last executing test programs: 15m31.485225318s ago: executing program 32 (id=27): mknod$loop(0x0, 0x0, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x800, 0x1ff}, 0x400, 0x5, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x800718, &(0x7f0000000240)={[{@delalloc}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@errors_remount}, {@resuid}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x754}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@stripe={'stripe', 0x3d, 0x20ad}}]}, 0x22, 0x4a7, &(0x7f00000010c0)="$eJzs289rHFUcAPDvzOZXfybW+qO1arQIQTFp0qo9eFEURCoKeqjHkKQldNtIE8H+wEYRT4IIehaP4n8ggogg4knwJHjyJIWiubT1FJnZmfzYZNsm2WRr9vOBzb4382bnfffN23n73iaAttWf/UkidkfEHxHRW8suL9Bfe7oxd3ns5tzlsSTm59/8O8nLXZ+7PFYWLY/bVWQG0oj0o6Q4yXLTFy6eGa1WJ84X+aGZs91FcvT0xOmJcyPHjx87OvzcsyPPNCXOLK7rB9+fOnTglbc/e23s5Pcdte27i/1L41ij34ca7OjPAv9nPle/74l1nuxutWdJOuloYUVYk0pEZM3Vmff/3qjEYuP1xssftrRywKbK7k3djXfPzgPbWBKtrgHQGuWNfudcZSz7Drzye3DvZg4/Wu7aC7UvQFncN4pHbU9HpEWZzrrvt83UHxEnZ//9MnvExuYhAADuyCdjX5zoiohLN795NRt7LI720o778+c/8797i5FgX0TcExH7IuLeiNgfEfdFRFb2gYh4cIP1WTn+Sa9u8CVvKRv/PV+sbS0f/5Wjv+irFLk9efydyanJ6sSR4j0ZiM7uLD+cF1194eOHl377tNH5l47/skd2/nIsWNTjakfdBN346MxoPihtgmsfRBzsSJKV8ScL0SQRcSAiDq7tpfeWicknvz7UqNDt47+FJqwzzX+VhTebtf9s1MVfSmrrk+8MTV+4+PTk2fr1yaGeqE4cGSqvipV++fXjNxqdvxZ/T5FbPf4dGw+zoWsTtecl7b9k70IfWFyvnW7u+dd5/addyVv5OnNXse290ZmZ88MRXcmJPL9s+8jisWW+LJ9d/wOHV+//+4pjsvZ/KCKyi/jhiHgkIh4t6v5YRDweEYdvEePPL94+/kjXcf03QRb/+KqffwvXf1+yrP3Xnqic+enbRue/s/Y/lqcGii3551+dpC6/WnU6IrrrK7jR9w8AAAD+D9L8N/BJOriQTtPBwdpv+PfHzrQ6NT3z1Kmpd8+N134r3xedaTnT1VvMh1YnqxPDyWzxirX50ZFirricLz1azBt/XtmR5wfHpqrjLY4d2t2uBv0/81el1bUDNtny5aVyAXikqyWVAbZY/Tp6ujx75fXwYQDblf/XhvZ1m/6fblU9gK3n/g/ta7X+f6Uuby0Atif3f2hf+j+0qfTHVTd/1/iIIauBsH24/0Nb2sj/9W9iomdNR1UiovV1blpiqxsl1lQ4ykTa8jeqWYmeuCuqsf7EpaI3N/OVW/zBBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0CT/BQAA//9qmNeq") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r2, 0xc138fd03, &(0x7f00000003c0)="04000000000000000000000038010000000000000200000000000000fffffe000000000000000fffff000000000000002e2e") rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file5\x00') write(r1, &(0x7f00000002c0)='0', 0x1) 14m0.116232566s ago: executing program 33 (id=223): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x281, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000080)=0x8) fspick(0xffffffffffffffff, 0x0, 0xf0961890b4faa8d0) r1 = socket$nl_route(0x10, 0x3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r2, r2) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgid(r4) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="60000000100001060000000000000000000000000000000000000000000000000d000300626172657564703000000000300012000c00010062617265756470002000020006000100b5120000060002000008000006000300e8030000040004"], 0x60}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 13m47.815723091s ago: executing program 34 (id=219): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x2, 0x0, 0x0, 0x2, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x700, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x4, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x6bb, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800003, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000000000000c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) r3 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x10e, 0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x7fffffbfffffffff, 0x3}, 0x10bcc8, 0x8000, 0x2, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x27fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x0, 0x7995}, 0x8416, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x6, 0xd, &(0x7f0000001b40), 0x4) setsockopt$sock_attach_bpf(r7, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) socket$nl_generic(0x10, 0x3, 0x10) 12m58.334308941s ago: executing program 35 (id=364): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000140)={r5, 0xa1, "9bb22e09e7827df05d6b514761f7e5b51fda3f4cd0090784d47b4bdaa6df9612fefc341bc37a8ad06b8cdda7a2b7201e3578f68928da56373f1f36aac4dd5ec9549bba0a66e286844646942b188a245387a8b3fe641adfa9196a039a704d5bbcd2f41ff022e93f0f1945e109250bb046e64542b2973cfa09d2d4e25c175a4848261ed0a1d98ffcd6dd50077aa24b409eac50d43bd21c26114b0926b83b2e7cbd8c"}, &(0x7f0000000200)=0xa9) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_misc(r6, &(0x7f0000000000)="cb", 0x1) perf_event_open(&(0x7f00000000c0)={0x8, 0x80, 0x0, 0x20, 0x4, 0x0, 0x2, 0xfe, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x106021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000002000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x11, r7, 0x0) 12m54.004825696s ago: executing program 36 (id=379): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 11m44.486583578s ago: executing program 37 (id=652): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x4}, 0x6000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x7, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}, {0x0, 0x2}]}, @func={0x6, 0x0, 0x0, 0xc, 0x1}, @restrict={0x5, 0x0, 0x0, 0x4}]}, {0x0, [0x30, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x5b}, 0x28) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x14000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 10m47.03077016s ago: executing program 38 (id=881): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = request_key(0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xd) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES64=r3], 0xb2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) request_key(0x0, 0x0, 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xd) (async) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) (async) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES64=r3], 0xb2) (async) 10m9.659609398s ago: executing program 39 (id=1448): eventfd2(0x23, 0x80800) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, 0x0) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) 8m58.063324345s ago: executing program 40 (id=2189): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x40f03, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 6m56.20991513s ago: executing program 41 (id=2965): mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r2, 0xffffffffffffffff, 0x0) 5m59.78321003s ago: executing program 42 (id=3197): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x40, 0xc4852ef}, 0x109068, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002040), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf250100000005"], 0x1c}, 0x1, 0x0, 0x0, 0x48004}, 0x0) (fail_nth: 5) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000140)=""/14, 0xe) 3m52.724717791s ago: executing program 43 (id=3829): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_tcp(0x2, 0x1, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x5) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10) 3m8.8755047s ago: executing program 44 (id=4172): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4080}, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000340)={[{@noblock_validity}, {@sysvgroups}, {@dioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x4a2, &(0x7f0000001400)="$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") utime(0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000440)=ANY=[@ANYBLOB]) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@ifindex, 0x1f, 0x1, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x8}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0x29}], 0x1}}], 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000000)='3', 0x4e) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x805, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup, r6, 0x31, 0x202c, 0x0, @void, @void, @value, @void, r2}, 0x20) 2m35.900315999s ago: executing program 45 (id=4526): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x2000000, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m25.380588651s ago: executing program 46 (id=4638): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket(0xa, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000500)={0x0, @in={{0x2, 0x0, @empty}}, 0x80000000, 0x2, 0x0, 0x0, 0x6a0a65d351a03541, 0x7}, 0x9c) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x101}}]}}]}, 0x48}}, 0x20040084) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x4c092, 0xffffffffffffffff, 0x200000000000000) setns(0xffffffffffffffff, 0x2000000) r9 = socket(0x8, 0x2, 0x0) setsockopt(r9, 0x108, 0x42020054, &(0x7f0000000140)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x84, 0x3, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x486, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x7fff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0x7ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0xc, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x7c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x6, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x80, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xefa, 0x6, 0x7f, 0x2, 0x0, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53d2, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x7fffffff, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x0, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x8, 0x5, 0x8}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0x2000000e, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x7, 0x6, 0x6}, {0xa, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xfffffffd, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0x7f, 0x100}, {0x81, 0x4, 0x988, 0x3, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0x18e, 0x8, 0xe98, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf6, 0x2}, {0x3, 0x3, 0x5, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x6, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x8, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8f, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x20003, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {}, {0x3}, {0x5}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = socket$kcm(0x11, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000003900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x40) fchdir(r0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x85, &(0x7f0000000000)={[{@i_version}, {@noblock_validity}, {@noquota}, {@nouid32}, {@norecovery}, {@abort}, {@init_itable_val={'init_itable', 0x3d, 0x80}}, {@noauto_da_alloc}, {@resuid, 0x32}]}, 0x1, 0x527, &(0x7f0000001380)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 1m45.401456218s ago: executing program 2 (id=5055): unshare(0x100000) unshare(0x22020400) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r0, 0x9, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {}, [{0x70, 0x1, [@m_ife={0x6c, 0x1, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xd}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa, 0x80, 0x3, 0x0, 0x10}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x7fffffff, 0xffffffffffffffff, 0x10001, 0xf6}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e40)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000400000001000000000000130400000000610e00"], 0x0, 0x28, 0x0, 0x1, 0x200}, 0x28) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='\x00', &(0x7f0000000080)={0x800, 0x1}, 0x18) r3 = openat(r2, &(0x7f0000000000)='./file0\x00', 0x4000, 0x20) syz_io_uring_setup(0x5fb7, &(0x7f0000000140)={0x0, 0xdc62, 0x2480, 0x0, 0x376}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000340)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_fd={0x18, 0xb, 0x1, 0x0, r3}]}, &(0x7f00000002c0)='GPL\x00', 0x2, 0x80, &(0x7f00000003c0)=""/128, 0x40f00, 0x1, '\x00', r4, @fallback=0x15, r0, 0x8, &(0x7f0000000480)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xc, 0x1, 0x7}, 0x10, 0xffffffffffffffff, r3, 0x2, &(0x7f0000000100)=[r0, r0, r0, r3], &(0x7f0000000580)=[{0x1, 0x3, 0x10, 0x5}, {0x4, 0x3, 0x0, 0x2}], 0x10, 0xff}, 0x94) getdents(r3, 0x0, 0x0) 1m45.31858494s ago: executing program 2 (id=5057): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000002001c0012800c0001006d6163766c616e000c00028008000100", @ANYRES32], 0x4c}}, 0x884) 1m45.31844833s ago: executing program 2 (id=5058): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000000c000083900003808400038060000180090002002c2d402900000000040003000c000200657468746f6f6c00040003000c000200657468746f6f6c00060002002f00000005000200000000000900020024285d2a0000000008000100030000000b000200232d2a293a2b0000200001800400030005000200000000000800010079000000080001000300000008000200fb7d00001800018014000200766c616e30"], 0xbc}}, 0x0) 1m45.29034495s ago: executing program 2 (id=5059): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x1, &(0x7f0000000180)) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0x419183b1) ptrace$pokeuser(0x6, r0, 0x388, 0xffefffffff7f0000) r1 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x904b, 0x3000, 0x0, 0x2d6}) poll(&(0x7f0000009b00)=[{r1}], 0x20, 0x72) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x2, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0xd}}]}, 0x1, 0xbdd, &(0x7f0000001340)="$eJzs3M1rXNcVAPDznkZj2VY9ciml7qYqpdhQOpZcZGpTqF1cuumi0G4LFvLICI0/kBQcyVqMkn8gJFkHsgkkMQlZxGTpTUKyzSaxtwlZBExQrARCSBTefEhja0aS4xk/Yf9+cDX3vjsz55x5jN69MDMBPLVGsz9pxJGIOJ9ElJrH04go1ntDEbXG/dZWl6e+XV2eSmJ9/b9fJZFExL3V5anWcyXN24PNwVBEfPyPJH75/Na484tLs5PVamWuOT6+cOnq8fnFpT/PXJq8WLlYuTx+8q8TJyZOjp2a6Fmt33125uY3v//XF7Xv3/jhxtcvvZbEmRhuzrXX0SujMbrxmrQrRMRkr4PlZKBZT3udSWGHB6V9TgoAgK7StjXcr6MUA7G5eCvF+5/kmhwAAADQE+sDEesAAADAEy6x/wcAAIAnXOtzAPdWl6daLd9PJDxed89GxEij/rVma8wUola/HYrBiDhwL4n2r7UmjYc9stGI+PzOqbezFn36HvJ2aisR8ZtO5z+p1z9S/xb31vrTiBjrQfzRB8Y71D/Qg5D3eZT6z/Qg/kPWDwA9cets40K29fqXbqx/osP1r9Dh2vVzdLj+9fwav53W+m9ty/pvs/6BtvqLzcdl67//7DLG9ddfudZtLqv/bzf/+VarZfGz28bse4Ndn3THH1nZnbsrEb8tdKo/2ag/6bL+Pb/LGKUfr1W6zW1ff/+tvxpxNDrX35Js//tEx6dnqpWxxt+OMVY+mnizW/y868/O/4Eu9bd+/6nb+b+6yxj/P3funS0H72x2t68//bKY/K/ea733np1cWJgbjygm/956/MT2ubTu03qOrP5jf9j+/d+p/ux/Qq35OmR7gZXmbTZ+7oGYf79x/d1u+bT2f3me/wtdzn97/R8Wtp7/F3YZ448fvHis21z7/jdrWfzWXhgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWtKIGI4kLW/007RcjjgYEb+KA2n1yvzCn6avPHP5QjYXMRKD6fRMtTIWEaXGOMnG4/X+5vjEA+O/RMThiHi5tL8+Lk9dqV7Iu3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2HIyI4UjSckSkEbFWStNyOe+sAAAAgJ47lHcCAAAAQN+N5J0AAAAA0Hf2/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTZ4d/dup1ERO30/nrLFJtzg7lmBvRbmncCQG4G8k4AyE0h7wSA3DzkHt9yAZ5AyQ7zQ11n9vU8FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD2rqNHbt1OIqJ2en+9ZYrNucFcMwP6Lc07ASA3A90mhiKi8HhzAR4vb3F4etnjA8kO80Ob96ndP7OvbzkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsPcM11uSliOi2DxWLkf8IiJGYjCZnqlWxiLiUER8Whrcl43Hc84ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA3ptfXJqdrFYrc1knjWZn44jOZidpvGK1vZKPziN2irEn0tijnbz/MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkIf5xaXZyWq1MjefdyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3uYXl2Ynq9XKXB87edcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB+fgoAAP//LdIK5Q==") unlink(&(0x7f0000000300)='./file1\x00') syz_emit_ethernet(0x7c, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60381f3400462ffffc000000000000000000000000000000ff020000000000000000e7ffffff0001c5a681000000892f008000000800000086dd88a888be00e8ff00100000000100000008000000080022eb0000000000000800655800"/124], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x1, &(0x7f0000000180)) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r0) (async) ptrace$pokeuser(0x6, r0, 0x388, 0x419183b1) (async) ptrace$pokeuser(0x6, r0, 0x388, 0xffefffffff7f0000) (async) io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x904b, 0x3000, 0x0, 0x2d6}) (async) poll(&(0x7f0000009b00)=[{r1}], 0x20, 0x72) (async) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x2, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0xd}}]}, 0x1, 0xbdd, &(0x7f0000001340)="$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") (async) unlink(&(0x7f0000000300)='./file1\x00') (async) syz_emit_ethernet(0x7c, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60381f3400462ffffc000000000000000000000000000000ff020000000000000000e7ffffff0001c5a681000000892f008000000800000086dd88a888be00e8ff00100000000100000008000000080022eb0000000000000800655800"/124], 0x0) (async) 1m44.985898088s ago: executing program 2 (id=5063): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001080)='westwood', 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 1m44.613862137s ago: executing program 2 (id=5068): semtimedop(0x0, &(0x7f0000000380)=[{0x0, 0x9, 0x800}, {}], 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800010000000000000000001d01000008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r1], 0x24}}, 0x0) semop(0x0, &(0x7f0000000040)=[{0x3, 0x5}, {0x4, 0xf, 0x1800}, {0x1, 0xf, 0x97e5b0b2ddf6a90f}], 0x3) 1m44.502818299s ago: executing program 47 (id=5068): semtimedop(0x0, &(0x7f0000000380)=[{0x0, 0x9, 0x800}, {}], 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800010000000000000000001d01000008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r1], 0x24}}, 0x0) semop(0x0, &(0x7f0000000040)=[{0x3, 0x5}, {0x4, 0xf, 0x1800}, {0x1, 0xf, 0x97e5b0b2ddf6a90f}], 0x3) 1m40.750852319s ago: executing program 3 (id=5108): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@delchain={0x6c, 0x65, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff2, 0x7}, {0xf, 0x1}, {0xe, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_RATE={0x6, 0x5, {0x6, 0x6}}, @TCA_RATE={0x6, 0x5, {0xcb, 0xb}}, @TCA_CHAIN={0x8, 0xb, 0xc49}, @TCA_CHAIN={0x8, 0xb, 0x20000}, @TCA_RATE={0x6, 0x5, {0x2, 0x9a}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0x64f}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8d0}, 0x8000000) 1m40.671708201s ago: executing program 3 (id=5110): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="620ac4ff0000000071102700000000009500000000000000c379149f062c57a18fb9"], &(0x7f0000000480)='GPL\x00'}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) write(0xffffffffffffffff, &(0x7f00000002c0), 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r3, 0x0, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$selinux_access(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup3(r6, r2, 0x0) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) write$nci(r4, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc091, 0x1, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="780b0024539c8a3cf9ab12af04d5fce8c23d6a4e036faed7a27b862d864f960fdfef2107c4d3a0e9acc261da0ca7161deaa339be77447768160582530cddc9a68ba07844d35b2f2c791ed547b53f2772678f887220bdc85f030a6c723f33572227ca702ad362eec83b847731d967b972800fdacbd0d2d2fd8ecc0289608bfcc002b4145bb9b61658c5a5926c84ab2b4e753aa8307f837910f559dbd92236d9ce5fbe75583c7f56bbd05d68f5fc2433f50375023d48509da42dad60f2746393c880bbaa87b3a855cfb2bdd65692f12e00f2be107389432463771846244b6a48e3f5ca8123d2851637623dc356778cea183b16cf527c94d737", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000500008804c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000200eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db7171400020077673000"/114], 0x78}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1m40.566175594s ago: executing program 3 (id=5113): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000000)=ANY=[@ANYBLOB="bc0000", @ANYRES16=r1, @ANYBLOB="010000000000000000000c000083900003808400038060000180090002002c2d402900000000040003000c000200657468746f6f6c00040003000c000200657468746f6f6c00060002002f00000005000200000000000900020024285d2a0000000008000100030000000b000200232d2a293a2b0000200001800400030005000200000000000800010079000000080001000300000008000200fb7d00001800018014000200766c616e30"], 0xbc}}, 0x0) 1m40.546093694s ago: executing program 3 (id=5114): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, 0x0, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x40088c5}, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/wakeup_count', 0x420041, 0x1e) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) socket$kcm(0x2, 0x2, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1862a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x3}, 0x10ecc8, 0x1224, 0xfdfeffff, 0x8, 0x10, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000061191d000000d58b7bb84c5e461713639d4d8ad5ffae2b19e4f39cdeb316effea6988a7c9d4a20b26025462de256673069be62c55799e2659a0ad5f68d5129ac19ea1170f4856f32dc7efdafd638b08446685776f7d36461fca893904e0615b462a7124a47fe716022c5959fa3ff278f32fc134aeb125dd50529b85906fc3fd3fd31360dd074b9a0e75fb3147e2e3353a9ce1afb7590065dc376524aba8df3771d463b86966ff73be79f57d16abfb6d8e8d33100bdf9275f4c5678fdf1e5ea4d25eea573683cdf44203257e726bb33f43bd47d3c7c2c522b"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = syz_io_uring_setup(0xf02, &(0x7f0000000140)={0x0, 0xeb9f, 0x10000, 0x2, 0x4b}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x185093, 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) 1m40.27338171s ago: executing program 3 (id=5118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8854}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000030a03000000000000000000050000000900010073797a30000000000900030073797a30000000010000000073797a300000000014000000110001000000000000003adfd399000a"], 0x60}, 0x1, 0x0, 0x0, 0x20044841}, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a140000001a0a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) 1m40.138203094s ago: executing program 3 (id=5119): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@delchain={0x6c, 0x65, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff2, 0x7}, {0xf, 0x1}, {0xe, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_RATE={0x6, 0x5, {0x6, 0x6}}, @TCA_RATE={0x6, 0x5, {0xcb, 0xb}}, @TCA_CHAIN={0x8, 0xb, 0xc49}, @TCA_CHAIN={0x8, 0xb, 0x20000}, @TCA_RATE={0x6, 0x5, {0x2, 0x9a}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0x64f}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8d0}, 0x8000000) 1m40.052326126s ago: executing program 48 (id=5119): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@delchain={0x6c, 0x65, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff2, 0x7}, {0xf, 0x1}, {0xe, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_RATE={0x6, 0x5, {0x6, 0x6}}, @TCA_RATE={0x6, 0x5, {0xcb, 0xb}}, @TCA_CHAIN={0x8, 0xb, 0xc49}, @TCA_CHAIN={0x8, 0xb, 0x20000}, @TCA_RATE={0x6, 0x5, {0x2, 0x9a}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0x64f}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8d0}, 0x8000000) 1m7.565823093s ago: executing program 5 (id=5395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000030601080000000000000000010000060900b6af73797a300000000005000100070000000500017c463f3df5a7b72f0073"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x40) 1m7.29046648s ago: executing program 5 (id=5397): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) fcntl$setownex(r0, 0xf, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x45, 0x1, 0x2}, {0x61}, {0x81}, {0x6, 0x0, 0xfd}]}) 1m6.375719291s ago: executing program 5 (id=5406): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x7f) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000640), 