0x1, 0x800000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x1, 0x1}, [@tmpl={0x144, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d5, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x510d3f49}, {{@in=@multicast1, 0x4d2, 0x2b}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x5}, 0x3502, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffc}, {{@in=@broadcast, 0x0, 0x3c}, 0x2, @in6=@empty, 0xfffffff8, 0x1, 0x3, 0x0, 0x6, 0x2cd6, 0x2}, {{@in=@multicast1, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x2, 0x2, 0x0, 0x4, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x4, 0x2, 0x80, 0x0, 0x2}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0xdbc087098673e8f}, 0x0) (fail_nth: 1) 17.504986193s ago: executing program 0 (id=245): socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xc41a, &(0x7f0000000080)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000440)="$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") prlimit64(0x0, 0xe, &(0x7f00000008c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000900)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000940)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000009c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000a40), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000a80), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000ac0)=0x6) socket$inet6(0xa, 0x2, 0x3a) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000b00)={@broadcast, @remote}, 0xc) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28642, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000b40)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000b80)=0x40) ioctl$NILFS_IOCTL_GET_SUINFO(0xffffffffffffffff, 0x80186e84, &(0x7f0000000bc0)={&(0x7f0000000c00)=[{0x785772b1, 0x3, 0x1}], 0x1, 0x10, 0x5, 0x13}) ioctl$TIOCMGET(r4, 0x5415, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000c40)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000cc0)=ANY=[@ANYBLOB='\f\x00'], 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$kcm(0x2, 0x3, 0x84) 16.620236146s ago: executing program 0 (id=249): fstat(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0xe}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="b400000000000000791048000000000071000c000000000095000300"], &(0x7f00000009c0)='GPL\x00', 0x2, 0xc3, &(0x7f0000000a00)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) syz_open_dev$MSR(&(0x7f0000000bc0), 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b00)={r0, 0xfe, 0xfffffffffffffffc}, 0x10) sendto$unix(0xffffffffffffffff, &(0x7f0000000e80)="858bf202b3f368496f0416bf8a1e24eb29d72a09d84b5f2ca712405ce4e00aefa79694268ab3bdfa8eba18e1c588a8395456821c8965d93e4859090b8fac02b28723d6ec99900a0c359eba459f76cfaf85", 0xffffffffffffff3d, 0x20000080, &(0x7f0000000140)=@file={0x1, './bus\x00'}, 0x6e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') r2 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0x1400c, &(0x7f0000000380), 0x3, 0x498, &(0x7f00000003c0)="$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") socket$kcm(0x2c, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c80)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket(0x2, 0x80805, 0x0) socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000d40)='./proc\x00', &(0x7f0000000d80)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000dc0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000e00)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, &(0x7f0000000e40)='maps\x00') sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b40)="5c00000014006b02c84e21000af32c6e0a0675f80800000044000100fec00e000000004e0033df098e8497b1ed90d3d376bd5f6ffe5aa677b1c6f99b214460bc24f65ee2f308ff9d4f5a60eab556a705251e6182949a36c23d3b48df", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xc080) fcntl$notify(r2, 0x402, 0x3a) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r4, 0x84, 0x7a, 0x0, &(0x7f0000000000)=0xc00) 15.922331054s ago: executing program 0 (id=258): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x20000000000, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000540)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000580)={'b', ' *:* ', 'm\x00'}, 0x8) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x802, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000005c0)={@loopback, @mcast1, @mcast1, 0x80006, 0x0, 0x5d, 0x200, 0x800001fe, 0x530371}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000640)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @mcast2, 0x6, 0x0, 0x40, 0x500, 0x480000000000000a, 0x400029}) sendmmsg$inet6(r2, &(0x7f0000000040), 0x40000000000017d, 0x888) r4 = dup(r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000011c0)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000001200)={&(0x7f0000001240)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000001280)=[{&(0x7f00000012c0)="dc", 0x1}], 0x1}, 0x48043) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r7, &(0x7f0000000200), &(0x7f00000002c0)=@tcp6=r5}, 0x20) sendmmsg$inet(r5, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="55a38844d895363578d6641b0831f68939c9d28dface0196a05150d3500514ea47caaf5532e1", 0x26}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="95cb00", 0x3}], 0x1}}], 0x2, 0x804) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000001300)={0x2, &(0x7f0000001340)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x16}]}, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x140b, 0x100, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}}, 0x20000040) 15.913222564s ago: executing program 6 (id=259): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000580)={0x2, 0x8000}, 0xffffffffffffff3a) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x412a02, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10ru\x00t\xe3c*sgrVdd:\xc4e', 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000440)=0x2, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1700000015000101edff45623f8df4272d"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000180), &(0x7f0000000480)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x1) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket(0x1e, 0x5, 0xfffffffc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000200)={r8, @in6={{0xa, 0x4e22, 0xeda7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000008c0)=ANY=[@ANYRES32=r8, @ANYBLOB="080009000c000b000200440080030180ff0f01001700fd7ee7171538e47e23f03b1785a9d04fbda66780233426f9117dc40b6c2caff19052a90bb20058631e90d897f45907ed301b037ec08b1b29f129333ae123478f6b"], 0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000c108000000000000638af0ff00000000afa100000000000007010000f8ff28fe", @ANYRES32=r0], &(0x7f00000003c0)='GPL\x00', 0x9}, 0x94) 15.662607541s ago: executing program 6 (id=262): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = gettid() timer_create(0x9, &(0x7f0000000080)={0x0, 0x23, 0x800000000004, @tid=r4}, &(0x7f0000000240)=0x0) timer_settime(r5, 0x0, &(0x7f00000002c0)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) rt_sigtimedwait(&(0x7f0000000300)={[0xfffffffffffffffd]}, 0x0, 0x0, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000010c0)={{r2}, &(0x7f0000001100), &(0x7f0000001140)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001180)={r3, r1}, 0x14) syz_emit_ethernet(0xfe4f, &(0x7f00000011c0)=ANY=[], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000c80)={'\x00', 0xf5, 0xcb, 0x3, 0x9, 0x6}) timer_create(0x0, &(0x7f0000000040)={0x0, 0xc, 0x0, @thr={&(0x7f0000000340)="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", &(0x7f0000000e00)="dd1994dbbc2033e4a2ed6f75b3c7eb4814740d37a589bec2e5bfe9113467a67562de670abe3023025b1314d90a5fec9fcc49e87dead5a151461935393490d3a9b58878df90d113b73557a2f37a9852"}}, &(0x7f0000000280)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000940)={{0x77359400}}, 0x0) timer_getoverrun(r6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x40000}, 0x40) timer_gettime(r6, &(0x7f0000000200)) syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x5}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r8, 0x0, 0x41, &(0x7f0000000bc0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000087802"], &(0x7f0000000c00)=0x2a0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000c40)=0x1, 0x7f, 0x1) r9 = openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) fcntl$setlease(r9, 0x400, 0x1) 15.121412994s ago: executing program 6 (id=265): perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x1000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x3, 0xf}, 0x0, 0x2, 0x2, 0x7, 0x3, 0x7, 0x73, 0x0, 0x0, 0x0, 0x5b0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x6, 0xb, &(0x7f0000002400)=ANY=[@ANYBLOB="139c7e2822180000010000000000000000000000001811000037495cc44d06b380", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb70400000600000085000000020000009500000000000000"], &(0x7f0000001780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000017c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000001840)='\x00'/14, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_mount_image$ext4(&(0x7f0000001ac0)='ext2\x00', &(0x7f0000001b00)='./file2\x00', 0x280801f, &(0x7f0000001b40)={[{@auto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}]}, 0xff, 0x525, &(0x7f0000001b80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001980), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYRESDEC, @ANYRES16=r3], 0x48) ppoll(&(0x7f0000000100)=[{r4, 0x1000}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000d0000000000010005000093737b8662ff010000006868f8ff0000000018110000", @ANYBLOB, @ANYBLOB="e100000000000000b7080000080000007b8af873e875f522ff00000000bfa200000000000007020000f8ffffffb703000008080000000000f9ebe0f47eae1eaf17183171335700000000000001f94000090000009500"/103, @ANYRES8, @ANYRES8], &(0x7f0000000540)='GPL\x00', 0x4, 0x1009, &(0x7f0000000580)=""/4105, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000015c0)={0x2, 0xa}, 0x8, 0x10, &(0x7f0000001600)={0x0, 0xf, 0x999, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r4, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000020c0), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000002100)={'syzkaller0\x00', 0x4001}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000002140)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000002180)={'syzkaller0\x00', 0x1}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r7, &(0x7f00000021c0)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002240)={0x18, 0xb, &(0x7f0000002300)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x94) write$tun(r5, &(0x7f0000002340)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005800800"], 0x4a) 15.067607546s ago: executing program 0 (id=266): r0 = timerfd_create(0x0, 0x80000) socket$rds(0x15, 0x5, 0x0) (async) readv(r0, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) (async, rerun: 64) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (rerun: 64) setns(r1, 0x40000000) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) (async, rerun: 32) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x140, 0x0) (rerun: 32) ioctl$RTC_SET_TIME(r3, 0x4024700a, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800000, &(0x7f0000000280)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@oldalloc}]}, 0x1f, 0x4a6, &(0x7f00000002c0)="$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") (async) perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x8, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x22004006, &(0x7f0000000100)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@stripe={'stripe', 0x3d, 0xffff}}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x47b, &(0x7f00000008c0)="$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") (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000d80)=@generic={&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r5}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000001600)=@can_delroute={0x134, 0x19, 0x1, 0x2, 0x25dfdbfd, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0x41, 0x14, 0x0, 0x9, 0x9, "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", 0x2, "03fe030f3bbeb3089b5b791b0056af06b2893393"}}]}, 0x134}}, 0x800) 14.996495368s ago: executing program 36 (id=266): r0 = timerfd_create(0x0, 0x80000) socket$rds(0x15, 0x5, 0x0) (async) readv(r0, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) (async, rerun: 64) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (rerun: 64) setns(r1, 0x40000000) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) (async, rerun: 32) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x140, 0x0) (rerun: 32) ioctl$RTC_SET_TIME(r3, 0x4024700a, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x800000, &(0x7f0000000280)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@oldalloc}]}, 0x1f, 0x4a6, &(0x7f00000002c0)="$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") (async) perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x8, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x22004006, &(0x7f0000000100)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@stripe={'stripe', 0x3d, 0xffff}}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x47b, &(0x7f00000008c0)="$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") (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000d80)=@generic={&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r5}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000001600)=@can_delroute={0x134, 0x19, 0x1, 0x2, 0x25dfdbfd, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0x41, 0x14, 0x0, 0x9, 0x9, "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", 0x2, "03fe030f3bbeb3089b5b791b0056af06b2893393"}}]}, 0x134}}, 0x800) 14.166441059s ago: executing program 6 (id=269): fstat(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0xe}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="b400000000000000791048000000000071000c000000000095000300"], &(0x7f00000009c0)='GPL\x00', 0x2, 0xc3, &(0x7f0000000a00)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) syz_open_dev$MSR(&(0x7f0000000bc0), 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b00)={r0, 0xfe, 0xfffffffffffffffc}, 0x10) sendto$unix(0xffffffffffffffff, &(0x7f0000000e80)="858bf202b3f368496f0416bf8a1e24eb29d72a09d84b5f2ca712405ce4e00aefa79694268ab3bdfa8eba18e1c588a8395456821c8965d93e4859090b8fac02b28723d6ec99900a0c359eba459f76cfaf85", 0xffffffffffffff3d, 0x20000080, &(0x7f0000000140)=@file={0x1, './bus\x00'}, 0x6e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') r2 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0x1400c, &(0x7f0000000380), 0x3, 0x498, &(0x7f00000003c0)="$eJzs3L9vG1UcAPDvOXFCaCGhlF8tPwIFUSFImrZABwZAIDEUgQQDjFYSqtK0oCZItIpEylAmVCGxI0b+BSZYEGJCYgVmVFGhLG2ZjM53l9iu7eaHY5f685GcfN/d2e997+45z/dyDmBgTaY/kojdEfF7RIxnxcYNJrNf11aXZ6+vLs8mUa2+809S2+7q6vJssWnxvF31hUhif4t6F8+dP1VZWJg/m5enl05/PL147vxzJ09XTsyfmD9z+Nixo0dmXnzh8PPbyG4sIva8lcWlfNkb73/15vEvG/JvyqNLJjutfKpa7XJ1/XVXXTzcx3awOUP58SrX+v94DNUdvfF4/fO1wmd9aiCwY6rVanVX+9UrVeA2lkRjWZeHQVH8oS8+/+a/R+sHAS/v6Aikv668kn0ASvO+lj+yNcNrVwzKTZ9vu2kyIt5b+feb9BEdr0MkO9QCAGDQ/JCOf55NRzvLs+nYY338UYr767a7O58bmoiIeyJiT0TcG2dib0TcF1Hb9oGIeHCT9ddNktSGmVdXR5rGP6XLW05uA9Lx30v53Fbj+K8Y/cXEUK10LitEOfng5ML8oXyfHIzyaFqe6VDHj6/9dqnduvrxX/pI6y/Ggnk7Lg+PNj5nrrJU2XrGja5ciNg33Cr/ZG0mIB15PhQR+1q9QOnmdZx85ruH2627ef4ddGGiqfptxNPZ8V+JpvwLSef5yek7YmH+0HRxVtzol18vvt2u/m3l3wXp8b+z5fm/lv9EUj9fu7j5Oi7+8UXbudXJch5s4vxfqSxVRpJ3a/FIvuzTytLS2ZmIkeR41uj65YfXn1uUi+3T/A8eaN3/98T6ntgfEelJ/EhEPBoRj+XH7vGIeCIiDnTI/+dXn/ywedlYkf8tcPznNnX814ORaFxSarFNGgyd+un7hkon1sM8/+ud3/+O1qKD+ZKNvP/d2IrWwXb3HwAAAPwflCJidySlqbW4VJqayv6Hf2829Z365Mxcdo/ARJRLxZWu8brroTP5x/qsfCEisn8tKNYfiVLtuvHXQ2O18tTsRwtzfc0c2NWm/6f+Gup364Ad54YtGFz6Pwyujv2/3Lt2AL13Q//v2OdHd7QtQG+1+Ps/1o92AL3Xavzv+35gMDT1f9N+MEBc/4fBpf/D4NrAPfzA7WdxLG5+k/xaUI6I5lXFK23g6VsJxiM208LtB8U3I273daLcuzb3I4hSd17nz3x/t1g10v7U+vtSxC2wE1oHyc51h94F/XtPAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Kb/AgAA//8GT9U6") socket$kcm(0x2c, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c80)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket(0x2, 0x80805, 0x0) socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000d40)='./proc\x00', &(0x7f0000000d80)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000dc0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000e00)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, &(0x7f0000000e40)='maps\x00') sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b40)="5c00000014006b02c84e21000af32c6e0a0675f80800000044000100fec00e000000004e0033df098e8497b1ed90d3d376bd5f6ffe5aa677b1c6f99b214460bc24f65ee2f308ff9d4f5a60eab556a705251e6182949a36c23d3b48df", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xc080) fcntl$notify(r2, 0x402, 0x3a) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r4, 0x84, 0x7a, 0x0, &(0x7f0000000000)=0xc00) 13.593218273s ago: executing program 6 (id=271): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$uid(0x3, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r1, 0x200, 0x70bd2f, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x400d4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r4, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc5}, 0x4000) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000480)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x4e21, 0x2, @remote, 0x8}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000500)=[@in={0x2, 0x0, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000000540)=[@in6={0xa, 0x4e21, 0x80, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}], 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000002d00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002cc0)={&(0x7f0000000700)={0x259c, r7, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x3f}}}}, [@NL80211_ATTR_NAN_FUNC={0x4}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "f62566bbc3f7"}]}, @NL80211_ATTR_NAN_FUNC={0x11e8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TTL={0x8}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0xf0, 0xe, 0x0, 0x1, [{0x4c, 0x0, "938c9dad76d5730cdc66035b60302c0ca049bbe2d042f8d30a95c27ac447a735c3e5fcc1565e3f2db98e8f6013d15df2232dd01168703f8f0329353dba2c5ee7d4cf83944347a4b3"}, {0x85, 0x0, "d5b37c75e3ce021a176b93faa55a3cb42fbca7ca60813fdd3b15455c678236dd35d91b43d41195a5030fa2fc5d10b04d6475662fd7cfe56b20a124a2694115ad31e862955ac2edbecd2b8a4314fc956a2901ecab2cbf5a8bce92246bdb9df6977e598e0802a1f880995f3242d1b8b150bb5393e191a2694b161c73502eb2439ee8"}, {0x15, 0x0, "26d3b6d6a8da27c2a4a99272c82f3cf8b6"}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x10d8, 0xe, 0x0, 0x1, [{0x1004, 0x0, "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"}, {0xce, 0x0, "0acb21daa321e9af362fe577b6e3f4982a28ad27180736f3b75a3fbb19b04b0474fe2da48be4bf77f2fd564526d1fde4c384f38fc80a71405f1d3ae478fe6ffe9b4e7ac8096fc63ea822fecf5caa173c05b90838bb1bea9410f5ae071089760137c96c94d828f5584f66338315bacfb80352661ec00b962f736c1d097da0a6f1eba403faa708aeca5a209eb2b0149831a6931b87a7522643fa25600e954eac9267e7bc49614452226c7248fb8744bec6d36c118f56ca3bed42894820564c68e848de58bf08feb4f78a41"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}, @NL80211_NAN_FUNC_SRF={0x8, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}]}]}, @NL80211_ATTR_NAN_FUNC={0x1378, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x8}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x6}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x83}, @NL80211_NAN_FUNC_SERVICE_INFO={0xba, 0xb, "7f3c086bfdacc3162b2e04a78bc4746f35af091a0f5d71ac76031f8d08a095b0bbd8c28ca21b3fdf5f05804d3e93740037446b61f297eb7e31bcf6e65f26d93b5b5313580705e934650319a6ee2feaedc2b140ba7ef88f9b5b97b188e9ece20e1bb21b713e25562140bff7523ce2745f839b03df1fdeb1c551ea0a631e90962bbf173346f0a6266c883bd1aabb8a63b7f0c49bc6e6194df5e57cab40007d681ad70243cb05763e42d9d98b97a924da98d61ad853858c"}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1288, 0xe, 0x0, 0x1, [{0x48, 0x0, "ddca5d8cd6202142e680e37d601a5630513195622bc0b6a2735186ea19a64420c651eaca378897c2576b5d7d63ca5ca33ca22fff638fa2c297331ee46852e0321b5f621f"}, {0xf4, 0x0, "34f5ba3b3b27558957cb2ca701d7732b223b591d4fbb8468f080de316dbdd802a429dcf0ad05b876597155bb37c518cfeaaacf0eff9cd51b2763ce4eaeaa33ec2b486de819c0f02b47b3df7c3cc38e36ea61eb49f7b1d016dd1205c9e83372d9384bb40be2b6fce7198799007192643b7c9b4812bddc16c1d503288d0c443e3c19963e505908ff6c0a5e352fdd72ee13a4f5c833520eb075939b730baf30d6dcc855066ff3ac78c9e9fcf3fff79c1a6ca9c15894a9439bfc8bf958e1b008c6f2a959c65052085fe8e1c5049484eb7c6385339392f94bfcc36cb83db55204b0c7d4601b38c638ab07839a4b0e8aab0334"}, {0x25, 0x0, "91300f4e3185ca9f7ce44ce0537531d03b2811731e6a1de337e11f3c5a993551a6"}, {0xdd, 0x0, "37de353200a05261dcb4bcfeb4133fd7c064a0bf81525bd6c763520671109237133c4f7ab9dff67dc3e1238ae5458339754af6ef31d0b09b0b615d968ce2c6efe7e73a6f524d168ff0f18375458512c10fe4f891e386ae4ed498eb569197d5605c8c14aea41bdca1c85ffb708ac10d4794eeffdc2abb4a523437b92ed8a865b14887e477d7480af8e1da413d9b62554db3c62d28657723ecb7f8dc995bd705ae0f7135c2718eea8150e6e6250f5c0f955cc1cfe778b8fb44d0b47099f514a1dc37db7591a2cf0e6e643db5d5607a5d7dd87b391dfebdbaddc7"}, {0x26, 0x0, "5a9c8fda8f2142777a407059cbb50ba7244b5d1d250834948f008ca41518f26e00f5"}, {0x1004, 