last executing test programs: 10.503077857s ago: executing program 1 (id=63): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x5, 0x69, 0x0, 0x1, 0x8, 0xa, 0x0, 0x4, 0x400, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x4, @perf_bp={0x0, 0x8}, 0x11950, 0x4854, 0x3, 0x6, 0x5, 0xb5, 0x5, 0x0, 0xc8, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r2 = socket$kcm(0x10, 0x2, 0x10) (rerun: 32) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async, rerun: 64) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000140)={'wg0\x00', {0x2, 0x4e22, @local}}) (async, rerun: 64) recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a31000000000500010007"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000180)=""/15, 0xf}], 0x1, 0x40, 0xd) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x1, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xffff, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002280)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000500020000000900020073797a300000000005000100070000001400078008000840000000080800064000000000050004000000000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 10.365436265s ago: executing program 1 (id=64): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r0}, 0xffffffffffffff19) (async) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) (async) syz_emit_ethernet(0x42, &(0x7f0000001480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaa2aaaaaaaa86dd6a6bbe4d000c11ff"], 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4a041, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002340), 0x54000, 0x0) sendmsg$nl_route(r3, 0x0, 0x20040014) (async) socket$igmp6(0xa, 0x3, 0x2) (async) socket$kcm(0x2, 0xa, 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x1270, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x1200, 0x3c8, 0x3c8, 0x1200, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast1, @rand_addr=0x64010100, 0xffffff00, 0xfe, 'macvtap0\x00', 'netpci0\x00', {}, {0xff}, 0x3f, 0x1, 0x6f}, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0xff, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x8513, 0x2, [0x9, 0x7, 0x1f, 0x24, 0x2d, 0x1b, 0x3, 0xb, 0x2b, 0x10, 0x38, 0x3, 0x19, 0x3f, 0x23, 0x3], 0x0, 0x3, 0x7}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0xfc}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "53f99237f41c832fc8969da1f2b7a86ddedeb7587f1590839a7a3acebc0f"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x12d0) (async) utimes(&(0x7f0000001140)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) (async) r5 = syz_init_net_socket$llc(0x1a, 0x4, 0x0) getsockname$llc(r5, &(0x7f0000000400), &(0x7f00000004c0)=0x10) (async) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000400000000000000faffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008525450083000000bf09db000000000055090100000000009500000000000000d892000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0xce, 0x1000, &(0x7f0000001340)=""/4096, 0x20880, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x2, 0xf, 0xda5, 0x2}, 0x10, 0xffffffffffffffff, 0x0, 0xa, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1], &(0x7f0000000540)=[{0x3, 0x5, 0x4, 0xa}, {0x1, 0x3, 0x10, 0x8}, {0x2, 0x2, 0x10, 0x8}, {0x1, 0x2, 0x3, 0x6}, {0x2, 0x5, 0xe, 0x5}, {0x3, 0x4, 0x5, 0x8}, {0x4, 0x1, 0x5, 0x7}, {0x3, 0x1, 0xd, 0x2}, {0x5, 0x4, 0xc, 0x8}, {0x2, 0x2, 0x9, 0xa}], 0x10, 0x5}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(r9, 0x541b, &(0x7f0000000040)) r10 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x1, 0x3, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r7) (async) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r11, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.75690678s ago: executing program 1 (id=67): syz_open_dev$usbmon(&(0x7f0000000040), 0xe, 0x5ed102) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x30000002}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b}) 9.738748321s ago: executing program 1 (id=69): mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x7, 0x1) socket(0x1000000010, 0x80802, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x2000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') memfd_create(&(0x7f0000000000)='\\\\&.\x00c6\x0fR\xfc\xbb `\r$\x88oCi\xad\x13\xeb\xea0n\xea,\xc2\xeb\x9e\xa2\xd5\x94\xed\x9e\xd5cHX\xa2@\xdf\x99R\x16\xa1\x8f\xfd\v\xe1m,\xa7W\xfb2d\xe9C\x02B\"\xce\xfcE5e\x01=\xbbK\xe0kLA\xd2\b#{m[\x16\x83u,\xcdo0\x90v\x9a\xc9\xad$z\x8e\xcc\x9cO\xdb\xb2\xf9\x06#\xd9\xf02\xd5&\xd0\x90\xdb\xbb\xa3\xa2\xac\x1a9\xf7Y\xd12\xec\xc0\x84E\xc1\xebM\xe6sN$]\x9a\x8cv~W^X\v\xa4\xdd\x05]\x8d%#\xf7S\x83\xf1\xf0\xd0\x9f\x88\x1a\xdc\xff\n\xce>\xca%\xb9a\xc1\xd1\x95\x01h\x8d\x81Q\x8a\x04n\xba\xc3\xb2O\xd5\xeb\x03\x1dS\xd6\x9ebR\xfd\xb9\xf3\xf4w\xf1Q\x89a\xa7g#\xe3P9\xd5z\x1d\xb5G\x17\x8dC\x88Q@\xbd\xed&a~\x00\xec\xc0\xf2\x04\x19\xb5\x03\xb5\xb1-\xe8\xb6U\xb3\xaef\xdc\x17\xa8kr\x0eJ\r\xd1\x7f\xcaE-\xc2\x92\xa3\x05\x0eVP\x98\xb5VA\by\xadd\x15\xf3\x1e\xa4\xb1*h=:\x1d\x8b\x81.\xa3h\xa0v\xd5n\xf7\xa7D\xf8\x86\x00+\xf8~\x8d\xab\xfb R\xd7\xadh\xbaa\x94\xb9\x01_I\x01\x14\tS\xd3\xaf\xfc\n\xcf\x90\xbc\xf6\x80\x04\xc5\a\xdbV\xb2\x98\x04\xf4\x14\x0e\f\xd4|\xa1\xd0E\x7f\x00\x00\x00\x00\x00\x00\x87\x12\xd5=\xa2<\xc7\x9d\xfb\xd2\x86\xd0\x89\xbfa\x84\x98\xba\x1a\x1d\'\x99w\x14\x1e\'81\x17\x03\xbc\xc1J\x8b\x94\xad\a\xe4\x1f\xe7\xda\xccT\x11\xa9)\xb2\\\xb9v%e\x15A&\xf8Ij\xd1\x85#Wu\xce\xbc\xe2\xbc\xc0\xa9\xc2j\t\xb8\xcbI\xa7\xac\x176\x0e\xda\xc6\xad?\xaaW\x11\x18\xe2HW\x10\\:\xe5Q\xd6\xb5\x8e\x06\"\\\x06\xe4\x00>\xfc\xcb\xf4 \xa6 \x94Q?\x9a\x95\xf5\xa5\x0f\x14M!\xa1S\xfb+<\x1e\xad\xe4\xa5\xc0*\xb1\xc2\xd7\v\xca\x98\xf4\x06\xe1\x0eH+\xe3\xca\xfdXwft`\x1f\xc5G\xe0_\xc4SR\xaf\xeao\f\xffE\x12\xfe\x9a\x19i9)\xe8\xae\"H\x9fS\xf3\x97\x9d\x93\x80+@\x86\xd9\xff*\xa1\x9f\xd7\xc7w\xbd\xa5s\x99\xa9\x8b<\xcb\xd7\x85(j\xb3\xc8\xa4\x06\xf0\xae>\xf5h\xbe\x19\xc6M\x15\xc2L\n\x90\xf6\x81W\xd7\xc2\x91Z\xb6I2m\x01\x12\xab_\x8d\xc8\xd8\xed0l_\xd7-\x90im\xb4E', 0x5) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaa7dbcbd214dfa155e09ee651600e3aaaaaa86dd6bd697da00002c8000"], 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregset(0x4205, r2, 0x1, &(0x7f0000000100)={&(0x7f0000000400)="dcef93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4015e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c000000000000", 0x98}) ptrace$setregset(0x4205, r2, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f1508685636", 0xfffffffffffffda4}) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xf) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000007000000040000000000000e0400000000000000000000000100000d000000000400000004000000000000000000000404000000000000000000000a030000000000000061"], 0x0, 0x5b}, 0x28) epoll_create1(0x0) socket$unix(0x1, 0x1, 0x0) socket(0xa, 0x80805, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000002c0)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 9.042392111s ago: executing program 1 (id=75): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x9, 0x4, 0x2, 0x1, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) (async) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x80, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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") (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x100000000004, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x1, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41100, 0x3}, 0x94) (async) r3 = socket$packet(0x11, 0x3, 0x300) (async) r4 = syz_io_uring_complete(0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3, {0xfff}}, './cgroup.net/cgroup.procs\x00'}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r5}, 0x14) (async) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x120c000, 0x1000, 0x0, 0x7}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xef, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x4000, 0x0, 0xe, 0x9, 0x7, 0x0, 0x100}, 0x0, 0x1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mount$cgroup2(0x0, &(0x7f0000000180)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000100), 0x801, &(0x7f0000000340)={[{@favordynmods}]}) 8.54069045s ago: executing program 1 (id=83): r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x48, 