0x40, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x40, &(0x7f000005ffe4)={0xa, 0x0, 0x1, @loopback={0xe0ffffff00000000}, 0x7}, 0x1c) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000180), &(0x7f0000000280)=0x8) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000e32b0000"], 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xba1) 1m5.745397476s ago: executing program 5 (id=5409): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@stripe={'stripe', 0x3d, 0x1000000}}, {@debug}, {@nombcache}, {@resgid}, {@user_xattr}, {@block_validity}, {@usrquota}, {@mblk_io_submit}, {@grpjquota}, {@grpquota}, {@max_batch_time={'max_batch_time', 0x3d, 0xfe}}]}, 0x1, 0x46d, &(0x7f0000000bc0)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) io_uring_setup(0x2106, &(0x7f0000000080)={0x0, 0x1772, 0x8000, 0x0, 0x292}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1862a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x3}, 0x10ecc8, 0x1224, 0xfdfeffff, 0x8, 0x10, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) pread64(r1, 0x0, 0x0, 0x80000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0xa1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x6101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2901, 0x0) close(r4) socket$can_raw(0x1d, 0x3, 0x1) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x1) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local}) write$tun(r2, &(0x7f00000001c0)=ANY=[], 0xc2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000280)="0566", 0x2, 0x200c085, &(0x7f00000001c0)={0x11, 0x3, r6, 0x1, 0xfc, 0x6, @multicast}, 0x14) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)=0x10) 1m4.298658751s ago: executing program 5 (id=5418): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000030601080000000000000000010000060900b6af73797a300000000005000100070000000500017c463f3df5a7b7"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x40) 1m1.998338176s ago: executing program 5 (id=5427): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./tracefs\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/events/xhci-hcd/xhci_portsc_writel/format\x00', 0x0, 0x0) read(r0, &(0x7f0000000500)=""/1024, 0x400) 1m1.929287158s ago: executing program 49 (id=5427): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./tracefs\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/events/xhci-hcd/xhci_portsc_writel/format\x00', 0x0, 0x0) read(r0, &(0x7f0000000500)=""/1024, 0x400) 50.014383723s ago: executing program 7 (id=5494): syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @dev={0xac, 0x14, 0x14, 0x3f}, 0x4e23, 0x3, 'lc\x00', 0x1, 0x28c, 0x61}, 0x2c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8c1}, 0x4040) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000080)=0xc) socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000140)={{0x84, @multicast2, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x80, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x4e23, 0x10000, 0x2000007, 0x12d61, 0x12d58}}, 0x44) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880c0}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, 0x0, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x300, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 49.894434226s ago: executing program 7 (id=5497): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) fcntl$getownex(r0, 0x10, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x18002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x44) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x28, 0x30, 0x3f55, 0x303e9563}, &(0x7f0000000240)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x6a0}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000300)={r4, 0x7, 0xe4, 0x2, 0x3b, 0x0, 0x9, 0x3, {r5, @in={{0x2, 0x4e23, @multicast2}}, 0x4, 0x10001, 0x6, 0xfffffffa, 0x3}}, &(0x7f00000003c0)=0xb0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x45, 0x1, 0x2}, {0x61}, {0x81}, {0x6, 0x0, 0xfd}]}) r6 = socket$inet6(0xa, 0xa, 0x5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xec, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0xc4, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x7a}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x8c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x7c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x5c, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x15c}}, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0x1ff}, 0x1c) 49.032870367s ago: executing program 7 (id=5498): sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @dev={0xac, 0x14, 0x14, 0x3f}, 0x4e23, 0x3, 'lc\x00', 0x1, 0x28c, 0x61}, 0x2c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) mq_open(0x0, 0x8c0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x4e) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r1 = fsopen(0x0, 0x1) r2 = fsmount(r1, 0x0, 0xa) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x600582, 0x0) sendmsg$IPSET_CMD_FLUSH(r3, 0x0, 0x44040) open(0x0, 0x8000, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r2, 0x0, 0x800000039000, 0x4) r7 = memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd\x9b`;\x1c\xfc\xaf9\x98\x91\xe7\x00'/52, 0x0) splice(r5, 0x0, r7, 0x0, 0x400c5, 0x5) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffe3e) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f00000002c0)={0x209d, 0x0, 0x0, 0x9572cf3}, 0x10) write(r8, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) rmdir(&(0x7f0000000100)='./config/usb_gadget/g1\x00') r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) r11 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRES64=r11, @ANYRESOCT=r10, @ANYRESDEC=r6], 0x3c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4840) 48.083710629s ago: executing program 7 (id=5506): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x7, 0x84) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006c0001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9140010040efff0018001480"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 47.940450003s ago: executing program 7 (id=5507): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xfc, 0x0, 0xa, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_config_ext={0x9, 0x10000000002}, 0x20084, 0x0, 0x7, 0x1, 0x0, 0x10, 0x1000, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0x4, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x4001, 0x3, 0x2a0, 0x0, 0xb, 0x148, 0x0, 0x148, 0x208, 0x240, 0x240, 0x208, 0x215, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x21, 0x0, 0x10}, 0x2e8, 0xe8, 0x130, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x4e24, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e24], [0x1, 0x0, 0x43, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x41, 0x0, 0x0, 0x0, 0xfc]}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0xab, 0x6, 'syz1\x00', {0x4}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'team0\x00', 'netpci0\x00', {}, {}, 0x0, 0x1}, 0xec010000, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./mnt\x00', 0x10002, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$FIONCLEX(r2, 0x5450) socketpair(0x11, 0xa, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) r4 = open(0x0, 0x4827e, 0x20) fallocate(r4, 0x0, 0x832d, 0x87ffffd) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'batadv0\x00', 0x400}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYRES32=r0, @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x24000841}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x4402, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/block/sda/hctx0/tags\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 47.63682579s ago: executing program 7 (id=5509): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x26) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10fec8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0xb, 0x8, 0x40, 0x42, 0x1, 0x3ffffffe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000080)=0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r1, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r3, 0x107, 0x5, 0x0, 0x0) 43.222172206s ago: executing program 0 (id=5536): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_bp={0x0, 0x2}, 0x2604, 0x7, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="15042bbd7000ffdbdf2512000000050013000100000005001300000000000c00060001"], 0x48}, 0x1, 0x0, 0x0, 0x40864}, 0x4000) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xde524f7fb9750cd3, 0x810, r0, 0xb35) 43.159366727s ago: executing program 0 (id=5537): setns(0xc9, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000002}) r0 = socket(0x8, 0x5, 0x5) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x200, @local, 0x1}, @in6={0xa, 0x4e23, 0x1000, @local, 0x4}], 0x38) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x400261f2, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r2 = socket(0x29, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) 43.03756088s ago: executing program 0 (id=5538): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x2001) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r0, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x10, 0x86, 0x5, 0xfff, 0x4, 0x8, 0x9, 0x7ff, 0x92e}}) r2 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',shortname=mixed,utf8=1,gid=', @ANYRESHEX=0xee01, @ANYBLOB="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"], 0x1, 0x2b4, &(0x7f0000000e40)="$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") 42.102322753s ago: executing program 0 (id=5545): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000140)=0x10, 0x800) recvmmsg(r0, &(0x7f00000054c0)=[{{&(0x7f00000001c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000680)=[{&(0x7f0000001840)=""/199, 0xc7}, {&(0x7f0000000440)=""/218, 0xda}, {&(0x7f0000000580)=""/254, 0xfe}], 0x3, &(0x7f00000006c0)=""/96, 0x60}, 0x7}, {{&(0x7f0000000740)=@xdp, 0x80, &(0x7f0000000980)=[{&(0x7f00000007c0)=""/37, 0x25}, {&(0x7f0000000800)=""/105, 0x69}, {&(0x7f0000000880)=""/196, 0xc4}], 0x3, &(0x7f00000009c0)=""/194, 0xc2}, 0x4}, {{&(0x7f0000000ac0)=@can, 0x80, &(0x7f0000001940)=[{&(0x7f0000000b40)=""/195, 0xc3}, {&(0x7f0000000c40)=""/49, 0x31}, {&(0x7f0000000c80)=""/23, 0x17}, {&(0x7f0000000240)=""/44, 0x2c}, {&(0x7f0000000340)=""/171, 0xab}, {&(0x7f0000001540)=""/132, 0x84}, {&(0x7f0000001640)}, {&(0x7f0000001680)=""/30, 0x1e}], 0x8, &(0x7f0000000d00)=""/55, 0x37}, 0xffff0001}, {{&(0x7f0000000d40)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000dc0)=""/118, 0x76}, {&(0x7f0000000e40)=""/58, 0x3a}, {&(0x7f00000013c0)=""/155, 0x9b}, {&(0x7f0000001480)=""/63, 0x3f}, {&(0x7f0000001740)=""/241, 0xf1}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/54, 0x36}], 0x7}, 0x20000000}, {{&(0x7f0000002cc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002d40)=""/45, 0x2d}, {&(0x7f0000002d80)=""/110, 0x6e}, {&(0x7f0000002e00)=""/25, 0x19}], 0x3, &(0x7f0000002e80)}, 0x4}, {{&(0x7f0000002ec0)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002f40)=""/54, 0x36}], 0x1, &(0x7f0000002fc0)=""/4096, 0x1000}, 0x100}, {{&(0x7f0000003fc0)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000005440)=[{&(0x7f0000004040)=""/109, 0x6d}, {&(0x7f00000040c0)=""/161, 0xa1}, {&(0x7f0000004180)=""/128, 0x80}, {&(0x7f0000004200)=""/75, 0x4b}, {&(0x7f0000004280)=""/4096, 0x1000}, {&(0x7f0000005280)=""/191, 0xbf}, {&(0x7f0000005340)=""/217, 0xd9}], 0x7}, 0x10001}], 0x7, 0x0, &(0x7f0000005680)={0x77359400}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="e672616e733d66642c7266646e6f3d", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000738000/0x4000)=nil, &(0x7f0000738000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./configfs\x00', 0x0, &(0x7f0000000300), 0xff, 0x501, &(0x7f0000000e80)="$eJzs3c9vY0cdAPCvndhxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZE/gHNP3LkguHEpByR+RKAGiYPRe37OehN7E20SO8Sfj/T0Zt54/Z2J982sv1l7AhhbtyPiICKKEfF+RMxl13PZEe90juRxnx0+Wj06fLSai3b7vX/k0vbkWvT8mcSt7DlLEfGD70T8OHc6bnNvf3OlVqvuZPWFVn17obm3f2+jvrJeXa9uVSrLS8uLb91/s3JpY32lXsxKX/709wff+GnSrdnsSu84LlNn6IXjOInJiPjeVQQbgYlsPMVRd4Rnko+IFyPi1fT+n4uJ9NUEAG6ydnsu2nO9dQDgpos0B5bLl7NcwGzk8+VyJ4f3Uszka41m6+7Dxu7WWidXNh+F/MONWnUxyxXORyGX1JfS8uN65UT9fkS8EBE/n5pO6+XVRm1thP/uAYBxduvE+v/vqc76DwDccKVRdwAAGDrrPwCMH+s/AIwf6z8AjJ/O+j896m4AAEPk/T8AjB/rPwCMle+/+25ytI+y779e+2Bvd7Pxwb21anOzXN9dLa82drbL643GevqdPfWznq/WaGwvvRG7H85/c7vZWmju7T+oN3a3Wg/S7/V+UC2kjzoYwsgAgEFeeOWTP+WSFfnt6fSInr0cCiPtGXDV8qPuADAyE6PuADAydvuC8XWB9/jSA3BD9Nmi9wmlfh8Q6m4gAvxfuvMF+X8YVz35f/8LGMaM/D+ML/l/GF/tdu68e/7HeR8IAFxvcvzAgN//v5idf5P9cuBHaycf8fFV9goAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACut+7+v+VsL/DZyOfL5YjnImI+CrmHG7XqYkQ8HxF/nCpMJfWlEfcZALio/F9z2f5fd+Zen32i6eVbx8ViRPzkl+/94sOVVmvnDxHF3D+nutdbH2fXK8PvPQBwtu46nZ573sh/dvhotXsMsz9/+3ZElDrxjw6LcXQcfzIm03MpChEx869cVu/I9eQuLuLgo4j4fL/x52I2zYF0dj49GT+J/dxQ4+efiJ9P2zrn5GfxuUvoC4ybT5L5551+918+bqfn/vd/KZ2hLi6b/5KnWj1K58DH8bvz38SA+e/2eWO88bvvdkrTp9s+ivjiZEQ39lHP/NONnxsQ//Vzxv/zl15+dVBb+1cRd6J//N5YC6369kJzb//eRn1lvbpe3apUlpeWF9+6/2ZlIc1RLwxeDf7+9t3nB7Ul458ZEL90xvi/es7x//q/7//wK0+J//XX+sXPx0tPiZ+siV87Z/yVmd+WBrUl8dcGjP+s1//uOeN/+pf9U9uGAwCj09zb31yp1ao7Cte5UMxeruvSn0GF0hX3MPkZXI+Rni58a1ixitG/6Wev9f1L0m4/U6xBM8ZlZN2A6+D4po+I/4y6MwAAAAAAAAAAAAAAQF/D+MTSqMcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAzfW/AAAA//+Y9srv") sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="6797f04cdb6f2b95f1c922adb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d", 0x28}], 0x1}, 0x30008b08) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./mysys\x00', 0xff) io_uring_enter(r3, 0x221c, 0x134d, 0x16, 0x0, 0x0) 41.846609648s ago: executing program 0 (id=5546): timer_create(0x0, 0x0, &(0x7f0000000180)=0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x2, 0x5002) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r1, &(0x7f0000004680), 0x0, 0x0, 0x0) timer_gettime(r0, &(0x7f00000001c0)) timer_getoverrun(r0) 41.176088304s ago: executing program 0 (id=5550): bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x490, 0x0, 0x0, 0x5, 0x2000, 0x101}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/raw\x00') pread64(r0, &(0x7f0000000140)=""/4072, 0xfe8, 0xe9) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) r1 = syz_open_procfs(0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, 0x0, 0x10) r2 = timerfd_create(0x0, 0x0) r3 = timerfd_create(0x0, 0x0) ppoll(&(0x7f0000000700)=[{r2, 0x3041}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x5, 0x200000000000000, 0x0, 0x6, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x1) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b787c3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) 41.140485445s ago: executing program 50 (id=5550): bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x490, 0x0, 0x0, 0x5, 0x2000, 0x101}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/raw\x00') pread64(r0, &(0x7f0000000140)=""/4072, 0xfe8, 0xe9) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) r1 = syz_open_procfs(0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, 0x0, 0x10) r2 = timerfd_create(0x0, 0x0) r3 = timerfd_create(0x0, 0x0) ppoll(&(0x7f0000000700)=[{r2, 0x3041}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x5, 0x200000000000000, 0x0, 0x6, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x1) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b787c3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) 32.504110532s ago: executing program 51 (id=5509): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x26) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10fec8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0xb, 0x8, 0x40, 0x42, 0x1, 0x3ffffffe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000080)=0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r1, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r3, 0x107, 0x5, 0x0, 0x0) 12.036832132s ago: executing program 4 (id=5766): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x8002000, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000140)=0x6, 0x4) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000180)=0xffffffffffffffff) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20a02, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xdb77, 0x1f480, 0x3, 0x325}) r3 = open(&(0x7f0000000100)='./sys/class/net/dummy0/carrier\x00', 0x4000, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000001f40)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000d0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000300)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000340)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000380)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000003c0)=0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x840) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x44, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x49090}, 0xc0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000040)={0x14, 0x0, 'client0\x00', 0x0, "d0c0bc3d842e13bd", "6c71c01a5bc3726cae6780348afaded0f912d292bba1ad9142061f20b357e120", 0x3, 0x5}) 6.998738533s ago: executing program 4 (id=5807): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000d00)=ANY=[@ANYBLOB="18000000030000000000000020d80f9700580000", @ANYBLOB="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", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], 0x0, 0x300000, 0x8d, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0xf}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000845) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7fffffff, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b40)={'ip6tnl0\x00', &(0x7f0000000ac0)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0x1a, 0x7f, 0x60, @remote, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8000, 0x7, 0x54, 0x5}}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000c80)=0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000cc0)={r0, r2, 0x25, 0x6, @val=@uprobe_multi={&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)=[0x5], &(0x7f0000000c00)=[0x0, 0x5, 0x5, 0x3, 0x5, 0x5, 0x2, 0x5, 0x1], 0x4, 0x1, 0x1, r3}}, 0x40) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f0000000240)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x4a, &(0x7f0000000040), 0x50) sendto$inet(0xffffffffffffffff, &(0x7f00000006c0)="f149300d5f039fdeffbccae168b3965548db07b5ce548f159fd7fae294ebe214f43f03f5afd0f7d651054a65cc4a7328ae56ee23758ce00bb14e25ab52efc66cd70e4e00190600000000000000fb964e22e3989c0c0f47fa834d227bf0e2fd5a0c19057f81005e08cc7c027544a0a55c0e64f99f8aa14863cab861264c5db0bc57781a1c63ff6cf876f0643a8bceb1c484a2afed6a6f754377b523b0008fe36144aebe90e000000e4350fb5fd5a4291bb9d8d05a57dd7e5bf88f4cf3cb9aede83a5fb5278162883af000000000000000", 0xd0, 0x81, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000280)=""/128, 0x80}, {&(0x7f00000005c0)=""/76, 0x4c}, {&(0x7f0000000640)=""/119, 0x77}, {&(0x7f00000007c0)=""/38, 0x26}], 0x4, &(0x7f0000000840)=""/112, 0x70}, 0x81}, {{&(0x7f00000008c0)=@xdp, 0x80, &(0x7f0000000940), 0x0, &(0x7f0000000980)=""/92, 0x5c}, 0x8}], 0x2, 0x100, &(0x7f0000000a80)={0x77359400}) shutdown(r1, 0x1) r5 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x68443, 0x1) close(r5) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0185879, &(0x7f0000000000)={0x58f5, 0x4ffff, 0x4, 0x101, 0x1, 0x2, 0x2401}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000740)='bbr', 0x3) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000240)="c9", 0x1, 0x4044880, 0x0, 0x0) 3.141931275s ago: executing program 8 (id=5833): pipe2(0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@init_itable_val={'init_itable', 0x3d, 0xff}}, {@resgid}]}, 0x0, 0x48f, &(0x7f00000006c0)="$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") r1 = openat(r0, &(0x7f0000000680)='./file0\x00', 0x4c8c2bb75bdfc39a, 0x0) write$cgroup_type(r1, &(0x7f0000000100), 0x9) (async) write$cgroup_type(r1, &(0x7f0000000100), 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80660080}, 0xc, &(0x7f0000000400)={&(0x7f0000000c80)=ANY=[@ANYBLOB="d4000093bd1092701408", @ANYRES16=r3, @ANYBLOB="100026bd7000fddbdf250d000000500004800900010073797a30000000001c00078008000200d00000000800010018000000080003000a00000024000780080003000104000008000200060000000800020001000000080004000b0000003c00018038000400200001000a004e2300000004fe8000000000000000000000000000aa100000001400020002004e22e00000020000000000000000340009800800010006000000080001004000000008000100fcffffff080002000300000008000200010000000800020000000000"], 0xd4}, 0x1, 0x0, 0x0, 0x20010004}, 0x8001) (async) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80660080}, 0xc, &(0x7f0000000400)={&(0x7f0000000c80)=ANY=[@ANYBLOB="d4000093bd1092701408", @ANYRES16=r3, @ANYBLOB="100026bd7000fddbdf250d000000500004800900010073797a30000000001c00078008000200d00000000800010018000000080003000a00000024000780080003000104000008000200060000000800020001000000080004000b0000003c00018038000400200001000a004e2300000004fe8000000000000000000000000000aa100000001400020002004e22e00000020000000000000000340009800800010006000000080001004000000008000100fcffffff080002000300000008000200010000000800020000000000"], 0xd4}, 0x1, 0x0, 0x0, 0x20010004}, 0x8001) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x37}, 0x24) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r1, 0x0, 0xbd, 0xde, &(0x7f0000000480)="bc97657ef87cd3f502319ab0c776cf97aff32e09e7c195666b290c6a24357f2878f776f2086988a0c42f40e1c4bbbdc94cfdb3d28a6d8cff2d5f436ebb4ff21b523edc49f607403c5410af30de69f92cd6b7e63fdffe31f0a67a225e6be07c4ada381e9932877653c84916fe0e6d2a2a5dd45e9903c863379f70cf73697e9abe1cccf7eab10df80ca22264452aadbc8b5cffcd84097cb8f0d9fb69c06dbc61ddb607ce6e372427da6f233e1e3d447591e7669fad6a03cf8e6d6a2c5bc8", &(0x7f0000000540)=""/222, 0x5, 0x0, 0x0, 0x48, 0xfffffffffffffffc, &(0x7f0000000b80)="f8a9178f450b8a2a93c8aecdd7f0b3e1a860e06b32509b5c6aca29c9cc0161115f037a7cce7f8ee05126bef47fe766160084b4d6e0628259551c5c9cc169585c914fa6aa4cc71b9b", 0x7}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) close_range(r2, 0xffffffffffffffff, 0x200000000000000) (async) close_range(r2, 0xffffffffffffffff, 0x200000000000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000004, 0x7, &(0x7f0000006680)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000004, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100) (async) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000002000000108001b00000000001c001a801800028014000180080003000100000008001c"], 0x44}}, 0x0) 2.93807693s ago: executing program 4 (id=5834): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x90, 0x0, 0x1, 0x405, 0x0, 0x0, {0x2}, [@generic="3400018014000180080001007f000001080002007f0000011c00028005000100110000000600020006b700000600030006b700003400028014000180080001007f000001080002007f0000011c00028005000100110000000600020006b700000600030006b700000c0005800800010052415300080007000000012c"]}, 0x90}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x1b, 0x5, 0x3e0, 0x348, 0x348, 0xffffffff, 0x348, 0x348, 0x348, 0x348, 0xffffffff, 0x348, 0x348, 0x5, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key=0x9, @icmp_id}}}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x100, 0x8, 0x6, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @port=0x4e23}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@ttl={{0x28}, {0x1}}, @common=@inet=@set3={{0x50}, {{0xffffffffffffffff, 0x5}, {0x6, 0x4}, {0x2, 0x7}, 0x47}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x17, @remote, @broadcast, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0x0}}}}, 0x440) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000300)='\x00', 0x1, 0x0, &(0x7f0000000400)={0x2, 0x6b7, @loopback}, 0x10) lsetxattr$security_selinux(&(0x7f00000012c0)='.