0x0, "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"}, {0x13, 0x0, "068c33462741813019e3b326c7f051"}]}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xf8}]}]}, 0x259c}, 0x1, 0x0, 0x0, 0x54}, 0x4) r9 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) getsockopt$packet_buf(r9, 0x107, 0x5, &(0x7f0000000100)=""/39, &(0x7f0000000140)=0x27) 12.863408682s ago: executing program 6 (id=276): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000008000e08000700000000780d0005800900010006b8fb4c"], 0xbc}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) io_submit(0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x68520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xf}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0xdede}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000940)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x0, 0x0) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000008c0)=0x3) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000780)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x2, &(0x7f00000007c0)={&(0x7f0000000800)=""/128, 0x80}) ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f0000000200)) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x9, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) socket$nl_route(0x10, 0x3, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000000)=0x1) 12.793285674s ago: executing program 37 (id=276): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000008000e08000700000000780d0005800900010006b8fb4c"], 0xbc}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) io_submit(0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x68520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xf}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0xdede}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000940)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x0, 0x0) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000008c0)=0x3) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000780)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x2, &(0x7f00000007c0)={&(0x7f0000000800)=""/128, 0x80}) ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f0000000200)) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x9, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) socket$nl_route(0x10, 0x3, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000000)=0x1) 9.186216966s ago: executing program 1 (id=277): socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xc41a, &(0x7f0000000080)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000440)="$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") prlimit64(0x0, 0xe, &(0x7f00000008c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000900)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000940)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000009c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000a40), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000a80), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000ac0)=0x6) socket$inet6(0xa, 0x2, 0x3a) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000b00)={@broadcast, @remote}, 0xc) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28642, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000b40)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000b80)=0x40) ioctl$NILFS_IOCTL_GET_SUINFO(0xffffffffffffffff, 0x80186e84, &(0x7f0000000bc0)={&(0x7f0000000c00)=[{0x785772b1, 0x3, 0x1}], 0x1, 0x10, 0x5, 0x13}) ioctl$TIOCMGET(r4, 0x5415, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000c40)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000c80)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000cc0)=ANY=[@ANYBLOB='\f\x00'], 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$kcm(0x2, 0x3, 0x84) 8.278065819s ago: executing program 1 (id=298): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000008000e08000700000000780d0005800900010006b8fb4c"], 0xbc}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) io_submit(0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x68520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xf}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0xdede}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000940)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc/sys/net/bridge/bridge-nf-call-iptables\x00', 0x0, 0x7d) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000008c0)=0x3) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000780)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x2, &(0x7f00000007c0)={&(0x7f0000000800)=""/128, 0x80}) ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f0000000200)) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x9, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) socket$nl_route(0x10, 0x3, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000000)=0x1) 7.8284417s ago: executing program 1 (id=302): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x400000, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000140)}]) perf_event_open(&(0x7f0000001100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0}, 0x0, 0xfff, 0x43e68d93, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x4, 0x7, 0x7, 0xff, 0x0, 0x3ff, 0x2000, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000440), 0xb}, 0x500, 0x6, 0x8001, 0x2, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0x9, r2, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000100001000000000c000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000010900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400010069703665727370616e30000000000000080002400000000648000000180a0101000b000000000000010000000900010073797a30000000001c000380180003801400020000003665727370616e300000000000000900020073797a30"], 0xe8}}, 0x0) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f0000000780)={&(0x7f0000000180)='\x00', &(0x7f00000001c0)='][:\x00', 0xdc90}) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000600)={0x7}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000f40)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000f80)='./sys\x00', &(0x7f0000000fc0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./dev\x00', &(0x7f0000001080)='devtmpfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r7, &(0x7f0000002300)='md0', 0x3) openat(0xffffffffffffff9c, &(0x7f0000002340)='./dev/md0\x00', 0x2, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000002380)='./dev/md0\x00', 0x4002, 0x0) ioctl(r8, 0x40140921, &(0x7f00000023c0)="010000000100000001") r9 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000a40)='./file1\x00', 0x1000080, &(0x7f0000000a80)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES64], 0x1, 0x32f, &(0x7f0000000ac0)="$eJzs3U9rXFUYB+A3aZNIJJ0sRFAQD7rRzSWJX8BBWhADSmykuhBuzY0OczsT5g6VqaLZufVzFJfuBPELZOPenQshG5ddFEcm1/yrUyql8abN80By3uTMb+65M5zh3Qxn/8b3t7rbVbadD2P27RSzETF7L2L5oKrN1L9m6r/m46TdeLN147dXPvz4k/fa6+tXN1K61r7+1lpK6cqrP3/59Q+v/TJ8/qMfr/y0EHvLn+7/ufb73ot7L+3/df2LTpU6Ver1hylPN/v9YX6zLNJWp+pmKX1QFnlVpE6vKgan5v8o+zs7o5T3tpYWdwZFVaW8N0rdYpSG/TQcjFL+ed7ppSzL0tJi8Cibdzc28nbTq+BsDQbtfLJ5F/41s3m3kQUBAI36z/3/5P8HdZP9/7b+/4nS/18Ek/5//p/9e5r+HwAAAAAAAAAAAAAAngb3xuPWeDxuHY4P/kyJzDWwTM7IY7z/PENOfHHvuYjyu9ubtzfrsZ5vb0cnyihiJVpxP2J8pK6vvbt+dSUdWI6lW9/W+cl46XR+NVqxPD2/WufT6fxcLJ7Mr0UrXpieX5uan483Xj+Rz6IVv34W/ShjKybZ4/w3qym98/76A/mFg8cBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcDFk6cjU8/uz7GHzdf7ofP2VaMX96efzr0w9n/9yvHy52XsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEPV6E43L8tioHiGiq8uNXH1uSf6hLPn5cU8LmZ2601zXtbzyOJwlz9OvMEPJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjI8aHfTa8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAJlWjO928LIvBGRYPu/ZMPez+j7cLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw7v0dAAD//4AzIso=") mkdirat(r9, &(0x7f0000000e00)='./dev\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a1441, 0x104) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000640)="8907040400", 0x5) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000680)) sendmsg$nl_generic(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="200000001200010a0000000000000000800000001400020000000000000000000000fffface41dce"], 0x28}}, 0x80) 6.478093875s ago: executing program 8 (id=312): r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f00000005c0)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x800, 0x1ff}, 0x400, 0x5, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, r0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) migrate_pages(0x0, 0xfc, &(0x7f00000000c0)=0x7ffffffffffffffd, &(0x7f00000001c0)=0x1) syz_usb_connect$printer(0x6, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x50420, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x1}, 0x410, 0x2000000, 0x4, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000080180100002020702500000000002020207b0af8ff00000000bda107000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2d, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) 4.679937381s ago: executing program 8 (id=319): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000008000e08000700000000780d0005800900010006b8fb4c"], 0xbc}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) io_submit(0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x68520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xf}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0xdede}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000940)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x0, 0x0) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f00000008c0)=0x3) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000780)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x2, &(0x7f00000007c0)={&(0x7f0000000800)=""/128, 0x80}) syz_open_procfs(r3, &(0x7f0000000880)='net/ip_tables_names\x00') ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f0000000200)) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x9, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) 3.744220404s ago: executing program 8 (id=322): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000040), 0x1}, 0x2c80, 0x0, 0x9, 0x6, 0x400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xb) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x88}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x90) getpid() r1 = syz_pidfd_open(0x0, 0x0) setns(r1, 0x24020000) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000100), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000140), 0x80002c1, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000240)={@loopback, @multicast2, 0x0, "81f94ed09dfdb134b16f29c8617f1b22ccecaddbc2ce62e70089318b09bc8502", 0x500f4e3b, 0x3, 0x8000, 0x5}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000d80), 0xffffffffffffffd2}, 0x48) perf_event_open(&(0x7f0000000dc0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x40, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000e40), &(0x7f0000000e80)='./file0\x00', 0x1000010, &(0x7f0000000ec0)=ANY=[@ANYBLOB='\x00'], 0x1, 0x282, &(0x7f0000000f00)="$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") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=ANY=[@ANYBLOB="2800000007060300000000ff01000000000000050900020073797a3100000000050001000700000020892652189b7232e0e46b491e29db7695826f1900e34a111023c3fa56dafb8f3efac5e0fd5326f28b82ed988263280adfd3a03ec5b5025d5924669f62de278a4c7ea25fefd963439741a229f79bbe3719f9fbe1eba9aaf08544c96236415f38b4a104b6322407000000b15d9252a1231a02"], 0x28}, 0x1, 0x0, 0x0, 0x842}, 0x40) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001340)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000001380)=ANY=[], 0x141) 3.460961162s ago: executing program 8 (id=323): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000008000e08000700000000780d0005800900010006b8fb4c"], 0xbc}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) io_submit(0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x68520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xf}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0xdede}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000940)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x0, 0x0) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f00000008c0)=0x3) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x12, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x52a9, 0x0, 0x0, 0x0, 0x401}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000300)='syzkaller\x00', 0x7fffffff, 0x25, &(0x7f0000000440)=""/37, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xa, 0xffffffff, 0x9}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000600)=[{0x1, 0x2, 0x7, 0x5}, {0x1, 0x3, 0x7, 0x1}, {0x1, 0x3, 0xa, 0x4}, {0x0, 0x1, 0xf, 0xb}, {0x2, 0x5, 0x4, 0x1}, {0x5, 0x4, 0x5, 0x2}, {0x3, 0x2, 0xa, 0xc}, {0x2, 0x2, 0xb, 0xa}, {0x5, 0x1, 0xe, 0x2}, {0x3, 0x3, 0x9, 0x7}], 0x10, 0x9}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000780)=@generic={&(0x7f0000000100)='./file0\x00', r3}, 0x18) ptrace(0x10, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f00000007c0)={&(0x7f0000000800)=""/128, 0x80}) syz_open_procfs(0x0, &(0x7f0000000880)='net/ip_tables_names\x00') ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f0000000200)) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x9, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) 3.029745353s ago: executing program 38 (id=242): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000012c0)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4f2040d2}}, {@auto_da_alloc}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbd0, &(0x7f0000002380)="$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") open(0x0, 0x24842, 0x1a6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x9) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x307b87f, 0x0, 0x3, 0x0, &(0x7f0000000240)) 3.023234053s ago: executing program 8 (id=327): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb000034000280"], 0xbc}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) io_submit(0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x68520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xf}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0xdede}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000940)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc/sys/net/bridge/bridge-nf-call-iptables\x00', 0x0, 0x7d) read$watch_queue(r2, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000008c0)=0x3) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x12, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x52a9, 0x0, 0x0, 0x0, 0x401}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000300)='syzkaller\x00', 0x7fffffff, 0x25, &(0x7f0000000440)=""/37, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xa, 0xffffffff, 0x9}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000600)=[{0x1, 0x2, 0x7, 0x5}, {0x1, 0x3, 0x7, 0x1}, {0x1, 0x3, 0xa, 0x4}, {0x0, 0x1, 0xf, 0xb}, {0x2, 0x5, 0x4, 0x1}, {0x5, 0x4, 0x5, 0x2}, {0x3, 0x2, 0xa, 0xc}, {0x2, 0x2, 0xb, 0xa}, {0x5, 0x1, 0xe, 0x2}, {0x3, 0x3, 0x9, 0x7}], 0x10, 0x9}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000780)=@generic={&(0x7f0000000100)='./file0\x00', r4}, 0x18) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x2, &(0x7f00000007c0)={&(0x7f0000000800)=""/128, 0x80}) syz_open_procfs(r5, &(0x7f0000000880)='net/ip_tables_names\x00') ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f0000000200)) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x9, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7], 0x90}}, 0x0) 2.662107712s ago: executing program 9 (id=330): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a2000000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4b", 0xbd) 2.594404593s ago: executing program 9 (id=332): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x30000c1, &(0x7f0000000100)={[], [], 0x3d}, 0x65, 0x52e, &(0x7f0000000140)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./proc\x00', 0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000006c0)={0xa, 0x0, 0x9, @loopback, 0x4}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000700)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @mcast2}}}, 0x32) writev(r1, &(0x7f0000000740)=[{&(0x7f0000000780)="ee", 0x1}], 0x1) writev(r2, &(0x7f00000007c0)=[{&(0x7f0000000900)='l', 0x1}], 0x1) mount(0x0, &(0x7f0000000940)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000a00)='7', 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[@ANYBLOB="9000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="f31602003188000070001280080001006774700064000280080004000100000008000700ac1e000114000800fc00000000000000000000000000000108000300831b0000080004000000000008000700e000000214000800ff02000000000000000000000000000108000100", @ANYRES32], 0x90}, 0x1, 0x0, 0x0, 0x48890}, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x13, &(0x7f0000000b00)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000202070250000000000202020cbaaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000bc0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@newtaction={0x6c, 0x30, 0x1, 0x2, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x6}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="6000000002060300000000000000000007000000140007800500150002000000080012400000000414000300686173683a69702c706f72742c697000050005000200000005000400050000000900020073797a31000000000500010007"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 2.549543975s ago: executing program 8 (id=333): r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={'\x00', 0x201, 0xdd36, 0x80, 0x4, 0x81}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14) setns(0xc9, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/features/extended_error\x00', 0x0, 0x0) epoll_create1(0x80000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xb3, 0x2000007, 0x50, r2, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext={0xc, 0x9}, 0x0, 0x2, 0x6, 0x0, 0x3, 0x0, 0x201}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0), 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100"/55, @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008080}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x20028800) mount(0x0, &(0x7f0000000640)='./sys\x00', &(0x7f0000000680)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys/bus/netdevsim/devices/netdevsim0/new_port\x00', 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/anycast6\x00') preadv(r5, &(0x7f0000000240)=[{&(0x7f0000000280)=""/93, 0x5d}], 0x1, 0x2, 0xfffff800) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x3800) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xe, &(0x7f00000006c0)=ANY=[], &(0x7f0000001300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb793ef8c68cd2fbb}, 0x94) 2.018706448s ago: executing program 9 (id=336): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB], 0xbc}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) io_submit(0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x68520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xf}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0xdede}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000940)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc/sys/net/bridge/bridge-nf-call-iptables\x00', 0x0, 0x7d) read$watch_queue(r2, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000008c0)=0x3) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x12, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x52a9, 0x0, 0x0, 0x0, 0x401}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000300)='syzkaller\x00', 0x7fffffff, 0x25, &(0x7f0000000440)=""/37, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xa, 0xffffffff, 0x9}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000600)=[{0x1, 0x2, 0x7, 0x5}, {0x1, 0x3, 0x7, 0x1}, {0x1, 0x3, 0xa, 0x4}, {0x0, 0x1, 0xf, 0xb}, {0x2, 0x5, 0x4, 0x1}, {0x5, 0x4, 0x5, 0x2}, {0x3, 0x2, 0xa, 0xc}, {0x2, 0x2, 0xb, 0xa}, {0x5, 0x1, 0xe, 0x2}, {0x3, 0x3, 0x9, 0x7}], 0x10, 0x9}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000780)=@generic={&(0x7f0000000100)='./file0\x00', r4}, 0x18) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x2, &(0x7f00000007c0)={&(0x7f0000000800)=""/128, 0x80}) syz_open_procfs(r5, &(0x7f0000000880)='net/ip_tables_names\x00') ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f0000000200)) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x9, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7], 0x90}}, 0x0) 1.595769919s ago: executing program 7 (id=337): mkdir(&(0x7f0000000080)='./my_configfs\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) mount(0x0, &(0x7f00000000c0)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000dc0)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x2, @perf_bp={0x0, 0x1}, 0x9679149b910765de, 0x80000000, 0xfffffffd, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdir(&(0x7f00000002c0)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) rmdir(&(0x7f0000000300)='./my_configfs/target/core/rd_mcp_0\x00') (fail_nth: 2) 1.324022206s ago: executing program 7 (id=338): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000008000e08000700000000780d0005800900010006b8fb4c"], 