0x0, &(0x7f0000000300)) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x105800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x5, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x1008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd25, 0x27dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x50afa, 0x70823}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x1}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x804) 8.501332372s ago: executing program 32 (id=83): r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x48, 0x0, &(0x7f0000000300)) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x105800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x5, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x1008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd25, 0x27dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x50afa, 0x70823}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x1}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x804) 1.186922342s ago: executing program 3 (id=182): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x10, r2, 0x1, 0x4, 0x6, @multicast}, 0x14) unshare(0x28020480) r3 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000080)={[{@data_err_ignore}]}, 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40e8662e, &(0x7f0000000000)={0xc551, 0x40000000000002, 0xd, 0xf, 0x9, 0x1}) 1.186118072s ago: executing program 4 (id=183): setitimer(0x2, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x25dfdbfb, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "1353d485f59320df34f4b7432edc8f8d"}, @TCA_CT_PARMS={0x18, 0x1, {0x0, 0x20, 0x3}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "a2bc8d684815cfc83a3c31de6be7a674"}, @TCA_CT_ZONE={0x6, 0x4, 0x3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x2000000000000000, 0xfffffffffffffffb}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000180)={[{@abort}, {@oldalloc}, {@jqfmt_vfsold}, {@grpquota}, {@auto_da_alloc}, {@inlinecrypt}]}, 0x6, 0x60d, &(0x7f0000000340)="$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") 1.060011139s ago: executing program 5 (id=184): prctl$PR_GET_TIMERSLACK(0x1e) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r0, 0xc3d33000) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0xa24f, @remote}, 0x1c, 0x0}}], 0x1, 0x841) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000100)=""/64, &(0x7f0000000140)=0x40) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={@mcast1, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, 0x3, 0xb, 0x9, 0x600, 0x0, 0x100102}) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000180)={{0x21, @remote, 0x4e22, 0x3, 'wlc\x00', 0x2, 0x9, 0x34}, {@rand_addr=0x64010102, 0x4e20, 0x10000, 0x6, 0x9, 0x1ff}}, 0x44) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000008c0)={0x53, 0xfffffffffffffffc, 0x6, 0x50, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)="b6999221d04b", 0x0, 0xfdfbfffe, 0x10033, 0x1, 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r8 = fcntl$dupfd(r7, 0x406, r7) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x2004c0d1}, 0x800e805) recvmmsg$unix(r8, &(0x7f0000004dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/226, 0xe2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000001, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r8, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)={0x108, 0x15, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0xb1, 0x8, "b8ee4b8f097444b4b623a76832a1c80e730500cee182d96d035d1f2f9818bde7798c46fa5cabb9226d35ceae11c75846b349f366c8ea8cb2e6b53668f1eb6fc385c375047e79ac186b4903bedb62b31a80bb144556f1660bec4471255de5c90fd7da9c0fe56f98f498f002d3c6ae4f70e9286c3747d0e93a4e20d33777ed4582c6e615fbb3c25b437c89a97ea727e2e4906de6c53bf83d1f6f3a34093c802a5b3cd91e8204e0b2dda90d90a8fa"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x108}, 0x1, 0x0, 0x0, 0x810}, 0x4000) ftruncate(r6, 0x3) sendfile(r5, r6, 0x0, 0x10) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f0000000200)=""/240, &(0x7f0000000300)=0xf0) 981.620844ms ago: executing program 3 (id=185): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xfffffd, 0x6, 0x400}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000005000000000800040001000000", 0x24) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@privport}]}}) 981.368634ms ago: executing program 5 (id=186): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x8000) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000000)) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="00000000959d9919b306a4348c1f0c596cb8c98f554bc3fe9da9e4d42bfee28a878da734568e96014a78084e1406c733302d473326cd76d6829b301c87655ddd29ffcf6e68374a11a1b6efb63ea1ff5a12b756a0e04176827dbcf8e4342244b1d0e72b9a6a8d7452c02ae31abd838f3e4a8410dd56f1ec14", @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf258300000008000300", @ANYRES32=0x0, @ANYBLOB="1800118014000580100000800c0002800500190100000000"], 0x34}, 0x1, 0x0, 0x0, 0x49041}, 0x4010) close(0x3) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x4000}) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000040)={0x60000006}) 958.805975ms ago: executing program 3 (id=187): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 869.69075ms ago: executing program 5 (id=189): fstat(0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000440)={[{@init_itable_val}, {@nouser_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsv1}, {@bsdgroups}, {@dioread_lock}]}, 0x3, 0x42f, &(0x7f00000017c0)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x42041, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)=ANY=[@ANYBLOB="9000000010000304000300"/20, @ANYBLOB="00000000000000003000128009000100766c616e000000002000028006000100fe0f00000600050088a800000c0002000e0000000800000008000500", @ANYRES32, @ANYBLOB="08002e0004000000080013"], 0x90}}, 0x8000) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x20005e, &(0x7f0000000300)={[{@abort}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@resgid}, {@nolazytime}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@data_journal}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0x1, 0x476, &(0x7f0000000700)="$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") unlink(&(0x7f0000000000)='./file1\x00') r3 = openat(0xffffffffffffff9c, 0x0, 0x183042, 0x15) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000160a09080000000000000000020000000900020073797a30000000000900010073797a30000000001c00038018000380090001006261746164765f736c6176655f31000014000000110001"], 0x70}}, 0x24040880) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x2000000000000216, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000300007b1af8ff362140de8d4e8c00000000bfa100000000000007010000f8ffffffb702000008000000b722b4e8030000000000f67900"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffff0000, 0x5}, 0x0, 0xad8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b000100677265746170000024000280080007006401"], 0x5c}}, 0x40) 867.82536ms ago: executing program 4 (id=190): mprotect(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x2000006) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005500000085000000d000000095"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x27, 0x36, 0x0, &(0x7f0000000040)="f8ad48cc02cb29dcc8007f5b86dda75517f57e01dd8aa1e00aaf650c8b06a981f2d2b0e0821e255aea8dfaf6f1efc0555eb9ae592863", 0x0, 0x3ad9, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000b5002471083ec6991778581acb6bfe01ff0000000309", 0x48}], 0x1) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x0, 0x0}) timer_create(0x7, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0xf5d3c5031ef27317, 0xfff1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x34}}, 0x4004094) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x884, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x84c, 0x2, [@TCA_CGROUP_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xafe2, 0x8, 0x10001, 0x9, 0x9, 0x0, 0xb8, 0xfff, 0x5942ebee, 0x7, 0x401, 0x255, 0x0, 0x7f, 0x8, 0x8, 0x80, 0x4, 0xfffffffb, 0x6, 0x4, 0x8d3, 0x5, 0x400, 0x3, 0x0, 0x32, 0x58000000, 0x2, 0x1, 0x0, 0x80, 0xa1, 0x8, 0x10001, 0x834d, 0x5b7e9f63, 0x6, 0x7fffffff, 0x8, 0xc, 0x6, 0x9, 0x9, 0xc, 0x400, 0x2, 0x0, 0x34, 0x1ff, 0x8, 0xfff, 0xea, 0x7, 0xf6, 0x6, 0x3, 0x9, 