\x00', &(0x7f0000001280), 0x0, 0x0, 0x0) 2.567400288s ago: executing program 4 (id=5840): socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x10001, 0x0, 0x0, 0x41100, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x5}, 0x104, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000175a92eda92a3ad2a3245dec0975c000000000003090008e6ffff0f0001801400020073795a5f74756e0000000000000000000c00028004ff7f0004000380"], 0x38}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x40, 0xc594}, 0x0, 0x2, 0xfffffffd, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) (async) listen(0xffffffffffffffff, 0x3) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x18, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000000000)='./file0\x00', r3}, 0x18) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r6 = syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000480)={[{@noblock_validity}, {@errors_continue}, {@grpjquota_path={'grpjquota', 0x3d, './file3'}}]}, 0x9, 0x3d6, &(0x7f00000004c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x12, r5, 0x0) (async) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x2fde0) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) (async) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x412029, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000000)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x4]}], [@TCA_POLICE_RATE={0x404, 0x2, [0xa, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x10005, 0x8, 0x0, 0x7fff, 0x2, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7fffffff, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x4, 0x0, 0x85, 0x206, 0x1ff, 0x400007, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x5, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x38, 0x1, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x2, 0x8, 0x7, 0x7fff, 0x4030, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x7, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7fffffff, 0xfffffff7, 0x2, 0x400, 0x8, 0x3, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x10004, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0x7fffffff, 0x8, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0x8001, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x8, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x679, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0xc, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x1000801, 0xb848, 0x6, 0x6, 0xffffffff, 0x7fff, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x2, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0xc000) openat(r6, &(0x7f0000006140)='./mnt/events/cdns3/cdns3_ep0_queue/inject\x00', 0x0, 0x28) (async) r8 = openat(0xffffffffffffff9c, 0x0, 0x242, 0x0) (async) truncate(0x0, 0xd9f5) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r8, 0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20208, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0xf2000e8f8e46b417, 0x3, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) (async) syz_emit_ethernet(0x2e, &(0x7f0000000980)=ANY=[@ANYBLOB="0180c20000010180c200000008004500002000000000001190780000000000f8000000004e20000c90780108000009a2c0785cd4da7d500370a6efb4a353ef5e56dfa7cf0a5b97a5b0005b0f18e98cb61dcf5c1e22fbf0f0d992f9f614166be89324dc01a95fa5d5bbea5140da8697ba1193758144c205bce03bc9c9c3ac039c7348817a5d597338e463a4f28558f4f785c7ff2331e1ddc65356cdea49a5214a035478bee18d6f590fc20bc45bbca4ebc0550a1b997db2ccb1e6b63f264061243ff1d9a2d66ebbddfda71e4bf091b1cbf0bf011bdae7"], 0x0) 2.4941954s ago: executing program 9 (id=5842): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000180)='./trace/trace\x00', 0x341001, 0x21) mkdirat(r0, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x10001, 0x0) 2.366392513s ago: executing program 9 (id=5845): syz_open_dev$tty20(0xc, 0x4, 0x1) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x3, 0x2bc, &(0x7f00000015c0)="$eJzs3U9rY1UUAPDz0uQ1QxfNwpUIvsUs3DhMZ+vCDFJB7ErJwj+ggzMDQxMGGgiMimFWfgIXLvwe7twLbvwGgguX7hykcOW9lyYxySTTjmml/H6b3p57zrv35t02hfBuP39tcHz/8fDh069/i3Y7i0Y3uvEsi0404kyaCADgWniWUvx5off3ZmNbcwIAtmvu/b/1nJTd5dDb254WALBFH3708ft3j44OPyiKdsTg21Evi/pr3X/3YTyKfjyI27Efp7PPAlKq2+++d3QYzaLUiZuD8ahXVg4++2WamkdVfxD70Vldf1DU5urHo2b1l0eWRTzqlhO5E/vxylJ92X94Z0V99PJ4oz1ZZDn+rdiPX7+Ix9GP+9VnGrPxv8mjeCd999dXn5TJZX02HvV2q7yZtHPZ9wYAAAAAAAAAAAAAAAAAAAAAgOvrVjHViZuDMlSfv9PbOa36Zwnlt9X5Oo2qv67PIvKqsXA+0DjFD2fn69wuiiJldf70fJ8bzXi1Gc2rWjcAAAAAAAAAAAAAAAAAAAD8nwyffHl8r99/cPKfNCYP+U8f67/odbpzkddjffLuucaKnUl6OdfFnIOfPx1MI+UiLjL5UauIWDfn1lLkRjmfzVf+O6WUsizi5W5T60XG2tDYW59TvsA/fb/35vG9bNNr2D67cT/Od+VxMnyycE8jWz/o6b8i6VzbL1+Tk092zAtdZ+8lf4je+r0ebBLJNqyiNRdpTRrxvO3XPtd+vrzfQQAAAAAAAAAAAAAAAAAAQG320O+KzqdrSxtbmxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXLLZ//+fNWIpstAYxx9V8eqclNJ4GsnjZHjVawQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD6+ycAAP//FrZtJA==") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) getdents(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x3, 0x40000002, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f02) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x3, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080), 0x1, 0x42f, &(0x7f0000000f00)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa8040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x4800000, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x401c2103, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000011580)={r4, 0x0, 0x0}, 0x10) symlink(0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c040) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe5c) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80800) accept4$llc(r3, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000280)=0x10, 0x180800) r5 = syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x41, 0x1ff) creat(&(0x7f0000000100)='./bus\x00', 0xb1f748c0b226b696) 2.180697877s ago: executing program 8 (id=5846): r0 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r0, &(0x7f0000007480)=[{{&(0x7f0000000280)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, 0x0, 0xc8}}], 0x1, 0xfffe) 1.986440112s ago: executing program 8 (id=5848): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf98, 0x4, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000080)=""/76, &(0x7f0000000100)=0x4c) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r1, 0x0) close(r1) 1.857160085s ago: executing program 8 (id=5850): socket$kcm(0x10, 0x2, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000140)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x100000000) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x4, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x6e, 0x5, 0x0, 0x0, 0x0, 0x7, 0x520, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1935bb0d, 0x4, @perf_config_ext={0xfffffffffffffff5, 0x6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6d, 0x1, @perf_bp={0x0}, 0x100000, 0x0, 0xa, 0x4, 0x9, 0x8001, 0x7ffc, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/drivers\x00', 0x0, 0x0) mq_open(&(0x7f0000000080)='\x00', 0x800, 0x104, &(0x7f00000000c0)={0x0, 0x16a4336c, 0x10, 0x1}) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$inet(0x2, 0x3, 0x2) mkdir(&(0x7f0000000150)='./config\x00', 0x1ff) socket$unix(0x1, 0x5, 0x0) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r5, &(0x7f0000000080)='4', 0x1) mkdir(&(0x7f0000000300)='./config/usb_gadget/g_syz\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_syz/functions/ecm.usb0/ifname\x00', 0x1, 0x0) pwritev(r6, &(0x7f0000002180)=[{&(0x7f0000000b40)="35330fa233927534c65872ad16d4f5a4c5", 0x11}], 0x1, 0xe, 0x6) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x400) lseek(0xffffffffffffffff, 0x9, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="7c00000010000305000000000000000000000000ad062dd7f395350ba30305e918985b58215c1a2076929b6024dedb28d68b4950cfbd24f199a0e2cc2e7e3fed109c73a3a412b7d551300cf871c492d611cd1572ef7f10", @ANYRES32=0x0, @ANYBLOB="15e3000020080000480012800b00010065727370616e00003800028006000e000200000006000f002b0c0000060003000000000008000100", @ANYRES32=r4, @ANYBLOB="060018000400000005000800800000000400120008000500", @ANYRES32=r4, @ANYBLOB="0a000100aaaaaaaaaabb0000"], 0x7c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.610961021s ago: executing program 6 (id=5851): syz_emit_ethernet(0x26, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "00001234"}}}}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000004c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000040)="62d5b23600ab876bfc3046a9e93a065bec9b23f4c9375d26a5802b6e1f57f404755b97ac1d457d041ec2accd68374dd1afbee457ecbccb2c8a1739f652214eded8b28211c4967799bac15f3aa9d4ad452b2b0bd139991ea592599cb2977f", 0x5e}, {&(0x7f00000000c0)="a93969f87981f2a5d42f3ad082f4625f880260dcc02156aa69efde4d5ff7", 0x1e}, {&(0x7f0000000100)="85e47956533eb116064a06b9763914e6ac4802d20d13e9df9a184e94af7843595e52b89fe41c05fbd6c660ef4a45355652641ffdd992014aa5e8ca7c1c9c06d42b85e3b0749428f27097d0720e0310ae38fee869c7fdd44e45e2f366d8285bfb181a70815571ff1506deb8a818927cde28f85d129d6ade69af3f0c924245236de058e91d0415c114b5e9997693a7581657a7b6c742bb01b46189d85aae63c0f193eac14a725d27910213711152", 0xad}, {&(0x7f0000000240)="aa936149817413bef73c83459fc015116401cd7159c27812d7cc1bbb8dc7e91c3406e3381c460119beec53a9463564e1fd37560515996b2eb1cc31336ef8e6b50a4f04e952ba47a2214c6a0b419c808bff0b224b49bbdb1d6ae2968bf97d7ca203ce29096ea095b691b2ec8366183c77058a56eb1450f36c57fdbc9d5fe6f64df05b3ae69ca8fbb213cc44a561fc9c1ef867b9b17dcd7fc7706f", 0x9a}, {&(0x7f0000000300)="6e38423b7d4256f0d2976f7de2982c4be42f5b", 0x13}, {&(0x7f0000000340)}, {&(0x7f0000000380)="f61cf68673c9342a9e2b589e66924bce41607cffbe0a0df64b35dedd65d4a4875ba6c0b925c4981debea9a4d254bb8ca70f3b036d9d5e77567c8c03d599bb1e26843f2ad93b05c535288e2c5fa58e383dc53f7b2ae7e0bbda0a5a3e42de8a9a3286390506f6bae1a310cf5c5479d0ef8c08d06a4c0f51aef9c9b5235b26ba3187648c3a8275a0432d187d6c76eb42cba1a979dd1232538e4547d61279582ee717df46f8983b7dcf05a64e2ecc7ee78d3d21514bd", 0xb4}], 0x7, 0x0, 0x0, 0x20004140}, 0x8080) 1.538484373s ago: executing program 6 (id=5852): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x1fa, 0x4) socket(0x400000010, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) accept$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x6302, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000000)={0x1d, r3}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYRES16=r1], 0x48}}, 0x40800) sendto$inet6(r0, 0x0, 0x0, 0x200040c5, &(0x7f0000000280)={0xa, 0x4001, 0x20fffa, @loopback, 0xfffffffd}, 0x1c) 1.510679984s ago: executing program 9 (id=5853): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a88000000090a050000000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b44001280200001800a00010071756f7461000000100002800c0001400000000000000080140001800c000100636f756e746572000400028001000180080001006c6f670008000340000001"], 0xb0}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 1.414227586s ago: executing program 9 (id=5854): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x1, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) munlockall() madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1200408, &(0x7f0000000080)={[{@jqfmt_vfsv0}, {@lazytime}, {@errors_remount}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7a5, &(0x7f00000007c0)="$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") lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) 1.378155027s ago: executing program 6 (id=5855): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001"], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x80) write$tun(r2, &(0x7f0000000500)=ANY=[], 0xfdef) 1.347102857s ago: executing program 1 (id=5856): get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000198000/0x3000)=nil, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}], 0x1, 0x4000840) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x8, 0xf1}, 0x110002, 0x5, 0x1, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000004c0)={0x6, 0x6, 0x2, 0x87, 0x200, 0x3c}) r1 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_STAT(r1, 0xd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[], 0xec}, 0x1, 0x0, 0x0, 0x41}, 0x1000) sendmsg$rds(r3, &(0x7f00000020c0)={&(0x7f0000000180)={0x2, 0xce21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_dest={0x18, 0x114, 0x2, {0x7, 0xe3}}, @rdma_args={0x48, 0x114, 0x1, {{0x5, 0x4}, {0x0}, &(0x7f0000001300), 0x0, 0xc, 0x400}}, @rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {0x0}, &(0x7f0000000440), 0x0, 0x6, 0x10001}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xfffffffc}], 0xc0, 0x4008090}, 0x0) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x3, @empty, 0x4b}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) r5 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) syz_emit_ethernet(0x46, &(0x7f0000000540)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60010100001011fffe8000000000000000000000000000bbfe8000000000000000000000000000aa2e0004000258070000010e2200089078501fd90365667bd26e66315711c9ad65f72a94326afb29c9531e74ea4ac2855f6bebca24df843d8468b21a07000000eef8bf834d727490f49aeefe1a4c316a1480207deee5b823f34ced236d376404737c96b4893bb6695697961f82779ced720c3617682640a0114ad26140c8650a314c4340c9d350c392823abb2244"], 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) getpid() syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./bus\x00', 0x0, &(0x7f0000000240)={[{@nomblk_io_submit}, {@errors_remount}, {@nodelalloc}, {@max_batch_time={'max_batch_time', 0x3d, 0xff}}]}, 0x1, 0x3d0, &(0x7f00000023c0)="$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") creat(&(0x7f0000000480)='./bus\x00', 0x90) io_setup(0x6, &(0x7f0000000e00)) io_submit(0x0, 0x0, &(0x7f00000002c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) 983.430806ms ago: executing program 9 (id=5857): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setuid(0xee01) r1 = syz_ublk_setup_io_uring(0x1da5, &(0x7f0000000040)={0x0, 0x8947, 0x810, 0x0, 0x2bc}, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='0fc5:1227:dc', 0xc) r3 = io_uring_setup(0x5fde, &(0x7f0000000100)={0x0, 0x511e, 0x400, 0x1, 0x1ab, 0x0, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) close_range(r3, r3, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001600)={0x14, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}}, 0x14}}, 0x0) 810.629911ms ago: executing program 8 (id=5858): r0 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r0, &(0x7f0000007480)=[{{&(0x7f0000000280)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, 0x0, 0xc8}}], 0x1, 0xfffe) 808.825691ms ago: executing program 8 (id=5859): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0x10050, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2000004, 0x2, @perf_bp={0x0, 0x2}, 0x10088a, 0x7ff, 0x4, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) (async) io_uring_setup(0x3061, &(0x7f0000000200)={0x0, 0xef5b, 0x8000, 0x1000002, 0xfb}) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) socket$kcm(0xa, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async, rerun: 64) socket$kcm(0x15, 0x5, 0x0) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$kcm(0x2, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) sched_setscheduler(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x7) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x5dd) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) (async, rerun: 32) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) (async, rerun: 32) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r5, &(0x7f0000000300)='p:test/event1 ./file0:0x0 arg2=', 0x1f) (async) recvmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}], 0x20}, 0x2000) (async, rerun: 64) socket$kcm(0x10, 0x2, 0x0) (rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) 718.455992ms ago: executing program 1 (id=5860): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf98, 0x4, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r1, 0x0) close(r1) 636.654854ms ago: executing program 4 (id=5861): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='!:', 0x2) r1 = open$dir(&(0x7f0000000180)='./trace/trace\x00', 0x341001, 0x21) mkdirat(r1, &(0x7f0000000000)='./trace\x00', 0x1ff) r2 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r2, 0x110, 0x7, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x88) lseek(r3, 0x10001, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="800000001000030427bd70000300000000000000", @ANYRES16, @ANYBLOB="46040900000000005800128009000100766c616e000000004800028006000100010000000400048006000500810000000600050088a800000c0002"], 0x80}, 0x1, 0x0, 0x0, 0x20000600}, 0x440c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000008018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8dcffffb702000008000000b70300000000000085000000cc00000095"], &(0x7f00000006c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000480), r4) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r4) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2062001}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r6, 0x8, 0x70bd26, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48880}, 0x40000) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="bf"], 0x14}, 0x1, 0x0, 0x0, 0x20044800}, 0x40084) connect$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000001c0)="76040f76bc92ce120ad6714dc6e4f94ea2fe86fff64ece5f297e2ef4873926e61e26ae0246460996f34c215faeee13841333d388f31980ad44671fe539d318cbbd84f5af8772e15ccc27d33e0845", 0x4e}, 0x68) 609.487325ms ago: executing program 4 (id=5862): r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x2, 0xdd5}, 0x1100a4, 0x0, 0x10000, 0x6, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r2, r1, 0x0, 0x1, 0xfffffffffffffffe}, 0x17) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0x11}, 0x116414, 0x4, 0x11000, 0x5, 0x2, 0x90000011, 0xffff, 0x0, 0x8, 0x0, 0xc0}, r2, 0xdfffffffffffffff, r0, 0x3) r3 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/devices/system/clocksource/clocksource0/available_clocksource\x00', 0x0, 0x0) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) listen(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1ff, 0x6}, 0x102005, 0x0, 0x8, 0x6, 0x8b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r6 = dup(r5) r7 = open(&(0x7f0000000100)='./file1\x00', 0x1298c2, 0xd7) ftruncate(r7, 0x200002) sendfile(r6, r7, 0x0, 0x80001d00c0d1) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x86}, 0x4e040) getsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, 0x0, &(0x7f0000000040)) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8946, &(0x7f0000000040)={'geneve1\x00', @random='\x00\x00\x00\x00\x00 '}) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000100)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x8, 0x3a, '\'.\xeb[!).', 0x3a, '\\.', 0x3a, './file0', 0x3a, [0x50, 0x50]}, 0x32) 576.991346ms ago: executing program 1 (id=5863): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0x209, 0x4, 0x0, 0x5, 0x87c, 0x20005, 0xffff, 0x0, 0x0, 0x0, 0x4c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x3, 0xf3, &(0x7f0000000040)={0x5, 0x7, 0x84b6, 0x6, 0x4}, 0x8, 0x7, 0x3, 0x0, 0x8001, 0x1, 0x0}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0xfebc) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r2, &(0x7f0000000100), &(0x7f00000001c0)=""/5}, 0x20) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x80882, 0x10) r4 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) fchdir(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x10, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x8001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) setfsgid(0xffffffffffffffff) utime(&(0x7f0000000000)='.