0xbc}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) io_submit(0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x68520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xf}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0xdede}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000940)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x0, 0x0) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f00000008c0)=0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x12, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x52a9, 0x0, 0x0, 0x0, 0x401}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000300)='syzkaller\x00', 0x7fffffff, 0x25, &(0x7f0000000440)=""/37, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xa, 0xffffffff, 0x9}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000600)=[{0x1, 0x2, 0x7, 0x5}, {0x1, 0x3, 0x7, 0x1}, {0x1, 0x3, 0xa, 0x4}, {0x0, 0x1, 0xf, 0xb}, {0x2, 0x5, 0x4, 0x1}, {0x5, 0x4, 0x5, 0x2}, {0x3, 0x2, 0xa, 0xc}, {0x2, 0x2, 0xb, 0xa}, {0x5, 0x1, 0xe, 0x2}, {0x3, 0x3, 0x9, 0x7}], 0x10, 0x9}, 0x94) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x2, &(0x7f00000007c0)={&(0x7f0000000800)=""/128, 0x80}) syz_open_procfs(r3, &(0x7f0000000880)='net/ip_tables_names\x00') ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f0000000200)) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x3}, 0xc80, 0x0, 0x11000, 0x9, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) 1.064170203s ago: executing program 9 (id=339): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000012c0)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4f2040d2}}, {@auto_da_alloc}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbd0, &(0x7f0000002380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x28}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000040}, 0x8014) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}]}]}], {0x14, 0x10}}, 0xfc}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in=@remote, @in6=@private1, 0x4e23, 0x0, 0x3, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x4000000000006, 0x95, 0xfffffffffffffffa, 0x2}, {0x40, 0x0, 0x0, 0x2}, 0x8, 0x1, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xd}, 0x3507, 0x4, 0x3, 0x0, 0x0, 0x9, 0xfffffffe}}, 0xe8) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad0140310068ad639a8ace8680210bc28b805508bc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33", 0x89}], 0x1}, 0xff0f000020000080) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r6) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x44, r7, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0xb}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'vlan0\x00', 0x2}, 0x18) 635.997974ms ago: executing program 7 (id=340): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x80110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x4, 0x800}, 0x800, 0x0, 0x0, 0x6, 0x400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x2, 0xffffffffffffffff, 0xa) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10000804}, 0x20000000) ptrace(0x10, r3) bind$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x102030405060708, {0x0, 0xfe, 0x2}, 0xff}, 0x18) connect$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x1000000000000000, {0x0, 0xee}, 0xff}, 0x18) r4 = timerfd_create(0x3, 0x0) fadvise64(r4, 0xe9d, 0xc, 0x2) ioctl$sock_proto_private(r0, 0x89e5, &(0x7f0000000340)="d4041ab627e3a84080ef01b7e4361e13dc08b8f9f6af329ad4a149d3ea39fe71f0aac60aef17c1dd490b8a1ecec33e88f9a4828f9d9057a54540f2417fb7ee970b6983253b97bb8670") unlink(&(0x7f0000000100)='./cgroup.cpu/cpuset.cpus\x00') ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000240)) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write$vga_arbiter(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="746172676574205043493a303a303a352e30005e94282c17426ca13d1b07fd00cacd2dc92cda31669c8c18bac91d574e3c48767d94435df55ff9e7d9b0258342632f7f9285f3e8082758afdd3b5079b8557eae371164ee04cafabf041a84f2e5f76fa272c224be565941cb82e01a1c4f496b890db05b949897a8f7ae7ab305d17d02b024f7a70e1c7f2f4d7b846078215ccb35390b217b8247c297"], 0x13) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000000/0x14000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r7 = io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x73e6, 0x1c402, 0x2, 0x1e1}) io_uring_enter(r7, 0x2cbe, 0x7f66, 0x13, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f00000004c0)=@newtfilter={0x24, 0x2c, 0x4, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth1_to_bond\x00', &(0x7f0000000400)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, 0xc8f6, 0x0, 0x4, 0x0, 0x0, 0x0, [0x0, 0x3]}}) 308.500032ms ago: executing program 7 (id=341): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a2000000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4b", 0xbd) 249.841273ms ago: executing program 7 (id=342): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x3c, 0x8, 0x2, 0xfc, 0x0, 0xfa, 0x3b, 0x6, 0x4, 0x82, 0x3, 0x8, 0x5, 0x8}, 0xfebb) syz_emit_ethernet(0x46, &(0x7f0000010d80)=ANY=[@ANYBLOB], 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000080)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f00000003c0)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000050000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) 221.634594ms ago: executing program 9 (id=343): r0 = socket$inet6(0xa, 0x3, 0x3) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}}], 0x1, 0x8000) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp\x00') preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000180)=""/228, 0xe4}], 0x1, 0x21, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES32=r0, @ANYRES16], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) 621.28µs ago: executing program 9 (id=344): unshare(0x68040000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xb, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x9}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x20008, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x200000101ffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x5, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="7a3f000000001200000000000000000095"], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/check_wx_pages\x00', 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000340)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000680)=[{{&(0x7f0000000700)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000780)="eb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x200080fc) sendmsg$can_bcm(r0, &(0x7f0000000d00)={&(0x7f0000000ac0), 0x10, &(0x7f0000000b80)={&(0x7f0000000b00)={0x5, 0x0, 0x3, {0x0, 0x2710}, {}, {0x3, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x3}, 0x39, 0x2, 0x0, 0x0, "7f90b3859492eb12c8a771d4674a8bda4d152a40a836c9035385085e56f0e0c6050a32c5b5e23840c92fab4afcb36006d563db067466756eb043e8ba12a86051"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x20004804) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888}, 0x20000880) read(r0, &(0x7f0000000140)=""/100, 0x64) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x3, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0xf, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000003c0)={0x0, 0x5, 0xb2ad}, 0x8) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$kcm(0xa, 0x2, 0x3a) recvmsg$kcm(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r4, &(0x7f00000007c0)={&(0x7f0000000800)=@in6={0xa, 0x6000, 0x0, @mcast2, 0x38}, 0x80, &(0x7f0000000880)=[{&(0x7f00000008c0)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) r5 = perf_event_open(&(0x7f0000000d40)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x5, 0x5, &(0x7f0000000e80)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000ec0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)={0x24, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4050) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x64, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000bc0)=@newsa={0x138, 0x18, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80, 0x2f}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x40000000000}, {}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x40}, [@algo_comp={0xfefb, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 0s ago: executing program 7 (id=345): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = gettid() ioctl(r0, 0x101, &(0x7f0000000240)="489fef424d832adc339fb527a386311ded9ce5") perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, r1, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x82, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000001000)='(pu&\"\xf9\x81\xa8\"') bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x200000000000011, 0x2, 0xd) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e64, @broadcast}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r4, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) getsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e22, 0x7fffffff, @empty, 0x5}}, 0x4e21}, &(0x7f0000000b00)=0x90) bind$packet(r3, &(0x7f0000000100)={0x11, 0x800, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, 0x0, 0x35}, 0x28) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='auxv\x00') r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) pread64(r6, 0x0, 0x0, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 50.109689][ T4048] bridge_slave_1: entered promiscuous mode [ 50.175405][ T4048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.189374][ T70] bridge_slave_1: left allmulticast mode [ 50.189394][ T70] bridge_slave_1: left promiscuous mode [ 50.189470][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.196361][ T70] bridge_slave_0: left allmulticast mode [ 50.196434][ T70] bridge_slave_0: left promiscuous mode [ 50.196538][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.230833][ T29] audit: type=1400 audit(1791839724.156:278): avc: denied { write } for pid=4071 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.292310][ T29] audit: type=1400 audit(1791839724.216:279): avc: denied { write } for pid=4082 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.332372][ T70] ip6gretap0 (unregistering): left promiscuous mode [ 50.379036][ T70] bridge0 (unregistering): left promiscuous mode [ 50.390959][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.392803][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.393797][ T70] bond0 (unregistering): Released all slaves [ 50.420886][ T4048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.426672][ T3022] 8021q: adding VLAN 0 to HW filter on device eth5 [ 50.455701][ T4048] team0: Port device team_slave_0 added [ 50.462777][ T70] hsr_slave_0: left promiscuous mode [ 50.463133][ T70] hsr_slave_1: left promiscuous mode [ 50.463480][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.463495][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.463912][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.463937][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.471491][ T70] veth1_macvtap: left promiscuous mode [ 50.471517][ T70] veth0_macvtap: left promiscuous mode [ 50.471659][ T70] veth1_vlan: left promiscuous mode [ 50.471692][ T70] veth0_vlan: left promiscuous mode [ 50.738453][ T70] team0 (unregistering): Port device team_slave_1 removed [ 50.761122][ T70] team0 (unregistering): Port device team_slave_0 removed [ 50.862278][ T4048] team0: Port device team_slave_1 added [ 50.890263][ T4048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.890276][ T4048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.890301][ T4048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.892346][ T4048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.892357][ T4048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.892386][ T4048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.033807][ T4085] __nla_validate_parse: 1 callbacks suppressed [ 51.033831][ T4085] netlink: 28 bytes leftover after parsing attributes in process `syz.3.120'. [ 51.040381][ T4085] netlink: 28 bytes leftover after parsing attributes in process `syz.3.120'. [ 51.162016][ T4090] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 51.162476][ T4093] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 51.162488][ T4093] block device autoloading is deprecated and will be removed. [ 51.247173][ T4093] md: could not open device unknown-block(1,1). [ 51.247193][ T4093] md: md_import_device returned -6 [ 51.291805][ T4048] hsr_slave_0: entered promiscuous mode [ 51.292187][ T4048] hsr_slave_1: entered promiscuous mode [ 51.300068][ T4048] debugfs: 'hsr0' already exists in 'hsr' [ 51.300083][ T4048] Cannot create hsr debugfs directory [ 51.332233][ T3022] 8021q: adding VLAN 0 to HW filter on device eth6 [ 51.553354][ T4090] loop0: detected capacity change from 0 to 512 [ 51.575626][ T4048] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 51.584501][ T4048] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.586107][ T4048] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 51.612697][ T4048] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.615116][ T4048] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 51.623625][ T4048] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.624310][ T4048] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 51.645277][ T4048] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.680853][ T3022] 8021q: adding VLAN 0 to HW filter on device eth7 [ 51.775325][ T4048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.794955][ T4048] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.803528][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.803565][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.810323][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.810356][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.973161][ T4155] netlink: 32 bytes leftover after parsing attributes in process `syz.3.125'. [ 51.978997][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 51.979011][ T29] audit: type=1400 audit(1791839725.906:284): avc: denied { write } for pid=4137 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.040834][ T29] audit: type=1400 audit(1791839725.966:285): avc: denied { write } for pid=4161 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.096127][ T3022] 8021q: adding VLAN 0 to HW filter on device eth8 [ 52.108149][ T4048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.138704][ T4169] netlink: 8 bytes leftover after parsing attributes in process `syz.5.126'. [ 52.138726][ T4169] netlink: 4 bytes leftover after parsing attributes in process `syz.5.126'. [ 52.150452][ T4169] macvtap1: entered allmulticast mode [ 52.150543][ T4169] dummy0: entered allmulticast mode [ 52.150571][ T4169] dummy0: entered promiscuous mode [ 52.281033][ T4151] loop0: detected capacity change from 0 to 512 [ 52.305276][ T4151] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 52.322660][ T4151] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 52.324117][ T4169] netlink: 55 bytes leftover after parsing attributes in process `syz.5.126'. [ 52.324135][ T4169] netlink: 4 bytes leftover after parsing attributes in process `syz.5.126'. [ 52.352112][ T4151] EXT4-fs (loop0): orphan cleanup on readonly fs [ 52.362659][ T4169] macvtap2: entered allmulticast mode [ 52.364169][ T4151] EXT4-fs warning (device loop0): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 52.364210][ T4151] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 52.392925][ T4151] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #16: comm syz.0.124: casefold flag without casefold feature [ 52.393075][ T4151] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 52.395878][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 52.396158][ C0] EXT4-fs (loop0): initial error at time 1791839726: ext4_orphan_get:1403: inode 16 [ 52.396318][ C0] EXT4-fs (loop0): last error at time 1791839726: ext4_orphan_get:1403: inode 16 [ 52.401797][ T4155] netlink: 28 bytes leftover after parsing attributes in process `syz.3.125'. [ 52.402165][ T4155] netlink: 28 bytes leftover after parsing attributes in process `syz.3.125'. [ 52.405098][ T4151] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.124: couldn't read orphan inode 16 (err -117) [ 52.405136][ T4151] loop0: lost filesystem error report for type 5 error -117 [ 52.459981][ T4151] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.501475][ T4155] bridge0: entered promiscuous mode [ 52.525199][ T4155] bridge0: left promiscuous mode [ 52.619691][ T4048] veth0_vlan: entered promiscuous mode [ 52.632089][ T4048] veth1_vlan: entered promiscuous mode [ 52.663197][ T4048] veth0_macvtap: entered promiscuous mode [ 52.668378][ T4048] veth1_macvtap: entered promiscuous mode [ 52.692290][ T4048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.699917][ T4048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.737946][ T363] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.737986][ T363] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.738016][ T363] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.738089][ T363] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.792112][ T4188] loop5: detected capacity change from 0 to 512 [ 52.851937][ T4188] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.852328][ T4188] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.869085][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.931970][ T3875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.971716][ T4207] loop5: detected capacity change from 0 to 512 [ 53.074063][ T4207] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 53.074096][ T4207] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 53.074131][ T4207] vhci_hcd vhci_hcd.0: Device attached [ 53.131368][ T4198] loop6: detected capacity change from 0 to 512 [ 53.213174][ T4198] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.213724][ T4198] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.256421][ T4210] vhci_hcd: cannot find a urb of seqnum 150 max seqnum 0 [ 53.256801][ T51] vhci_hcd vhci_hcd.5: stop threads [ 53.256817][ T51] vhci_hcd vhci_hcd.5: release socket [ 53.256839][ T51] vhci_hcd vhci_hcd.5: disconnect device [ 53.308443][ T3384] usb 11-1: new high-speed USB device number 2 using vhci_hcd [ 53.308490][ T3384] usb 11-1: enqueue for inactive port 0 [ 53.308510][ T3384] usb 11-1: enqueue for inactive port 0 [ 53.308528][ T3384] usb 11-1: enqueue for inactive port 0 [ 53.309752][ T4048] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.369935][ T4218] loop6: detected capacity change from 0 to 512 [ 53.377049][ T3384] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 53.469090][ T4218] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 53.469118][ T4218] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 53.469151][ T4218] vhci_hcd vhci_hcd.0: Device attached [ 53.604935][ T4213] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 53.605072][ T4223] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 53.605086][ T4223] block device autoloading is deprecated and will be removed. [ 53.699042][ T4223] loop0: detected capacity change from 0 to 512 [ 53.712961][ T4219] vhci_hcd: cannot find a urb of seqnum 150 max seqnum 0 [ 53.714098][ T363] vhci_hcd vhci_hcd.6: stop threads [ 53.714112][ T363] vhci_hcd vhci_hcd.6: release socket [ 53.714131][ T363] vhci_hcd vhci_hcd.6: disconnect device [ 53.724264][ T37] usb 13-1: new high-speed USB device number 2 using vhci_hcd [ 53.724296][ T37] usb 13-1: enqueue for inactive port 0 [ 53.724315][ T37] usb 13-1: enqueue for inactive port 0 [ 53.724333][ T37] usb 13-1: enqueue for inactive port 0 [ 53.774115][ T4213] md: could not open device unknown-block(1,1). [ 53.774775][ T4213] md: md_import_device returned -6 [ 53.788731][ T37] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 53.971807][ T4225] netlink: 28 bytes leftover after parsing attributes in process `syz.3.135'. [ 54.003560][ T4225] bridge0: entered promiscuous mode [ 54.049175][ T4225] bridge0: left promiscuous mode [ 54.205308][ T4242] loop0: detected capacity change from 0 to 128 [ 54.219379][ T4242] ext4: Unknown parameter 'smackfsdef' [ 54.316604][ T3385] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 54.332542][ T4248] FAULT_INJECTION: forcing a failure. [ 54.332542][ T4248] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 54.332670][ T4248] CPU: 0 UID: 0 PID: 4248 Comm: syz.0.138 Not tainted syzkaller #0 PREEMPT(lazy) [ 54.332793][ T4248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 54.332807][ T4248] Call Trace: [ 54.332814][ T4248] [ 54.332822][ T4248] __dump_stack+0x1d/0x30 [ 54.332856][ T4248] dump_stack_lvl+0x95/0xd0 [ 54.332881][ T4248] dump_stack+0x15/0x1b [ 54.332905][ T4248] should_fail_ex+0x262/0x280 [ 54.332988][ T4248] should_fail+0xb/0x20 [ 54.333017][ T4248] should_fail_usercopy+0x1a/0x20 [ 54.333044][ T4248] _copy_from_user+0x1c/0xb0 [ 54.333180][ T4248] __sys_bpf+0x1e2/0xc30 [ 54.333226][ T4248] ? get_pid_task+0x92/0xc0 [ 54.333252][ T4248] ? vfs_write+0x770/0x9a0 [ 54.333293][ T4248] __x64_sys_bpf+0x69/0x80 [ 54.333321][ T4248] x64_sys_call+0xf26/0x2550 [ 54.333357][ T4248] do_syscall_64+0x112/0x360 [ 54.333383][ T4248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.333405][ T4248] RIP: 0033:0x7fe5ba4ae1d9 [ 54.333421][ T4248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.333443][ T4248] RSP: 002b:00007fe5b8f07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.333530][ T4248] RAX: ffffffffffffffda RBX: 00007fe5ba735fa0 RCX: 00007fe5ba4ae1d9 [ 54.333546][ T4248] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000002 [ 54.333562][ T4248] RBP: 00007fe5b8f07090 R08: 0000000000000000 R09: 0000000000000000 [ 54.333577][ T4248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.333591][ T4248] R13: 00007fe5ba736038 R14: 00007fe5ba735fa0 R15: 00007ffc459d9068 [ 54.333632][ T4248] [ 54.360118][ T29] audit: type=1400 audit(1791839728.286:286): avc: denied { wake_alarm } for pid=4249 comm="syz.0.139" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 54.399313][ T29] audit: type=1400 audit(1791839728.326:287): avc: denied { mounton } for pid=4253 comm="syz.0.140" path="/36/file0" dev="tmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 54.572774][ T29] audit: type=1400 audit(1791839728.496:288): avc: denied { write } for pid=4255 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 54.639109][ T4261] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 54.640967][ T29] audit: type=1400 audit(1791839728.566:289): avc: denied { ioctl } for pid=4257 comm="syz.5.141" path="/4/dev/md0" dev="devtmpfs" ino=626 ioctlcmd=0x921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 54.724292][ T4261] md: could not open device unknown-block(1,1). [ 54.724310][ T4261] md: md_import_device returned -6 [ 54.800927][ T4258] loop5: detected capacity change from 0 to 512 [ 54.836232][ T4271] loop0: detected capacity change from 0 to 512 [ 54.863746][ T4271] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.863879][ T4271] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.944970][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.062326][ T4281] macvtap3: entered allmulticast mode [ 55.175605][ T4268] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 55.175811][ T4282] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 55.175825][ T4282] block device autoloading is deprecated and will be removed. [ 55.197020][ T4281] macvtap4: entered allmulticast mode [ 55.271795][ T4268] md: could not open device unknown-block(1,1). [ 55.272013][ T4268] md: md_import_device returned -6 [ 55.326712][ T4285] bridge0: entered promiscuous mode [ 55.342989][ T4285] bridge0: left promiscuous mode [ 55.533412][ T4294] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 55.533439][ T4294] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 55.533481][ T4294] vhci_hcd vhci_hcd.0: Device attached [ 55.557705][ T29] audit: type=1400 audit(1791839729.486:290): avc: denied { ioctl } for pid=4295 comm="syz.5.153" path="socket:[5965]" dev="sockfs" ino=5965 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.619567][ T29] audit: type=1400 audit(1791839729.536:291): avc: denied { create } for pid=4295 comm="syz.5.