0x9, 0x7, 0x8, 0xe, 0x2, 0xb67, 0x1, 0xaf, 0x2, 0x9de, 0x80000000, 0x9, 0x6, 0x3a7, 0xffff, 0x4, 0x0, 0x44e3, 0x6, 0x8, 0x6, 0x2, 0x1, 0xc, 0x1, 0x2, 0xc, 0x200, 0x5, 0x5, 0xfffffffe, 0xb5c, 0x4, 0x90, 0xfff, 0x2, 0x6, 0x24, 0x3, 0x5, 0x2661, 0xc9f2, 0x6, 0x2, 0x3, 0x4, 0x8, 0xf, 0x6, 0x800, 0x200, 0xd0, 0x80, 0x693f, 0xef8, 0x0, 0x101, 0x9, 0x2, 0x7, 0x1ff, 0x6, 0xd08, 0x1, 0x8, 0x5, 0x3ff, 0xb, 0x2, 0x3, 0xd7, 0x9, 0x6, 0x1, 0x9, 0x81a9, 0x4, 0x83, 0x3, 0xfffffffb, 0x5, 0x4, 0x9, 0x3, 0x5, 0x1000, 0x9, 0x5, 0x3, 0x2, 0xfff, 0x7, 0x4, 0x4299764b, 0x8, 0x1, 0x1ff, 0x1ff, 0x8000, 0x200040, 0x9, 0x3, 0x7b, 0x1, 0x6a5f, 0x3, 0x6, 0x5c, 0xff, 0x12e9, 0x0, 0x7, 0x8, 0x5, 0x0, 0x6, 0x6, 0x7, 0x3, 0xfa75, 0x401, 0x4, 0x4, 0x9, 0xe, 0x5, 0x8000, 0x5, 0x480000, 0x8000, 0x3ff, 0xc, 0x5, 0x9, 0xffff, 0x0, 0xc3, 0x7f, 0x4, 0x6, 0x2, 0x3, 0x8, 0x6, 0x9, 0xdc, 0x7, 0x2, 0x2, 0x6, 0xfffffff4, 0x8, 0x4, 0x6, 0xfffffff7, 0x4, 0x8, 0xfffffeff, 0xc, 0x2, 0x6, 0x3, 0xfffffffd, 0x4, 0xc76, 0xfffff50f, 0x7, 0x6a0, 0x9, 0x3a1539ac, 0x0, 0x8001, 0x9, 0x3, 0x10, 0xf79f, 0x3, 0x6, 0x6, 0x3, 0x6, 0x9, 0x2c, 0x7f, 0x4, 0x6, 0x1000, 0x100000, 0x8, 0xf, 0x1ff, 0x7f, 0x9, 0x8, 0x7223, 0x400, 0x7, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x0, 0xfffffe01, 0x280, {0x6, 0x0, 0x4, 0xa6, 0x7ff, 0x6}, {0x7, 0x1, 0x7, 0x24, 0xc73f, 0x4ba}, 0x10000, 0xfffffffe, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x8, 0x3, 0x7, 0xd25, 0x9, 0xc, 0x6, 0xa52, 0x0, 0x0, 0x0, 0xffffff01, 0x80, 0x3, 0x6, 0x0, 0x1b, 0xbf7a, 0x7, 0x7, 0x2, 0x2, 0x6, 0x8cf, 0x6, 0x800, 0x7, 0x12d6, 0x6, 0x2, 0x1dc, 0x6, 0x5, 0x0, 0x3, 0x8, 0x2, 0x5, 0x8000, 0x4, 0xb, 0x4, 0x2, 0x7, 0x5, 0x2, 0x8, 0xc8ed, 0xffffffff, 0x7ff, 0x750, 0x7fff, 0x9, 0x4, 0xdf3e, 0xe, 0x101, 0x800, 0x8c7, 0x7, 0x0, 0x2, 0x9, 0x7fffffff, 0x3, 0xa, 0x10001, 0x0, 0x1c0000, 0x7fff, 0x4, 0x5, 0xff, 0xd, 0x0, 0x3378, 0x0, 0xfffffffa, 0x0, 0x0, 0x3, 0x0, 0x2, 0x7, 0x4150, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x9, 0x4, 0xe, 0x81, 0x30, 0x400, 0x1, 0xff, 0x7ff, 0xc, 0x3, 0x5, 0x4f, 0xff8, 0x2, 0x0, 0x655, 0x7, 0xee, 0xb4, 0x35e460fb, 0x3, 0x8001, 0x0, 0xff, 0x4, 0x7fff, 0x40, 0x100, 0x1, 0x4, 0x2, 0x9, 0x2, 0xfffffffe, 0x2, 0x77, 0x2, 0x6, 0x1, 0x66e, 0xffffff7f, 0x336, 0x200, 0x3, 0xe, 0x6, 0xffff, 0x4, 0x200, 0x4, 0x80, 0x1, 0x4, 0x3, 0x1, 0x1000, 0x400, 0x8, 0x10000, 0x2c, 0x40, 0x7eb4, 0x3ff, 0x8, 0x3, 0x400, 0x13, 0x8, 0x6, 0x8598, 0x6, 0x3, 0xd, 0x17, 0xfffffffd, 0x7, 0xba9d, 0xf45, 0x8, 0x8, 0x0, 0x6f, 0x63e, 0x2, 0xffff, 0x0, 0x0, 0x9, 0x2000, 0x8, 0x8000, 0x2, 0x0, 0x7, 0x8000, 0x2, 0x401, 0x0, 0x9, 0x100, 0xf, 0x80000001, 0x9, 0xb, 0x7, 0x2, 0x5d9c4c7c, 0x2, 0x0, 0x8, 0x3, 0xffff, 0x9, 0x9, 0x5, 0x8, 0x8, 0xfffffffb, 0x8, 0x4, 0x9, 0x6, 0x7, 0x9, 0x10, 0x7, 0x5, 0x99c, 0x81, 0x30, 0x5, 0xe, 0x6, 0x9, 0x4, 0x0, 0x7, 0x6, 0x1ff, 0x0, 0x9e2, 0x2, 0x100, 0x3, 0x7, 0x7, 0x401, 0x7c72, 0xfffffffa, 0x9, 0x7, 0x8, 0x8, 0x9, 0x6, 0xffff0001, 0x5, 0x10001, 0xfffffffa, 0x4, 0x4, 0x6, 0x4fc1, 0x6]}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0xf8}}]}, 0x884}, 0x1, 0x4000000}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x9, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x7}}, 0x18) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x30, r3, 0x100000000) close(r2) 866.93268ms ago: executing program 0 (id=191): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x6384, 0x24) (async) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r2, 0x6200}], 0x1, 0x0, 0x0, 0x0) (async) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "42341f9b1000007e4f00"}) (async) r3 = syz_open_pts(r2, 0x40000) dup3(r3, r2, 0x0) (async) splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0x0) (async, rerun: 64) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000040)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000001c0)="197cf5994e0086941dbb814db2a7855d18212706754a6137a862f2d280a7c4ac2382dc050b847b665610bb6cf75742969999f014abb0a77c4953e061ff84fa2746ce8fe357c5790e", 0x48}, {&(0x7f00000004c0)="546702de3de82e2a39c50253ba60fe8f9fc227c846d90c038c59d642350cc335c19c20682d587448ad3798f100d5d5fc6bf848ea95a310e0bada830fafaae75449e12992d38e317ebb41cedecb8b0f1583d349f7b187aa7030c6bc6b93881630dab446eceaae8e5edb2e6c264855a8f75998100d804c4928646b2726877d16eda383cc47003d96e3437df512b1c2756b892322f88082ec63c2499a76c2e821ec62426e9388363cd086444f9807876ec78cba0004e74b6b034a37b038810301485f310e63c76eb5a8f9168a248be2c8ca1ce4a4710a0763c6e6e250f9a5a73a5294f04b9eed066fc3e7a71a", 0xeb}], 0x2, &(0x7f00000005c0)=[{0x90, 0x104, 0xfff, "55e7cdc23221664759b59d5e0927ebe49eab963ccb8ae33958bcfc6c07d29387a07fbef3d192a191111fdd9a818588123c7ce4f163cd6259861b0e5798221dfb461ab3b38c581d3c1e16c92ea92e5a7ade7a1e010a84a1c69e13dce6f3d6cbe5707cccb17c44fcf70de323f646ee7074bf0cb70c97f7fdbd007b3e0b9afe90"}, {0x100, 0x119, 0x7, "1ed6c1b12ce08bafea48bb3f0dac8a1aee3ef6c4b5d4cf35d8f7a406294018661c3cea677f6722878072d2a9d7090badcb9cdc2b3804acdccee0b24c0d654935c372368094efc9f036df821bc58e1a1d8213f49b96edc64f3fb5260faeceba0da590da8daad54fd0f569df2916089817633813a725c3153df50ad26491957d3753e8c5b70d8d13cc41aebe82f93538bfa2ce1954a375eb6b32c852bd183c8abfb5d51e940d48dde9d82720e5a3124856bd42607686900c8ea2d2f4adcfc4b99c1cb5a747accecea2c3630794ed58a136465c97be8d851ff3eda4d3ec5feca3a5dcfc0a112c9cce382bddcb401c"}, {0x108, 0x10c, 0x40, "187b4159941d252dd4b254473628a4bb868b89c8db8e7683c1e6a16c06639a5f95301088efd61dee7d70747ff7a2ad016307ba89fc8a1018a3e65b9745238e1a088903848b50f7977a2b3b076770d3242488aaa5a67657b510bc5ee4ff17ef78b3f56fbf485b611ec0aad7de14e2d901012a9298d2f1b38d287c3d50f36fc692dd8acb8b59762c9f9974e42e6912ae447d7899f14c96811f9e53c902443e4c4d44b006e12b439b861184c24eb9000ff715901cdafde1fccabd38e57af099d78f8061727a945de644c4b2235e2eab7eb23e1a06f7792704d4854161942b24b570869528fb35b156d3a565bea97224cb8a29705dd0"}, {0x30, 0xff, 0xb1e, "af5de1ae18439eef3eb581e684c29be67c48a3b31a3934856cd572427d4357"}], 0x2c8}, 0x20000000) (rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0xf8, r5}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f63047d2900ffffca88faca"], 0xdd12}], 0x1}, 0x0) 857.925031ms ago: executing program 2 (id=192): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x121c91e, &(0x7f0000000000), 0x4, 0x4f4, &(0x7f00000006c0)="$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") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x44, 0x6, 0xc80, 0x138, 0x138, 0x9b0, 0x9b0, 0xb48, 0xbe8, 0xbe8, 0xbe8, 0xbe8, 0xbe8, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@uncond, 0x0, 0x850, 0x878, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x10, 0x3}, {0xffffffff, 0x1}, {0x1, 0x3}, {0x7, 0x2}, {0x6, 0x2}, {0x6, 0x2}, {0x1, 0x3}, {0x7, 0x2}, {0x6, 0x2}, {0x9, 0x3}, {0x9, 0x1}], [{0x6, 0x80000001}, {0xffffffc7, 0x4}, {0x7, 0x2}, {0x8, 0xffff}, {0x7, 0x81}, {0x3, 0x3}, {0x5}, {0x7, 0x3}, {0x7, 0x2}, {0x5, 0xfff}, {0x800, 0x1}], 0x9, 0x3}, {[{0x19008000}, {0x26bb, 0x2}, {0x7b3, 0x3}, {0x1}, {0xe, 0x2}, {}, {0x9, 0x2}, {0x10000, 0x1}, {0x0, 0x2}, {0x2fab, 0x1}, {0x597, 0x1}], [{0x7, 0x1}, {0x1, 0x5}, {0x7, 0x401}, {0x8, 0x9}, {0x8, 0x8}, {0x0, 0x4}, {0xfff, 0x4}, {0xd, 0x7ff}, {0x4, 0x6}, {0x3d, 0x5}, {0x942f}], 0x8, 0xa}, {[{0x5}, {0x4, 0x3}, {0x6, 0x2}, {0x0, 0x3}, {0x4, 0x3}, {0x7}, {0x4, 0x2}, {0x7, 0x2}, {0xffff, 0x1}, {0x4, 0x1}, {0xfffffff7, 0x2}], [{0xe547, 0x10000}, {0x4, 0xf78}, {0x81, 0x1c10}, {0x3}, {0x8000200, 0x5}, {0x4, 0x9}, {0x80000001, 0xffff}, {0xaf3d, 0x2}, {0x3c, 0xc}, {0x3e, 0x9}, {0x3, 0x4}], 0x0, 0x3}, {[{0x6, 0x2}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0xdeca, 0x1}, {0xfd}, {0x401, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x8, 0x2}, {0x81}], [{0x1, 0xfd0d}, {0x9, 0x4}, {0x80000001}, {0x4, 0x400}, {0x9, 0x3}, {0xa, 0xfffffff0}, {0x9, 0x4}, {0x4, 0x2}, {0x10, 0x59d}, {0x7, 0x1ff}, {0x4}], 0x8, 0xb}, {[{0xffffff11, 0x2}, {0x6, 0x2}, {0x902, 0x1}, {0xffffff00}, {0x9}, {0x1, 0x2}, {0xffff, 0x1}, {0x9, 0x3}, {0x4, 0x2}, {0x70c8}, {0x7, 0x3}], [{0x3b8a6dc3, 0x7}, {0x9, 0x2}, {0x8, 0x2}, {0xf, 0x3}, {0x5, 0xffffffff}, {0x1ff, 0xff}, {0x3, 0x96e}, {0xffffffff, 0x400}, {}, {0x3, 0x934}, {0x5, 0x7}], 0xb, 0x9}, {[{0x20c, 0x2}, {0x72, 0x1}, {0x2, 0x2}, {0x7, 0x1}, {0x7, 0x3}, {0x8, 0x1}, {0x5}, {0xffffbc3b, 0x1}, {0x7fffffff, 0x3}, {0x42, 0x2}, {0x8, 0x1}], [{0xe43}, {0xb, 