\x00', 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socket$nl_netfilter(0x10, 0x3, 0xc) 504.159018ms ago: executing program 6 (id=5864): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfa, 0x1228, &(0x7f0000003080)="$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") r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0xe6c42, 0x20) r2 = dup3(r1, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x4d802, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000010c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500007000000000000190780a010102ac1414aa03049078010000004500000000000000000600000000000000000000440c0001ac1414000000000044340001ac1414aa000000000000000000000000ac1414000000000000000000000000000000000000000000ac1e000100000000"], 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r7, &(0x7f0000001e40), 0x0, 0x100, &(0x7f0000002040)={0x0, 0x989680}) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r3) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000000b80)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="34000000eb886364d35b432d2e772e96911f17bfa92b248b1dfd95ae", @ANYRES16=r1, @ANYBLOB="000429bd7000fbdbdf250c00000020006e80040002000400000400020004000100"], 0x34}}, 0x800) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) write(r3, &(0x7f0000000300)="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", 0x200) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r8, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x2200}]) r9 = socket$unix(0x1, 0x1, 0x0) r10 = accept$unix(r1, 0x0, &(0x7f0000000280)) bind$unix(r10, &(0x7f0000003000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r11 = getuid() syz_mount_image$ext4(&(0x7f0000000c40)='ext4\x00', &(0x7f0000000c80)='./cgroup/file0\x00', 0x3200802, &(0x7f0000000e00)={[], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_role={'obj_role', 0x3d, 'wg0\x00'}}, {@obj_type={'obj_type', 0x3d, '/})]/(-*'}}, {@uid_gt={'uid>', r11}}, {@context={'context', 0x3d, 'user_u'}}, {@smackfsroot={'smackfsroot', 0x3d, 'ext4\x00'}}]}, 0x4, 0x521, &(0x7f0000000640)="$eJzs3d9rK1kdAPDvTJtue2/XZlXkuuDu4q7cu+hN2q2rVWR3BdGnBXV9v9Y2LaVpU5p0vS2LdvEPEERU8A/wRfDBR0H2TxDhgr6LiiJ6rz7qHZlkqv2RtLFNm2v6+cBpzsmZOd9zhmaSmTnMBHBtvRARb0TEWES8HBEzxftpkWK/k/LlHj18ZylPSWTZW39NIineO2grL49HxM1itcmI+OqXIr6RnIzb3N1bX6zXa9tFudra2Ko2d/furm0srtZWa5vz83M/j4hXF2azwoXGWY6I177wxx989ydffO2Xn/jm7+79+c638m597kOdfkfE0oUC9NBpu9TeFgfybbR9GcGGJB9PaWzYvQAAoB/5b/z3R8RH27//Z2Ks/WsOAAAAGCXZ69PxzyQiAwAAAEZWGhHTkaSVYi7AdKRppdKZw/vBuJHWG83Wx1caO5vLeV1EOUrpylq9NlvMFS5HKcnLc8Uc24PyK8fK8xHxTER8f2aqXa4sNerLwz75AQAAANfEzeePHv//YyZt5wEAAIARU+5ZAAAAAEaFQ34AAAAYfY7/AQAAYKR9+c0385QdPMd7+e3dnfXG23eXa831ysbOUmWpsb1VWW00Vtv37Ns4q716o7H1ydjcuV9t1ZqtanN3795GY2ezdW/tyCOwAQAAgCv0zPPv/TaJiP3PTrVTFPcBBDjiD8PuADBIY8PuADA048PuADA0pTOXsIeAUZecUX9y8k7nXGH86nL6AwAADN7tD5+8/j9R1J19bgD4f2auDwBcP0ev7k0NrR/A1SuddwbgrUH3BBiW93VenupV3/PmHX1c/++cY8iyc3UMAAAYmOl2StJKcQwwHWlaqUQ8HY+zcpSSlbV6bbao+81M6am8PNdeMzlzzjAAAAAAAAAAAAAAAAAAAAAAAAAA0JFlSWQAAADASItI/5S07+YfcXvmpemjZweOPfXrx2/98P5iq7U9FzGR/G0mf2siIlo/Kt5/JfNIAAAAABiuqfxP5zi9eJ0bdpcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDWPHr6zdJCuMu5fPh8R5W7xx2Oy/ToZpYi48fckxg+tl0TE2ADi778bEbe6xU/icZZl5aIX3eJPXXL8cnvTdI+fRsTNAcSH6+y9fP/zRrfPXxovtF+7f/7Gi3RRvfd/6X/2f2M99j9PHyv38uyDn1V7xn834tnx7vufg/hJJ/6REHnhxT7H+PWv7e11rTjUZLf4h2NVWxtb1ebu3t21jcXV2mptc35+7lMLn154dWG2urJWrxV/u4b53kd+8fi08d/oEb98dPwntv9LfY0+i389uP/wA51CqVv8Oy92//691SN+Wnz3fazI5/W3D/L7nfxhz/3018+dNv7lHuOfPGP8d/oaf3zm5a985/dda05sDQDgKjR399YX6/Xa9imZyT6W+Z8yERdt5/WB9udJyMTZy0w+IV29jEz27c7/48XaueDqJzLZRVYfjwF0Y+LE53QszttgErGft9XnPyQAADBi/vuj/7QrSAAAAAAAAAAAAAAAAAAAAMBlOudtySYjou+Fj8fcH85QAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABO9e8AAAD//zDU0hs=") r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r3) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000d00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000dc0)={0x18, r12, 0x20, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x24000080) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'wg0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004680)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000ce14000000140080000700000004000000f8ffff050400000005000000000000615f0097e49b0b062c0a4360907cca984ff806c98d0e4595c6"], 0x0, 0x33, 0x0, 0x1}, 0x28) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000), 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="687567656e5f73697a652c00000000000000c1d53b0f3a6a91c7023f1903afea4f9d6b3bd42baf50e714dabab7a84ad675d094338aa31765215bdd987bdd4481d91010ac726fecebb879227ceb90fa48cfd17d87f7c3490266009d855709fd3a8e2b3273f4c17d7700"]) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000100100000d00000000000000000400001800000000000000100100000b"], 0x6}, 0x800) 342.465862ms ago: executing program 1 (id=5865): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) close(r1) sendfile(r1, r0, 0x0, 0xf03a0005) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x66f3ad1f3bc23acd}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8001}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9d1d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008850}, 0x84) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x40, 0x137) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd8, 0x13, 0x300, 0x70bd2d, 0x25dfdbfb, {0x1e, 0x5, 0x8, 0x5, {0x4e23, 0x4e20, [0x83d, 0xfffffffe, 0x0, 0x1], [0x9, 0x2, 0x7, 0x7], 0x0, [0x4, 0x7]}, 0xfa17, 0xc5b9}, [@INET_DIAG_REQ_BYTECODE={0x53, 0x1, "d59415084c36a34a7f6754963fab706050b328ecdef33fe5e129946293ef15e656fd2c07600853cf28e4c912b5d6ecab403fa38274b38d7292ac9c84e2bc6755477e4f0892d0f041545269790c34cb"}, @INET_DIAG_REQ_BYTECODE={0x35, 0x1, "632b365df2975c9e54d9737e061bbc21d36b8dced0b876ffce30626407a2ee6f45c381cc8d36107517dd679fd3a88c00b1"}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000080}, 0x30000081) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64(r4, 0x0, 0x0, 0x80) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000000)=0x4, 0x4) 338.233162ms ago: executing program 6 (id=5866): socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x8}, 0x10ecc8, 0x1222, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x70060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0xecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000100)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYBLOB="f144ef566aaa2604da071bbeb6f430dfed6346ac280ad0be1430acfe313e69a2fa6cfe678c61c9f409a06bfd99bec80be2031abda528aae9370d25e0b4fbf0cf85b7fb437e3447f576f632761291515cb5463d90d1bb7568142a060494f630902b3ef5334efb547f8cf0b2458c7979b0db9ca4f520c1f1b85f556cf01d", @ANYBLOB="e18d8e322868343b38d9db095899a1945e4a12ea0f3ebe5067157346e5624f6d506a1c219ece53b17b14f64e7fa1124f331eb2d46b4e89a95ce23ee44d7d"], 0xf6, 0xa2a, &(0x7f0000000240)="$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") sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28010000170001"], 0x128}}, 0x40000) ptrace$cont(0x19, r1, 0xffffffffffffffff, 0x274b) r3 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x7b, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, @perf_bp={0x0, 0x8}, 0x800, 0x2000000000, 0x0, 0x5, 0x0, 0x200000b, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, 0x0, 0x400010, 0xffffffffffffffff, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="14000000220035", 0x7}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000d40), 0x104ac1, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW(r5, 0x80047456, &(0x7f0000000080)={0x1, 0x6, 0x0, 0x1, 0x1a, "ebd2f87ad205f80100000000000000c3b96f86"}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc8040, 0x8b) r8 = fcntl$dupfd(r7, 0x0, r7) socket$inet6(0xa, 0x7, 0x9) r9 = epoll_create1(0x80000) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x800, &(0x7f0000000c80)=ANY=[@ANYBLOB="6f3d00000000000000000026e71495cfe2367e77a7181d522f1a67acf3cf", @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB]) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x80, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0x6}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x405, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) 237.712154ms ago: executing program 1 (id=5867): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x80, 0xffffffff, 0x80000000}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x800000, &(0x7f00000004c0)=ANY=[@ANYBLOB="00aa97c4e34e7f390bacfc13400000000000000021ca919fdd77ce62bfdc79dae0dd13d99836e3e0d10575cb1b1c881817216e5d684c6aa6f988295228b1d76ccda451a263087b479582a4d43026b82a9dc5b7547c89547ab32125ffd6c015c884b14926c5d789ddbaf267268b48b3f0b91b0d2808ed02"], 0x0, 0x55d, &(0x7f0000000540)="$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") bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0c86dd6c370c8900082fe6fe800000000000000000000000000025fe8000000000008ae9d4b709848aaa2c00000000000000", @ANYRESDEC], 0x0) 140.189447ms ago: executing program 1 (id=5868): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x100c88, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xe, 0xffffffffffffffff, 0x9) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x302, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0xb6e, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x1f, &(0x7f0000000240)="441f08100000009837a0324d7df546bcb8e8c94efe76cef3e200000000", 0x1d) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x0) write$P9_RGETATTR(r5, &(0x7f00000009c0)={0xa0, 0x19, 0x2, {0x400, {0x2, 0x1, 0x7}, 0x83, 0x0, 0x0, 0x10, 0x8, 0x2c7, 0x4, 0x4, 0x1, 0xe7, 0x7f, 0x4f, 0x4, 0xc7, 0xd, 0x9, 0x6, 0x5}}, 0xa0) connect$pppl2tp(r3, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) add_key(&(0x7f0000000000)='.dead\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006114740000000000a600000000000002d500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x6, '\x00', 0x0, @sock_ops}, 0x94) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x0, 0x0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r6, {r8, r9}}, './file0\x00'}) setxattr$system_posix_acl(&(0x7f00000002c0)='./proc_mnt/irq/12/smp_affinity\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {}, [{0x2, 0x0, r8}, {0x2, 0x1, r8}, {0x2, 0x0, r8}, {0x2, 0x1, r8}, {0x2, 0x2, r10}, {0x2, 0x2, r8}], {0x4, 0x1}, [{0x8, 0x2, r9}, {0x8, 0x3, r9}, {0x8, 0x2, r9}, {0x8, 0x1, r9}], {0x10, 0x2}, {0x20, 0x7}}, 0x74, 0x3) fchown(r6, r8, 0xee01) 405.91µs ago: executing program 9 (id=5869): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x6, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) 0s ago: executing program 6 (id=5870): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a05000000000000000000050000000900010073797a30000000000900030073797a300000000064000000060a1104e2ff0000000000000500000008000b40000000000900010073797a30000000003c0004803800018008000100667764"], 0xd8}}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8001, 0x1, @perf_bp={0x0, 0x7}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107"], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "0000000000590072d8001000000100"}}}]}, 0x48}}, 0x0) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x1f}, 0xd, 0x0, 0xff, 0x0, 0x97bf, 0x9}, 0x20) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x1200040, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES64, @ANYRES32, @ANYRES32, @ANYRESOCT=0x0], 0xfe, 0x27f, &(0x7f00000005c0)="$eJzs2r9rE3EYx/Hn0tTWlPYi/qwgPuigLkeT2aFFWhADgjZCFaRXe9GQM1dyRyFFbCcFp85OncXRTZCOLl38Cxx0Kkg3O4gn6SVtUou2Nr1zeL+WPMndJ/e9e74c34Rbv778tFJKS8kOJGUYkhqVJdk0JCspaVmSa1emPl64O3X/1lihMH5HdWJsMpdX1aGLHx48e3tpNRi4927ofZ+sZR+ub+S/rJ1ZG17/Ofmk7GvZ16oXqK0znhfYM66js2W/Yqkuu47tO1qu+k6tY3vJ9ebm6mpXZwczczXH99Wu1rXi1DXwNKjV1X5sl6tqWZYOZgSHUXyzGYayEaZbHwysyuBnMcU4ocbJUeP0tHF2yRjeCENzO3MsqcHiCET9752WMAyPr+yn/2164h8vuqvtpt4v4r6cL84Xo9do+1hJyuKKIyNiyg9pTJOmqJ64WRgf0S1ZeeEuNvOL88Vocrxq5XNiSnbvfC7Ka2e+TzLtx8+LKae286PSzH/tKYznVUV+y/fL1ctteUtM+fRIPHFlVhrZneM/z6neuF3ozPcn2xcAAICjYum2xtuVb4Z0rN+snR12re+i/AHWh7vWZ2k5n0701CEifn2hYruuU4ulaMypbn6hIf8cN5oX4O87n0vFdn22isbPnjibsvA6hmNlutr3gxStPyn22ud7GP94/lT07mtCxlMkeFNCbHaanvRIAAAAAAAAAAAAAAAAAAAHseuhP3PPxyQPWSR9jgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/2KwAA///LxMAU") r5 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x450943, 0x86) pwritev2(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)='d', 0x1}], 0x1, 0x25405, 0x0, 0x1) r6 = fsmount(r4, 0x0, 0x2) fchdir(r6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) kernel console output (not intermixed with test programs): ous mode [ 899.453500][T26548] syzkaller0: entered allmulticast mode [ 899.514826][T26548] tipc: Started in network mode [ 899.514915][T26548] tipc: Node identity ba0a5d07aabc, cluster identity 4711 [ 899.515049][T26548] tipc: Enabled bearer , priority 0 [ 899.699847][T26547] tipc: Resetting bearer [ 899.719583][T26547] tipc: Disabling bearer [ 899.805512][T16683] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 900.750996][T26572] xt_hashlimit: overflow, rate too high: 0 [ 901.680615][T26578] loop5: detected capacity change from 0 to 8192 [ 901.791483][T26577] loop6: detected capacity change from 0 to 8192 [ 901.848692][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 901.848725][ T29] audit: type=1400 audit(1788389314.526:9510): avc: denied { shutdown } for pid=26579 comm="syz.7.5370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 902.111405][ T5702] IPVS: starting estimator thread 0... [ 902.197932][T26594] IPVS: using max 2160 ests per chain, 108000 per kthread [ 903.062676][ T29] audit: type=1400 audit(1788389315.747:9511): avc: denied { write } for pid=26600 comm="syz.6.5378" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 903.062721][ T29] audit: type=1400 audit(1788389315.747:9512): avc: denied { create } for pid=26600 comm="syz.6.5378" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 903.067147][T26601] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=26601 comm=syz.6.5378 [ 903.069786][T26601] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65535 sclass=netlink_audit_socket pid=26601 comm=syz.6.5378 [ 903.170852][ T29] audit: type=1400 audit(1788389315.857:9513): avc: denied { bind } for pid=26602 comm="syz.5.5379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 903.191660][ T29] audit: type=1400 audit(1788389315.877:9514): avc: denied { connect } for pid=26602 comm="syz.5.5379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 903.325212][T26609] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 903.619629][ T29] audit: type=1326 audit(1788389316.297:9515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26613 comm="syz.7.5382" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee289ae159 code=0x0 [ 903.861926][ T29] audit: type=1400 audit(1788389316.547:9516): avc: denied { read } for pid=26620 comm="syz.6.5384" name="g1" dev="configfs" ino=11008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 903.862048][ T29] audit: type=1400 audit(1788389316.547:9517): avc: denied { read open } for pid=26620 comm="syz.6.5384" path="/42/my_configfs/usb_gadget/g1" dev="configfs" ino=11008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 903.884779][ T29] audit: type=1400 audit(1788389316.577:9518): avc: denied { write } for pid=26620 comm="syz.6.5384" name="g1" dev="configfs" ino=11008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 903.999368][T26623] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 904.056905][T26623] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 904.100299][T26625] 9pnet: p9_errstr2errno: server reported unknown error påÿÿÿÿÿÿ [ 904.119421][T26625] 9p: Bad value for 'rfdno' [ 904.130006][T26625] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5385'. [ 904.241598][T26629] netlink: 83 bytes leftover after parsing attributes in process `syz.5.5387'. [ 904.260502][T26618] Set syz1 is full, maxelem 65536 reached [ 904.354265][T26638] loop6: detected capacity change from 0 to 1024 [ 904.361429][T26638] EXT4-fs: Ignoring removed orlov option [ 904.381513][T26638] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 904.403223][ T29] audit: type=1400 audit(1788389317.087:9519): avc: denied { write } for pid=26637 comm="syz.6.5391" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 904.488033][T26645] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5393'. [ 904.507167][T25258] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 904.535420][T26648] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5395'. [ 904.649063][T26650] loop6: detected capacity change from 0 to 512 [ 904.662754][T26650] EXT4-fs: Ignoring removed bh option [ 904.688607][T26650] EXT4-fs (loop6): 1 truncate cleaned up [ 904.689485][T26650] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 904.846801][ T5702] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.863473][T25258] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 904.965211][ T5702] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.032168][ T5702] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.075024][ T5702] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.279988][ T5702] team0: left allmulticast mode [ 905.280021][ T5702] team_slave_0: left allmulticast mode [ 905.280042][ T5702] team_slave_1: left allmulticast mode [ 905.280197][ T5702] team0: left promiscuous mode [ 905.280257][ T5702] team_slave_0: left promiscuous mode [ 905.280470][ T5702] team_slave_1: left promiscuous mode [ 905.281265][ T5702] bridge0: port 3(team0) entered disabled state [ 905.317761][ T5702] bridge_slave_1: left allmulticast mode [ 905.317824][ T5702] bridge_slave_1: left promiscuous mode [ 905.318180][ T5702] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.342895][ T5702] bridge_slave_0: left allmulticast mode [ 905.342998][ T5702] bridge_slave_0: left promiscuous mode [ 905.343141][ T5702] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.588794][ T5702] team0: Port device bridge1 removed [ 905.601794][ T5702] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 905.637364][T26688] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5405'. [ 905.826351][ T5702] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 905.914926][ T5702] bond0 (unregistering): Released all slaves [ 906.062812][T26683] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5404'. [ 906.062887][T26683] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5404'. [ 906.375478][T26697] loop5: detected capacity change from 0 to 512 [ 906.376050][T26697] EXT4-fs: Ignoring removed mblk_io_submit option [ 906.376101][T26697] ext4: Unknown parameter 'max_batch' [ 906.409469][ T5702] hsr_slave_0: left promiscuous mode [ 906.414690][ T5702] hsr_slave_1: left promiscuous mode [ 906.415948][ T5702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 906.416001][ T5702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 906.422536][ T5702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 906.422594][ T5702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 906.463569][ T5702] veth1_macvtap: left promiscuous mode [ 906.463603][ T5702] veth0_macvtap: left promiscuous mode [ 906.463710][ T5702] veth1_vlan: left promiscuous mode [ 906.463754][ T5702] veth0_vlan: left promiscuous mode [ 906.552606][T26704] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5410'. [ 906.561166][T26704] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5410'. [ 906.665567][T26713] loop6: detected capacity change from 0 to 1024 [ 906.750823][T26713] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 906.750951][T26713] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 906.919980][ T5702] team0 (unregistering): Port device team_slave_1 removed [ 906.931445][ T5702] team0 (unregistering): Port device team_slave_0 removed [ 906.945696][T25258] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 907.076224][T26733] netlink: 140 bytes leftover after parsing attributes in process `syz.6.5413'. [ 907.373999][T26745] batadv_slave_1: entered allmulticast mode [ 907.476685][T26744] batadv_slave_1: left allmulticast mode [ 907.521795][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 907.521894][ T29] audit: type=1400 audit(1788389320.209:9524): avc: denied { write } for pid=26737 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 907.690387][ T29] audit: type=1400 audit(1788389320.379:9525): avc: denied { write } for pid=26755 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 907.804520][ T3029] 8021q: adding VLAN 0 to HW filter on device eth13 [ 908.027115][T26743] loop7: detected capacity change from 0 to 1024 [ 908.039852][T26743] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 908.057815][T26743] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #3: block 2: comm syz.7.5415: lblock 2 mapped to illegal pblock 2 (length 1) [ 908.057866][T26743] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 908.061067][T26743] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 908.061161][T26743] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #3: block 48: comm syz.7.5415: lblock 0 mapped to illegal pblock 48 (length 1) [ 908.061267][T26743] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 908.061503][T26743] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 908.061640][T26743] EXT4-fs error (device loop7): ext4_acquire_dquot:7069: comm syz.7.5415: Failed to acquire dquot type 0 [ 908.061792][T26743] loop7: lost filesystem error report for type 5 error -117 [ 908.062022][T26743] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 908.062126][T26743] loop7: lost filesystem error report for type 5 error -117 [ 908.064545][ C0] EXT4-fs (loop7): error count since last fsck: 4 [ 908.064599][ C0] EXT4-fs (loop7): initial error at time 1788389320: ext4_map_blocks:790: inode 3: block 2 [ 908.064723][ C0] EXT4-fs (loop7): last error at time 1788389320: ext4_reserve_inode_write:6517 [ 908.070031][T26743] EXT4-fs error (device loop7): ext4_evict_inode:269: inode #11: comm syz.7.5415: mark_inode_dirty error [ 908.070108][T26743] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 908.070438][T26743] EXT4-fs warning (device loop7): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 908.070621][T26743] EXT4-fs (loop7): 1 orphan inode deleted [ 908.071467][T26743] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 908.074786][T19146] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 908.074900][T19146] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 908.075262][T19146] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 908.075324][T19146] EXT4-fs error (device loop7): ext4_release_dquot:7105: comm kworker/u8:10: Failed to release dquot type 0 [ 908.075420][T19146] loop7: lost filesystem error report for type 5 error -117 [ 908.079826][T26743] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 908.082740][T26743] EXT4-fs error (device loop7): __ext4_get_inode_loc:4916: comm syz.7.5415: Invalid inode table block 1 in block_group 0 [ 908.082818][T26743] loop7: lost filesystem error report for type 5 error -117 [ 908.082907][T26743] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 908.082958][T26743] loop7: lost filesystem error report for type 5 error -117 [ 908.083265][T26743] EXT4-fs error (device loop7): ext4_quota_off:7353: inode #3: comm syz.7.5415: mark_inode_dirty error [ 908.083448][T26743] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 908.083734][T26743] EXT4-fs error (device loop7): __ext4_get_inode_loc:4916: comm syz.7.5415: Invalid inode table block 1 in block_group 0 [ 908.083812][T26743] loop7: lost filesystem error report for type 5 error -117 [ 908.514812][T26777] loop6: detected capacity change from 0 to 512 [ 908.541529][T26777] EXT4-fs (loop6): 1 truncate cleaned up [ 908.542709][T26777] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 908.576016][T26777] EXT4-fs error (device loop6): ext4_find_dest_de:2052: inode #2: block 13: comm syz.6.5421: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 908.576183][ T29] audit: type=1400 audit(1788389321.269:9526): avc: denied { write } for pid=26775 comm="syz.6.5421" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 908.581969][ T29] audit: type=1400 audit(1788389321.269:9527): avc: denied { write } for pid=26775 comm="syz.6.5421" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 908.582073][ T29] audit: type=1400 audit(1788389321.269:9528): avc: denied { link } for pid=26775 comm="syz.6.5421" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 908.675945][ T29] audit: type=1400 audit(1788389321.369:9529): avc: denied { write } for pid=26760 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 908.771946][ T29] audit: type=1400 audit(1788389321.459:9530): avc: denied { write } for pid=26781 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 908.937279][T25258] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 908.962360][ T3029] 8021q: adding VLAN 0 to HW filter on device eth14 [ 909.130873][ T5702] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.174172][ T5702] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.242764][ T5702] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.339361][ T5702] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.656959][T26795] syzkaller0: entered promiscuous mode [ 909.656993][T26795] syzkaller0: entered allmulticast mode [ 909.694358][ T3029] 8021q: adding VLAN 0 to HW filter on device eth15 [ 910.161840][T26812] __nla_validate_parse: 3 callbacks suppressed [ 910.161871][T26812] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5426'. [ 910.255102][T26826] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5426'. [ 910.404570][ T5702] bridge_slave_1: left allmulticast mode [ 910.404605][ T5702] bridge_slave_1: left promiscuous mode [ 910.404959][ T5702] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.423559][ T5702] bridge_slave_0: left allmulticast mode [ 910.423659][ T5702] bridge_slave_0: left promiscuous mode [ 910.423770][ T5702] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.538300][T26836] netlink: 75 bytes leftover after parsing attributes in process `syz.6.5429'. [ 