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 55.669418][ T4297] vhci_hcd: cannot find a urb of seqnum 150 max seqnum 3 [ 55.670729][ T70] vhci_hcd vhci_hcd.0: stop threads [ 55.670747][ T70] vhci_hcd vhci_hcd.0: release socket [ 55.670771][ T70] vhci_hcd vhci_hcd.0: disconnect device [ 55.706041][ T37] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 56.050256][ T4309] __nla_validate_parse: 13 callbacks suppressed [ 56.050462][ T4309] netlink: 28 bytes leftover after parsing attributes in process `syz.6.156'. [ 56.050912][ T4309] netlink: 28 bytes leftover after parsing attributes in process `syz.6.156'. [ 56.055452][ T29] audit: type=1400 audit(1791839729.976:292): avc: denied { read } for pid=4310 comm="syz.5.158" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 56.055484][ T29] audit: type=1400 audit(1791839729.976:293): avc: denied { open } for pid=4310 comm="syz.5.158" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 56.178006][ T4314] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.188954][ T4314] EXT4-fs error (device loop5): ext4_get_journal_inode:5928: comm syz.5.159: inode #2147418112: comm syz.5.159: iget: illegal inode # [ 56.189004][ T4314] loop5: lost filesystem error report for type 5 error -117 [ 56.189130][ T4314] EXT4-fs (loop5): no journal found [ 56.189161][ T4314] EXT4-fs (loop5): can't get journal size [ 56.193059][ T4314] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 56.193339][ T4314] EXT4-fs (loop5): failed to initialize system zone (-117) [ 56.193364][ T4314] EXT4-fs (loop5): mount failed [ 56.447881][ T4326] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 56.532952][ T4326] md: could not open device unknown-block(1,1). [ 56.533143][ T4326] md: md_import_device returned -6 [ 56.658943][ T4326] set_capacity_and_notify: 4 callbacks suppressed [ 56.659007][ T4326] loop5: detected capacity change from 0 to 512 [ 56.821213][ T4332] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 56.939125][ T4332] md: could not open device unknown-block(1,1). [ 56.939214][ T4332] md: md_import_device returned -6 [ 57.053854][ T4334] netlink: 28 bytes leftover after parsing attributes in process `syz.0.162'. [ 57.054017][ T4334] netlink: 28 bytes leftover after parsing attributes in process `syz.0.162'. [ 57.163477][ T4332] loop6: detected capacity change from 0 to 512 [ 57.214455][ T4334] bridge0: entered promiscuous mode [ 57.299472][ T4334] bridge0: left promiscuous mode [ 57.506126][ T4346] netlink: 32 bytes leftover after parsing attributes in process `syz.5.165'. [ 57.742712][ T4356] loop0: detected capacity change from 0 to 512 [ 57.799948][ T4346] netlink: 28 bytes leftover after parsing attributes in process `syz.5.165'. [ 57.800338][ T4346] netlink: 28 bytes leftover after parsing attributes in process `syz.5.165'. [ 57.802660][ T4356] netlink: 104 bytes leftover after parsing attributes in process `syz.0.168'. [ 57.935739][ T4361] netlink: 92 bytes leftover after parsing attributes in process `syz.0.168'. [ 57.952627][ T4346] ip6gretap0: entered promiscuous mode [ 58.009025][ T4346] syz_tun: entered promiscuous mode [ 58.032631][ T4346] debugfs: 'hsr1' already exists in 'hsr' [ 58.032882][ T4346] Cannot create hsr debugfs directory [ 58.322119][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 58.322151][ T29] audit: type=1400 audit(1791839732.246:296): avc: denied { read } for pid=4364 comm="syz.0.171" laddr=::1 lport=41848 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 58.328903][ T4368] loop6: detected capacity change from 0 to 512 [ 58.365187][ T4371] loop5: detected capacity change from 0 to 512 [ 58.376837][ T4368] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.376900][ T4368] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.461372][ T4371] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 58.461401][ T4371] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 58.461436][ T4371] vhci_hcd vhci_hcd.0: Device attached [ 58.491285][ T29] audit: type=1400 audit(1791839732.416:297): avc: denied { setopt } for pid=4364 comm="syz.0.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.516248][ T4048] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.669113][ T4383] loop0: detected capacity change from 0 to 512 [ 58.695918][ T3385] usb 11-1: new high-speed USB device number 3 using vhci_hcd [ 58.773490][ T29] audit: type=1400 audit(1791839732.696:298): avc: denied { shutdown } for pid=4386 comm="syz.0.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.798140][ T4387] loop0: detected capacity change from 0 to 512 [ 58.800392][ T4387] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 58.800424][ T4387] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 58.800438][ T4387] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 58.808669][ T4387] EXT4-fs (loop0): 1 truncate cleaned up [ 58.809176][ T4387] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.823754][ T4387] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 58.823918][ T29] audit: type=1400 audit(1791839732.746:299): avc: denied { write } for pid=4386 comm="syz.0.176" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.844364][ T4387] EXT4-fs (loop0): shut down requested (2) [ 58.846996][ T29] audit: type=1400 audit(1791839732.776:300): avc: denied { read } for pid=2965 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 58.847024][ T29] audit: type=1400 audit(1791839732.776:301): avc: denied { search } for pid=2965 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.847107][ T29] audit: type=1400 audit(1791839732.776:302): avc: denied { write search } for pid=2965 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.847131][ T29] audit: type=1400 audit(1791839732.776:303): avc: denied { add_name } for pid=2965 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.847194][ T29] audit: type=1400 audit(1791839732.776:304): avc: denied { create } for pid=2965 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.847217][ T29] audit: type=1400 audit(1791839732.776:305): avc: denied { append open } for pid=2965 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.895904][ T4375] vhci_hcd: cannot find a urb of seqnum 150 max seqnum 1 [ 58.899524][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.925905][ T70] vhci_hcd vhci_hcd.5: stop threads [ 58.925978][ T70] vhci_hcd vhci_hcd.5: release socket [ 58.926000][ T70] vhci_hcd vhci_hcd.5: disconnect device [ 59.218522][ T4405] loop0: detected capacity change from 0 to 512 [ 59.230918][ T4405] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 59.230934][ T4405] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 59.233433][ T4405] EXT4-fs (loop0): 1 truncate cleaned up [ 59.233881][ T4405] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.523247][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.898130][ T4454] loop0: detected capacity change from 0 to 512 [ 60.984450][ T4454] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.183: corrupted in-inode xattr: invalid ea_ino [ 60.984531][ T4454] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 60.985796][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 60.985818][ C1] EXT4-fs (loop0): initial error at time 1791839734: ext4_iget_extra_inode:5210: inode 15 [ 60.985870][ C1] EXT4-fs (loop0): last error at time 1791839734: ext4_iget_extra_inode:5210: inode 15 [ 61.037325][ T4454] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.183: couldn't read orphan inode 15 (err -117) [ 61.037479][ T4454] loop0: lost filesystem error report for type 5 error -117 [ 61.095162][ T4454] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.145041][ T4454] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.925712][ T3904] syz_tun (unregistering): left promiscuous mode [ 61.940220][ T4454] loop0: detected capacity change from 0 to 512 [ 61.999130][ T4454] EXT4-fs: dax option not supported [ 62.041740][ T4459] loop5: detected capacity change from 0 to 512 [ 62.171858][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.291353][ T4459] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.292323][ T4459] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.353628][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.418504][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.573799][ T4461] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.573836][ T4461] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.573892][ T4461] bridge_slave_0: entered allmulticast mode [ 62.574370][ T4461] bridge_slave_0: entered promiscuous mode [ 62.605640][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.623369][ T4461] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.623401][ T4461] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.623487][ T4461] bridge_slave_1: entered allmulticast mode [ 62.624131][ T4461] bridge_slave_1: entered promiscuous mode [ 62.645650][ T4461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.648002][ T4479] loop0: detected capacity change from 0 to 512 [ 62.648767][ T4461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.681075][ T4479] EXT4-fs error (device loop0): ext4_read_inode_bitmap:141: comm syz.0.186: Invalid inode bitmap blk 4 in block_group 0 [ 62.681225][ T4479] loop0: lost filesystem error report for type 5 error -117 [ 62.689619][ T4461] team0: Port device team_slave_0 added [ 62.693469][ T4461] team0: Port device team_slave_1 added [ 62.704824][ T4479] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.741238][ T3875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.764937][ T4461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.764952][ T4461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.764986][ T4461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.765505][ T4461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.765516][ T4461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.765541][ T4461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.832731][ T4461] hsr_slave_0: entered promiscuous mode [ 62.833061][ T4461] hsr_slave_1: entered promiscuous mode [ 62.833281][ T4461] debugfs: 'hsr0' already exists in 'hsr' [ 62.833294][ T4461] Cannot create hsr debugfs directory [ 62.834821][ T4501] netlink: 44 bytes leftover after parsing attributes in process `syz.5.188'. [ 62.901439][ T12] bridge_slave_1: left allmulticast mode [ 62.901463][ T12] bridge_slave_1: left promiscuous mode [ 62.901579][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.902103][ T12] bridge_slave_0: left allmulticast mode [ 62.902117][ T12] bridge_slave_0: left promiscuous mode [ 62.902248][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.915454][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.025181][ T12] ip6gretap0 (unregistering): left promiscuous mode [ 63.115710][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.125078][ T4530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.191'. [ 63.125115][ T4530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.191'. [ 63.131229][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.154049][ T12] bond0 (unregistering): Released all slaves [ 63.195288][ T4530] macvtap7: entered allmulticast mode [ 63.250517][ T12] hsr_slave_0: left promiscuous mode [ 63.252565][ T12] hsr_slave_1: left promiscuous mode [ 63.253000][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.253016][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.254659][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.254729][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.261802][ T12] dummy0: left allmulticast mode [ 63.261843][ T12] veth1_macvtap: left promiscuous mode [ 63.261934][ T12] veth0_macvtap: left promiscuous mode [ 63.262057][ T12] veth1_vlan: left promiscuous mode [ 63.262156][ T12] veth0_vlan: left promiscuous mode [ 63.355866][ T4530] netlink: 55 bytes leftover after parsing attributes in process `syz.0.191'. [ 63.355922][ T4530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.191'. [ 63.398409][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 63.398425][ T29] audit: type=1400 audit(1791839737.326:332): avc: denied { write } for pid=4533 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.398449][ T29] audit: type=1400 audit(1791839737.326:333): avc: denied { create } for pid=4533 comm="dhcpcd-run-hook" name="resolv.conf.eth5.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.398473][ T29] audit: type=1400 audit(1791839737.326:334): avc: denied { write } for pid=4533 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth5.ipv4ll" dev="tmpfs" ino=1462 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.398782][ T29] audit: type=1400 audit(1791839737.326:335): avc: denied { append } for pid=4533 comm="dhcpcd-run-hook" name="resolv.conf.eth5.ipv4ll" dev="tmpfs" ino=1462 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.517417][ T29] audit: type=1400 audit(1791839737.446:336): avc: denied { write } for pid=4544 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.517449][ T29] audit: type=1400 audit(1791839737.446:337): avc: denied { unlink } for pid=4544 comm="rm" name="resolv.conf.eth5.ipv4ll" dev="tmpfs" ino=1462 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.620155][ T12] team0 (unregistering): Port device team_slave_1 removed [ 63.639091][ T12] team0 (unregistering): Port device team_slave_0 removed [ 63.741893][ T4530] macvtap8: entered allmulticast mode [ 63.836381][ T3385] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 63.907845][ T29] audit: type=1400 audit(1791839737.836:338): avc: denied { setopt } for pid=4553 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 63.946914][ T29] audit: type=1400 audit(1791839737.876:339): avc: denied { write } for pid=4549 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.952806][ T4461] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 63.960125][ T4461] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.962372][ T4461] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 63.983668][ T4461] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.988221][ T4461] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 63.989261][ T12] IPVS: stop unused estimator thread 0... [ 63.999050][ T4461] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.999680][ T4461] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 64.031968][ T4461] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.047337][ T29] audit: type=1400 audit(1791839737.976:340): avc: denied { write } for pid=4564 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.101178][ T3022] 8021q: adding VLAN 0 to HW filter on device eth9 [ 64.158369][ T4461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.175206][ T4461] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.180299][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.180332][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.185323][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.185356][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.274770][ T29] audit: type=1400 audit(1791839738.196:341): avc: denied { write } for pid=4574 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.310814][ T3875] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 64.310852][ T3875] CPU: 0 UID: 0 PID: 3875 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 64.310881][ T3875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 64.310926][ T3875] Call Trace: [ 64.310934][ T3875] [ 64.310943][ T3875] __dump_stack+0x1d/0x30 [ 64.310973][ T3875] dump_stack_lvl+0x95/0xd0 [ 64.311024][ T3875] dump_stack+0x15/0x1b [ 64.311047][ T3875] dump_header+0x80/0x240 [ 64.311070][ T3875] oom_kill_process+0x294/0x420 [ 64.311142][ T3875] out_of_memory+0x981/0xbc0 [ 64.311211][ T3875] try_charge_memcg+0x6ba/0xae0 [ 64.311291][ T3875] charge_memcg+0x16f/0x220 [ 64.311324][ T3875] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 64.311361][ T3875] swap_cache_alloc_folio+0x47b/0x610 [ 64.311429][ T3875] swap_cluster_readahead+0x2b7/0x460 [ 64.311465][ T3875] swapin_readahead+0xd8/0x8a0 [ 64.311495][ T3875] ? _raw_spin_unlock+0x9/0x30 [ 64.311592][ T3875] ? __hrtimer_rearm_deferred+0x571/0x650 [ 64.311660][ T3875] ? __rcu_read_unlock+0x4e/0x70 [ 64.311693][ T3875] ? swap_cache_get_folio+0x1f7/0x200 [ 64.311800][ T3875] do_swap_page+0x2b7/0x1e40 [ 64.311828][ T3875] ? __rcu_read_lock+0x36/0x50 [ 64.311979][ T3875] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 64.312027][ T3875] handle_mm_fault+0xb29/0x3bb0 [ 64.312064][ T3875] do_user_addr_fault+0x636/0x1060 [ 64.312102][ T3875] ? trace_page_fault_user+0x1f/0xa0 [ 64.312205][ T3875] exc_page_fault+0x62/0xa0 [ 64.312280][ T3875] asm_exc_page_fault+0x26/0x30 [ 64.312304][ T3875] RIP: 0033:0x7f039dd59357 [ 64.312327][ T3875] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 64.312345][ T3875] RSP: 002b:00007ffe8740d370 EFLAGS: 00010202 [ 64.312399][ T3875] RAX: 0000000000000000 RBX: 0000555561dc9500 RCX: 00007f039dd59357 [ 64.312412][ T3875] RDX: 00007ffe8740d3b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 64.312427][ T3875] RBP: 00007ffe8740d41c R08: 0000000000000000 R09: 0000000000000000 [ 64.312442][ T3875] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 64.312455][ T3875] R13: 00000000000927c0 R14: 000000000000f90a R15: 00007ffe8740d470 [ 64.312504][ T3875] [ 64.337767][ T3875] memory: usage 306940kB, limit 307200kB, failcnt 352 [ 64.337787][ T3875] memory+swap: usage 307204kB, limit 9007199254740988kB, failcnt 0 [ 64.337865][ T3875] kmem: usage 306800kB, limit 9007199254740988kB, failcnt 0 [ 64.337878][ T3875] Memory cgroup stats for /syz5: [ 64.338092][ T3875] cache 0 [ 64.338100][ T3875] rss 0 [ 64.338106][ T3875] shmem 0 [ 64.338163][ T3875] mapped_file 0 [ 64.338170][ T3875] dirty 0 [ 64.338177][ T3875] writeback 0 [ 64.338184][ T3875] workingset_refault_anon 35 [ 64.338192][ T3875] workingset_refault_file 0 [ 64.338200][ T3875] swap 270336 [ 64.338247][ T3875] swapcached 413696 [ 64.338255][ T3875] pgpgin 7378 [ 64.338262][ T3875] pgpgout 7378 [ 64.338269][ T3875] pgfault 7812 [ 64.338276][ T3875] pgmajfault 20 [ 64.338297][ T3875] inactive_anon 0 [ 64.338304][ T3875] active_anon 0 [ 64.338311][ T3875] inactive_file 0 [ 64.338354][ T3875] active_file 0 [ 64.338361][ T3875] unevictable 0 [ 64.338369][ T3875] hierarchical_memory_limit 314572800 [ 64.338388][ T3875] hierarchical_memsw_limit 9223372036854771712 [ 64.338397][ T3875] total_cache 0 [ 64.338404][ T3875] total_rss 0 [ 64.338411][ T3875] total_shmem 0 [ 64.338419][ T3875] total_mapped_file 0 [ 64.338427][ T3875] total_dirty 0 [ 64.338434][ T3875] total_writeback 0 [ 64.338442][ T3875] total_workingset_refault_anon 35 [ 64.338450][ T3875] total_workingset_refault_file 0 [ 64.338490][ T3875] total_swap 270336 [ 64.338567][ T3875] total_swapcached 413696 [ 64.338575][ T3875] total_pgpgin 7378 [ 64.338582][ T3875] total_pgpgout 7378 [ 64.338590][ T3875] total_pgfault 7812 [ 64.338673][ T3875] total_pgmajfault 20 [ 64.338681][ T3875] total_inactive_anon 0 [ 64.338689][ T3875] total_active_anon 0 [ 64.338714][ T3875] total_inactive_file 0 [ 64.338722][ T3875] total_active_file 0 [ 64.338730][ T3875] total_unevictable 0 [ 64.338738][ T3875] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.189,pid=4506,uid=0 [ 64.338906][ T3875] Memory cgroup out of memory: Killed process 4516 (syz.5.189) total-vm:91544kB, anon-rss:1248kB, file-rss:21648kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 64.815247][ T4461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.872276][ T3022] 8021q: adding VLAN 0 to HW filter on device eth10 [ 65.004766][ T4634] netlink: 32 bytes leftover after parsing attributes in process `syz.0.198'. [ 65.080545][ T4461] veth0_vlan: entered promiscuous mode [ 65.090620][ T4461] veth1_vlan: entered promiscuous mode [ 65.131289][ T4461] veth0_macvtap: entered promiscuous mode [ 65.141244][ T4461] veth1_macvtap: entered promiscuous mode [ 65.176737][ T4461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.200041][ T4461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.876301][ T51] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.876826][ T51] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.876862][ T51] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.876975][ T51] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.974474][ T4656] loop5: detected capacity change from 0 to 512 [ 66.106860][ T3022] 8021q: adding VLAN 0 to HW filter on device eth11 [ 66.113662][ T4656] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.199: bg 0: block 5: invalid block bitmap [ 66.113690][ T4656] loop5: lost filesystem error report for type 5 error -117 [ 66.114949][ T4656] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 66.114970][ T4656] loop5: lost filesystem error report for type 5 error -117 [ 66.115459][ T4656] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.199: invalid indirect mapped block 3 (level 2) [ 66.115570][ T4656] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 66.115838][ C0] EXT4-fs (loop5): error count since last fsck: 3 [ 66.115857][ C0] EXT4-fs (loop5): initial error at time 1791839740: ext4_validate_block_bitmap:436 [ 66.115879][ C0] EXT4-fs (loop5): last error at time 1791839740: ext4_free_branches:1023: inode 11 [ 66.623833][ T4656] EXT4-fs (loop5): 1 orphan inode deleted [ 66.623923][ T4656] EXT4-fs (loop5): 1 truncate cleaned up [ 66.624347][ T4656] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.695944][ T4684] process 'syz.7.185' launched '/dev/fd/3' with NULL argv: empty string added [ 66.730339][ T3875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.930092][ T3022] 8021q: adding VLAN 0 to HW filter on device eth12 [ 66.939688][ T4706] loop0: detected capacity change from 0 to 512 [ 67.191797][ T4718] netlink: 32 bytes leftover after parsing attributes in process `syz.0.207'. [ 67.193135][ T4704] netlink: 28 bytes leftover after parsing attributes in process `syz.5.203'. [ 67.193168][ T4704] netlink: 28 bytes leftover after parsing attributes in process `syz.5.203'. [ 67.340983][ T4718] netlink: 28 bytes leftover after parsing attributes in process `syz.0.207'. [ 67.384975][ T4725] loop5: detected capacity change from 0 to 512 [ 67.407868][ T4725] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 67.408053][ T4725] EXT4-fs error (device loop5) in ext4_process_orphan:346: Out of memory [ 67.408107][ T4725] loop5: lost filesystem error report for type 5 error -12 [ 67.409555][ T4725] EXT4-fs (loop5): 1 truncate cleaned up [ 67.410023][ T4725] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.614423][ T4727] loop6: detected capacity change from 0 to 512 [ 67.712920][ T4735] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 67.745536][ T4735] loop7: detected capacity change from 0 to 512 [ 68.082345][ T4727] EXT4-fs (loop6): 1 truncate cleaned up [ 68.083291][ T4727] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.151370][ T4048] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.171491][ T4738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4738 comm=syz.0.211 [ 68.270825][ T3875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.296381][ T4738] loop0: detected capacity change from 0 to 512 [ 68.352332][ T4738] EXT4-fs: dax option not supported [ 68.432589][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 68.432606][ T29] audit: type=1400 audit(1791839742.356:429): avc: denied { sys_module } for pid=4743 comm="syz.5.213" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 68.452870][ T4741] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.461110][ T4741] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.501747][ T29] audit: type=1400 audit(1791839742.426:430): avc: denied { read } for pid=4739 comm="syz.6.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 68.528205][ T29] audit: type=1400 audit(1791839742.456:431): avc: denied { shutdown } for pid=4743 comm="syz.5.213" lport=45826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.551292][ T29] audit: type=1400 audit(1791839742.466:432): avc: denied { write } for pid=4739 comm="syz.6.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 68.557171][ T29] audit: type=1400 audit(1791839742.486:433): avc: denied { getopt } for pid=4743 comm="syz.5.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.564855][ T4744] sctp: [Deprecated]: syz.5.213 (pid 4744) Use of struct sctp_assoc_value in delayed_ack socket option. [ 68.564855][ T4744] Use struct sctp_sack_info instead [ 68.652436][ T29] audit: type=1400 audit(1791839742.566:434): avc: denied { map } for pid=4743 comm="syz.5.213" path="socket:[9436]" dev="sockfs" ino=9436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.655308][ T29] audit: type=1400 audit(1791839742.576:435): avc: denied { read write } for pid=4743 comm="syz.5.213" path="socket:[9436]" dev="sockfs" ino=9436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.757508][ T29] audit: type=1400 audit(1791839742.686:436): avc: denied { write } for pid=4739 comm="syz.6.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 68.860717][ T4740] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 68.997958][ T29] audit: type=1400 audit(1791839742.926:437): avc: denied { unmount } for pid=4048 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 69.049091][ T4760] __nla_validate_parse: 1 callbacks suppressed [ 69.049108][ T4760] netlink: 64 bytes leftover after parsing attributes in process `syz.0.216'. [ 69.049160][ T29] audit: type=1400 audit(1791839742.976:438): avc: denied { write } for pid=4755 comm="syz.0.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 69.147160][ T4756] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 69.215297][ T4766] loop6: detected capacity change from 0 to 512 [ 69.235587][ T4766] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 69.242510][ T4766] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 69.242650][ T4766] EXT4-fs (loop6): orphan cleanup on readonly fs [ 69.242884][ T4766] EXT4-fs warning (device loop6): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 69.242914][ T4766] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 69.243428][ T4766] EXT4-fs error (device loop6): ext4_orphan_get:1403: inode #16: comm syz.6.218: casefold flag without casefold feature [ 69.243453][ T4766] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 69.243677][ T4766] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.218: couldn't read orphan inode 16 (err -117) [ 69.243720][ T4766] loop6: lost filesystem error report for type 5 error -117 [ 69.244288][ T4766] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.977542][ T4048] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.683602][ T4791] loop7: detected capacity change from 0 to 512 [ 70.711803][ T4791] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 70.712177][ T4791] EXT4-fs error (device loop7) in ext4_process_orphan:346: Out of memory [ 70.712194][ T4791] loop7: lost filesystem error report for type 5 error -12 [ 70.712385][ T4791] EXT4-fs (loop7): 1 truncate cleaned up [ 70.712884][ T4791] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.772631][ T4276] syz_tun (unregistering): left promiscuous mode [ 71.231803][ T4810] netlink: 32 bytes leftover after parsing attributes in process `syz.5.226'. [ 71.415289][ T363] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.504220][ T363] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.505625][ T4795] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.505659][ T4795] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.505721][ T4795] bridge_slave_0: entered allmulticast mode [ 71.519721][ T4785] loop6: detected capacity change from 0 to 8192 [ 71.585484][ T4795] bridge_slave_0: entered promiscuous mode [ 71.587024][ T4461] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.605491][ T4785] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.619057][ T363] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.629840][ T4795] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.629871][ T4795] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.630018][ T4795] bridge_slave_1: entered allmulticast mode [ 71.630564][ T4795] bridge_slave_1: entered promiscuous mode [ 71.634202][ T4815] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 71.675336][ T363] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.687897][ T4795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.692414][ T4795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.773387][ T4815] loop0: detected capacity change from 0 to 512 [ 71.797906][ T4795] team0: Port device team_slave_0 added [ 71.799046][ T4795] team0: Port device team_slave_1 added [ 71.821089][ T4795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.821136][ T4795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.821171][ T4795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.821711][ T4795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.821724][ T4795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.821803][ T4795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.905970][ T4795] hsr_slave_0: entered promiscuous mode [ 71.906374][ T4795] hsr_slave_1: entered promiscuous mode [ 71.953234][ T4048] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001) [ 71.953257][ T4048] FAT-fs (loop6): Filesystem has been set read-only [ 71.992778][ T4810] netlink: 28 bytes leftover after parsing attributes in process `syz.5.226'. [ 71.993038][ T4810] netlink: 28 bytes leftover after parsing attributes in process `syz.5.226'. [ 72.060750][ T4810] bridge0: entered promiscuous mode [ 72.088423][ T4810] bridge0: left promiscuous mode [ 72.161232][ T363] bridge_slave_1: left allmulticast mode [ 72.161253][ T363] bridge_slave_1: left promiscuous mode [ 72.161374][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.163692][ T363] bridge_slave_0: left allmulticast mode [ 72.163817][ T363] bridge_slave_0: left promiscuous mode [ 72.163911][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.165419][ T4822] loop7: detected capacity change from 0 to 512 [ 72.265216][ T363] ip6gretap0 (unregistering): left promiscuous mode [ 72.379603][ T4822] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.380603][ T4822] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.632579][ T4833] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 72.791880][ T4842] netlink: 64 bytes leftover after parsing attributes in process `syz.6.230'. [ 72.974691][ T363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.989212][ T363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.992041][ T363] bond0 (unregistering): Released all slaves [ 73.025256][ T4461] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.199743][ T363] hsr_slave_0: left promiscuous mode [ 73.200200][ T363] hsr_slave_1: left promiscuous mode [ 73.200660][ T363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.200675][ T363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.202507][ T363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.202522][ T363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.251784][ T4850] loop0: detected capacity change from 0 to 512 [ 73.261488][ T363] dummy0: left allmulticast mode [ 73.261545][ T363] veth1_macvtap: left promiscuous mode [ 73.261567][ T363] veth0_macvtap: left promiscuous mode [ 73.261612][ T363] veth1_vlan: left promiscuous mode [ 73.261712][ T363] veth0_vlan: left promiscuous mode [ 73.296482][ T4850] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 73.296784][ T4850] EXT4-fs error (device loop0) in ext4_process_orphan:346: Out of memory [ 73.296876][ T4850] loop0: lost filesystem error report for type 5 error -12 [ 73.297111][ T4850] EXT4-fs (loop0): 1 truncate cleaned up [ 73.297519][ T4850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.511581][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 73.511643][ T29] audit: type=1400 audit(1791839747.426:490): avc: denied { create } for pid=4848 comm="syz.0.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.511686][ T29] audit: type=1400 audit(1791839747.426:491): avc: denied { create } for pid=4848 comm="syz.0.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.511726][ T29] audit: type=1400 audit(1791839747.426:492): avc: denied { connect } for pid=4848 comm="syz.0.234" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.511854][ T29] audit: type=1400 audit(1791839747.436:493): avc: denied { setopt } for pid=4848 comm="syz.0.234" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.511947][ T29] audit: type=1400 audit(1791839747.436:494): avc: denied { read } for pid=4848 comm="syz.0.234" dev="nsfs" ino=4026532599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 73.511968][ T29] audit: type=1400 audit(1791839747.436:495): avc: denied { open } for pid=4848 comm="syz.0.234" path="net:[4026532599]" dev="nsfs" ino=4026532599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 73.512152][ T29] audit: type=1400 audit(1791839747.436:496): avc: denied { create } for pid=4848 comm="syz.0.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.769701][ T363] team0 (unregistering): Port device team_slave_1 removed [ 73.790995][ T363] team0 (unregistering): Port device team_slave_0 removed [ 73.889144][ T29] audit: type=1400 audit(1791839747.816:497): avc: denied { read } for pid=4859 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.889176][ T29] audit: type=1400 audit(1791839747.816:498): avc: denied { read open } for pid=4859 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.889289][ T29] audit: type=1400 audit(1791839747.816:499): avc: denied { getattr } for pid=4859 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.998737][ T4795] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 74.004585][ T4795] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.005068][ T4795] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 74.067475][ T4795] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.068039][ T4795] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 74.069947][ T4795] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.070509][ T4795] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 74.072324][ T4795] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.073849][ T3022] 8021q: adding VLAN 0 to HW filter on device eth13 [ 74.096752][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.276809][ T4795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.278683][ T4883] loop0: detected capacity change from 0 to 512 [ 74.309348][ T4883] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 74.309510][ T4883] EXT4-fs error (device loop0) in ext4_process_orphan:346: Out of memory [ 74.309529][ T4883] loop0: lost filesystem error report for type 5 error -12 [ 74.309752][ T4883] EXT4-fs (loop0): 1 truncate cleaned up [ 74.310077][ T4883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.316107][ T4795] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.322498][ T3430] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.322531][ T3430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.328170][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.328202][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.471059][ T3022] 8021q: adding VLAN 0 to HW filter on device eth14 [ 74.663040][ T4907] loop6: detected capacity change from 0 to 512 [ 74.711669][ T4907] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.711917][ T4907] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.077459][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.143651][ T4048] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.165426][ T4927] netlink: 32 bytes leftover after parsing attributes in process `syz.0.238'. [ 75.174211][ T4795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.253190][ T3022] 8021q: adding VLAN 0 to HW filter on device eth15 [ 75.420970][ T4956] netlink: 32 bytes leftover after parsing attributes in process `syz.5.240'. [ 75.471934][ T4795] veth0_vlan: entered promiscuous mode [ 75.481648][ T4795] veth1_vlan: entered promiscuous mode [ 75.489281][ T3022] 8021q: adding VLAN 0 to HW filter on device eth16 [ 75.517523][ T4795] veth0_macvtap: entered promiscuous mode [ 75.518750][ T4795] veth1_macvtap: entered promiscuous mode [ 75.533355][ T4795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.537402][ T4795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.606702][ T31] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.606789][ T31] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.606826][ T31] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.606879][ T31] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.778235][ T4979] loop8: detected capacity change from 0 to 512 [ 75.807816][ T4979] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 75.807988][ T4979] EXT4-fs error (device loop8) in ext4_process_orphan:346: Out of memory [ 75.808036][ T4979] loop8: lost filesystem error report for type 5 error -12 [ 75.808267][ T4979] EXT4-fs (loop8): 1 truncate cleaned up [ 75.808582][ T4979] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.937187][ T4973] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 75.971179][ T4973] loop6: detected capacity change from 0 to 512 [ 75.972277][ T4927] netlink: 28 bytes leftover after parsing attributes in process `syz.0.238'. [ 75.972537][ T4927] netlink: 28 bytes leftover after parsing attributes in process `syz.0.238'. [ 76.102388][ T4927] bridge0: entered promiscuous mode [ 76.176532][ T4927] bridge0: left promiscuous mode [ 76.544453][ T4990] FAULT_INJECTION: forcing a failure. [ 76.544453][ T4990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.544484][ T4990] CPU: 0 UID: 0 PID: 4990 Comm: syz.0.244 Not tainted syzkaller #0 PREEMPT(lazy) [ 76.544516][ T4990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 76.544531][ T4990] Call Trace: [ 76.544564][ T4990] [ 76.544572][ T4990] __dump_stack+0x1d/0x30 [ 76.544602][ T4990] dump_stack_lvl+0x95/0xd0 [ 76.544627][ T4990] dump_stack+0x15/0x1b [ 76.544651][ T4990] should_fail_ex+0x262/0x280 [ 76.544739][ T4990] should_fail+0xb/0x20 [ 76.544765][ T4990] should_fail_usercopy+0x1a/0x20 [ 76.544798][ T4990] _copy_from_user+0x1c/0xb0 [ 76.544839][ T4990] ___sys_sendmsg+0xc1/0x1e0 [ 76.544876][ T4990] __x64_sys_sendmsg+0xd4/0x160 [ 76.544906][ T4990] x64_sys_call+0x22ab/0x2550 [ 76.544956][ T4990] do_syscall_64+0x112/0x360 [ 76.544987][ T4990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.545014][ T4990] RIP: 0033:0x7fe5ba4ae1d9 [ 76.545029][ T4990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.545046][ T4990] RSP: 002b:00007fe5b8f07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.545069][ T4990] RAX: ffffffffffffffda RBX: 00007fe5ba735fa0 RCX: 00007fe5ba4ae1d9 [ 76.545082][ T4990] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 76.545175][ T4990] RBP: 00007fe5b8f07090 R08: 0000000000000000 R09: 0000000000000000 [ 76.545188][ T4990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.545203][ T4990] R13: 00007fe5ba736038 R14: 00007fe5ba735fa0 R15: 00007ffc459d9068 [ 76.545224][ T4990] [ 76.629243][ T4992] loop0: detected capacity change from 0 to 512 [ 76.652023][ T4992] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 76.652467][ T4992] EXT4-fs error (device loop0) in ext4_process_orphan:346: Out of memory [ 