0x8000}, {0x2, 0x5}, {0x3, 0xe9c0}, {0x5, 0x7f}, {0x9, 0x3}, {0x6, 0x40}, {0x11f, 0xffffffe9}, {0xc35a, 0xd16}, {0x6, 0x4}, {0x9, 0x18a}], 0x8, 0x3}, {[{0x7, 0x3}, {}, {0x9}, {0x0, 0x3}, {0x6, 0x2}, {0x6, 0x2}, {0x401, 0x2}, {0x6}, {0x9, 0x2}, {0x7c42, 0x3}, {0x40000000, 0x2}], [{0xdff, 0x4e}, {0x3, 0x7}, {0x1000, 0x1}, {0xfffffff8, 0x8001}, {0x9, 0xb34}, {0xfffffffa, 0xa}, {0xae9c, 0x7}, {0xe, 0x8}, {0x8, 0x7}, {0x6, 0x3}, {0x9, 0x92b}], 0xc, 0x7}, {[{0xfff}, {0x1, 0x2}, {0x2, 0x2}, {0xa640}, {0x0, 0x2}, {0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x80000001, 0x3}, {0x0, 0x1}, {0x8}], [{0x1, 0x73}, {0x10000, 0x9}, {0xc, 0x3}, {0x8, 0xffffffff}, {0x7, 0x5}, {0x86, 0xf}, {0x3, 0x2fc3}, {0xf65, 0xa2f}, {0x15064f6, 0xede}, {0x8a2}, {0x2, 0x6}], 0x7}, {[{0x80000001}, {0x5, 0x2}, {0x687, 0x2}, {0x20000, 0x1}, {0xab50, 0x2}, {0x0, 0x3}, {0x7}, {}, {0x5, 0x1}, {0x5}, {0x7}], [{0x64d, 0x3}, {0x7, 0x7}, {0x10001, 0x2}, {0x1, 0x6}, {0x5, 0x9}, {0x0, 0xcba}, {0x40, 0x4}, {0x2, 0x4}, {0x2ca6, 0x9}, {0x80000000, 0xc9}, {0x6, 0x7}], 0x9, 0x3}, {[{0x9, 0x1}, {0xe35, 0x1}, {0xffffffab, 0x1}, {0x401, 0x3}, {0x4, 0x2}, {0xa}, {0xfffffeff, 0x1}, {0xc9, 0x2}, {0x6, 0x1}, {0x8, 0x1}, {0x3, 0x1}], [{0xb6f2, 0x80000000}, {0x0, 0x9}, {0x65, 0x4}, {0x3, 0x982}, {0x5, 0x7f}, {0x7, 0x9}, {0x6, 0x4}, {0x3ff, 0x4}, {0x1, 0x7ff}, {0x7, 0xffff}, {0x3, 0x1}], 0x6, 0x1}, {[{0x6cd8867f, 0x1}, {0xb42}, {0x7fff}, {0x4, 0x2}, {0x65b, 0x1}, {0x61, 0x3}, {0x78a8}, {0x4, 0x3}, {0x8001, 0x2}, {0x3, 0x2}, {0x5, 0x3}], [{0x4, 0xff6}, {0x0, 0x3}, {0x4, 0xe8aa}, {0x7, 0x4}, {0x0, 0x2}, {0x5, 0x3}, {0xfffffffc, 0x3}, {0x15c, 0x80000000}, {0x9, 0x3}, {0x91, 0x80000001}, {0xfffffff6, 0xbd}], 0x0, 0x5}], 0x9, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x3}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xce0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@ipv4={""/10, ""/2, @private}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) mount$cgroup2(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10820, &(0x7f0000000280)={[{}, {@memory_recursiveprot}], [{@uid_eq={'uid', 0x3d, r2}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'syzkaller0\x00'}}, {@dont_appraise}]}) 775.824765ms ago: executing program 0 (id=193): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", 0x0, 0x0, 0x0, 0x3, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x5, 0x80, 0x0, 0xd672, 0x0}) 633.636104ms ago: executing program 5 (id=194): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x36b00, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000040)=0x80000001) read(r0, &(0x7f0000000080)=""/188, 0xbc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x24, 0x0, 0x80000001, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0]}, 0x40) readv(r0, &(0x7f00000017c0)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/76, 0x4c}, {&(0x7f0000001300)=""/226, 0xe2}, {&(0x7f0000001400)=""/209, 0xd1}, {&(0x7f0000001500)=""/40, 0x28}, {&(0x7f0000001540)=""/77, 0x4d}, {&(0x7f00000015c0)=""/251, 0xfb}, {&(0x7f00000016c0)=""/158, 0x9e}, {&(0x7f0000001780)=""/17, 0x11}], 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'syzkaller1\x00', 0x0}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000018c0)={0x0, 0x1}, &(0x7f0000001900)=0x8) r3 = pidfd_getfd(r0, r1, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000001940)={{0x7, 0x2}, 0x18}, 0x10) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000001980)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f00000019c0)) setns(0xffffffffffffffff, 0x20000) r4 = syz_open_dev$usbmon(&(0x7f0000001a80), 0x7, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001b00), r1) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x28, r5, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000800) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001c00)={0xffffffffffffffff, 0x3, 0x8}, 0xc) ioctl$BTRFS_IOC_QUOTA_RESCAN(r6, 0x4040942c, &(0x7f0000001c40)={0x0, 0xdb, [0x1, 0x9, 0x9, 0x0, 0x6, 0x2]}) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000001c80)={0x80000000, 0x7, 0x1, 0x9, 0x5b1, 0x4}) fcntl$setflags(r4, 0x2, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)=@bridge_newneigh={0x58, 0x1c, 0x100, 0x70bd2c, 0x25dfdbfe, {0xa, 0x0, 0x0, r2, 0x80, 0xa4, 0x4}, [@NDA_PROBES={0x8, 0x4, 0x1}, @NDA_MASTER={0x8, 0x9, 0x5}, @NDA_VNI={0x8, 0x7, 0x2}, @NDA_SRC_VNI={0x8, 0xb, 0xf}, @NDA_PORT={0x6, 0x6, 0x4e21}, @NDA_DST_IPV4={0x8, 0x1, @broadcast}, @NDA_DST_MAC={0xa, 0x1, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x408d1) r8 = syz_open_dev$usbfs(&(0x7f0000001e00), 0x6, 0x800) ioctl$USBDEVFS_WAIT_FOR_RESUME(r8, 0x5523) ioctl$sock_netdev_private(r3, 0x89ff, &(0x7f0000001e40)="ef8275a27a863634") ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000001e80)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000002040)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0x94, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) r10 = dup3(r0, r7, 0x80000) sendmsg$nl_route_sched(r10, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)=@newtclass={0x50, 0x28, 0x300, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x10, 0x3}, {0xfff2, 0x4}, {0xe, 0x6}}, [@tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x0, 0x9d}}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x3, 0x4}}, @tclass_kind_options=@c_prio={0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x6000080) setresuid(0x0, 0x0, 0x0) 631.391854ms ago: executing program 0 (id=195): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x10, r2, 0x1, 0x4, 0x6, @multicast}, 0x14) unshare(0x28020480) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40e8662e, &(0x7f0000000000)={0xc551, 0x40000000000002, 0xd, 0xf, 0x9, 0x1}) 623.286094ms ago: executing program 2 (id=196): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x59}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) (async) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd0, &(0x7f00000002c0)=0x1, 0x4) (async) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0xc080}, 0x0) (async) getsockopt(r0, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) 622.250104ms ago: executing program 2 (id=197): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@dontfrag={{0x14, 0x29, 0x3e, 0x6}}], 0x18}}], 0x1, 0x44081) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r1 = socket(0x28, 0x801, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRES64=r1], 0x9) sendto$inet6(r2, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000380)={0x0, 0x3, 0x1, '#'}, 0x9) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e20, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x38}, 0xf}, {0xa, 0x4e23, 0x0, @mcast2, 0x81}, 0xffffffffffffffff, {[0x88, 0x4, 0xb, 0x81, 0xfff, 0x8, 0x1]}}, 0x5c) prlimit64(0x0, 0x2, &(0x7f0000000000)={0x1000000000000009, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000280)={[{@resgid}]}, 0x1, 0x527, &(0x7f0000000c00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) process_vm_writev(r4, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/83, 0x53}, {&(0x7f0000000240)=""/29, 0x1d}], 0x2, &(0x7f0000000800)=[{&(0x7f0000000340)=""/46, 0x2e}, {&(0x7f0000000380)=""/223, 0xdf}, {&(0x7f0000000480)=""/15, 0xf}, {&(0x7f00000004c0)=""/140, 0x8c}, {&(0x7f0000000580)=""/247, 0xf7}, {&(0x7f0000000680)=""/10, 0xa}, {&(0x7f00000006c0)=""/239, 0xef}, {&(0x7f00000007c0)=""/45, 0x2d}], 0x8, 0x0) epoll_create1(0x0) quotactl_fd$Q_GETINFO(r3, 0xffffffff80000502, 0x0, 0x0) brk(0x8200000fbbffd) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x28}}], 0x1, 0x0) 619.663724ms ago: executing program 4 (id=198): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xaab2}}, './file0\x00'}) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000040)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0xb, 0xcb, &(0x7f0000000140)=""/203, 0x40f00, 0x20, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000240)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xf, 0x5, 0xd556a80}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000002c0)=[r0], &(0x7f0000000300)=[{0x4, 0x5, 0xa, 0xa}, {0x3, 0x3, 0xc, 0x4}, {0x1, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x7}, {0x0, 0x4, 0x10, 0x1}, {0x2, 0x4, 0x1, 0x3}, {0x2, 0x1, 0x10, 0xc}, {0x3, 0x4, 0x2, 0x2}, {0x1, 0x5, 