910.609423][T26838] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5430'. [ 910.857683][T26841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=26841 comm=syz.9.5431 [ 910.874873][ T5702] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 910.888293][ T5702] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 910.901560][ T5702] bond0 (unregistering): Released all slaves [ 910.996158][ T5702] hsr_slave_0: left promiscuous mode [ 911.006974][ T5702] hsr_slave_1: left promiscuous mode [ 911.017797][ T5702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 911.017832][ T5702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 911.031082][ T5702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 911.031150][ T5702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 911.076248][ T5702] veth1_macvtap: left promiscuous mode [ 911.076282][ T5702] veth0_macvtap: left promiscuous mode [ 911.076484][ T5702] veth1_vlan: left promiscuous mode [ 911.076648][ T5702] veth0_vlan: left promiscuous mode [ 911.245562][T26855] loop9: detected capacity change from 0 to 2048 [ 911.296125][T26855] Alternate GPT is invalid, using primary GPT. [ 911.296418][T26855] loop9: p1 p2 p3 [ 911.492875][ T5702] team0 (unregistering): Port device team_slave_1 removed [ 911.500634][ T5702] team0 (unregistering): Port device team_slave_0 removed [ 911.663703][T26866] syzkaller0: entered promiscuous mode [ 911.663730][T26866] syzkaller0: entered allmulticast mode [ 911.720201][T26876] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5440'. [ 911.734422][T26829] wg1 speed is unknown, defaulting to 1000 [ 911.955373][T26894] loop9: detected capacity change from 0 to 164 [ 912.157325][T26907] loop9: detected capacity change from 0 to 512 [ 912.230916][ T3029] 8021q: adding VLAN 0 to HW filter on device eth16 [ 912.439542][T26829] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.439593][T26829] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.439854][T26829] bridge_slave_0: entered allmulticast mode [ 912.442985][T26829] bridge_slave_0: entered promiscuous mode [ 912.447024][T26829] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.447056][T26829] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.447260][T26829] bridge_slave_1: entered allmulticast mode [ 912.449995][T26829] bridge_slave_1: entered promiscuous mode [ 912.499543][T26829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 912.527518][T26829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 912.620306][T26829] team0: Port device team_slave_0 added [ 912.634678][T26829] team0: Port device team_slave_1 added [ 912.739245][T26829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 912.739268][T26829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 912.739313][T26829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 912.746439][T26829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 912.746492][T26829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 912.746595][T26829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 912.938806][T26829] hsr_slave_0: entered promiscuous mode [ 912.951804][T26829] hsr_slave_1: entered promiscuous mode [ 912.952591][T26829] debugfs: 'hsr0' already exists in 'hsr' [ 912.952633][T26829] Cannot create hsr debugfs directory [ 913.116910][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 913.116999][ T29] audit: type=1400 audit(1788389325.802:9538): avc: denied { write } for pid=26935 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 913.319041][ T29] audit: type=1400 audit(1788389326.002:9539): avc: denied { write } for pid=26958 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 913.459104][ T3029] 8021q: adding VLAN 0 to HW filter on device eth17 [ 913.557377][T26969] loop7: detected capacity change from 0 to 512 [ 913.576419][T26969] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 913.576498][T26969] ext4 filesystem being mounted at /86/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 913.599748][ T29] audit: type=1400 audit(1788389326.282:9540): avc: denied { write } for pid=26968 comm="syz.7.5451" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 913.702040][T24950] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.730296][T26978] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5450'. [ 913.846503][T26829] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.942027][T26829] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.207644][T26994] vlan1: entered promiscuous mode [ 914.207742][T26994] hsr0: entered promiscuous mode [ 914.207844][T26994] vlan1: entered allmulticast mode [ 914.207879][T26994] hsr0: entered allmulticast mode [ 914.207898][T26994] hsr_slave_0: entered allmulticast mode [ 914.207920][T26994] hsr_slave_1: entered allmulticast mode [ 914.270925][T26829] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.326964][T26829] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.568752][T27012] syzkaller0: entered promiscuous mode [ 914.568837][T27012] syzkaller0: entered allmulticast mode [ 914.593680][T26829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 914.602816][T26829] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 914.607762][T26829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 914.619083][T26829] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 914.627021][T26829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 914.636205][T26829] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 914.638956][T26829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 914.650789][ T29] audit: type=1400 audit(1788389327.342:9541): avc: denied { write } for pid=27009 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 914.681007][T26829] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 914.773402][ T29] audit: type=1400 audit(1788389327.462:9542): avc: denied { write } for pid=27034 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 914.909335][ T3029] 8021q: adding VLAN 0 to HW filter on device eth18 [ 914.985129][T26829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 915.034748][T26829] 8021q: adding VLAN 0 to HW filter on device team0 [ 915.064930][ T5702] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.064987][ T5702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 915.074369][ T5702] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.074595][ T5702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 915.123394][T27048] loop7: detected capacity change from 0 to 8192 [ 915.274580][T27075] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5459'. [ 915.627939][ T29] audit: type=1400 audit(1788389328.313:9543): avc: denied { write } for pid=27081 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 915.696108][T27110] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 915.697057][ T29] audit: type=1400 audit(1788389328.383:9544): avc: denied { write } for pid=27108 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 915.748032][ T3029] 8021q: adding VLAN 0 to HW filter on device eth19 [ 915.769027][T26829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.830135][ T29] audit: type=1400 audit(1788389328.513:9545): avc: denied { ioctl } for pid=27115 comm="syz.9.5463" path="socket:[80277]" dev="sockfs" ino=80277 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 916.111135][T26829] veth0_vlan: entered promiscuous mode [ 916.120388][T26829] veth1_vlan: entered promiscuous mode [ 916.157741][T26829] veth0_macvtap: entered promiscuous mode [ 916.167348][T26829] veth1_macvtap: entered promiscuous mode [ 916.184220][T26829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 916.210199][T26829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 916.234576][ T29] audit: type=1400 audit(1788389328.923:9546): avc: denied { write } for pid=27118 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 916.260478][ T5697] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.261705][ T5697] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.261796][ T5697] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.262644][ T5697] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.375122][ T29] audit: type=1400 audit(1788389329.063:9547): avc: denied { write } for pid=27137 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 916.516658][ T3029] 8021q: adding VLAN 0 to HW filter on device eth20 [ 916.659367][T27140] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 916.659405][T27140] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 916.659448][T27140] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 916.659540][T27140] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 916.659634][T27140] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 916.659775][T27140] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 916.659855][T27140] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 916.659929][T27140] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 916.659975][T27140] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 916.660122][T27140] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 916.738926][T27136] wg1 speed is unknown, defaulting to 1000 [ 917.137139][T27150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5462'. [ 917.819710][T27189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5467'. [ 917.924406][T27189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5467'. [ 918.060791][T27212] loop7: detected capacity change from 0 to 512 [ 918.062219][T27212] EXT4-fs: Invalid want_extra_isize 1969 [ 918.151493][T27218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5470'. [ 918.153084][T27218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5470'. [ 918.631745][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 918.631793][ T29] audit: type=1400 audit(1788389331.324:9555): avc: denied { write } for pid=27223 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 918.744783][T27241] loop9: detected capacity change from 0 to 4096 [ 918.760516][T27241] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 918.825100][ T29] audit: type=1400 audit(1788389331.514:9556): avc: denied { write } for pid=27245 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 918.892255][ T29] audit: type=1400 audit(1788389331.584:9557): avc: denied { write } for pid=27239 comm="syz.9.5473" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 919.100390][T27257] netlink: 'syz.7.5477': attribute type 8 has an invalid length. [ 919.188333][T27254] loop0: detected capacity change from 0 to 8192 [ 919.430916][ T29] audit: type=1400 audit(1788389332.125:9558): avc: denied { write } for pid=27252 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 919.578685][T27241] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #15: comm syz.9.5473: corrupted inode contents [ 919.578738][T27241] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 919.594870][T27241] EXT4-fs error (device loop9): ext4_dirty_inode:6731: inode #15: comm syz.9.5473: mark_inode_dirty error [ 919.594930][T27241] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 919.595136][T27241] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #15: comm syz.9.5473: corrupted inode contents [ 919.595175][T27241] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 919.595515][T27241] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2962: inode #15: comm syz.9.5473: mark_inode_dirty error [ 919.595678][T27241] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 919.597809][T27241] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2965: inode #15: comm syz.9.5473: mark inode dirty (error -117) [ 919.597990][T27241] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 919.601164][T27241] EXT4-fs warning (device loop9): ext4_evict_inode:288: xattr delete (err -117) [ 919.637614][ T29] audit: type=1400 audit(1788389332.325:9559): avc: denied { write } for pid=27273 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 919.758100][T16683] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.127376][T27287] wg1 speed is unknown, defaulting to 1000 [ 920.200470][ T5697] bridge_slave_0: left promiscuous mode [ 920.200869][ T5697] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.201584][T27295] loop6: detected capacity change from 0 to 512 [ 920.234846][T27295] EXT4-fs (loop6): 1 truncate cleaned up [ 920.235376][T27295] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 920.292815][ T29] audit: type=1400 audit(1788389332.985:9560): avc: denied { write } for pid=27275 comm="syz.7.5480" name="usb_gadget" dev="configfs" ino=2065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 920.390575][T25258] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.497600][T27304] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5484'. [ 920.555341][ T29] audit: type=1400 audit(1788389333.245:9561): avc: denied { write } for pid=27277 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 920.703892][ T29] audit: type=1400 audit(1788389333.395:9562): avc: denied { write } for pid=27308 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 920.731248][T27310] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5485'. [ 920.748177][ T5697]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 920.763631][ T5697]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 920.773775][ T5697]  (unregistering): Released all slaves [ 920.783945][ T5697] bond1 (unregistering): Released all slaves [ 920.802615][ T5697] bond0 (unregistering): (slave veth3): Releasing backup interface [ 920.802652][ T5697] veth3: left promiscuous mode [ 920.824857][ T5697] bond0 (unregistering): Released all slaves [ 920.862535][ T5697] bond2 (unregistering): (slave dummy0): Releasing active interface [ 920.862567][ T5697] dummy0: left promiscuous mode [ 920.862898][ T5697] dummy0: left allmulticast mode [ 920.891838][ T5697] bond2 (unregistering): Released all slaves [ 920.971677][T27310] bond1: option updelay: invalid value (18446744073234546690) [ 920.971711][T27310] bond1: option updelay: allowed values 0 - 2147483647 [ 920.995407][T27310] bond1 (unregistering): Released all slaves [ 921.046739][ T5697] hsr_slave_0: left promiscuous mode [ 921.047227][ T5697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 921.047253][ T5697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 921.052026][ T29] audit: type=1326 audit(1788389333.745:9563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27318 comm="syz.9.5487" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27e48ce159 code=0x0 [ 921.095042][ T5697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 921.095124][ T5697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 921.121089][ T5697] veth1_macvtap: left promiscuous mode [ 921.121169][ T5697] veth0_macvtap: left promiscuous mode [ 921.121227][ T5697] veth1_vlan: left promiscuous mode [ 921.121346][ T5697] veth0_vlan: left promiscuous mode [ 921.158587][T27323] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5488'. [ 921.452125][ T5697] team0 (unregistering): Port device team_slave_1 removed [ 921.462816][ T5697] team0 (unregistering): Port device team_slave_0 removed [ 921.601685][T27326] syzkaller0: entered promiscuous mode [ 921.601712][T27326] syzkaller0: entered allmulticast mode [ 921.777283][ T29] audit: type=1400 audit(1788389334.466:9564): avc: denied { ioctl } for pid=27342 comm="syz.0.5489" path="socket:[79426]" dev="sockfs" ino=79426 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 921.853119][ T5697] IPVS: stop unused estimator thread 0... [ 922.056514][T19140] IPVS: starting estimator thread 0... [ 922.139102][T27368] IPVS: using max 2208 ests per chain, 110400 per kthread [ 922.244927][T27373] loop9: detected capacity change from 0 to 8192 [ 922.525377][T27384] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.525518][T27384] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.155685][T27384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 923.163174][T27384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 923.217563][ T5701] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.217622][ T5701] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.217766][ T5701] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.218098][ T5701] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.301132][T27415] syzkaller0: entered promiscuous mode [ 923.301169][T27415] syzkaller0: entered allmulticast mode [ 923.346485][T27422] tipc: Started in network mode [ 923.346591][T27422] tipc: Node identity ac141441, cluster identity 4711 [ 923.353744][T27422] tipc: Enabled bearer , priority 10 [ 923.690762][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 923.690792][ T29] audit: type=1400 audit(1788389336.387:9577): avc: denied { write } for pid=27438 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 923.772747][ T29] audit: type=1400 audit(1788389336.467:9578): avc: denied { write } for pid=27442 comm="syz.6.5504" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 924.120964][ T29] audit: type=1400 audit(1788389336.817:9579): avc: denied { write } for pid=27445 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 924.284862][ T29] audit: type=1400 audit(1788389336.977:9580): avc: denied { write } for pid=27468 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 924.320023][T27453] loop6: detected capacity change from 0 to 512 [ 924.333084][T27467] xt_CT: No such helper "syz1" [ 924.334894][T27453] EXT4-fs: Ignoring removed nobh option [ 924.370689][T27472] loop0: detected capacity change from 0 to 512 [ 924.406912][T27472] EXT4-fs (loop0): fragment/cluster size (1024) != block size (2048) [ 924.449391][ T29] audit: type=1400 audit(1788389337.147:9581): avc: denied { unmount } for pid=24950 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 924.469880][ T9] tipc: Node number set to 2886997057 [ 924.688866][T27453] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 924.689052][T27453] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 924.692345][T27453] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5505'. [ 924.708254][ T29] audit: type=1400 audit(1788389337.387:9582): avc: denied { write } for pid=27452 comm="syz.6.5505" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 924.740146][T27453] EXT4-fs error (device loop6): ext4_find_dest_de:2052: inode #2: block 3: comm syz.6.5505: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 924.838648][ T29] audit: type=1326 audit(1788389337.527:9583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27452 comm="syz.6.5505" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f9dae159 code=0x7ffc0000 [ 924.838704][ T29] audit: type=1326 audit(1788389337.537:9584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27452 comm="syz.6.5505" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f9dae159 code=0x7ffc0000 [ 924.938897][ T29] audit: type=1400 audit(1788389337.637:9585): avc: denied { write } for pid=27477 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 924.988615][T25258] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 925.012413][ T29] audit: type=1400 audit(1788389337.707:9586): avc: denied { write } for pid=27498 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 925.105242][T27502] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5511'. [ 925.149373][T27507] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 925.274399][T27510] netlink: 'syz.4.5514': attribute type 1 has an invalid length. [ 925.289777][T27513] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 925.327383][T27501] loop6: detected capacity change from 0 to 8192 [ 925.498029][T27521] loop9: detected capacity change from 0 to 512 [ 925.516105][T27521] EXT4-fs error (device loop9): ext4_xattr_inode_iget:473: comm syz.9.5515: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 925.516262][T27521] loop9: lost filesystem error report for type 5 error -117 [ 925.523326][T27521] EXT4-fs (loop9): 1 orphan inode deleted [ 925.528147][T27521] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 925.746341][T16683] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 926.477583][T27529] loop9: detected capacity change from 0 to 512 [ 926.803569][T27529] EXT4-fs (loop9): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 926.928614][T27529] EXT4-fs error (device loop9): ext4_quota_enable:7256: comm syz.9.5517: Bad quota inum: 2, type: 1 [ 926.940243][T27529] EXT4-fs warning (device loop9): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 926.965080][T27557] loop6: detected capacity change from 0 to 128 [ 927.327256][T27529] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 927.404064][T27575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5525'. [ 927.508582][T27529] EXT4-fs error (device loop9): ext4_quota_enable:7256: comm syz.9.5517: Bad quota inum: 2, type: 1 [ 927.523172][T27529] EXT4-fs warning (device loop9): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 927.876621][T16683] EXT4-fs (loop9): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 928.019921][T27585] loop0: detected capacity change from 0 to 4096 [ 928.029804][T27585] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 928.347351][T26829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 928.441473][T27593] loop9: detected capacity change from 0 to 8192 [ 928.537708][T27599] netlink: 'syz.0.5532': attribute type 12 has an invalid length. [ 928.537740][T27599] netlink: 'syz.0.5532': attribute type 29 has an invalid length. [ 928.537775][T27599] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5532'. [ 928.601905][T27597] netlink: 'syz.0.5532': attribute type 12 has an invalid length. [ 928.601934][T27597] netlink: 'syz.0.5532': attribute type 29 has an invalid length. [ 928.601955][T27597] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5532'. [ 928.646670][T27597] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5532'. [ 928.763608][T27603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5535'. [ 928.763676][T27603] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5535'. [ 928.863193][T27615] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5536'. [ 928.989392][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 928.989419][ T29] audit: type=1400 audit(1788389341.689:9595): avc: denied { getopt } for pid=27616 comm="syz.0.5537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 929.160908][T27632] loop0: detected capacity change from 0 to 128 [ 929.190550][ T29] audit: type=1400 audit(1788389341.889:9596): avc: denied { write } for pid=27618 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 929.238188][T27635] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5540'. [ 929.259663][T27635] loop6: detected capacity change from 0 to 128 [ 929.284221][ T29] audit: type=1400 audit(1788389341.979:9597): avc: denied { write } for pid=27637 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 929.303134][T27635] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5540'. [ 929.450627][T27640] loop9: detected capacity change from 0 to 256 [ 929.458157][T27640] vfat: Unknown parameter 'utÇï7ÔzŒçÎ�bf8' [ 929.676638][T27649] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5543'. [ 