76.652488][ T4992] loop0: lost filesystem error report for type 5 error -12 [ 76.653845][ T4992] EXT4-fs (loop0): 1 truncate cleaned up [ 76.654436][ T4992] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.781662][ T4795] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.963200][ T4988] loop7: detected capacity change from 0 to 512 [ 77.108772][ T5002] SELinux: Context system_u:object_r:scanner_device_t:s0 is not valid (left unmapped). [ 77.328042][ T4988] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 77.346728][ T4988] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 77.347792][ T4988] EXT4-fs (loop7): orphan cleanup on readonly fs [ 77.352499][ T4988] EXT4-fs warning (device loop7): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 77.352609][ T4988] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 77.355437][ T4988] EXT4-fs error (device loop7): ext4_orphan_get:1403: inode #16: comm syz.7.243: casefold flag without casefold feature [ 77.355593][ T4988] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 77.355881][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 77.356023][ C0] EXT4-fs (loop7): initial error at time 1791839751: ext4_orphan_get:1403: inode 16 [ 77.356111][ C0] EXT4-fs (loop7): last error at time 1791839751: ext4_orphan_get:1403: inode 16 [ 77.446725][ T4988] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.243: couldn't read orphan inode 16 (err -117) [ 77.447005][ T4988] loop7: lost filesystem error report for type 5 error -117 [ 77.512828][ T4988] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.566773][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.644083][ T5015] Zero length message leads to an empty skb [ 77.751372][ T4997] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 77.903539][ T5013] loop0: detected capacity change from 0 to 512 [ 77.918057][ T5013] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 77.918194][ T5013] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 77.950057][ T5013] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.249: bad orphan inode 131072 [ 77.950115][ T5013] loop0: lost filesystem error report for type 5 error -117 [ 77.971010][ T5013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.009640][ T4461] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.092749][ T5013] FAULT_INJECTION: forcing a failure. [ 78.092749][ T5013] name failslab, interval 1, probability 0, space 0, times 0 [ 78.092863][ T5013] CPU: 0 UID: 0 PID: 5013 Comm: syz.0.249 Not tainted syzkaller #0 PREEMPT(lazy) [ 78.092891][ T5013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 78.092904][ T5013] Call Trace: [ 78.092911][ T5013] [ 78.092920][ T5013] __dump_stack+0x1d/0x30 [ 78.093016][ T5013] dump_stack_lvl+0x95/0xd0 [ 78.093040][ T5013] dump_stack+0x15/0x1b [ 78.093076][ T5013] should_fail_ex+0x262/0x280 [ 78.093136][ T5013] ? __seq_open_private+0x6d/0x120 [ 78.093159][ T5013] should_failslab+0x8c/0xb0 [ 78.093191][ T5013] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 78.093285][ T5013] ? __seq_open_private+0x6d/0x120 [ 78.093305][ T5013] __seq_open_private+0x6d/0x120 [ 78.093325][ T5013] pid_maps_open+0x2a/0xa0 [ 78.093348][ T5013] do_dentry_open+0x49f/0xa60 [ 78.093435][ T5013] ? __pfx_pid_maps_open+0x10/0x10 [ 78.093555][ T5013] vfs_open+0x37/0x1e0 [ 78.093581][ T5013] path_openat+0xc01/0x10d0 [ 78.093663][ T5013] ? irqentry_exit+0x58f/0x610 [ 78.093750][ T5013] do_file_open+0x16c/0x290 [ 78.093783][ T5013] ? __pfx_kfree_link+0x10/0x10 [ 78.093811][ T5013] do_sys_openat2+0xa0/0x130 [ 78.093874][ T5013] __x64_sys_openat+0xf2/0x120 [ 78.093991][ T5013] x64_sys_call+0x1f72/0x2550 [ 78.094028][ T5013] do_syscall_64+0x112/0x360 [ 78.094054][ T5013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.094076][ T5013] RIP: 0033:0x7fe5ba46ea0e [ 78.094091][ T5013] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 78.094168][ T5013] RSP: 002b:00007fe5b8f06ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 78.094259][ T5013] RAX: ffffffffffffffda RBX: 00007fe5b8f076c0 RCX: 00007fe5ba46ea0e [ 78.094273][ T5013] RDX: 0000000000000002 RSI: 00007fe5b8f06f90 RDI: ffffffffffffff9c [ 78.094286][ T5013] RBP: 00007fe5ba545888 R08: 0000000000000000 R09: 0000000000000000 [ 78.094300][ T5013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.094316][ T5013] R13: 00007fe5ba736038 R14: 00007fe5ba735fa0 R15: 00007ffc459d9068 [ 78.094334][ T5013] [ 78.113202][ T5023] mmap: syz.8.254 (5023): VmData 17448960 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 78.233487][ T3304] EXT4-fs error (device loop0): ext4_readdir:280: inode #2: block 13: comm syz-executor: path /73/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 78.378349][ T4723] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.400883][ T4723] syz_tun (unregistering): left promiscuous mode [ 78.523617][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 78.523671][ T29] audit: type=1400 audit(1791839752.446:617): avc: denied { wake_alarm } for pid=5042 comm="syz.6.262" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.744984][ T5051] FAULT_INJECTION: forcing a failure. [ 78.744984][ T5051] name failslab, interval 1, probability 0, space 0, times 0 [ 78.745014][ T5051] CPU: 0 UID: 0 PID: 5051 Comm: syz.8.264 Not tainted syzkaller #0 PREEMPT(lazy) [ 78.745092][ T5051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 78.745107][ T5051] Call Trace: [ 78.745113][ T5051] [ 78.745119][ T5051] __dump_stack+0x1d/0x30 [ 78.745143][ T5051] dump_stack_lvl+0x95/0xd0 [ 78.745165][ T5051] dump_stack+0x15/0x1b [ 78.745227][ T5051] should_fail_ex+0x262/0x280 [ 78.745255][ T5051] ? dst_alloc+0xbd/0x100 [ 78.745324][ T5051] should_failslab+0x8c/0xb0 [ 78.745360][ T5051] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 78.745397][ T5051] ? dst_alloc+0xbd/0x100 [ 78.745458][ T5051] dst_alloc+0xbd/0x100 [ 78.745484][ T5051] ? ip_route_output_key_hash_rcu+0x9b2/0x1320 [ 78.745513][ T5051] ip_route_output_key_hash_rcu+0xed9/0x1320 [ 78.745540][ T5051] ip_route_output_flow+0x65/0x110 [ 78.745642][ T5051] do_output_route4+0x104/0x180 [ 78.745674][ T5051] __ip_vs_get_out_rt+0x256/0xac0 [ 78.745724][ T5051] ? irqentry_exit+0x7d/0x610 [ 78.745749][ T5051] ip_vs_tunnel_xmit+0xfa/0xb60 [ 78.745817][ T5051] ? ip_vs_in_hook+0x827/0x1300 [ 78.745848][ T5051] ? __pfx_ip_vs_tunnel_xmit+0x10/0x10 [ 78.745881][ T5051] ip_vs_in_hook+0x83e/0x1300 [ 78.745973][ T5051] ? ip_vs_in_hook+0x6b8/0x1300 [ 78.746009][ T5051] ? __pfx_ip_vs_conn_out_get_proto+0x10/0x10 [ 78.746050][ T5051] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 78.746146][ T5051] nf_hook_slow+0x78/0x180 [ 78.746173][ T5051] __ip_local_out+0x2fd/0x320 [ 78.746194][ T5051] ? __pfx_dst_output+0x10/0x10 [ 78.746285][ T5051] ip_send_skb+0x32/0x140 [ 78.746310][ T5051] udp_send_skb+0x542/0x7b0 [ 78.746335][ T5051] udp_sendmsg+0x1094/0x14e0 [ 78.746360][ T5051] udpv6_sendmsg+0x8ee/0x1700 [ 78.746424][ T5051] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 78.746456][ T5051] inet6_sendmsg+0xac/0xd0 [ 78.746484][ T5051] ? __pfx_inet6_sendmsg+0x10/0x10 [ 78.746576][ T5051] ____sys_sendmsg+0x390/0x580 [ 78.746644][ T5051] ___sys_sendmsg+0x195/0x1e0 [ 78.746677][ T5051] __x64_sys_sendmsg+0xd4/0x160 [ 78.746735][ T5051] x64_sys_call+0x22ab/0x2550 [ 78.746765][ T5051] do_syscall_64+0x112/0x360 [ 78.746841][ T5051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.746933][ T5051] RIP: 0033:0x7f9ebfc6e1d9 [ 78.746947][ T5051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.747009][ T5051] RSP: 002b:00007f9ebe685028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.747064][ T5051] RAX: ffffffffffffffda RBX: 00007f9ebfef6180 RCX: 00007f9ebfc6e1d9 [ 78.747081][ T5051] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 78.747096][ T5051] RBP: 00007f9ebe685090 R08: 0000000000000000 R09: 0000000000000000 [ 78.747110][ T5051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 78.747122][ T5051] R13: 00007f9ebfef6218 R14: 00007f9ebfef6180 R15: 00007ffc39247648 [ 78.747167][ T5051] [ 78.832657][ T51] IPVS: starting estimator thread 0... [ 78.940692][ T5052] IPVS: using max 2592 ests per chain, 129600 per kthread [ 79.163685][ T3430] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.165148][ T5059] loop6: detected capacity change from 0 to 512 [ 79.193748][ T5059] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 79.199292][ T5059] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 79.199434][ T5059] EXT4-fs (loop6): orphan cleanup on readonly fs [ 79.199570][ T5059] EXT4-fs warning (device loop6): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 79.199599][ T5059] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 79.199687][ T5059] EXT4-fs error (device loop6): ext4_orphan_get:1403: inode #16: comm syz.6.265: casefold flag without casefold feature [ 79.199755][ T5059] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 79.199873][ T5059] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.265: couldn't read orphan inode 16 (err -117) [ 79.199901][ T5059] loop6: lost filesystem error report for type 5 error -117 [ 79.200439][ T5059] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.275465][ T29] audit: type=1400 audit(1791839753.206:618): avc: denied { mounton } for pid=5067 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 79.323104][ T29] audit: type=1400 audit(1791839753.246:619): avc: denied { write } for pid=5053 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.351403][ T3430] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.453002][ T3430] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.456705][ T29] audit: type=1400 audit(1791839753.386:620): avc: denied { write } for pid=5072 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.635000][ T5079] 9p: Bad value for 'port' [ 79.641806][ T5079] netlink: 20 bytes leftover after parsing attributes in process `syz.8.268'. [ 79.642184][ T29] audit: type=1400 audit(1791839753.566:621): avc: denied { connect } for pid=5076 comm="syz.8.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.646568][ T3430] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.753548][ T3430] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.775346][ T29] audit: type=1400 audit(1791839753.696:622): avc: denied { write } for pid=5083 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.822174][ T29] audit: type=1400 audit(1791839753.746:623): avc: denied { write } for pid=5097 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.902525][ T29] audit: type=1400 audit(1791839753.826:624): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 79.991565][ T3430] bridge_slave_1: left allmulticast mode [ 79.991590][ T3430] bridge_slave_1: left promiscuous mode [ 79.991686][ T3430] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.992564][ T4048] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.993128][ T3430] bridge_slave_0: left allmulticast mode [ 79.993144][ T3430] bridge_slave_0: left promiscuous mode [ 79.993227][ T3430] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.087532][ T3430] ip6gretap0 (unregistering): left promiscuous mode [ 80.129404][ T29] audit: type=1400 audit(1791839754.056:625): avc: denied { write } for pid=5103 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.130054][ T3430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.131737][ T3430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.133102][ T3430] bond0 (unregistering): Released all slaves [ 80.200353][ T3430] hsr_slave_0: left promiscuous mode [ 80.200747][ T3430] hsr_slave_1: left promiscuous mode [ 80.201272][ T3430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.201302][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.201511][ T3430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.201522][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.204687][ T3430] dummy0: left allmulticast mode [ 80.204795][ T3430] veth1_macvtap: left promiscuous mode [ 80.204813][ T3430] veth0_macvtap: left promiscuous mode [ 80.204889][ T3430] veth1_vlan: left promiscuous mode [ 80.204955][ T3430] veth0_vlan: left promiscuous mode [ 80.242645][ T29] audit: type=1400 audit(1791839754.176:626): avc: denied { write } for pid=5119 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.301655][ T5110] loop6: detected capacity change from 0 to 512 [ 80.325308][ T5110] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 80.325478][ T5110] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 80.380207][ T5110] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.269: bad orphan inode 131072 [ 80.380258][ T5110] loop6: lost filesystem error report for type 5 error -117 [ 80.386824][ T5110] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.427906][ T3430] team0 (unregistering): Port device team_slave_1 removed [ 80.433281][ T3430] team0 (unregistering): Port device team_slave_0 removed [ 80.462819][ T5110] FAULT_INJECTION: forcing a failure. [ 80.462819][ T5110] name fail_futex, interval 1, probability 0, space 0, times 1 [ 80.462926][ T5110] CPU: 1 UID: 0 PID: 5110 Comm: syz.6.269 Not tainted syzkaller #0 PREEMPT(lazy) [ 80.462953][ T5110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 80.462967][ T5110] Call Trace: [ 80.462974][ T5110] [ 80.462983][ T5110] __dump_stack+0x1d/0x30 [ 80.463021][ T5110] dump_stack_lvl+0x95/0xd0 [ 80.463054][ T5110] dump_stack+0x15/0x1b [ 80.463076][ T5110] should_fail_ex+0x262/0x280 [ 80.463161][ T5110] should_fail+0xb/0x20 [ 80.463240][ T5110] get_futex_key+0x12d/0xb10 [ 80.463304][ T5110] ? ktime_get+0x212/0x240 [ 80.463339][ T5110] ? lapic_next_event+0x11/0x20 [ 80.463365][ T5110] futex_wake+0x89/0x400 [ 80.463387][ T5110] ? _raw_spin_unlock+0x9/0x30 [ 80.463434][ T5110] ? __hrtimer_rearm_deferred+0x571/0x650 [ 80.463463][ T5110] do_futex+0x3f8/0x460 [ 80.463575][ T5110] __se_sys_futex+0x2f6/0x370 [ 80.463610][ T5110] __x64_sys_futex+0x78/0x90 [ 80.463644][ T5110] x64_sys_call+0x22e2/0x2550 [ 80.463685][ T5110] do_syscall_64+0x112/0x360 [ 80.463713][ T5110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.463738][ T5110] RIP: 0033:0x7f987469e1d9 [ 80.463798][ T5110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.463818][ T5110] RSP: 002b:00007f98730f70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 80.463840][ T5110] RAX: ffffffffffffffda RBX: 00007f9874925fa8 RCX: 00007f987469e1d9 [ 80.463928][ T5110] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9874925fac [ 80.463942][ T5110] RBP: 00007f9874925fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 80.463957][ T5110] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000000 [ 80.463971][ T5110] R13: 00007f9874926038 R14: 00007ffe510ca390 R15: 00007ffe510ca478 [ 80.463991][ T5110] [ 80.480156][ T5067] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.480193][ T5067] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.480265][ T5067] bridge_slave_0: entered allmulticast mode [ 80.480701][ T5067] bridge_slave_0: entered promiscuous mode [ 80.481959][ T5067] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.482068][ T5067] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.482599][ T5067] bridge_slave_1: entered allmulticast mode [ 80.482945][ T5067] bridge_slave_1: entered promiscuous mode [ 80.506705][ T5067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.507707][ T5067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.541841][ T5067] team0: Port device team_slave_0 added [ 80.544993][ T5067] team0: Port device team_slave_1 added [ 80.555363][ T4048] EXT4-fs error (device loop6): ext4_readdir:280: inode #2: block 13: comm syz-executor: path /36/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 80.575173][ T4048] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.580999][ T5067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.581014][ T5067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.581044][ T5067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.583167][ T5067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.583179][ T5067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.583273][ T5067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.870585][ T5126] loop8: detected capacity change from 0 to 1024 [ 80.876745][ T5126] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.978100][ T5126] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.099235][ T5067] hsr_slave_0: entered promiscuous mode [ 81.100756][ T5067] hsr_slave_1: entered promiscuous mode [ 81.100980][ T5067] debugfs: 'hsr0' already exists in 'hsr' [ 81.100993][ T5067] Cannot create hsr debugfs directory [ 81.217090][ T5067] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 81.220038][ T5067] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.273092][ T4795] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.285072][ T5067] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 81.297245][ T5067] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.297882][ T5067] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 81.329591][ T5067] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.343437][ T5150] netlink: 24 bytes leftover after parsing attributes in process `syz.7.274'. [ 81.343474][ T5150] IPv6: NLM_F_CREATE should be specified when creating new route [ 81.355205][ T3430] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.379865][ T5067] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 81.384822][ T5067] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.408515][ T3430] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.471987][ T3430] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.518178][ T5067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.531143][ T3430] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.552642][ T5067] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.558533][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.558567][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.566515][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.566548][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.648577][ T5148] loop8: detected capacity change from 0 to 512 [ 81.705521][ T5148] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.721528][ T5148] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.744936][ T3430] bridge_slave_1: left allmulticast mode [ 81.745014][ T3430] bridge_slave_1: left promiscuous mode [ 81.745159][ T3430] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.757337][ T3430] bridge_slave_0: left allmulticast mode [ 81.757358][ T3430] bridge_slave_0: left promiscuous mode [ 81.757490][ T3430] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.822656][ T4795] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.855551][ T3430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.865677][ T3430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.867684][ T3430] bond0 (unregistering): Released all slaves [ 81.882944][ T3022] 8021q: adding VLAN 0 to HW filter on device eth17 [ 81.927362][ T3430] hsr_slave_0: left promiscuous mode [ 81.927979][ T3430] hsr_slave_1: left promiscuous mode [ 81.928289][ T3430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.928301][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.928696][ T3430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.928708][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.931460][ T3430] veth1_macvtap: left promiscuous mode [ 81.931620][ T3430] veth0_macvtap: left promiscuous mode [ 81.931713][ T3430] veth1_vlan: left promiscuous mode [ 81.931741][ T3430] veth0_vlan: left promiscuous mode [ 82.017998][ T3430] team0 (unregistering): Port device team_slave_1 removed [ 82.020706][ T3430] team0 (unregistering): Port device team_slave_0 removed [ 82.201281][ T5212] netlink: 32 bytes leftover after parsing attributes in process `syz.8.279'. [ 82.204519][ T5067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.220218][ T5211] loop7: detected capacity change from 0 to 512 [ 82.234180][ T5211] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 82.234481][ T5211] EXT4-fs error (device loop7) in ext4_process_orphan:346: Out of memory [ 82.234500][ T5211] loop7: lost filesystem error report for type 5 error -12 [ 82.234794][ T5211] EXT4-fs (loop7): 1 truncate cleaned up [ 82.235145][ T5211] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.378856][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.378891][ T5162] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.379021][ T5162] bridge_slave_0: entered allmulticast mode [ 82.383454][ T5162] bridge_slave_0: entered promiscuous mode [ 82.386052][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.386085][ T5162] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.386183][ T5162] bridge_slave_1: entered allmulticast mode [ 82.388242][ T5162] bridge_slave_1: entered promiscuous mode [ 82.405922][ T5162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.407129][ T5162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.417346][ T5162] team0: Port device team_slave_0 added [ 82.418085][ T5162] team0: Port device team_slave_1 added [ 82.510157][ T5162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.510170][ T5162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.510204][ T5162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.511126][ T5162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.511136][ T5162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.511230][ T5162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.680039][ T5162] hsr_slave_0: entered promiscuous mode [ 82.685285][ T5162] hsr_slave_1: entered promiscuous mode [ 82.701225][ T5162] debugfs: 'hsr0' already exists in 'hsr' [ 82.701703][ T5162] Cannot create hsr debugfs directory [ 82.792917][ T3022] 8021q: adding VLAN 0 to HW filter on device eth18 [ 82.885284][ T5212] netlink: 28 bytes leftover after parsing attributes in process `syz.8.279'. [ 82.885585][ T5212] netlink: 28 bytes leftover after parsing attributes in process `syz.8.279'. [ 82.921381][ T5212] bridge0: entered promiscuous mode [ 82.934736][ T5212] ip6gretap0: entered promiscuous mode [ 83.088351][ T4461] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.193292][ T5067] veth0_vlan: entered promiscuous mode [ 83.200406][ T5067] veth1_vlan: entered promiscuous mode [ 83.224729][ T5067] veth0_macvtap: entered promiscuous mode [ 83.229626][ T5067] veth1_macvtap: entered promiscuous mode [ 83.260393][ T5067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.262546][ T5256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.262624][ T5256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.268270][ T5067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.306099][ T31] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.306359][ T31] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.306450][ T31] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.306484][ T31] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.306606][ T5246] loop7: detected capacity change from 0 to 128 [ 83.354480][ T3022] 8021q: adding VLAN 0 to HW filter on device eth19 [ 83.381910][ T5256] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(17) [ 83.381945][ T5256] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 83.381979][ T5256] vhci_hcd vhci_hcd.0: Device attached [ 83.392380][ T5256] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(19) [ 83.392404][ T5256] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 83.392442][ T5256] vhci_hcd vhci_hcd.0: Device attached [ 83.398012][ T5256] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(21) [ 83.398036][ T5256] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 83.398062][ T5256] vhci_hcd vhci_hcd.0: Device attached [ 83.432538][ T5268] vhci_hcd: connection closed [ 83.432637][ T5271] vhci_hcd: connection closed [ 83.432731][ T5265] vhci_hcd: connection closed [ 83.433114][ T51] vhci_hcd vhci_hcd.8: stop threads [ 83.433131][ T51] vhci_hcd vhci_hcd.8: release socket [ 83.433147][ T51] vhci_hcd vhci_hcd.8: disconnect device [ 83.433300][ T51] vhci_hcd vhci_hcd.8: stop threads [ 83.433314][ T51] vhci_hcd vhci_hcd.8: release socket [ 83.433328][ T51] vhci_hcd vhci_hcd.8: disconnect device [ 83.444435][ T5162] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.447495][ T51] vhci_hcd vhci_hcd.8: stop threads [ 83.447512][ T51] vhci_hcd vhci_hcd.8: release socket [ 83.447527][ T51] vhci_hcd vhci_hcd.8: disconnect device [ 83.464328][ T5162] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.470564][ T5162] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.503617][ T5162] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.508942][ T5162] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.519275][ T5162] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.523558][ T5162] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.533397][ T5162] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.603421][ T5288] FAULT_INJECTION: forcing a failure. [ 83.603421][ T5288] name failslab, interval 1, probability 0, space 0, times 0 [ 83.603504][ T5288] CPU: 0 UID: 0 PID: 5288 Comm: syz.7.282 Not tainted syzkaller #0 PREEMPT(lazy) [ 83.603529][ T5288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 83.603543][ T5288] Call Trace: [ 83.603550][ T5288] [ 83.603558][ T5288] __dump_stack+0x1d/0x30 [ 83.603620][ T5288] dump_stack_lvl+0x95/0xd0 [ 83.603652][ T5288] dump_stack+0x15/0x1b [ 83.603674][ T5288] should_fail_ex+0x262/0x280 [ 83.603705][ T5288] ? alloc_workqueue_va+0x133/0x1630 [ 83.603789][ T5288] should_failslab+0x8c/0xb0 [ 83.603824][ T5288] __kmalloc_cache_noprof+0x7a/0x400 [ 83.603948][ T5288] ? alloc_workqueue_va+0x133/0x1630 [ 83.604086][ T5288] alloc_workqueue_va+0x133/0x1630 [ 83.604172][ T5288] alloc_workqueue_noprof+0x84/0xb0 [ 83.604231][ T5288] ? __pcs_replace_empty_main+0x76/0x330 [ 83.604261][ T5288] nci_register_device+0x11e/0x510 [ 83.604361][ T5288] virtual_ncidev_open+0xca/0x130 [ 83.604393][ T5288] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 83.604417][ T5288] misc_open+0x1df/0x220 [ 83.604451][ T5288] chrdev_open+0x2eb/0x3a0 [ 83.604491][ T5288] do_dentry_open+0x49f/0xa60 [ 83.604518][ T5288] ? __pfx_chrdev_open+0x10/0x10 [ 83.604543][ T5288] vfs_open+0x37/0x1e0 [ 83.604569][ T5288] path_openat+0xc01/0x10d0 [ 83.604643][ T5288] ? kstrtouint+0x76/0xc0 [ 83.604663][ T5288] do_file_open+0x16c/0x290 [ 83.604727][ T5288] do_sys_openat2+0xa0/0x130 [ 83.604769][ T5288] __x64_sys_openat+0xf2/0x120 [ 83.604794][ T5288] x64_sys_call+0x1f72/0x2550 [ 83.604822][ T5288] do_syscall_64+0x112/0x360 [ 83.604851][ T5288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.604932][ T5288] RIP: 0033:0x7fb1868ee1d9 [ 83.604950][ T5288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.604971][ T5288] RSP: 002b:00007fb185347028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 83.604995][ T5288] RAX: ffffffffffffffda RBX: 00007fb186b75fa0 RCX: 00007fb1868ee1d9 [ 83.605024][ T5288] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 83.605041][ T5288] RBP: 00007fb185347090 R08: 0000000000000000 R09: 0000000000000000 [ 83.605107][ T5288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 83.605121][ T5288] R13: 00007fb186b76038 R14: 00007fb186b75fa0 R15: 00007ffc16d21fd8 [ 83.605140][ T5288] [ 83.616386][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 83.616400][ T29] audit: type=1400 audit(1791839757.546:650): avc: denied { write } for pid=5273 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.683107][ T29] audit: type=1400 audit(1791839757.606:651): avc: denied { write } for pid=5295 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.841429][ T5293] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.863105][ T5293] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.955614][ T29] audit: type=1400 audit(1791839757.876:652): avc: denied { read append } for pid=5304 comm="syz.7.285" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 83.955669][ T29] audit: type=1400 audit(1791839757.876:653): avc: denied { open } for pid=5304 comm="syz.7.285" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 83.963077][ T29] audit: type=1400 audit(1791839757.886:654): avc: denied { ioctl } for pid=5304 comm="syz.7.285" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 83.976294][ T5306] netlink: 64 bytes leftover after parsing attributes in process `syz.9.267'. [ 84.088390][ T3022] 8021q: adding VLAN 0 to HW filter on device eth20 [ 84.119576][ T5162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.145681][ T5162] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.152126][ T3430] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.152160][ T3430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.160557][ T3430] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.160610][ T3430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.238851][ T5296] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 84.313439][ T29] audit: type=1400 audit(1791839758.236:655): avc: denied { write } for pid=5311 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.364137][ T29] audit: type=1400 audit(1791839758.286:656): avc: denied { write } for pid=5330 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.403978][ T29] audit: type=1400 audit(1791839758.326:657): avc: denied { allowed } for pid=5332 comm="syz.7.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 84.404047][ T29] audit: type=1400 audit(1791839758.326:658): avc: denied { sqpoll } for pid=5332 comm="syz.7.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 84.408494][ T29] audit: type=1400 audit(1791839758.336:659): avc: denied { map } for pid=5332 comm="syz.7.287" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12249 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 84.458042][ T3022] 8021q: adding VLAN 0 to HW filter on device eth21 [ 84.514633][ T5162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.669156][ T5162] veth0_vlan: entered promiscuous mode [ 84.675284][ T5354] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 84.675451][ T5162] veth1_vlan: entered promiscuous mode [ 84.694300][ T5162] veth0_macvtap: entered promiscuous mode [ 84.698615][ T5162] veth1_macvtap: entered promiscuous mode [ 84.708927][ T5162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.721054][ T5162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.763584][ T3430] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.764141][ T3430] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.764393][ T3430] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.764556][ T3430] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.822370][ T5360] netlink: 28 bytes leftover after parsing attributes in process `syz.9.288'. [ 84.822402][ T5360] netlink: 28 bytes leftover after parsing attributes in process `syz.9.288'. [ 84.831385][ T5360] bridge0: entered promiscuous mode [ 84.835281][ T5360] syz_tun: entered promiscuous mode [ 84.835551][ T5360] debugfs: 'hsr1' already exists in 'hsr' [ 84.835565][ T5360] Cannot create hsr debugfs directory [ 84.835606][ T5360] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 84.835626][ T5360] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 84.843393][ T3022] 8021q: adding VLAN 0 to HW filter on device eth22 [ 84.893172][ T5365] netlink: 'syz.7.289': attribute type 10 has an invalid length. [ 84.913120][ T5365] team0: Device vxcan0 is of different type [ 85.018928][ T5373] loop1: detected capacity change from 0 to 512 [ 85.041713][ T5373] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 85.041899][ T5373] EXT4-fs error (device loop1) in ext4_process_orphan:346: Out of memory [ 85.041948][ T5373] loop1: lost filesystem error report for type 5 error -12 [ 85.042233][ T5373] EXT4-fs (loop1): 1 truncate cleaned up [ 85.042610][ T5373] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.212697][ T5389] netlink: 132 bytes leftover after parsing attributes in process `syz.7.291'. [ 85.241005][ T5375] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 85.494916][ T5375] md: could not open device unknown-block(1,1). [ 85.495225][ T5375] md: md_import_device returned -6 [ 85.523702][ T3022] 8021q: adding VLAN 0 to HW filter on device eth23 [ 85.773176][ T5418] loop9: detected capacity change from 0 to 512 [ 85.776678][ T5418] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 85.797741][ T5418] EXT4-fs (loop9): 1 truncate cleaned up [ 85.798335][ T5418] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.877770][ T5162] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.882120][ T5420] loop7: detected capacity change from 0 to 512 [ 85.896491][ T5420] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 85.905355][ T5420] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 85.905441][ T5420] EXT4-fs (loop7): orphan cleanup on readonly fs [ 85.907629][ T5420] EXT4-fs warning (device loop7): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 85.907662][ T5420] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 85.907810][ T5420] EXT4-fs error (device loop7): ext4_orphan_get:1403: inode #16: comm syz.7.296: casefold flag without casefold feature [ 85.907835][ T5420] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 85.908535][ T5420] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.296: couldn't read orphan inode 16 (err -117) [ 85.908621][ T5420] loop7: lost filesystem error report for type 5 error -117 [ 85.911903][ T5420] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.005521][ T5067] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.008907][ T3022] 8021q: adding VLAN 0 to HW filter on device eth24 [ 86.035339][ T5425] netlink: 32 bytes leftover after parsing attributes in process `syz.1.298'. [ 86.293753][ T5452] loop9: detected capacity change from 0 to 512 [ 86.322681][ T5452] EXT4-fs error (device loop9): ext4_validate_block_bitmap:445: comm syz.9.300: bg 0: block 385: padding at end of block bitmap is not set [ 86.322731][ T5452] loop9: lost filesystem error report for type 5 error -117 [ 86.322859][ T5452] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 86.322874][ T5452] loop9: lost filesystem error report for type 5 error -117 [ 86.325793][ C0] EXT4-fs (loop9): error count since last fsck: 2 [ 86.325816][ C0] EXT4-fs (loop9): initial error at time 1791839760: ext4_validate_block_bitmap:445 [ 86.325842][ C0] EXT4-fs (loop9): last error at time 1791839760: ext4_mb_clear_bb:6680 [ 86.329114][ T5452] EXT4-fs (loop9): 2 truncates cleaned up [ 86.329512][ T5452] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.432581][ T5447] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 86.478400][ T5457] md: could not open device unknown-block(1,1). [ 86.478432][ T5457] md: md_import_device returned -6 [ 86.507371][ T5067] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.584332][ T5467] netlink: 32 bytes leftover after parsing attributes in process `syz.9.303'. [ 86.712520][ T4461] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.727650][ T5447] loop8: detected capacity change from 0 to 512 [ 86.996149][ T5467] netlink: 28 bytes leftover after parsing attributes in process `syz.9.303'. [ 86.996309][ T5467] netlink: 28 bytes leftover after parsing attributes in process `syz.9.303'. [ 87.111752][ T5505] netlink: 32 bytes leftover after parsing attributes in process `syz.7.317'. [ 87.325584][ T5505] netlink: 28 bytes leftover after parsing attributes in process `syz.7.317'. [ 87.326877][ T5505] netlink: 28 bytes leftover after parsing attributes in process `syz.7.317'. [ 87.502401][ T5528] loop9: detected capacity change from 0 to 128 [ 87.515569][ T5505] bridge0: entered promiscuous mode [ 87.537537][ T5505] ip6gretap0: entered promiscuous mode [ 87.542049][ T5505] debugfs: 'hsr1' already exists in 'hsr' [ 87.542130][ T5505] Cannot create hsr debugfs directory [ 88.717566][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 88.717580][ T29] audit: type=1400 audit(1791839762.646:702): avc: denied { write } for pid=5599 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.765138][ T29] audit: type=1400 audit(1791839762.686:703): avc: denied { write } for pid=5612 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.959860][ T29] audit: type=1400 audit(1791839762.886:704): avc: denied { write } for pid=5615 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.017233][ T29] audit: type=1400 audit(1791839762.936:705): avc: denied { write } for pid=5629 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.155515][ T5622] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 89.155979][ T5628] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 89.155999][ T5628] block device autoloading is deprecated and will be removed. [ 89.294084][ T29] audit: type=1400 audit(1791839763.216:706): avc: denied { write } for pid=5632 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.358114][ T29] audit: type=1400 audit(1791839763.286:707): avc: denied { write } for pid=5643 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.379721][ T5622] loop7: detected capacity change from 0 to 512 [ 89.557209][ T5649] netlink: 32 bytes leftover after parsing attributes in process `syz.8.319'. [ 89.615788][ T29] audit: type=1400 audit(1791839763.536:708): avc: denied { write } for pid=5646 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.667794][ T29] audit: type=1400 audit(1791839763.596:709): avc: denied { write } for pid=5661 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.902120][ T29] audit: type=1400 audit(1791839763.826:710): avc: denied { write } for pid=5664 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.947494][ T5666] loop7: detected capacity change from 0 to 128 [ 89.999167][ T29] audit: type=1400 audit(1791839763.926:711): avc: denied { write } for pid=5679 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.005210][ T5649] netlink: 28 bytes leftover after parsing attributes in process `syz.8.319'. [ 90.012756][ T5649] netlink: 28 bytes leftover after parsing attributes in process `syz.8.319'. [ 90.381325][ T5683] loop7: detected capacity change from 0 to 736 [ 90.392965][ T5683] iso9660: Unexpected value for 'norock' [ 90.591229][ T5703] loop8: detected capacity change from 0 to 128 [ 90.592897][ T5598] syz.9.316 (5598) used greatest stack depth: 9616 bytes left [ 90.665095][ T5683] Cannot find del_set index 14804 as target [ 90.772307][ T5717] netlink: 32 bytes leftover after parsing attributes in process `syz.8.323'. [ 91.247479][ T3875] syz_tun (unregistering): left promiscuous mode [ 91.426833][ T5743] loop7: detected capacity change from 0 to 128 [ 91.512502][ T31] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.586589][ T31] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.647706][ T5751] loop7: detected capacity change from 0 to 128 [ 91.652364][ T31] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.716569][ T31] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.740062][ T5754] loop9: detected capacity change from 0 to 512 [ 91.783998][ T5754] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 91.784028][ T5754] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 0 not in group (block 150994978)! [ 91.784088][ T5754] EXT4-fs (loop9): group descriptors corrupted! [ 91.833727][ T5758] FAULT_INJECTION: forcing a failure. [ 91.833727][ T5758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.833760][ T5758] CPU: 0 UID: 0 PID: 5758 Comm: syz.7.334 Not tainted syzkaller #0 PREEMPT(lazy) [ 91.833843][ T5758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 91.833859][ T5758] Call Trace: [ 91.833866][ T5758] [ 91.833875][ T5758] __dump_stack+0x1d/0x30 [ 91.833904][ T5758] dump_stack_lvl+0x95/0xd0 [ 91.833980][ T5758] dump_stack+0x15/0x1b [ 91.834004][ T5758] should_fail_ex+0x262/0x280 [ 91.834072][ T5758] should_fail+0xb/0x20 [ 91.834100][ T5758] should_fail_usercopy+0x1a/0x20 [ 91.834133][ T5758] _copy_from_user+0x1c/0xb0 [ 91.834243][ T5758] __sys_bpf+0x1e2/0xc30 [ 91.834268][ T5758] ? get_pid_task+0x92/0xc0 [ 91.834291][ T5758] ? vfs_write+0x770/0x9a0 [ 91.834422][ T5758] __x64_sys_bpf+0x69/0x80 [ 91.834446][ T5758] x64_sys_call+0xf26/0x2550 [ 91.834474][ T5758] do_syscall_64+0x112/0x360 [ 91.834503][ T5758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.834524][ T5758] RIP: 0033:0x7fb1868ee1d9 [ 91.834585][ T5758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.834607][ T5758] RSP: 002b:00007fb185347028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 91.834627][ T5758] RAX: ffffffffffffffda RBX: 00007fb186b75fa0 RCX: 00007fb1868ee1d9 [ 91.834685][ T5758] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 91.834700][ T5758] RBP: 00007fb185347090 R08: 0000000000000000 R09: 0000000000000000 [ 91.834716][ T5758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.834730][ T5758] R13: 00007fb186b76038 R14: 00007fb186b75fa0 R15: 00007ffc16d21fd8 [ 91.834751][ T5758] [ 91.945910][ T5763] FAULT_INJECTION: forcing a failure. [ 91.945910][ T5763] name failslab, interval 1, probability 0, space 0, times 0 [ 91.946020][ T5763] CPU: 0 UID: 0 PID: 5763 Comm: syz.9.332 Not tainted syzkaller #0 PREEMPT(lazy) [ 91.946047][ T5763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 91.946062][ T5763] Call Trace: [ 91.946069][ T5763] [ 91.946138][ T5763] __dump_stack+0x1d/0x30 [ 91.946243][ T5763] dump_stack_lvl+0x95/0xd0 [ 91.946268][ T5763] dump_stack+0x15/0x1b [ 91.946290][ T5763] should_fail_ex+0x262/0x280 [ 91.946320][ T5763] should_failslab+0x8c/0xb0 [ 91.946398][ T5763] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 91.946434][ T5763] ? __d_alloc+0x34/0x320 [ 91.946489][ T5763] ? __d_alloc+0x34/0x320 [ 91.946520][ T5763] __d_alloc+0x34/0x320 [ 91.946549][ T5763] ? d_alloc_pseudo+0x13/0x80 [ 91.946581][ T5763] d_alloc_pseudo+0x1e/0x80 [ 91.946633][ T5763] alloc_path_pseudo+0xa4/0x140 [ 91.946663][ T5763] alloc_file_pseudo+0x55/0x120 [ 91.946692][ T5763] sock_alloc_file+0x9c/0x1e0 [ 91.946765][ T5763] __sys_socket+0x118/0x180 [ 91.946812][ T5763] __x64_sys_socket+0x3f/0x50 [ 91.946848][ T5763] x64_sys_call+0x246e/0x2550 [ 91.946877][ T5763] do_syscall_64+0x112/0x360 [ 91.946952][ T5763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.946977][ T5763] RIP: 0033:0x7f86bcd9e1d9 [ 91.946995][ T5763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.947016][ T5763] RSP: 002b:00007f86bb7d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 91.947082][ T5763] RAX: ffffffffffffffda