0xa, 0xa}], 0x10, 0x3}, 0x94) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000480)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000016c0)={&(0x7f0000000500)="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", &(0x7f0000001500)=""/154, &(0x7f00000015c0)="54406d792714e6e6b2b7fa154dbbee04b711954e28598706382a8c77ef09059b4597cb9d8a60ee42853679f2e66b1b3d006065d4cb2623eefd93a24a65852e2f21910893fc18f6408bf1d87f62c046f50cb500674eee2409efdba6695b314d32abfdda4b7306ada2ec51158651e1c0e6a0e7d373448fd65b6ca1b678", &(0x7f0000001640)="afa92c6f337920c456d549128d8f6c172d5bb35bc29e4eda68c86113f9fc07c1562957d0cc45c424d92c235f9d9a72f51df8cbdd8b1564a6c7392e944b187b3b8fb05fc175b2fbc938088db36dbb3d861f2f62a519a5", 0x5, r0, 0x4}, 0x38) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000017c0)={0x0, 0x0}) r3 = perf_event_open(&(0x7f0000001740)={0x4, 0x80, 0x6, 0x6, 0x6, 0x9, 0x0, 0x2, 0x100, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6b5, 0x4, @perf_bp={&(0x7f0000001700), 0x9}, 0x6004, 0x3, 0x8, 0x6, 0xff, 0x2, 0xfffd, 0x0, 0x8}, r2, 0x0, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f0000001840)={0x2, 0x7}) read$usbfs(r0, &(0x7f0000001880)=""/4096, 0x1000) perf_event_open(&(0x7f00000028c0)={0x5, 0x80, 0x2, 0x9, 0x4, 0xa0, 0x0, 0x100000001, 0x40000, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4, @perf_bp={&(0x7f0000002880), 0x1}, 0x100a30, 0x6, 0x9, 0x1, 0x1, 0x3, 0x7ff, 0x0, 0x67d, 0x0, 0x8}, 0x0, 0x2, r0, 0xb) r4 = inotify_init1(0x800) ioctl$FS_IOC_GETFSSYSFSPATH(r4, 0x80811501, &(0x7f0000002940)={0x80}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002a00)=@base={0x0, 0x7, 0x1, 0xe, 0x2, r0, 0x6, '\x00', 0x0, r0, 0x1, 0x4}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002ec0)={r1, 0xe0, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002c00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000002c40)=[0x0, 0x0], &(0x7f0000002c80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf, &(0x7f0000002cc0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000002d00), &(0x7f0000002d40), 0x8, 0xc9, 0x8, 0x8, &(0x7f0000002d80)}}, 0x10) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002f00)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002f40)={0x13, 0x15, &(0x7f0000002a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x8, 0x1, 0x0, r5}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002b40)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x12, r0, 0x8, &(0x7f0000002b80)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000002bc0)={0x5, 0x2, 0x7, 0x400}, 0x10, r6, r7, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r9 = eventfd(0x4) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000003000)={0x0, 0x7, {0xf, @usage=0x2, 0x0, 0x7, 0x7, 0x0, 0x80, 0x60, 0xe8, @usage=0x1, 0x7a, 0x8, [0x8, 0x4, 0xfc2, 0x80000000, 0xffffffff, 0xdf]}, {0x4bdc, @usage=0x6, 0x0, 0xaf, 0x813, 0x10, 0x9, 0x8001, 0x2, @usage=0x7fffffff, 0x9, 0x7f, [0x180, 0x7, 0xde36, 0x401, 0x1000, 0x3e0]}, {0x8000000000000001, @usage=0x7, 0x0, 0x24e536a5, 0xe560, 0x7f, 0x8000, 0x2, 0x80, @struct={0xfffffffb, 0x6}, 0xa, 0x9, [0x27, 0x0, 0x1, 0x8, 0x8, 0x6]}, {0x100, 0x0, 0x2}}) ioctl$BTRFS_IOC_RESIZE(r8, 0x50009403, &(0x7f0000003400)={{r9}, {@val={r10}, @max}}) r11 = openat2$dir(0xffffffffffffff9c, &(0x7f0000003440)='./file0\x00', &(0x7f0000003480)={0x200040, 0xb8, 0x4}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f00000034c0)={0x0, r11}, 0x8) fcntl$setflags(r5, 0x2, 0x1) mknodat$null(r11, &(0x7f0000003500)='./file0\x00', 0x4, 0x103) r12 = syz_open_dev$vcsu(&(0x7f0000003540), 0x7fff, 0x80c00) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r12, 0xc018937b, &(0x7f0000003580)={{0x1, 0x1, 0x18, r11, {0xee01, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f00000035c0)={{0x1, 0x1, 0x18, r13}, './file1\x00'}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000003600), 0x4) socket$inet_udp(0x2, 0x2, 0x0) close_range(r3, r12, 0x2) 610.054875ms ago: executing program 5 (id=199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="81ba39f5d0b948e6504995d6d47c", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2800, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x401}, 0x0, 0x0, 0x4, 0x3, 0xfff, 0x155edff5, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xb) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x401}, 0x0, 0x0, 0x4, 0x3, 0xfff, 0x155edff5, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xb) semtimedop(0x0, 0x0, 0x0, 0xfffffffffffffffc) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000001c0), 0xfffffffffffffecf) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x80044940, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r5 = memfd_secret(0x80000) ftruncate(r5, 0x1) ftruncate(r5, 0x2) (async) ftruncate(r5, 0x2) sendmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x0) (async) sendmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000002c0)={&(0x7f0000000500)={0x1d, r4}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$can_bcm(r2, &(0x7f00000002c0)={&(0x7f0000000500)={0x1d, r4}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) socket(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x800, 0x10000, 0x2, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x800, 0x10000, 0x2, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) 574.311907ms ago: executing program 0 (id=200): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x17, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x3, 0x0, 0x2, 0x8, 0xa, 0x18}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x1c}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0xe685, 0xa8, &(0x7f00000001c0)=""/168, 0x40f00, 0x55, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000002c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x8, 0x3, 0x7ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r3], 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0a0c0000000000d500ffff01000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000000700000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0x2f}, 0x94) 497.595182ms ago: executing program 0 (id=201): prlimit64(0xffffffffffffffff, 0xd, &(0x7f0000000400)={0x1000008, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) r1 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) (async) r2 = epoll_create(0xaf2) r3 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140), &(0x7f0000000280)) io_uring_enter(r3, 0x1e76, 0xf728, 0x5, 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004400048024000180090001006d6574610000000014000280080001400000000108000240000000081c000180090001006d617371000000000c0002800800024000000008140000001100010000000000000000000000000a61a76d1609cbb3fd3c0ba9ad76d5d02aae1c28669d27821436854fd66e01c247e757"], 0x98}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0xe000200f}) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r6) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000fedbdf251d00000008000300", @ANYRES32=r9, @ANYBLOB="2c002f800000020002b044d869cc7901aaaaaaaaaaaa0800010004000000140003800800010001000000e4fd020000690000"], 0x48}}, 0x8004) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142408000700e0ff040108000a00", @ANYRES32], 0x48}}, 0x0) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xffffffffffffffff, 0x8000000000000001}, 0x0, 0x10000, 0x4, 0x6, 0x10000000000008, 0x20008, 0xb, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r11, 0x1, 0x50, &(0x7f0000000100), 0x48) fchown(r10, 0x0, 0xee01) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60c5e64f6b080000fe000000000000000000000000000012ff02000000000000000000000000000121"], 0x0) (async) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (async) r13 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) ioctl$USBDEVFS_CLAIMINTERFACE(r10, 0x8004550f, &(0x7f0000000100)=0x1000) 496.947092ms ago: executing program 4 (id=202): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r0, 0x2) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x8}, 0x0, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0026}]}) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f0000001280)=@in6={0x21, 0x300, 0x2, 0x1c, {0xa, 0x300, 0x3000000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xb7}}, 