929.912511][T27640] bond3 (unregistering): Released all slaves [ 930.045188][T27657] loop0: detected capacity change from 0 to 512 [ 930.067521][T27657] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 930.067686][T27657] ext4 filesystem being mounted at /24/configfs supports timestamps until 2038-01-19 (0x7fffffff) [ 930.098655][ T29] audit: type=1400 audit(1788389342.799:9598): avc: denied { write } for pid=27656 comm="syz.0.5545" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 930.178007][ T29] audit: type=1400 audit(1788389342.880:9599): avc: denied { write } for pid=26829 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 930.178332][T26829] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 930.214613][T26829] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 930.895763][T27660] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 930.992306][ T29] audit: type=1400 audit(1788389343.690:9600): avc: denied { mounton } for pid=27674 comm="syz.9.5552" path="/472/trace" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 931.117014][ T29] audit: type=1400 audit(1788389343.820:9601): avc: denied { ioctl } for pid=27674 comm="syz.9.5552" path="/472/trace/trace" dev="tracefs" ino=1256 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 931.445457][T27677] wg1 speed is unknown, defaulting to 1000 [ 931.761845][T27704] loop6: detected capacity change from 0 to 128 [ 931.839636][ T29] audit: type=1400 audit(1788389344.540:9602): avc: denied { write } for pid=27691 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 931.965992][T27677] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.966038][T27677] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.990456][T27677] bridge_slave_0: entered allmulticast mode [ 931.991058][T27677] bridge_slave_0: entered promiscuous mode [ 932.008599][ T29] audit: type=1400 audit(1788389344.710:9603): avc: denied { write } for pid=27714 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 932.031542][T27677] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.031586][T27677] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.031710][T27677] bridge_slave_1: entered allmulticast mode [ 932.032397][T27677] bridge_slave_1: entered promiscuous mode [ 932.106253][T27677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 932.120657][T27677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 932.158801][T27677] team0: Port device team_slave_0 added [ 932.167966][T27677] team0: Port device team_slave_1 added [ 932.204969][T27677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 932.204994][T27677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 932.205101][T27677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 932.250479][T27677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 932.250507][T27677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 932.250554][T27677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 932.331101][T27677] hsr_slave_0: entered promiscuous mode [ 932.331656][T27677] hsr_slave_1: entered promiscuous mode [ 932.332005][T27677] debugfs: 'hsr0' already exists in 'hsr' [ 932.332027][T27677] Cannot create hsr debugfs directory [ 932.596652][T27726] xt_CT: You must specify a L4 protocol and not use inversions on it [ 932.884185][ T29] audit: type=1400 audit(1788389345.581:9604): avc: denied { write } for pid=27731 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 932.998748][T27677] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 933.009191][T27677] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 933.017305][T27677] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 933.031866][T27677] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 933.040904][T27677] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 933.054402][T27677] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 933.062020][T27677] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 933.071869][T27677] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 933.245810][T27677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 933.279247][T27677] 8021q: adding VLAN 0 to HW filter on device team0 [ 933.299378][ T5701] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.299426][ T5701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 933.324489][ T5701] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.324534][ T5701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 933.441368][T27773] loop9: detected capacity change from 0 to 512 [ 933.451503][T27773] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 933.467883][T27773] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.5563: invalid indirect mapped block 9 (level 0) [ 933.467952][T27773] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 933.474256][T27773] EXT4-fs (loop9): 1 truncate cleaned up [ 933.475270][T27773] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 933.794488][T27766] __nla_validate_parse: 2 callbacks suppressed [ 933.794533][T27766] netlink: 56 bytes leftover after parsing attributes in process `syz.9.5563'. [ 933.905733][T16683] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.010002][T27820] FAULT_INJECTION: forcing a failure. [ 934.010002][T27820] name failslab, interval 1, probability 0, space 0, times 0 [ 934.010048][T27820] CPU: 0 UID: 0 PID: 27820 Comm: syz.9.5565 Not tainted syzkaller #0 PREEMPT(lazy) [ 934.010101][T27820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 934.010120][T27820] Call Trace: [ 934.010129][T27820] [ 934.010140][T27820] __dump_stack+0x1d/0x30 [ 934.010168][T27820] dump_stack_lvl+0x95/0xd0 [ 934.010227][T27820] dump_stack+0x15/0x1b [ 934.010288][T27820] should_fail_ex+0x262/0x280 [ 934.010316][T27820] ? security_inode_alloc+0x37/0x100 [ 934.010349][T27820] should_failslab+0x8c/0xb0 [ 934.010390][T27820] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 934.010477][T27820] ? security_inode_alloc+0x37/0x100 [ 934.010510][T27820] security_inode_alloc+0x37/0x100 [ 934.010537][T27820] inode_init_always_gfp+0x495/0x4e0 [ 934.010651][T27820] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 934.010683][T27820] alloc_inode+0x58/0x170 [ 934.010717][T27820] new_inode+0x1d/0xe0 [ 934.010739][T27820] hugetlbfs_get_inode+0x7b/0x330 [ 934.010839][T27820] ? xfd_validate_state+0x45/0xf0 [ 934.010880][T27820] hugetlb_file_setup+0x192/0x3d0 [ 934.010991][T27820] ksys_mmap_pgoff+0x13f/0x310 [ 934.011100][T27820] x64_sys_call+0x23b3/0x2550 [ 934.011130][T27820] do_syscall_64+0x112/0x360 [ 934.011208][T27820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.011237][T27820] RIP: 0033:0x7f27e48ce159 [ 934.011261][T27820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 934.011288][T27820] RSP: 002b:00007f27e3327028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 934.011378][T27820] RAX: ffffffffffffffda RBX: 00007f27e4b55fa0 RCX: 00007f27e48ce159 [ 934.011393][T27820] RDX: 0000000000000001 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 934.011407][T27820] RBP: 00007f27e4965024 R08: ffffffffffffffff R09: 0000000000000000 [ 934.011427][T27820] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000000 [ 934.011447][T27820] R13: 00007f27e4b56038 R14: 00007f27e4b55fa0 R15: 00007ffe17202508 [ 934.011529][T27820] [ 934.043847][T27677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 934.316339][T27829] loop6: detected capacity change from 0 to 128 [ 934.334607][T27831] 9p: Bad value for 'rfdno' [ 934.452802][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 934.452827][ T29] audit: type=1400 audit(1788389347.152:9611): avc: denied { write } for pid=27817 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 934.511610][T27840] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 934.547387][ T29] audit: type=1400 audit(1788389347.242:9612): avc: denied { write } for pid=27841 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 934.877624][ T29] audit: type=1400 audit(1788389347.572:9613): avc: denied { write } for pid=27845 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 934.919316][T27677] veth0_vlan: entered promiscuous mode [ 934.930410][T27677] veth1_vlan: entered promiscuous mode [ 934.968488][T27677] veth0_macvtap: entered promiscuous mode [ 934.977545][T27677] veth1_macvtap: entered promiscuous mode [ 934.994667][T27677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 935.015215][T27677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 935.082045][ T5701] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.084899][ T5701] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.094397][ T5701] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.094501][ T5701] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.132429][ T29] audit: type=1400 audit(1788389347.822:9614): avc: denied { write } for pid=27862 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 935.192812][T27864] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5570'. [ 935.209623][T27864] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5570'. [ 935.473966][T27872] loop8: detected capacity change from 0 to 8192 [ 935.608014][ T29] audit: type=1400 audit(1788389348.302:9615): avc: denied { write } for pid=27870 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 935.772625][ T29] audit: type=1400 audit(1788389348.472:9616): avc: denied { write } for pid=27897 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 935.832328][T27896] loop6: detected capacity change from 0 to 256 [ 935.856008][T27892] netlink: 'syz.4.5575': attribute type 8 has an invalid length. [ 935.856099][T27892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5575'. [ 935.873622][T27896] msdos: Unknown parameter 'k§zªEƒŠ5usef�ü<4ç)%ìÁƒ-Ô [ 935.873622][T27896] èîxÚ £9Çè¿>¼ÑÃ*æ-uOõ®Å�ß!ņž�Ðd [ 935.873622][T27896] ª/!öæÈttœY öŸ4Wø¶/±æ–0‹C07 [ 935.873622][T27896] |kX*~÷•Y´ PSþ'ÆÿÛ8¹Õe”˜ã£¢³¼ísêØ;„ï5?Cášlð2¼E-IÚ æó ¼EQa¹Ù—œ‡! .¼ƒB' [ 935.923530][T27896] netlink: 'syz.6.5574': attribute type 4 has an invalid length. [ 935.972360][T27902] netlink: 'syz.6.5574': attribute type 4 has an invalid length. [ 936.227564][ T29] audit: type=1400 audit(1788389348.922:9617): avc: denied { write } for pid=27909 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 936.340769][ T29] audit: type=1400 audit(1788389349.032:9618): avc: denied { write } for pid=27926 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 936.363162][T27927] loop9: detected capacity change from 0 to 128 [ 936.466355][ T29] audit: type=1326 audit(1788389349.162:9619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27929 comm="syz.6.5581" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f9dae159 code=0x7ffc0000 [ 936.466407][ T29] audit: type=1326 audit(1788389349.162:9620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27929 comm="syz.6.5581" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f9dae159 code=0x7ffc0000 [ 936.551754][T27937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5582'. [ 936.728799][T27950] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5586'. [ 937.049823][T27967] bond0: entered promiscuous mode [ 937.049856][T27967] bond_slave_0: entered promiscuous mode [ 937.050108][T27967] bond_slave_1: entered promiscuous mode [ 937.110287][T27967] bond0: left promiscuous mode [ 937.110498][T27967] bond_slave_0: left promiscuous mode [ 937.114285][T27967] bond_slave_1: left promiscuous mode [ 937.306220][T27978] geneve2: entered promiscuous mode [ 937.306252][T27978] geneve2: entered allmulticast mode [ 937.318717][T27970] loop6: detected capacity change from 0 to 256 [ 937.352254][ T633] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 937.353027][ T633] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 937.353079][ T633] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 937.353191][ T633] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 937.500246][T27983] FAULT_INJECTION: forcing a failure. [ 937.500246][T27983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 937.500286][T27983] CPU: 1 UID: 0 PID: 27983 Comm: syz.8.5591 Not tainted syzkaller #0 PREEMPT(lazy) [ 937.500477][T27983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 937.500571][T27983] Call Trace: [ 937.500613][T27983] [ 937.500639][T27983] __dump_stack+0x1d/0x30 [ 937.500735][T27983] dump_stack_lvl+0x95/0xd0 [ 937.500837][T27983] dump_stack+0x15/0x1b [ 937.500919][T27983] should_fail_ex+0x262/0x280 [ 937.501076][T27983] should_fail+0xb/0x20 [ 937.501146][T27983] should_fail_usercopy+0x1a/0x20 [ 937.501245][T27983] _copy_from_user+0x1c/0xb0 [ 937.501373][T27983] ___sys_recvmsg+0xaa/0x3a0 [ 937.501535][T27983] do_recvmmsg+0x1e5/0x560 [ 937.501707][T27983] ? fput+0x91/0xc0 [ 937.501773][T27983] __x64_sys_recvmmsg+0xe5/0x170 [ 937.501937][T27983] x64_sys_call+0x77f/0x2550 [ 937.502051][T27983] do_syscall_64+0x112/0x360 [ 937.502245][T27983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.502330][T27983] RIP: 0033:0x7f6e678fe159 [ 937.502390][T27983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 937.502470][T27983] RSP: 002b:00007f6e66357028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 937.502560][T27983] RAX: ffffffffffffffda RBX: 00007f6e67b85fa0 RCX: 00007f6e678fe159 [ 937.502662][T27983] RDX: 0000000004000210 RSI: 0000200000001740 RDI: 0000000000000004 [ 937.502713][T27983] RBP: 00007f6e66357090 R08: 0000000000000000 R09: 0000000000000000 [ 937.502771][T27983] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 937.502830][T27983] R13: 00007f6e67b86038 R14: 00007f6e67b85fa0 R15: 00007ffeb563fdf8 [ 937.502911][T27983] [ 938.130802][T28005] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5595'. [ 938.160331][T28005] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5595'. [ 938.355685][T28016] loop9: detected capacity change from 0 to 1024 [ 938.369962][T28016] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 938.407369][T28016] EXT4-fs (loop9): Errors on filesystem, clearing orphan list. [ 938.413095][T28016] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 938.497829][T28016] EXT4-fs error (device loop9): ext4_iget_extra_inode:5210: inode #15: comm syz.9.5596: corrupted in-inode xattr: overlapping e_value [ 938.508153][T28016] EXT4-fs error (device loop9): ext4_iget_extra_inode:5210: inode #15: comm syz.9.5596: corrupted in-inode xattr: overlapping e_value [ 938.565568][T16683] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.708397][T28033] netlink: 'syz.8.5598': attribute type 1 has an invalid length. [ 938.708437][T28033] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5598'. [ 938.753834][T28027] syzkaller0: entered promiscuous mode [ 938.753871][T28027] syzkaller0: entered allmulticast mode [ 939.194524][T28065] veth1_to_bond: entered allmulticast mode [ 939.202565][T28065] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5603'. [ 939.202883][T28065] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.203069][T28065] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.235402][T28065] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5603'. [ 939.357388][T28064] veth1_to_bond: left allmulticast mode [ 939.600087][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 939.600118][ T29] audit: type=1400 audit(1788389352.304:9789): avc: denied { write } for pid=28081 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 939.697173][ T29] audit: type=1400 audit(1788389352.394:9790): avc: denied { write } for pid=28098 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 939.769082][ T5699] bridge_slave_1: left allmulticast mode [ 939.769115][ T5699] bridge_slave_1: left promiscuous mode [ 939.769298][ T5699] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.791135][ T5699] bridge_slave_0: left allmulticast mode [ 939.791187][ T5699] bridge_slave_0: left promiscuous mode [ 939.791307][ T5699] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.872247][T28108] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5607'. [ 939.886361][ T5699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 939.896716][ T5699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 939.907042][ T5699] bond0 (unregistering): Released all slaves [ 939.920556][T28109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5608'. [ 939.973326][ T5699] hsr_slave_0: left promiscuous mode [ 940.014935][ T5699] hsr_slave_1: left promiscuous mode [ 940.015374][ T5699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 940.015433][ T5699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 940.038940][ T5699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 940.038966][ T5699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 940.074152][ T5699] veth1_macvtap: left promiscuous mode [ 940.074190][ T5699] veth0_macvtap: left promiscuous mode [ 940.074287][ T5699] veth1_vlan: left promiscuous mode [ 940.074328][ T5699] veth0_vlan: left promiscuous mode [ 940.144364][ T29] audit: type=1400 audit(1788389352.844:9791): avc: denied { write } for pid=28111 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 940.206773][ T29] audit: type=1400 audit(1788389352.904:9792): avc: denied { write } for pid=28128 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 940.296837][ T5699] team0 (unregistering): Port device team_slave_1 removed [ 940.309385][ T5699] team0 (unregistering): Port device team_slave_0 removed [ 940.485974][T28096] wg1 speed is unknown, defaulting to 1000 [ 940.615957][T28138] xt_hashlimit: max too large, truncated to 1048576 [ 940.621016][ T29] audit: type=1400 audit(1788389353.314:9793): avc: denied { write } for pid=28134 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 940.625947][T28138] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5610'. [ 940.727571][ T29] audit: type=1400 audit(1788389353.424:9794): avc: denied { write } for pid=28151 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 941.101557][ T5699] IPVS: stop unused estimator thread 0... [ 941.131210][T28169] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5612'. [ 941.131242][T28169] netlink: 212 bytes leftover after parsing attributes in process `syz.6.5612'. [ 941.131309][T28169] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5612'. [ 941.135012][ T29] audit: type=1400 audit(1788389353.835:9795): avc: denied { write } for pid=28159 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 941.190888][T28096] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.190943][T28096] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.191162][T28096] bridge_slave_0: entered allmulticast mode [ 941.193846][T28096] bridge_slave_0: entered promiscuous mode [ 941.198187][T28096] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.198230][T28096] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.198461][T28096] bridge_slave_1: entered allmulticast mode [ 941.203541][T28096] bridge_slave_1: entered promiscuous mode [ 941.271572][T28096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 941.287604][T28096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 941.316406][ T29] audit: type=1400 audit(1788389354.015:9796): avc: denied { write } for pid=28175 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 941.345720][T28096] team0: Port device team_slave_0 added [ 941.352452][T28096] team0: Port device team_slave_1 added [ 941.363123][T28155] loop8: detected capacity change from 0 to 512 [ 941.392111][T28155] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 941.422992][T28155] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c118, mo2=0002] [ 941.423530][T28155] EXT4-fs (loop8): failed to initialize system zone (-117) [ 941.424376][T28155] EXT4-fs (loop8): mount failed [ 941.437517][T28179] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5613'. [ 941.450038][ T3029] 8021q: adding VLAN 0 to HW filter on device eth14 [ 941.461598][T28096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 941.461623][T28096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.461690][T28096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 941.477970][T28096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 941.478031][T28096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.478147][T28096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.634283][T28096] hsr_slave_0: entered promiscuous mode [ 941.634772][T28096] hsr_slave_1: entered promiscuous mode [ 941.635179][T28096] debugfs: 'hsr0' already exists in 'hsr' [ 941.635226][T28096] Cannot create hsr debugfs directory [ 941.774071][T28155] loop8: detected capacity change from 0 to 764 [ 941.841171][T28155] rock: corrupted directory entry. extent=32, offset=0, size=83886085 [ 941.872448][T28155] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5611'. [ 941.934088][ T29] audit: type=1400 audit(1788389354.635:9797): avc: denied { mounton } for pid=28154 comm="syz.8.5611" path="/12/file0" dev="loop8" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=dir permissive=1 [ 942.146187][ T29] audit: type=1400 audit(1788389354.845:9798): avc: denied { write } for pid=28185 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 942.276288][ T3029] 8021q: adding VLAN 0 to HW filter on device eth13 [ 942.746453][T28230] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 942.761518][T28230] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 943.017821][T28233] loop7: detected capacity change from 0 to 7 [ 943.069670][T28207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 943.079604][T28207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 943.110405][T14820] Buffer I/O error on dev loop7, logical block 0, async page read [ 943.110554][T14820] Buffer I/O error on dev loop7, logical block 0, async page read [ 943.110749][T14820] Buffer I/O error on dev loop7, logical block 0, async page read [ 943.110837][T14820] Buffer I/O error on dev loop7, logical block 0, async page read [ 943.110926][T14820] Buffer I/O error on dev loop7, logical block 0, async page read [ 943.192788][ T3029] 8021q: adding VLAN 0 to HW filter on device eth15 [ 943.217976][ T5699] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.218148][ T5699] netdevsim netdevsim8 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 943.218415][ T5699] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.218523][ T5699] netdevsim netdevsim8 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 943.218637][ T5699] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.218731][ T5699] netdevsim netdevsim8 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 943.218913][ T5699] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.219049][ T5699] netdevsim netdevsim8 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 943.235608][T28236] loop6: detected capacity change from 0 to 2048 [ 943.300134][T28236] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 943.300984][T28236] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 943.479400][T28096] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 943.482317][T28242] loop8: detected capacity change from 0 to 128 [ 943.502012][T28096] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 943.509527][T28096] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 