RBX: 00007f86bd026090 RCX: 00007f86bcd9e1d9 [ 91.947109][ T5763] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 91.947123][ T5763] RBP: 00007f86bce35888 R08: 0000000000000000 R09: 0000000000000000 [ 91.947137][ T5763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.947151][ T5763] R13: 00007f86bd026128 R14: 00007f86bd026090 R15: 00007fff5eec14a8 [ 91.947171][ T5763] [ 92.029883][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.029915][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.030120][ T5732] bridge_slave_0: entered allmulticast mode [ 92.030604][ T5732] bridge_slave_0: entered promiscuous mode [ 92.037038][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.037071][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.037203][ T5732] bridge_slave_1: entered allmulticast mode [ 92.037670][ T5732] bridge_slave_1: entered promiscuous mode [ 92.054735][ T31] bridge_slave_1: left allmulticast mode [ 92.054754][ T31] bridge_slave_1: left promiscuous mode [ 92.054849][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.064159][ T31] bridge_slave_0: left allmulticast mode [ 92.064180][ T31] bridge_slave_0: left promiscuous mode [ 92.064283][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.194618][ T31] ip6gretap0 (unregistering): left promiscuous mode [ 92.213617][ T5765] loop7: detected capacity change from 0 to 128 [ 92.253435][ T5765] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 92.264944][ T5765] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 92.317299][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.355040][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.356202][ T31] bond0 (unregistering): Released all slaves [ 92.413850][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.418866][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.442009][ T31] hsr_slave_0: left promiscuous mode [ 92.443801][ T31] hsr_slave_1: left promiscuous mode [ 92.444359][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.444374][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.448344][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.448402][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.464054][ T31] dummy0: left allmulticast mode [ 92.464092][ T31] veth1_macvtap: left promiscuous mode [ 92.464114][ T31] veth0_macvtap: left promiscuous mode [ 92.464227][ T31] veth1_vlan: left promiscuous mode [ 92.464263][ T31] veth0_vlan: left promiscuous mode [ 92.558695][ T3430] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 92.581555][ T5784] FAULT_INJECTION: forcing a failure. [ 92.581555][ T5784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.581592][ T5784] CPU: 1 UID: 0 PID: 5784 Comm: syz.7.337 Not tainted syzkaller #0 PREEMPT(lazy) [ 92.581620][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 92.581634][ T5784] Call Trace: [ 92.581642][ T5784] [ 92.581650][ T5784] __dump_stack+0x1d/0x30 [ 92.581679][ T5784] dump_stack_lvl+0x95/0xd0 [ 92.581741][ T5784] dump_stack+0x15/0x1b [ 92.581765][ T5784] should_fail_ex+0x262/0x280 [ 92.581832][ T5784] should_fail+0xb/0x20 [ 92.581924][ T5784] should_fail_usercopy+0x1a/0x20 [ 92.582034][ T5784] strncpy_from_user+0x27/0x250 [ 92.582061][ T5784] do_getname+0x59/0x1c0 [ 92.582098][ T5784] __se_sys_rmdir+0x1b/0xe0 [ 92.582117][ T5784] __x64_sys_rmdir+0x1f/0x30 [ 92.582163][ T5784] x64_sys_call+0x2114/0x2550 [ 92.582193][ T5784] do_syscall_64+0x112/0x360 [ 92.582223][ T5784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.582301][ T5784] RIP: 0033:0x7fb1868ee1d9 [ 92.582318][ T5784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.582362][ T5784] RSP: 002b:00007fb185347028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 92.582422][ T5784] RAX: ffffffffffffffda RBX: 00007fb186b75fa0 RCX: 00007fb1868ee1d9 [ 92.582473][ T5784] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000300 [ 92.582489][ T5784] RBP: 00007fb185347090 R08: 0000000000000000 R09: 0000000000000000 [ 92.582504][ T5784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.582519][ T5784] R13: 00007fb186b76038 R14: 00007fb186b75fa0 R15: 00007ffc16d21fd8 [ 92.582540][ T5784] [ 92.824366][ T31] team0 (unregistering): Port device team_slave_1 removed [ 92.834579][ T31] team0 (unregistering): Port device team_slave_0 removed [ 92.839521][ T5788] __nla_validate_parse: 8 callbacks suppressed [ 92.839544][ T5788] netlink: 32 bytes leftover after parsing attributes in process `syz.7.338'. [ 92.890022][ T5769] netlink: 28 bytes leftover after parsing attributes in process `syz.9.336'. [ 92.890055][ T5769] netlink: 28 bytes leftover after parsing attributes in process `syz.9.336'. [ 92.941898][ T3022] 8021q: adding VLAN 0 to HW filter on device eth1 [ 93.003506][ T5732] team0: Port device team_slave_0 added [ 93.008820][ T5732] team0: Port device team_slave_1 added [ 93.060654][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.060669][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.060695][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.061241][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.061253][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.061278][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.132298][ T5732] hsr_slave_0: entered promiscuous mode [ 93.132772][ T5732] hsr_slave_1: entered promiscuous mode [ 93.133124][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 93.133138][ T5732] Cannot create hsr debugfs directory [ 93.235154][ T5797] loop9: detected capacity change from 0 to 4096 [ 93.243807][ T5797] EXT4-fs: Ignoring removed orlov option [ 93.256231][ T5797] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.325970][ T5800] netlink: 28 bytes leftover after parsing attributes in process `syz.7.338'. [ 93.326007][ T5800] netlink: 28 bytes leftover after parsing attributes in process `syz.7.338'. [ 93.363435][ T5800] syz_tun: entered promiscuous mode [ 93.375996][ T5800] syz_tun: left promiscuous mode [ 93.482405][ T3022] 8021q: adding VLAN 0 to HW filter on device eth2 [ 93.594238][ T5732] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.601043][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.603155][ T5732] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.614776][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.619046][ T5732] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.632553][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.638299][ T5732] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.650260][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.733986][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 93.734003][ T29] audit: type=1400 audit(1791839767.656:740): avc: denied { write } for pid=5821 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.773116][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.783634][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.794153][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.794183][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.800440][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.800473][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.812130][ T29] audit: type=1400 audit(1791839767.736:741): avc: denied { write } for pid=5841 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.890494][ T3022] 8021q: adding VLAN 0 to HW filter on device eth3 [ 93.934821][ T5067] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.018635][ T29] audit: type=1400 audit(1791839767.946:742): avc: denied { write } for pid=5856 comm="syz.9.343" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.131605][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.150238][ T29] audit: type=1400 audit(1791839768.076:743): avc: denied { write } for pid=5852 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.232225][ T29] audit: type=1400 audit(1791839768.156:744): avc: denied { write } for pid=5880 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.477159][ T3022] 8021q: adding VLAN 0 to HW filter on device eth4 [ 94.493025][ T37] ================================================================== [ 94.493054][ T37] BUG: KCSAN: data-race in kick_pool_pick / wq_worker_running [ 94.493085][ T37] [ 94.493091][ T37] read-write to 0xffff888237c2b0a4 of 4 bytes by task 3386 on cpu 0: [ 94.493107][ T37] wq_worker_running+0x9c/0x120 [ 94.493125][ T37] schedule_timeout+0xca/0x180 [ 94.493150][ T37] msleep+0x4f/0x90 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 94.493172][ T37] nsim_fib_event+0x4544/0x4de0 [ 94.493199][ T37] nsim_fib_event_work+0x133/0x200 [ 94.493224][ T37] process_scheduled_works+0x56a/0xa50 [ 94.493253][ T37] worker_thread+0x569/0x750 [ 94.493282][ T37] kthread+0x223/0x270 [ 94.493301][ T37] ret_from_fork+0x146/0x330 [ 94.493330][ T37] ret_from_fork_asm+0x1a/0x30 [ 94.493354][ T37] [ 94.493360][ T37] read to 0xffff888237c2b0a4 of 4 bytes by task 37 on cpu 1: [ 94.493375][ T37] kick_pool_pick+0x5f/0x310 [ 94.493401][ T37] __queue_work+0x913/0xbd0 [ 94.493417][ T37] queue_work_on+0xa9/0x140 [ 94.493434][ T37] wg_packet_encrypt_worker+0xcff/0xe90 [ 94.493456][ T37] process_scheduled_works+0x56a/0xa50 [ 94.493485][ T37] worker_thread+0x569/0x750 [ 94.493514][ T37] kthread+0x223/0x270 [ 94.493533][ T37] ret_from_fork+0x146/0x330 [ 94.493560][ T37] ret_from_fork_asm+0x1a/0x30 [ 94.493585][ T37] [ 94.493589][ T37] value changed: 0x00000000 -> 0x00000001 [ 94.493599][ T37] [ 94.493603][ T37] Reported by Kernel Concurrency Sanitizer on: [ 94.493614][ T37] CPU: 1 UID: 0 PID: 37 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(lazy) [ 94.493639][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 94.493652][ T37] Workqueue: wg-crypt-wg2 wg_packet_encrypt_worker [ 94.493676][ T37] ================================================================== [ 94.539589][ T29] audit: type=1400 audit(1791839768.466:745): avc: denied { write } for pid=3283 comm="syz-executor" path="pipe:[510]" dev="pipefs" ino=510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 94.599060][ T5876] loop7: detected capacity change from 0 to 512 [ 94.801048][ T5876] EXT4-fs warning (device loop7): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop7. [ 94.847118][ T29] audit: type=1400 audit(1791839768.776:746): avc: denied { write } for pid=5887 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.891909][ T29] audit: type=1400 audit(1791839768.816:747): avc: denied { write } for pid=5901 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.932173][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.989886][ T5884] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 95.012016][ T29] audit: type=1400 audit(1791839768.936:748): avc: denied { write } for pid=5903 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.048015][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.048380][ T29] audit: type=1400 audit(1791839768.976:749): avc: denied { write } for pid=5914 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.051982][ T5884] syz_tun (unregistering): left promiscuous mode [ 95.102520][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.188392][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.283555][ T51] bridge_slave_1: left allmulticast mode [ 95.283576][ T51] bridge_slave_1: left promiscuous mode [ 95.283711][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.286446][ T51] bridge_slave_0: left allmulticast mode [ 95.286464][ T51] bridge_slave_0: left promiscuous mode [ 95.286589][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.385703][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.395955][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.397300][ T51] bond0 (unregistering): Released all slaves [ 95.424162][ T51] hsr_slave_0: left promiscuous mode [ 95.424540][ T51] hsr_slave_1: left promiscuous mode [ 95.424866][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.424878][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.425284][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.425298][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.468343][ T51] veth1_macvtap: left promiscuous mode [ 95.468367][ T51] veth0_macvtap: left promiscuous mode [ 95.468426][ T51] veth1_vlan: left promiscuous mode [ 95.468460][ T51] veth0_vlan: left promiscuous mode [ 95.538811][ T51] team0 (unregistering): Port device team_slave_1 removed [ 95.540660][ T51] team0 (unregistering): Port device team_slave_0 removed [ 96.050448][ T3022] 8021q: adding VLAN 0 to HW filter on device eth5 [ 96.139846][ T3022] 8021q: adding VLAN 0 to HW filter on device eth6 [ 96.233942][ T3022] 8021q: adding VLAN 0 to HW filter on device eth7 [ 96.245196][ T51] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.299794][ T51] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.339123][ T51] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.342127][ T3022] 8021q: adding VLAN 0 to HW filter on device eth8 [ 96.389799][ T51] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.433526][ T3022] 8021q: adding VLAN 0 to HW filter on device eth25 [ 96.471533][ T51] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.519566][ T51] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.538594][ T3022] 8021q: adding VLAN 0 to HW filter on device eth26 [ 96.569423][ T51] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.619015][ T51] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.638109][ T3022] 8021q: adding VLAN 0 to HW filter on device eth27 [ 96.683080][ T51] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.709419][ T51] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.748805][ T51] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.753058][ T3022] 8021q: adding VLAN 0 to HW filter on device eth28 [ 96.798780][ T51] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.854303][ T3022] 8021q: adding VLAN 0 to HW filter on device eth29 [ 96.855315][ T51] bridge_slave_1: left allmulticast mode [ 96.855331][ T51] bridge_slave_1: left promiscuous mode [ 96.855426][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.862644][ T51] bridge_slave_0: left allmulticast mode [ 96.862663][ T51] bridge_slave_0: left promiscuous mode [ 96.862802][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.886874][ T51] bridge_slave_1: left allmulticast mode [ 96.886895][ T51] bridge_slave_1: left promiscuous mode [ 96.887078][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.899556][ T51] bridge_slave_0: left allmulticast mode [ 96.899575][ T51] bridge_slave_0: left promiscuous mode [ 96.899679][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.923967][ T51] bridge_slave_1: left allmulticast mode [ 96.924143][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.936660][ T51] bridge_slave_0: left allmulticast mode [ 96.936707][ T51] bridge_slave_0: left promiscuous mode [ 96.936857][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.967957][ T51] bridge_slave_1: left allmulticast mode [ 96.967979][ T51] bridge_slave_1: left promiscuous mode [ 96.968076][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.974184][ T51] bridge_slave_0: left allmulticast mode [ 96.974203][ T51] bridge_slave_0: left promiscuous mode [ 96.974341][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.082708][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.083858][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.084492][ T51] bond0 (unregistering): Released all slaves [ 97.102963][ T51] bridge0 (unregistering): left promiscuous mode [ 97.118490][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.119503][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.120175][ T51] bond0 (unregistering): Released all slaves [ 97.122485][ T51] ip6gretap0 (unregistering): left promiscuous mode [ 97.143242][ T51] bridge0 (unregistering): left promiscuous mode [ 97.163664][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.164774][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.165390][ T51] bond0 (unregistering): Released all slaves [ 97.174355][ T51] ip6gretap0 (unregistering): left promiscuous mode [ 97.195472][ T51] bridge0 (unregistering): left promiscuous mode [ 97.205621][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.214738][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.215316][ T51] bond0 (unregistering): Released all slaves [ 97.269436][ T51] hsr_slave_0: left promiscuous mode [ 97.269741][ T51] hsr_slave_1: left promiscuous mode [ 97.270066][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.270316][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.272194][ T51] hsr_slave_0: left promiscuous mode [ 97.272544][ T51] hsr_slave_1: left promiscuous mode [ 97.273065][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.273081][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.273433][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.273445][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.275486][ T51] hsr_slave_0: left promiscuous mode [ 97.281253][ T51] hsr_slave_1: left promiscuous mode [ 97.281782][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.281796][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.286872][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.286886][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.306347][ T51] hsr_slave_0: left promiscuous mode [ 97.311607][ T51] hsr_slave_1: left promiscuous mode [ 97.312084][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.312099][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.320092][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.320108][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.346647][ T51] veth1_macvtap: left promiscuous mode [ 97.346686][ T51] veth0_macvtap: left promiscuous mode [ 97.346743][ T51] veth1_vlan: left promiscuous mode [ 97.346777][ T51] veth0_vlan: left promiscuous mode [ 97.373579][ T51] veth1_macvtap: left promiscuous mode [ 97.373617][ T51] veth0_macvtap: left promiscuous mode [ 97.373660][ T51] veth1_vlan: left promiscuous mode [ 97.373702][ T51] veth0_vlan: left promiscuous mode [ 97.405973][ T51] veth1_macvtap: left promiscuous mode [ 97.406000][ T51] veth0_macvtap: left promiscuous mode [ 97.406076][ T51] veth1_vlan: left promiscuous mode [ 97.406111][ T51] veth0_vlan: left promiscuous mode [ 97.547151][ T51] team0 (unregistering): Port device team_slave_1 removed [ 97.549080][ T51] team0 (unregistering): Port device team_slave_0 removed [ 97.594481][ T51] team0 (unregistering): Port device team_slave_1 removed [ 97.603151][ T51] team0 (unregistering): Port device team_slave_0 removed [ 97.646384][ T51] team0 (unregistering): Port device team_slave_1 removed [ 97.648325][ T51] team0 (unregistering): Port device team_slave_0 removed [ 97.691420][ T51] team0 (unregistering): Port device team_slave_1 removed [ 97.693508][ T51] team0 (unregistering): Port device team_slave_0 removed [ 97.719158][ T3022] 8021q: adding VLAN 0 to HW filter on device eth30 [ 97.804553][ T3022] 8021q: adding VLAN 0 to HW filter on device eth31 [ 97.888833][ T3022] 8021q: adding VLAN 0 to HW filter on device eth32 [ 97.983408][ T3022] 8021q: adding VLAN 0 to HW filter on device eth33 [ 98.095667][ T3022] 8021q: adding VLAN 0 to HW filter on device eth34 [ 98.186991][ T3022] 8021q: adding VLAN 0 to HW filter on device eth35 [ 98.273575][ T3022] 8021q: adding VLAN 0 to HW filter on device eth36 [ 98.359084][ T3022] 8021q: adding VLAN 0 to HW filter on device eth37 [ 98.444185][ T3022] 8021q: adding VLAN 0 to HW filter on device eth38 [ 98.531098][ T3022] 8021q: adding VLAN 0 to HW filter on device eth39 [ 98.555270][ T51] IPVS: stop unused estimator thread 0... [ 98.626818][ T3022] 8021q: adding VLAN 0 to HW filter on device eth40 [ 101.073860][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 101.073877][ T29] audit: type=1400 audit(1791839774.996:810): avc: denied { write } for pid=6390 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.115331][ T29] audit: type=1400 audit(1791839775.036:811): avc: denied { write } for pid=6401 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.590404][ T29] audit: type=1400 audit(1791839775.516:812): avc: denied { write } for pid=6404 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.625621][ T29] audit: type=1400 audit(1791839775.546:813): avc: denied { write } for pid=6415 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.703163][ T29] audit: type=1400 audit(1791839775.626:814): avc: denied { write } for pid=6418 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.734240][ T29] audit: type=1400 audit(1791839775.656:815): avc: denied { write } for pid=6429 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.480627][ T29] audit: type=1400 audit(1791839776.406:816): avc: denied { write } for pid=6432 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.514443][ T29] audit: type=1400 audit(1791839776.446:817): avc: denied { write } for pid=6443 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.689294][ T29] audit: type=1400 audit(1791839776.616:818): avc: denied { write } for pid=6446 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.723889][ T29] audit: type=1400 audit(1791839776.656:819): avc: denied { write } for pid=6457 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1