0x24) bind$rxrpc(r5, &(0x7f00000004c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x100, @local, 0x1}}, 0x24) r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r6, &(0x7f0000000080)={0x27, 0x0, 0x1, 0xd}, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a050000000000000000000700000a0900010073797a30000000003c000000090a010400000000000000000700000308000a40000000000900020073797a31000000000900010073797a30000000000800054000000021900000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000640003806000008004000180580007800b000100746172676574000048000280080002400000000230000300b08c674515113085726709225a7547b6f14c1aa7a7202afc0811618e3b5a514fb651ff7360e7749fe5bee390090001"], 0x114}}, 0x0) r8 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x30, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r8, {0x4}}, './file0\x00'}) sendmsg$IPSET_CMD_SWAP(r9, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x6, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x20}}, 0x8010) close_range(r4, 0xffffffffffffffff, 0x0) 477.853193ms ago: executing program 2 (id=203): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x70bd2a, 0x21dfdbf9, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10012}, [@FRA_DST={0x14, 0x1, @loopback}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0x400}, @FRA_SRC={0x14, 0x2, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x4, 0x850}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x48, &(0x7f0000000000)=0xffffff00, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8801) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a68000000060a09040000000000000000020000000900010073795e27fdde3ef4531c4dc316d525b3b57a30000000000900020073797a32f60f1a4e3c000480380001800b00010064796e7365740000280002800900010073797a32000000000800034000000000080004400000000e0800094000000003140000001100010000000000000000000000000a"], 0x90}}, 0x0) 457.095934ms ago: executing program 0 (id=204): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e24, @local}}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080)={0x9}, 0x4) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x338, 0x198, 0xffffffff, 0x338, 0x338, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, &(0x7f0000000100), {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x3}, {0x6}], 0x1, 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0xfff}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x42}, 0xffffffff, 0xff000000, 'pimreg0\x00', 'xfrm0\x00', {}, {0xff}, 0x2, 0x1, 0x1}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x9, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @icmp_id=0x67, @icmp_id=0x68}}}}, {{@ip={@multicast1, @loopback, 0xff, 0xff000000, 'team_slave_0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x89, 0x0, 0x18}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@ah={{0x30}, {[0xa46, 0x2]}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@mcast1, [0xff000000, 0xff000000, 0xff, 0xffffff00], @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [0xffffff00, 0xff, 0xff, 0xffffff00], @ipv4=@loopback, [0xff, 0xffffffff, 0xffffffff, 0xffffffff], @ipv4=@multicast1, [0x0, 0xff000000], 0x4, 0x8, 0x11, 0x4e21, 0x4e20, 0x4e20, 0x4e23, 0x4, 0x91}, 0xc1, 0x3e}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1c, @ipv6=@mcast2, @ipv6=@loopback, @gre_key=0x2, @icmp_id=0x67}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'wg1\x00', 'team_slave_1\x00', {}, {}, 0x89, 0x1, 0x40}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xc, @loopback, @loopback, @icmp_id=0x65, @icmp_id=0x64}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000780)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5c0, 0x310, 0x400, 0x400, 0x240, 0x0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, &(0x7f0000000700), {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@hl={{0x28}, {0x0, 0x2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @common=@ipv6header={{0x28}, {0xf3, 0xae, 0x1}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@loopback, 0x4, 0x7, 0x401}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], [0xff000000, 0xffffff00, 0x0, 0xff0000ff], 'macsec0\x00', 'dummy0\x00', {}, {0xff}, 0x2b, 0x0, 0x7, 0x30}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4=@empty, 0x15, 0x11}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r0) writev(r0, &(0x7f00000011c0)=[{&(0x7f0000000dc0)="400c886e16c9dae7711d3dd8fe08407a6b0030b4648795bdc27d34593af371fe10cdc1b11a8e03904ba50641f61cb298b7e6de05b9c1b04cd5cf3e5466045c45e0568f4efc62", 0x46}, {&(0x7f0000000e40)="bc780a4da62207569bdb206cab91cd1bbaaf95cfe177b6f6c7fc7610d6add004aaf23a11af2ce4d59d985cab1b5c0cd7886bc3c597d77e7bf1ad8315a2acd401603f80f0a3203902ca3e0129c9de742a88fd27556f83ec844c36463e461d3f4e03dc36717b0c7692f99a23d479251218b9f282853729564b10b1aeddf0d34d9efc00bb9c18a834abe3", 0x89}, {&(0x7f0000000f00)}, {&(0x7f0000000f40)="eae393e58a30407ba2be49db5c9b10ad79b0ced9e7421254a1f83041db795ba552778b04b5a3b8bd51ff1a33710060d0fd97c22b8053ff1d4dcee41eb087f2d50e1c0e332e89a9907b701695abc3eb93e7ff80c52887d3373a0508d13b6d4daa", 0x60}, {&(0x7f0000000fc0)="3fbfaba8c4ef68", 0x7}, {&(0x7f0000001000)="54dcc8c5e3229b86d5eb5dfafc1fd336328968737d6effa3179e1f3945e5651e0922920a89016fc052c9cf0798e43b047d9904a5f761e9954254e0018bf4fd5926279147da6307d896ae567d468c475a8b95e870c1e8bcf451a66cc6aa55f3f625f8421db6cc9404ae4e7fc6cd46955c026728968ba15d41e3455405d735635515", 0x81}, {&(0x7f00000010c0)="65fc23b5b5b7c2a49e823cb6c0c10839bec1ff3832d1ee575c741ade0098e30a0a43cfd4c66a03790872678e1d0a59dd716e7044a47f219b27b9ed53de5e45f328653d17f58a127c022d23292fd1a59b3f494401ada6d48e25115481a3e1da84cf568c0fb33d53b3f2148fdb3b3974dd70ac4762158fad25a6fd242feb4ef8d9b93e6cbf2ae0917ff3fc4b6fd5177466d5cb7767931b2b6a826b359c1119fb85b1566d08e4920a206af94aedb3c7e510", 0xb0}, {&(0x7f0000001180)}], 0x8) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000012c0), 0x400000, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000001300)=""/232) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000001400)={0x4, {0x8, 0x9, 0x8, 0x9, 0x2}}) r3 = socket$kcm(0x29, 0x1, 0x0) r4 = accept$nfc_llcp(r0, 0x0, &(0x7f0000001440)) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000001480)={r4}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001500)=@filter={'filter\x00', 0xe, 0x4, 0x380, 0xffffffff, 0x0, 0x250, 0x140, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, &(0x7f00000014c0), {[{{@ip={@remote, @rand_addr=0x64010100, 0xff, 0xe5f6c3fd2a200def, 'pim6reg1\x00', 'pim6reg0\x00', {}, {}, 0x2, 0x1}, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x0, 0x1, 0x2, 0x2, 0x1, 0x2], 0x4, 0x4}}}, @common=@ah={{0x30}, {[0x4, 0x51], 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="9241ed07e8cc", 0x8, 0x5, [0x3a, 0x22, 0xa, 0x3f, 0x2d, 0xe, 0x2d, 0x5, 0x1d, 0xf, 0x19, 0x2e, 0x5, 0x23, 0x16, 0x5], 0x0, 0x5}}}, {{@ip={@multicast2, @remote, 0xffffffff, 0xff, 'nr0\x00', 'sit0\x00', {}, {0xff}, 0x73, 0x1, 0x10}, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x3, 0x1, 0x5, 0x6, 0x1, 0x4], 0x3, 0x6}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x24, 0x9, [0x2a, 0x9, 0x24, 0x3f, 0x9, 0x1, 0xb, 0x35, 0xb, 0xb, 0x5, 0x0, 0x3a, 0x32, 0x3b, 0x1f], 0x1, 0x8dc9, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) ioctl$PTP_SYS_OFFSET_EXTENDED(r2, 0xc4c03d09, &(0x7f0000001900)={0x16}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001dc0)={{{@in=@initdev, @in=@initdev}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000001ec0)=0xe8) write$P9_RREADLINK(r0, &(0x7f0000001f00)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) statx(r1, &(0x7f0000001f40)='./file0\x00', 0x1000, 0x0, &(0x7f0000001f80)) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000002080)=0x13c, 0x4) fstat(0xffffffffffffffff, &(0x7f00000020c0)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000002140)={0x7, 'pim6reg\x00', {0x9}, 0x4}) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000002180), &(0x7f00000021c0)=0x4) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000002200)=0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000002a00)={0x0, 0x6, 0x0, 0x62ae, 0xc}, &(0x7f0000002a40)=0x18) sendmmsg$inet_sctp(r1, &(0x7f0000002b80)=[{&(0x7f0000002240)=@in6={0xa, 0x4e22, 0xfffffff9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4e7c}, 