943.519983][T28096] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 943.523887][T28096] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 943.552645][T28096] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 943.555833][T28242] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 943.559048][T28096] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 943.564356][T28242] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 943.566238][T28096] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 943.631312][T27677] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 943.786070][T28096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 943.828573][T28096] 8021q: adding VLAN 0 to HW filter on device team0 [ 943.855774][ T633] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.855927][ T633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 943.876019][ T5701] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.876069][ T5701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.976948][ T3029] 8021q: adding VLAN 0 to HW filter on device eth16 [ 944.496492][T28096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 944.858206][T28096] veth0_vlan: entered promiscuous mode [ 944.867410][T28096] veth1_vlan: entered promiscuous mode [ 944.892326][T28335] __nla_validate_parse: 2 callbacks suppressed [ 944.892357][T28335] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5629'. [ 944.893802][T28096] veth0_macvtap: entered promiscuous mode [ 944.904143][T28096] veth1_macvtap: entered promiscuous mode [ 944.936427][T28096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 944.951978][T28096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 945.015378][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 945.015407][ T29] audit: type=1400 audit(1788389357.716:9817): avc: denied { write } for pid=28327 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 945.061279][ T29] audit: type=1400 audit(1788389357.766:9818): avc: denied { write } for pid=28344 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 945.117981][ T5701] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.120666][ T5701] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.157437][ T5699] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.157501][ T5699] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.258386][T28354] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5632'. [ 945.272633][T28354] loop8: detected capacity change from 0 to 128 [ 945.286721][ T29] audit: type=1400 audit(1788389357.986:9819): avc: denied { write } for pid=28351 comm="syz.8.5632" name="functions" dev="configfs" ino=11009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 945.302859][ T29] audit: type=1400 audit(1788389358.006:9820): avc: denied { write } for pid=28351 comm="syz.8.5632" name="direction" dev="configfs" ino=83571 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 945.302949][ T29] audit: type=1400 audit(1788389358.006:9821): avc: denied { open } for pid=28351 comm="syz.8.5632" path="/19/my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction" dev="configfs" ino=83571 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 945.311027][ T29] audit: type=1400 audit(1788389358.016:9822): avc: denied { write } for pid=28351 comm="syz.8.5632" name="ep.0" dev="configfs" ino=83569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 945.321113][ T29] audit: type=1400 audit(1788389358.027:9823): avc: denied { write } for pid=28351 comm="syz.8.5632" name="c.1" dev="configfs" ino=68315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 945.321176][ T29] audit: type=1400 audit(1788389358.027:9824): avc: denied { write } for pid=28351 comm="syz.8.5632" name="c.1" dev="configfs" ino=68315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 945.511935][T28361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5605'. [ 945.589024][T28373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5605'. [ 945.765665][ T29] audit: type=1400 audit(1788389358.467:9825): avc: denied { write } for pid=28347 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 945.933328][T28389] loop8: detected capacity change from 0 to 1024 [ 945.942233][T28389] EXT4-fs: Ignoring removed nomblk_io_submit option [ 945.942274][T28389] EXT4-fs: Ignoring removed i_version option [ 945.942370][T28389] EXT4-fs: Ignoring removed nomblk_io_submit option [ 945.969461][ T29] audit: type=1400 audit(1788389358.677:9826): avc: denied { write } for pid=28390 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 945.973906][T28389] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 945.974284][T28389] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 946.002847][T28389] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm syz.8.5637: bg 0: block 112: padding at end of block bitmap is not set [ 946.003741][T28389] EXT4-fs (loop8): Remounting filesystem read-only [ 946.018305][T28389] EXT4-fs (loop8): shut down requested (0) [ 946.267227][T27677] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 946.401331][T28409] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5641'. [ 946.402260][T28409] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5641'. [ 946.700307][T28436] program syz.8.5644 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 946.781914][T28442] loop8: detected capacity change from 0 to 164 [ 947.398853][T28468] loop1: detected capacity change from 0 to 512 [ 947.412611][T28468] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.5647: bg 0: block 7: invalid block bitmap [ 947.412686][T28468] loop1: lost filesystem error report for type 5 error -117 [ 947.425138][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 947.425160][ C1] EXT4-fs (loop1): initial error at time 1788389360: ext4_validate_block_bitmap:436 [ 947.425194][ C1] EXT4-fs (loop1): last error at time 1788389360: ext4_validate_block_bitmap:436 [ 947.433223][T28468] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 947.433254][T28468] loop1: lost filesystem error report for type 5 error -117 [ 947.462205][T28468] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2933: inode #11: comm syz.1.5647: corrupted xattr block 95: invalid header [ 947.462254][T28468] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 947.462864][T28468] EXT4-fs warning (device loop1): ext4_evict_inode:288: xattr delete (err -117) [ 947.462958][T28468] EXT4-fs (loop1): 1 orphan inode deleted [ 947.463953][T28468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 947.494961][T28468] EXT4-fs error (device loop1): ext4_lookup:1787: inode #16: comm syz.1.5647: iget: bad extra_isize 7968 (inode size 256) [ 947.663567][T28096] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 948.051280][T28490] loop6: detected capacity change from 0 to 128 [ 948.051691][T28490] ext2: Unknown parameter 'measure' [ 948.073452][T28490] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5651'. [ 948.431947][T28481] loop8: detected capacity change from 0 to 8192 [ 948.483531][T28500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5653'. [ 948.484271][T28500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5653'. [ 948.577883][T28503] program syz.6.5655 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 949.039834][T28535] 9p: Bad value for 'wfdno' [ 949.212355][T28533] loop1: detected capacity change from 0 to 8192 [ 949.334769][T28551] sctp: [Deprecated]: syz.6.5664 (pid 28551) Use of int in max_burst socket option. [ 949.334769][T28551] Use struct sctp_assoc_value instead [ 949.447193][T28569] program syz.6.5666 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 949.521703][T28568] pim6reg: entered allmulticast mode [ 949.628322][T28580] loop9: detected capacity change from 0 to 512 [ 949.662994][T28580] EXT4-fs (loop9): 1 orphan inode deleted [ 949.663837][T28580] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 949.664305][T28580] ext4 filesystem being mounted at /497/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 949.674658][T28580] FAULT_INJECTION: forcing a failure. [ 949.674658][T28580] name failslab, interval 1, probability 0, space 0, times 0 [ 949.674789][T28580] CPU: 0 UID: 0 PID: 28580 Comm: syz.9.5668 Not tainted syzkaller #0 PREEMPT(lazy) [ 949.674894][T28580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 949.674945][T28580] Call Trace: [ 949.674969][T28580] [ 949.675007][T28580] __dump_stack+0x1d/0x30 [ 949.675130][T28580] dump_stack_lvl+0x95/0xd0 [ 949.675154][T28580] dump_stack+0x15/0x1b [ 949.675212][T28580] should_fail_ex+0x262/0x280 [ 949.675294][T28580] should_failslab+0x8c/0xb0 [ 949.675450][T28580] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 949.675573][T28580] ? __d_alloc+0x34/0x320 [ 949.675653][T28580] ? __d_alloc+0x34/0x320 [ 949.675739][T28580] __d_alloc+0x34/0x320 [ 949.675841][T28580] d_alloc+0x2e/0x100 [ 949.675916][T28580] lookup_one_qstr_excl+0x95/0x240 [ 949.676012][T28580] filename_create+0x155/0x220 [ 949.676129][T28580] filename_mknodat+0x13e/0x450 [ 949.676242][T28580] __se_sys_mknod+0x37/0xf0 [ 949.676419][T28580] __x64_sys_mknod+0x43/0x50 [ 949.676515][T28580] x64_sys_call+0x14db/0x2550 [ 949.676608][T28580] do_syscall_64+0x112/0x360 [ 949.676713][T28580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.676826][T28580] RIP: 0033:0x7f27e48ce159 [ 949.676880][T28580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 949.676944][T28580] RSP: 002b:00007f27e3327028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 949.677028][T28580] RAX: ffffffffffffffda RBX: 00007f27e4b55fa0 RCX: 00007f27e48ce159 [ 949.677130][T28580] RDX: 0000000000000713 RSI: 000000000000c000 RDI: 0000200000003600 [ 949.677174][T28580] RBP: 00007f27e3327090 R08: 0000000000000000 R09: 0000000000000000 [ 949.677217][T28580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 949.677267][T28580] R13: 00007f27e4b56038 R14: 00007f27e4b55fa0 R15: 00007ffe17202508 [ 949.677326][T28580] [ 949.677917][ T5699] EXT4-fs error (device loop9): ext4_release_dquot:7105: comm kworker/u8:21: Failed to release dquot type 1 [ 949.789803][T16683] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.200468][T28601] loop8: detected capacity change from 0 to 512 [ 950.207734][T28601] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 950.222018][T28601] EXT4-fs (loop8): 1 truncate cleaned up [ 950.222555][T28601] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 950.249870][ T29] kauditd_printk_skb: 445 callbacks suppressed [ 950.249901][ T29] audit: type=1400 audit(1788389362.959:10271): avc: denied { write } for pid=28599 comm="syz.8.5673" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 950.278991][T28601] tmpfs: Bad value for 'size' [ 950.314820][T27677] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.554519][ T29] audit: type=1400 audit(1788389363.259:10272): avc: denied { write } for pid=28592 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 950.657083][ T29] audit: type=1400 audit(1788389363.369:10273): avc: denied { write } for pid=28621 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 950.787199][T28626] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5676'. [ 950.995573][ T29] audit: type=1400 audit(1788389363.709:10274): avc: denied { write } for pid=28625 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 951.034127][T28596] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.034468][T28596] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.061813][T28639] program syz.8.5677 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 951.113841][T28641] FAULT_INJECTION: forcing a failure. [ 951.113841][T28641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 951.113885][T28641] CPU: 1 UID: 0 PID: 28641 Comm: syz.8.5678 Not tainted syzkaller #0 PREEMPT(lazy) [ 951.113920][T28641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 951.114103][T28641] Call Trace: [ 951.114135][T28641] [ 951.114175][T28641] __dump_stack+0x1d/0x30 [ 951.114259][T28641] dump_stack_lvl+0x95/0xd0 [ 951.114421][T28641] dump_stack+0x15/0x1b [ 951.114502][T28641] should_fail_ex+0x262/0x280 [ 951.114577][T28641] should_fail+0xb/0x20 [ 951.114643][T28641] should_fail_usercopy+0x1a/0x20 [ 951.114728][T28641] _copy_from_user+0x1c/0xb0 [ 951.114855][T28641] bpf_vlog_reverse_ubuf+0x9f/0x360 [ 951.115055][T28641] bpf_vlog_finalize+0x11a/0x200 [ 951.115181][T28641] bpf_log_attr_finalize+0x33/0x100 [ 951.115266][T28641] btf_new_fd+0x34a/0x670 [ 951.115378][T28641] bpf_btf_load+0x116/0x130 [ 951.115487][T28641] __sys_bpf+0xbce/0xc30 [ 951.115687][T28641] ? do_futex+0x350/0x460 [ 951.115886][T28641] __x64_sys_bpf+0x69/0x80 [ 951.115959][T28641] x64_sys_call+0xf26/0x2550 [ 951.116055][T28641] do_syscall_64+0x112/0x360 [ 951.116240][T28641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.116323][T28641] RIP: 0033:0x7f6e678fe159 [ 951.116370][T28641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 951.116441][T28641] RSP: 002b:00007f6e66357028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 951.116515][T28641] RAX: ffffffffffffffda RBX: 00007f6e67b85fa0 RCX: 00007f6e678fe159 [ 951.116627][T28641] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000012 [ 951.116678][T28641] RBP: 00007f6e67995024 R08: 0000000000000000 R09: 0000000000000000 [ 951.116720][T28641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 951.116764][T28641] R13: 00007f6e67b86038 R14: 00007f6e67b85fa0 R15: 00007ffeb563fdf8 [ 951.116839][T28641] [ 951.232876][ T29] audit: type=1400 audit(1788389363.929:10275): avc: denied { write } for pid=28642 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 951.347196][ T29] audit: type=1400 audit(1788389364.059:10276): avc: denied { write } for pid=28644 comm="syz.8.5679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 951.380787][T28596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 951.393352][T28596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 951.441025][T28647] loop8: detected capacity change from 0 to 8192 [ 951.682609][T28626] hsr_slave_1 (unregistering): left promiscuous mode [ 951.694643][ T5697] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.694701][ T5697] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.694833][ T5697] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.694934][ T5697] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.740459][T28652] loop1: detected capacity change from 0 to 512 [ 951.742810][T28652] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 951.763614][T28652] EXT4-fs (loop1): 1 truncate cleaned up [ 951.764174][T28652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 951.774219][T28652] EXT4-fs error (device loop1): ext4_generic_delete_entry:2675: inode #2: block 13: comm syz.1.5681: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 951.804978][T28652] EXT4-fs (loop1): Remounting filesystem read-only [ 951.812831][ T29] audit: type=1400 audit(1788389364.479:10277): avc: denied { write } for pid=28651 comm="syz.1.5681" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 951.812887][ T29] audit: type=1400 audit(1788389364.479:10278): avc: denied { write } for pid=28651 comm="syz.1.5681" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 951.895010][T28096] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.521554][T28684] loop8: detected capacity change from 0 to 512 [ 952.799502][T28692] loop6: detected capacity change from 0 to 8192 [ 952.989934][T28695] loop8: detected capacity change from 0 to 8192 [ 953.172156][T28709] loop9: detected capacity change from 0 to 1024 [ 953.179806][T28709] EXT4-fs: Ignoring removed orlov option [ 953.196289][ T29] audit: type=1326 audit(1788389365.900:10279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28705 comm="syz.1.5696" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6837e159 code=0x7ffc0000 [ 953.196377][ T29] audit: type=1326 audit(1788389365.900:10280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28705 comm="syz.1.5696" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6837e159 code=0x7ffc0000 [ 953.251722][T28709] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 953.738510][T16683] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 954.840286][T28740] loop5: detected capacity change from 0 to 7 [ 954.840592][ C0] blk_print_req_error: 4 callbacks suppressed [ 954.840616][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 954.840648][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 954.858407][T28738] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5707'. [ 954.880486][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 954.880521][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 954.892706][T28740] loop5: unable to read partition table [ 954.892800][T28740] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5) [ 954.898410][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 954.898442][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 954.904361][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 954.904409][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 954.918019][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 954.918059][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 954.920444][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 954.920479][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 954.922928][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 954.923023][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 955.279529][T28743] loop9: detected capacity change from 0 to 256 [ 955.323574][T28728] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000001) [ 955.324126][T28728] FAT-fs (loop9): Filesystem has been set read-only [ 955.407538][T28728] vlan1: entered promiscuous mode [ 955.493978][T28750] loop1: detected capacity change from 0 to 512 [ 955.504111][T28750] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 955.523824][T28750] EXT4-fs (loop1): 1 truncate cleaned up [ 955.524508][T28750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 955.621906][T28096] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 955.742042][T28765] loop1: detected capacity change from 0 to 512 [ 955.752752][T28754] syzkaller0: entered promiscuous mode [ 955.752794][T28754] syzkaller0: entered allmulticast mode [ 955.809932][T28765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 955.810166][T28765] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 955.847463][T28765] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #11: comm syz.1.5714: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 955.942940][T28771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.943115][T28771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.016601][T28096] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 956.331616][T28784] loop9: detected capacity change from 0 to 512 [ 956.399655][T28784] netlink: 'syz.9.5721': attribute type 4 has an invalid length. [ 956.412368][T28784] netlink: 'syz.9.5721': attribute type 4 has an invalid length. [ 956.543296][T28793] program syz.9.5724 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 956.553048][T28793] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 956.623946][T28795] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5725'. [ 956.623990][T28795] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5725'. [ 956.743791][T28779] net_ratelimit: 3320 callbacks suppressed [ 956.743833][T28779] Set syz1 is full, maxelem 65536 reached [ 956.844743][T28791] loop8: detected capacity change from 0 to 2048 [ 956.958228][T28791] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 956.980044][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 956.980073][ T29] audit: type=1400 audit(1788389369.682:10386): avc: denied { relabelto } for pid=28790 comm="syz.8.5723" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 957.015826][T28791] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 957.031414][T28791] EXT4-fs (loop8): Remounting filesystem read-only [ 957.039896][T28791] EXT4-fs warning (device loop8): ext4_xattr_inode_lookup_create:1613: inode #18: comm syz.8.5723: cleanup dec ref error -28 [ 957.094177][T27677] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.306532][T28806] syzkaller0: entered promiscuous mode [ 957.306568][T28806] syzkaller0: entered allmulticast mode [ 957.578262][T28821] set_capacity_and_notify: 1 callbacks suppressed [ 957.578304][T28821] loop1: detected capacity change from 0 to 512 [ 957.612066][T28821] EXT4-fs error (device loop1): ext4_xattr_inode_iget:473: comm syz.1.5734: EA inode 11 has unexpected i_nlink=0 ref_count=1 [ 957.612184][T28821] loop1: lost filesystem error report for type 5 error -117 [ 957.616050][T28822] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5733'. [ 957.625325][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 957.625354][ C0] EXT4-fs (loop1): initial error at time 1788389370: ext4_xattr_inode_iget:473 [ 957.625391][ C0] EXT4-fs (loop1): last error at time 1788389370: ext4_xattr_inode_iget:473 [ 957.670756][T28821] EXT4-fs (loop1): 1 orphan inode deleted [ 957.671226][T28821] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 957.691082][ T29] audit: type=1400 audit(1788389370.402:10387): avc: denied { watch } for pid=28820 comm="syz.1.5734" path="/27/file0/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 957.715301][T28821] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #2: block 13: comm syz.1.5734: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 957.716693][ T29] audit: type=1400 audit(1788389370.432:10388): avc: denied { write } for pid=28820 comm="syz.1.5734" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 957.784542][T28096] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.832519][ T29] audit: type=1400 audit(1788389370.532:10389): avc: denied { create } for pid=28831 comm="syz.4.5738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 957.873372][ T29] audit: type=1326 audit(1788389370.572:10390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28831 comm="syz.4.5738" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29dc0be159 code=0x7ffc0000 [ 957.873509][ T29] audit: type=1326 audit(1788389370.572:10391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28831 comm="syz.4.5738" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29dc0be159 code=0x7ffc0000 [ 957.873546][ T29] audit: type=1326 audit(1788389370.572:10392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28831 comm="syz.4.5738" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29dc0be159 code=0x7ffc0000 [ 957.873728][ T29] audit: type=1326 audit(1788389370.572:10393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28831 comm="syz.4.5738" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29dc0be159 code=0x7ffc0000 [ 957.873837][ T29] audit: type=1326 audit(1788389370.572:10394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28831 comm="syz.4.5738" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29dc0be159 code=0x7ffc0000 [ 957.874003][ T29] audit: type=1326 audit(1788389370.572:10395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28831 comm="syz.4.5738" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f29dc0be159 code=0x7ffc0000 [ 