0x1c, &(0x7f0000002680)=[{&(0x7f0000002280)="43910d4d4a51cb71d460421925e451fc4b96a752d1bc7b778355f74513731f610e36a42cd2422a6b36f8059a0ffc9b8b2a8e270e8f1f06edf85d6d758fdce827546d6625842555933a75c9ac6f488fe4357e9583cf8370cd11f2372a3ab229f01bd05d7830f3b49708aeaba6f1ee1453d7c18e1c07611c95acad4fb637fbd8579a1c50ed8c75da88bbba72653b595520b633b206a0c130229ad82e48c662785d1db856a3b2d72082c512b8a3d6eac2f1d1ce2f8f23f20e343b11046de350d8720396a4a37c24826766a977f3baff2814b43fb464", 0xd4}, {&(0x7f0000002380)="26103f49236044e7bd1b83894f03556a4afcea74cc1b89ca2f7f3e464f677e4d71c6ef9088d513d1294f996ea884591f53bc0dc4851e321f35ee9556409108588835c134a1d0667a8d4515f73fc1002991b50ed9fa96e280eae37ac1b390e94bc59217541b3f6734d19d3379b7b110ec7af6d8b18828ca80d5d30816dbf4ed9915aa50aa3959012d58b68299239bacd3ac96becdfb1cfd124a495094c9a0b4a004754e15bfbe17bc14449f8b898ed8cb41f98a37d33f1c158e", 0xb9}, {&(0x7f0000002440)="ac6d7dd965b7dec58635623e3598c4c1e12100cf29e889d25266135b8a", 0x1d}, {&(0x7f0000002480)="52e929eb96f967daa62963e6a338a0b0711adf369b310fbace6770208508e29774e7e63518f68b5812d6af7773adaba767e9602f499b360954a6bce4c2409052327e062b2821946a6253d565fccc6835fbdd621a1f3619ebaa391e4f19eb075d6e8d604725f941b21a769d8cc86faf29851fe1ea609e6192b979c53f8c", 0x7d}, {&(0x7f0000002500)="5f5a8364caaa3c5e8f7af63ae27a41e4df3b2c9d89a747cf2aed7b0418b9c410572c53a8a2b3305e25", 0x29}, {&(0x7f0000002540)="c367e055602dbf5f6e76ec6acf1dabfe79ef5dd56adf172457018e04e16f3c5e2181ee7d660bca1fd6fd7ae824bc5aa2e7a26cae1ba995c5c39f6600c7af274469fc2714a1d1c31013da808a34cfc44673b42e48916592cde11c20b30d058f03775b7aa3ae459dc0f345a40ecc953eb7bd64c6bcb7d23775e34881c6f2ca3fc7bba258d024e9c16ff1d268f1946c2bd02ea65fb247281a83ca22c97fd0b61e", 0x9f}, {&(0x7f0000002600)="9633050a9e88f13ada38414c16c636cafcf859edec9755303a86cefa129052af90abda920fc7adcf70356d1a9fb24108241462a4d907fba0e884f2fe61835b0f75522db4c4cd60b41f087a184425ba21c0914b5d899e637937d0a53ebfa454b2276c94b14ba664af78b57c57ab618d59bd20e76986489430aa8e3a", 0x7b}], 0x7, &(0x7f0000002700)=[@dstaddrv4={0x18, 0x84, 0x7, @local}], 0x18, 0x40001}, {&(0x7f0000002740)=@in={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000029c0)=[{&(0x7f0000002780)="288bf12b401a1c235f2b950fbc9c50ee289130fd17721202088e6ad8bb6485bae436fd1dfcf64e51e43e393f64a0ea1bd00a17da4dc7ef434462e5a235415a64cce45252fb5df0504b8f9e786e6e8054050edfce87aabf043da1c22627cf98ef27f7ab6169f36841d348f8446b54f51ce5e312a9362df9e91c2ef5358158158061a532b9fed67a6d13382487c864eb09ee3e1b989835", 0x96}, {&(0x7f0000002840)="c0c828be3928830c1d921360edb08cfdc3d422a232a93c2baee323c3ec62a8d033e0eceff51f825c4f7d41f22357bb6ead78a8d47c64e209c48dd8905c0f96f9f4f971a0a662922c1ae474d13c834340c853e6e6f5c263080076242347b845f619cfd35316c46a0390fed2a1837f22dd3aede037f9be7d84a3900ae4042a744fb3d437c3ecfb757a5430f364f7c87230c8ed", 0x92}, {&(0x7f0000002900)="ce55d88f34770d5acbb930fb629041f2a4cc8a0d68395c3b45564f0f81bc9fb02a7f21268739f5680b0bf9e0556117d56e47042d5349caaebf61d501b2d501a85acdbeec3d1f16973bf9a66615da618b07022275e78904b0d0a72ebaefe87b2666e1169f5cf01ec49332404aae07d0492bddd32e05d63af1056bee5430b9fb262bbdf037edc0babf9ff8b517469e456cb179f34ac7e59f5a1f67b26fbcd126c92d60cf7215b40b", 0xa7}], 0x3, &(0x7f0000002a80)=[@sndinfo={0x20, 0x84, 0x2, {0x3ff, 0x205, 0x0, 0x6, r5}}, @init={0x18, 0x84, 0x0, {0x1, 0x9, 0x1, 0x9a97}}, @init={0x18, 0x84, 0x0, {0x1d, 0x6, 0x8, 0x42d}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @init={0x18, 0x84, 0x0, {0x4, 0x8, 0xffff, 0x8505}}, @init={0x18, 0x84, 0x0, {0x6, 0x1, 0x40, 0x7fff}}, @authinfo={0x18, 0x84, 0x6, {0x7fff}}, @init={0x18, 0x84, 0x0, {0x0, 0x122b, 0x9, 0x5992}}, @init={0x18, 0x84, 0x0, {0xfffd, 0x3ff, 0x7, 0x400}}], 0xe8}], 0x2, 0x0) 373.708029ms ago: executing program 4 (id=205): r0 = fsopen(&(0x7f0000000300)='devpts\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = getpid() ioprio_get$pid(0x2, r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd011100"], 0xfdef) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000016c0)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0xd, &(0x7f0000000340)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x9, &(0x7f0000000100)=@raw=[@generic={0x3, 0x1, 0xd, 0x7, 0x7fffffff}, @ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x100}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x2}], &(0x7f0000000180)='GPL\x00', 0xbc, 0x3a, &(0x7f00000001c0)=""/58, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000012c0)={0x1, 0xb, 0x10000, 0xba5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001300)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f0000001340)=[{0x2, 0x1, 0xf, 0x2}, {0x5, 0x5, 0xf, 0xc}, {0x4, 0x1, 0xd, 0xc}, {0x5, 0x5, 0xa, 0x8}, {0x1, 0x5, 0x8, 0x8}], 0x10, 0x3}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@bloom_filter={0x1e, 0xf2c2, 0xfffffffc, 0x7, 0x2000, r1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000001700), 0x8) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001740)={0x1b, 0x0, 0x0, 0xf, 0x0, 0x1, 0x1, '\x00', 0x0, r0, 0x4, 0x6, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/17], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r9, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f0000002500)=""/4101, 0x0, 0x68}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0xd, 0x5, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @func, @jmp={0x5, 0x0, 0x2, 0x1, 0x3, 0x40, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x8c}], &(0x7f0000000080)='syzkaller\x00', 0x7fffffff, 0x1000, &(0x7f0000000280)=""/4096, 0x41000, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x1, 0x2, 0x50, 0x1}, 0x10, r4, r5, 0x0, &(0x7f00000015c0)=[r6, r7, r8, r10], 0x0, 0x10, 0x5}, 0x94) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c232000, 0x3, 0x2, @tid=r2}) 356.58305ms ago: executing program 5 (id=206): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000000)=0xffffffff, 0x4) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r2, 0xfffffffffffffc01, 0x0) tee(r1, r2, 0x60000000000, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x3}, 0x1c) 319.670502ms ago: executing program 2 (id=207): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000003009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2e8, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0xe8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x6c, 0x3, "3dd3d511e83823258939123f6c091e46c072d1bb6745eac15487f1f1722ab09f8adc218b6e8541c3f89982be74a2c00ef17bc32f980ce1a90473f9cefeb3f5962b2bb48d850cf09a1ec7e2eedc603708df0fe51f1934d0d3dc214db3d57c6ebb231e37be94e4d282"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xccd}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_NODE_ID={0x63, 0x3, "ac82a7dbd90e4de40307b58f0b7fa600c4593bad951794b36bf2f0554fa1fd7441c28b6a90022983ed3f803b1ad49c1a23360d875fa04af34873ca0ade41e8a34441c099dc673bf19a0e92faa192260ae53a436fb9379277e0a650f5bbfd1b"}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x92fc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x65d1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaec}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}]}]}, @TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_bond\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7b3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x16000}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x291}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffca}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x20000851}, 0x4048800) 237.768966ms ago: executing program 2 (id=208): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="0801000016000100000000000000000000000000000000000000000000000000fc0200000000000000000000000000004e2000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000040000000000000000000000aa0000000033000000ffffffff0000000000000000000000000501000000000000010000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000fcffffffffffffff000000000000000004000000000000000000000000000000000000000000000000000000010000000000000000000000000000000a0000000000000000000000050000000500000008000c001eca72c008002400"], 0x108}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x18, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x1c025, 0xac5d, 0x0, 0x4, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pivot_root(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) fallocate(r1, 