958.299400][T28858] IPVS: set_ctl: invalid protocol: 103 100.1.1.5:20000 [ 958.558773][T28876] FAULT_INJECTION: forcing a failure. [ 958.558773][T28876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 958.558819][T28876] CPU: 0 UID: 0 PID: 28876 Comm: syz.6.5751 Not tainted syzkaller #0 PREEMPT(lazy) [ 958.558854][T28876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 958.558920][T28876] Call Trace: [ 958.558927][T28876] [ 958.558990][T28876] __dump_stack+0x1d/0x30 [ 958.559026][T28876] dump_stack_lvl+0x95/0xd0 [ 958.559059][T28876] dump_stack+0x15/0x1b [ 958.559089][T28876] should_fail_ex+0x262/0x280 [ 958.559121][T28876] should_fail+0xb/0x20 [ 958.559192][T28876] should_fail_usercopy+0x1a/0x20 [ 958.559255][T28876] _copy_from_user+0x1c/0xb0 [ 958.559281][T28876] do_seccomp+0x27c/0xa40 [ 958.559320][T28876] ? restore_fpregs_from_fpstate+0x61/0x110 [ 958.559354][T28876] __x64_sys_seccomp+0x40/0x50 [ 958.559426][T28876] x64_sys_call+0x3f0/0x2550 [ 958.559454][T28876] do_syscall_64+0x112/0x360 [ 958.559507][T28876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.559536][T28876] RIP: 0033:0x7fb9f9dae159 [ 958.559556][T28876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 958.559632][T28876] RSP: 002b:00007fb9f8807028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 958.559655][T28876] RAX: ffffffffffffffda RBX: 00007fb9fa035fa0 RCX: 00007fb9f9dae159 [ 958.559670][T28876] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000001 [ 958.559687][T28876] RBP: 00007fb9f9e45024 R08: 0000000000000000 R09: 0000000000000000 [ 958.559823][T28876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 958.559837][T28876] R13: 00007fb9fa036038 R14: 00007fb9fa035fa0 R15: 00007fff062493d8 [ 958.559860][T28876] [ 958.607611][T28877] 9p: Unknown uid 00000000004294967295 [ 958.866803][T28883] loop6: detected capacity change from 0 to 128 [ 959.743131][T28920] loop8: detected capacity change from 0 to 512 [ 959.751458][T28920] EXT4-fs: Ignoring removed i_version option [ 959.784347][T28920] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 959.797197][T28920] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 959.908413][T28909] loop9: detected capacity change from 0 to 136 [ 959.969761][T28919] loop6: detected capacity change from 0 to 1024 [ 960.269051][T28919] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 960.269896][T28919] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 960.310603][T28919] JBD2: no valid journal superblock found [ 960.310688][T28919] EXT4-fs (loop6): Could not load journal inode [ 960.455996][T28934] loop6: detected capacity change from 0 to 512 [ 960.465454][T28934] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 960.484672][T28934] EXT4-fs (loop6): 1 truncate cleaned up [ 960.485150][T28934] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 960.533967][T27677] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.535003][T28940] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28940 comm=syz.9.5770 [ 960.616411][T25258] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.715544][T28946] loop6: detected capacity change from 0 to 512 [ 960.744330][T28952] loop8: detected capacity change from 0 to 2048 [ 960.795868][T28952] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 960.795971][T28952] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 960.916796][T27677] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.039004][T28962] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 961.227077][T28969] loop1: detected capacity change from 0 to 512 [ 961.256000][T28969] EXT4-fs (loop1): failed to initialize system zone (-117) [ 961.256047][T28969] EXT4-fs (loop1): mount failed [ 961.462326][T28974] loop1: detected capacity change from 0 to 1764 [ 961.473970][T28978] FAULT_INJECTION: forcing a failure. [ 961.473970][T28978] name failslab, interval 1, probability 0, space 0, times 0 [ 961.474072][T28978] CPU: 0 UID: 0 PID: 28978 Comm: syz.9.5781 Not tainted syzkaller #0 PREEMPT(lazy) [ 961.474102][T28978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 961.474207][T28978] Call Trace: [ 961.474239][T28978] [ 961.474270][T28978] __dump_stack+0x1d/0x30 [ 961.474370][T28978] dump_stack_lvl+0x95/0xd0 [ 961.474507][T28978] dump_stack+0x15/0x1b [ 961.474588][T28978] should_fail_ex+0x262/0x280 [ 961.474707][T28978] ? sock_kmalloc+0x85/0xc0 [ 961.474812][T28978] should_failslab+0x8c/0xb0 [ 961.474914][T28978] __kmalloc_noprof+0xd0/0x4d0 [ 961.474995][T28978] ? __import_iovec+0x2b3/0x530 [ 961.475058][T28978] ? sock_kmalloc+0x85/0xc0 [ 961.475093][T28978] sock_kmalloc+0x85/0xc0 [ 961.475221][T28978] ____sys_sendmsg+0xf0/0x580 [ 961.475337][T28978] ___sys_sendmsg+0x195/0x1e0 [ 961.475494][T28978] __x64_sys_sendmsg+0xd4/0x160 [ 961.475642][T28978] x64_sys_call+0x22ab/0x2550 [ 961.475784][T28978] do_syscall_64+0x112/0x360 [ 961.475891][T28978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.475973][T28978] RIP: 0033:0x7f27e48ce159 [ 961.476033][T28978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 961.476175][T28978] RSP: 002b:00007f27e3327028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 961.476248][T28978] RAX: ffffffffffffffda RBX: 00007f27e4b55fa0 RCX: 00007f27e48ce159 [ 961.476300][T28978] RDX: 0000000000008000 RSI: 0000200000000440 RDI: 0000000000000003 [ 961.476373][T28978] RBP: 00007f27e3327090 R08: 0000000000000000 R09: 0000000000000000 [ 961.476416][T28978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 961.476484][T28978] R13: 00007f27e4b56038 R14: 00007f27e4b55fa0 R15: 00007ffe17202508 [ 961.476556][T28978] [ 961.633685][T28980] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 961.662794][T28980] EXT4-fs (loop9): 1 truncate cleaned up [ 961.663895][T28980] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 961.743342][T16683] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 962.192835][T28993] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.5786: corrupted in-inode xattr: invalid ea_ino [ 962.192875][T28993] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 962.193382][T28993] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.5786: couldn't read orphan inode 15 (err -117) [ 962.193468][T28993] loop1: lost filesystem error report for type 5 error -117 [ 962.195266][T28993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 962.303134][ T29] kauditd_printk_skb: 628 callbacks suppressed [ 962.303164][ T29] audit: type=1400 audit(1788389375.014:11024): avc: denied { create } for pid=28992 comm="syz.1.5786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 962.329213][ T29] audit: type=1326 audit(1788389375.024:11025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28992 comm="syz.1.5786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6837e159 code=0x7ffc0000 [ 962.329354][ T29] audit: type=1326 audit(1788389375.024:11026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28992 comm="syz.1.5786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6837e159 code=0x7ffc0000 [ 962.355102][ T29] audit: type=1326 audit(1788389375.064:11027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28992 comm="syz.1.5786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6837e159 code=0x7ffc0000 [ 962.355208][ T29] audit: type=1326 audit(1788389375.064:11028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28992 comm="syz.1.5786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6837e159 code=0x7ffc0000 [ 962.379325][ T29] audit: type=1326 audit(1788389375.064:11029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28992 comm="syz.1.5786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7a6837e159 code=0x7ffc0000 [ 962.379442][ T29] audit: type=1326 audit(1788389375.064:11030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28992 comm="syz.1.5786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6837e159 code=0x7ffc0000 [ 962.379539][ T29] audit: type=1326 audit(1788389375.064:11031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28992 comm="syz.1.5786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6837e159 code=0x7ffc0000 [ 962.379698][ T29] audit: type=1326 audit(1788389375.064:11032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28992 comm="syz.1.5786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6837e159 code=0x7ffc0000 [ 962.379792][ T29] audit: type=1326 audit(1788389375.064:11033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28992 comm="syz.1.5786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6837e159 code=0x7ffc0000 [ 962.476765][T28994] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 962.476966][T28994] ext4 filesystem being mounted at /520/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 962.642826][T16683] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 962.900949][T29017] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.1912602624.795633006), cmd(2) [ 962.918063][T29017] set_capacity_and_notify: 3 callbacks suppressed [ 962.918094][T29017] loop9: detected capacity change from 0 to 1024 [ 962.947199][T29017] EXT4-fs (loop9): invalid inodes per group: 1 [ 963.019823][T29020] loop8: detected capacity change from 0 to 8192 [ 963.031641][T28096] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.131235][T29025] loop1: detected capacity change from 0 to 512 [ 963.135916][T29025] ext4: Unknown parameter 'smackfsroot' [ 963.159400][T29025] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5790'. [ 963.779375][T29052] wg1 speed is unknown, defaulting to 1000 [ 964.188844][T29066] loop1: detected capacity change from 0 to 1024 [ 964.315253][T29066] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 964.323516][T29066] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 964.323715][T29066] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 964.323799][T29066] EXT4-fs (loop1): This should not happen!! Data will be lost [ 964.323799][T29066] [ 964.323850][T29066] EXT4-fs (loop1): Total free blocks count 0 [ 964.323892][T29066] EXT4-fs (loop1): Free/Dirty block details [ 964.323934][T29066] EXT4-fs (loop1): free_blocks=68451041280 [ 964.324045][T29066] EXT4-fs (loop1): dirty_blocks=80 [ 964.324087][T29066] EXT4-fs (loop1): Block reservation details [ 964.324127][T29066] EXT4-fs (loop1): i_reserved_data_blocks=5 [ 964.355867][ T5701] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 964.630704][T29098] loop1: detected capacity change from 0 to 512 [ 964.651368][T29098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 964.651443][T29098] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 964.686178][T29098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5800'. [ 964.802667][T28096] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 964.966540][T29120] FAULT_INJECTION: forcing a failure. [ 964.966540][T29120] name failslab, interval 1, probability 0, space 0, times 0 [ 964.966643][T29120] CPU: 1 UID: 0 PID: 29120 Comm: syz.9.5805 Not tainted syzkaller #0 PREEMPT(lazy) [ 964.966679][T29120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 964.966697][T29120] Call Trace: [ 964.966707][T29120] [ 964.966737][T29120] __dump_stack+0x1d/0x30 [ 964.966770][T29120] dump_stack_lvl+0x95/0xd0 [ 964.966802][T29120] dump_stack+0x15/0x1b [ 964.966847][T29120] should_fail_ex+0x262/0x280 [ 964.966877][T29120] ? preload_this_cpu_lock+0x5b/0xd0 [ 964.967006][T29120] should_failslab+0x8c/0xb0 [ 964.967057][T29120] kmem_cache_alloc_node_noprof+0x82/0x400 [ 964.967125][T29120] ? preload_this_cpu_lock+0x5b/0xd0 [ 964.967173][T29120] ? alloc_vmap_area+0x1b6/0xe40 [ 964.967213][T29120] preload_this_cpu_lock+0x5b/0xd0 [ 964.967286][T29120] alloc_vmap_area+0x2c0/0xe40 [ 964.967324][T29120] ? should_fail_ex+0xdb/0x280 [ 964.967417][T29120] ? should_failslab+0x8c/0xb0 [ 964.967507][T29120] ? __get_vm_area_node+0x125/0x1f0 [ 964.967542][T29120] __get_vm_area_node+0x199/0x1f0 [ 964.967646][T29120] __vmalloc_node_range_noprof+0x262/0x1000 [ 964.967730][T29120] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 964.967819][T29120] ? __rcu_read_unlock+0x4e/0x70 [ 964.967860][T29120] ? kstrtoull+0x119/0x150 [ 964.967899][T29120] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 964.967987][T29120] __vmalloc_noprof+0xa4/0xf0 [ 964.968025][T29120] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 964.968055][T29120] bpf_prog_alloc_no_stats+0x47/0x390 [ 964.968198][T29120] ? bpf_prog_alloc+0x2a/0x150 [ 964.968224][T29120] bpf_prog_alloc+0x3c/0x150 [ 964.968250][T29120] bpf_prog_create_from_user+0x80/0x260 [ 964.968291][T29120] ? __pfx_seccomp_check_filter+0x10/0x10 [ 964.968475][T29120] do_seccomp+0x5ef/0xa40 [ 964.968511][T29120] ? fput+0x91/0xc0 [ 964.968535][T29120] ? ksys_write+0x194/0x1a0 [ 964.968628][T29120] __x64_sys_seccomp+0x40/0x50 [ 964.968716][T29120] x64_sys_call+0x3f0/0x2550 [ 964.968749][T29120] do_syscall_64+0x112/0x360 [ 964.968789][T29120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.968819][T29120] RIP: 0033:0x7f27e48ce159 [ 964.968841][T29120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 964.968878][T29120] RSP: 002b:00007f27e3327028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 964.968903][T29120] RAX: ffffffffffffffda RBX: 00007f27e4b55fa0 RCX: 00007f27e48ce159 [ 964.968920][T29120] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000000000000001 [ 964.968976][T29120] RBP: 00007f27e3327090 R08: 0000000000000000 R09: 0000000000000000 [ 964.968994][T29120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 964.969012][T29120] R13: 00007f27e4b56038 R14: 00007f27e4b55fa0 R15: 00007ffe17202508 [ 964.969041][T29120] [ 965.403770][T29133] wg1 speed is unknown, defaulting to 1000 [ 965.917898][T29157] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5814'. [ 966.252070][T29166] SELinux: policydb string does not match my string SE Linux [ 966.252115][T29166] SELinux: failed to load policy [ 967.200811][T29143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 967.928713][ T9] wg1 speed is unknown, defaulting to 1000 [ 967.928739][ T9] syz2: Port: 1 Link DOWN [ 967.946784][ T633] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.946857][ T633] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.947023][ T633] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.947245][ T633] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.048690][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 968.048719][ T29] audit: type=1400 audit(1788389380.767:11184): avc: denied { lock } for pid=29186 comm="syz.8.5823" path="socket:[86259]" dev="sockfs" ino=86259 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 968.274890][T29205] loop9: detected capacity change from 0 to 512 [ 968.282674][ T29] audit: type=1400 audit(1788389380.997:11185): avc: denied { write } for pid=29183 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 968.307312][T29205] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 968.320379][T29205] EXT4-fs (loop9): 1 truncate cleaned up [ 968.320949][T29205] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 968.440875][T16683] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.496483][ T29] audit: type=1400 audit(1788389381.207:11186): avc: denied { write } for pid=29222 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 968.536544][ T29] audit: type=1326 audit(1788389381.247:11187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29225 comm="syz.9.5829" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e48ce159 code=0x7ffc0000 [ 968.536677][ T29] audit: type=1326 audit(1788389381.247:11188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29225 comm="syz.9.5829" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e48ce159 code=0x7ffc0000 [ 968.537430][ T29] audit: type=1326 audit(1788389381.257:11189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29225 comm="syz.9.5829" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e48ce159 code=0x7ffc0000 [ 968.537546][ T29] audit: type=1326 audit(1788389381.257:11190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29225 comm="syz.9.5829" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e48ce159 code=0x7ffc0000 [ 968.543961][ T29] audit: type=1326 audit(1788389381.257:11191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29225 comm="syz.9.5829" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f27e48ce159 code=0x7ffc0000 [ 968.569821][ T29] audit: type=1326 audit(1788389381.277:11192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29225 comm="syz.9.5829" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e48ce159 code=0x7ffc0000 [ 968.569965][ T29] audit: type=1326 audit(1788389381.287:11193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29225 comm="syz.9.5829" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e48ce159 code=0x7ffc0000 [ 968.902022][T29195] kexec: Could not allocate control_code_buffer [ 969.000817][T29234] loop8: detected capacity change from 0 to 512 [ 969.047934][T29234] EXT4-fs error (device loop8): ext4_xattr_inode_iget:473: comm syz.8.5833: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 969.047986][T29234] loop8: lost filesystem error report for type 5 error -117 [ 969.050373][T29234] EXT4-fs (loop8): 1 orphan inode deleted [ 969.051410][T29234] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 969.094235][T29241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=29241 comm=syz.6.5832 [ 969.354462][T29230] loop1: detected capacity change from 0 to 2048 [ 969.396684][T29253] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5838'. [ 969.396719][T29253] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5838'. [ 969.482642][T29230] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 969.491985][T29254] loop6: detected capacity change from 0 to 128 [ 969.516357][T29230] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 969.533182][T29230] EXT4-fs (loop1): Remounting filesystem read-only [ 969.533395][T29230] EXT4-fs warning (device loop1): ext4_xattr_inode_lookup_create:1613: inode #18: comm syz.1.5830: cleanup dec ref error -28 [ 969.606454][T28096] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 969.729198][T29268] loop9: detected capacity change from 0 to 256 [ 969.752327][T29268] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 969.830175][T19140] IPVS: starting estimator thread 0... [ 969.830246][T29265] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 969.904392][T27677] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 969.915875][T29272] IPVS: using max 1872 ests per chain, 93600 per kthread [ 969.926904][T29274] FAT-fs (loop9): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 969.927004][T29274] FAT-fs (loop9): Filesystem has been set read-only [ 970.041776][T29273] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.042174][T29273] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.057090][T29278] loop1: detected capacity change from 0 to 512 [ 970.062969][T29278] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 970.076002][T29278] EXT4-fs (loop1): 1 truncate cleaned up [ 970.077006][T29278] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 970.149341][T28096] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 970.315105][T29273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 970.327784][T29273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 970.332575][T29283] netlink: 'syz.1.5849': attribute type 10 has an invalid length. [ 970.381445][T29289] netlink: 92 bytes leftover after parsing attributes in process `syz.8.5850'. [ 970.626418][T29283] team0: Device wg2 is of different type [ 970.676821][ T633] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.678379][T19140] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.678633][T19140] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.678680][T19140] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.012556][T29301] loop9: detected capacity change from 0 to 2048 [ 971.034274][T29301] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 971.050259][T29301] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 971.054148][T29301] EXT4-fs (loop9): Remounting filesystem read-only [ 971.054294][T29301] EXT4-fs warning (device loop9): ext4_xattr_inode_lookup_create:1613: inode #18: comm syz.9.5854: cleanup dec ref error -28 [ 971.103121][T16683] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 971.166473][T29305] loop1: detected capacity change from 0 to 512 [ 971.403840][T29313] ip_tables: iptables: counters copy to user failed while replacing table [ 971.536014][T29338] SELinux: invalid class [ 971.536040][T29338] SELinux: failed to load policy [ 971.552747][T29338] syzkaller1: entered promiscuous mode [ 971.552848][T29338] syzkaller1: entered allmulticast mode [ 971.631804][T29341] loop6: detected capacity change from 0 to 8192 [ 971.720015][T25258] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 971.720057][T25258] FAT-fs (loop6): Filesystem has been set read-only [ 971.871266][T29349] loop6: detected capacity change from 0 to 1764 [ 971.884454][T29349] netlink: 65055 bytes leftover after parsing attributes in process `syz.6.5866'. [ 971.967883][T29356] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5866'. [ 971.982211][ T5699] Bluetooth: hci0: Frame reassembly failed (-84) [ 972.050458][ T2990] ================================================================== [ 972.050505][ T2990] BUG: KCSAN: data-race in dont_mount / step_into_slowpath [ 972.050547][ T2990] [ 972.050574][ T2990] read-write to 0xffff888107292600 of 4 bytes by task 14820 on cpu 0: [ 972.050597][ T2990] dont_mount+0x2a/0x40 [ 972.050626][ T2990] vfs_unlink+0x202/0x490 [ 972.050655][ T2990] filename_unlinkat+0x1dc/0x410 [ 972.050690][ T2990] __se_sys_unlink+0x2b/0xe0 [ 972.050727][ T2990] __x64_sys_unlink+0x1f/0x30 [ 972.050766][ T2990] x64_sys_call+0x18ee/0x2550 [ 972.050801][ T2990] do_syscall_64+0x112/0x360 [ 972.050837][ T2990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.050866][ T2990] [ 972.050874][ T2990] read to 0xffff888107292600 of 4 bytes by task 2990 on cpu 1: [ 972.050901][ T2990] step_into_slowpath+0x139/0x4c0 [ 972.050925][ T2990] path_lookupat+0x2eb/0x4c0 [ 972.050946][ T2990] filename_lookup+0x18f/0x390 [ 972.050973][ T2990] do_readlinkat+0x74/0x2f0 [ 972.051002][ T2990] __x64_sys_readlink+0x47/0x60 [ 972.051029][ T2990] x64_sys_call+0x1d41/0x2550 [ 972.051064][ T2990] do_syscall_64+0x112/0x360 [ 972.051091][ T2990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.051113][ T2990] [ 972.051117][ T2990] value changed: 0x00300080 -> 0x00000080 [ 972.051132][ T2990] [ 972.051137][ T2990] Reported by Kernel Concurrency Sanitizer on: [ 972.051148][ T2990] CPU: 1 UID: 0 PID: 2990 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 972.051176][ T2990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 972.051195][ T2990] ================================================================== [ 972.096421][T29361] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5869'. [ 972.231201][T29363] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5870'. [ 972.231239][T29363] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5870'. [ 974.044001][ T3622] Bluetooth: hci0: Opcode 0x1003 failed: -110