0x0, 0x0, 0x2000402) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, 0x0, 0x40440c4) 237.352546ms ago: executing program 4 (id=209): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x2, 0xfd, 0x5ae9}, {0x2020, 0x7f, 0x4, 0xfffff010}, {0x6, 0x0, 0x7, 0xbb}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') 103.756144ms ago: executing program 3 (id=210): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x10, r2, 0x1, 0x4, 0x6, @multicast}, 0x14) unshare(0x28020480) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40e8662e, &(0x7f0000000000)={0xc551, 0x40000000000002, 0xd, 0xf, 0x9, 0x1}) 74.966715ms ago: executing program 3 (id=211): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @multicast}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000001af60018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000400000008000700000000000800020005000000050008"], 0x34}}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x3, @random="f832b47900"}, 0x10) 0s ago: executing program 3 (id=212): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0}, 0xa000, 0x0, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, 0x0) kernel console output (not intermixed with test programs): [ 20.954723][ T29] audit: type=1400 audit(1769927223.605:62): avc: denied { search } for pid=3196 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.976781][ T29] audit: type=1400 audit(1769927223.605:63): avc: denied { search } for pid=3196 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.999473][ T29] audit: type=1400 audit(1769927223.605:64): avc: denied { search } for pid=3196 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.022494][ T29] audit: type=1400 audit(1769927223.605:65): avc: denied { search } for pid=3196 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.045555][ T29] audit: type=1400 audit(1769927223.605:66): avc: denied { read open } for pid=3197 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.6' (ED25519) to the list of known hosts. [ 25.619729][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 25.619746][ T29] audit: type=1400 audit(1769927228.265:70): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.648776][ T29] audit: type=1400 audit(1769927228.295:71): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.649520][ T3301] cgroup: Unknown subsys name 'net' [ 25.676508][ T29] audit: type=1400 audit(1769927228.335:72): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.810680][ T3301] cgroup: Unknown subsys name 'cpuset' [ 25.816805][ T3301] cgroup: Unknown subsys name 'rlimit' [ 25.946874][ T29] audit: type=1400 audit(1769927228.595:73): avc: denied { setattr } for pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.970367][ T29] audit: type=1400 audit(1769927228.595:74): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.990969][ T29] audit: type=1400 audit(1769927228.595:75): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.011448][ T29] audit: type=1400 audit(1769927228.595:76): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.031852][ T29] audit: type=1400 audit(1769927228.625:77): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.041217][ T3304] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.056754][ T29] audit: type=1400 audit(1769927228.625:78): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.088543][ T29] audit: type=1400 audit(1769927228.655:79): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 26.128420][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.267982][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 27.283070][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 27.334734][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 27.369473][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.376618][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.383968][ T3315] bridge_slave_0: entered allmulticast mode [ 27.390433][ T3315] bridge_slave_0: entered promiscuous mode [ 27.399039][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.406557][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.413789][ T3315] bridge_slave_1: entered allmulticast mode [ 27.420359][ T3315] bridge_slave_1: entered promiscuous mode [ 27.439208][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 27.478801][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.487959][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.495149][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.502659][ T3314] bridge_slave_0: entered allmulticast mode [ 27.509117][ T3314] bridge_slave_0: entered promiscuous mode [ 27.522751][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.536113][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.543263][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.550523][ T3314] bridge_slave_1: entered allmulticast mode [ 27.556992][ T3314] bridge_slave_1: entered promiscuous mode [ 27.582713][ T3315] team0: Port device team_slave_0 added [ 27.594522][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.601648][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.608804][ T3320] bridge_slave_0: entered allmulticast mode [ 27.615171][ T3320] bridge_slave_0: entered promiscuous mode [ 27.622061][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 27.631614][ T3315] team0: Port device team_slave_1 added [ 27.646334][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.653451][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.660571][ T3320] bridge_slave_1: entered allmulticast mode [ 27.667146][ T3320] bridge_slave_1: entered promiscuous mode [ 27.691585][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.701752][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.728771][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.744390][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.751510][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.777520][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.788320][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.795577][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.802775][ T3316] bridge_slave_0: entered allmulticast mode [ 27.809220][ T3316] bridge_slave_0: entered promiscuous mode [ 27.816500][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.825703][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.832810][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.839972][ T3316] bridge_slave_1: entered allmulticast mode [ 27.846566][ T3316] bridge_slave_1: entered promiscuous mode [ 27.859682][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.866887][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.893060][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.921802][ T3314] team0: Port device team_slave_0 added [ 27.940952][ T3320] team0: Port device team_slave_0 added [ 27.947608][ T3314] team0: Port device team_slave_1 added [ 27.954141][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.961334][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.968528][ T3317] bridge_slave_0: entered allmulticast mode [ 27.974987][ T3317] bridge_slave_0: entered promiscuous mode [ 27.982631][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.992487][ T3320] team0: Port device team_slave_1 added [ 27.998953][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.021335][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.028482][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.035711][ T3317] bridge_slave_1: entered allmulticast mode [ 28.042190][ T3317] bridge_slave_1: entered promiscuous mode [ 28.070064][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.077109][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.103305][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.114676][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.121845][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.147901][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.162905][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.169895][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.196739][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.209720][ T3315] hsr_slave_0: entered promiscuous mode [ 28.215912][ T3315] hsr_slave_1: entered promiscuous mode [ 28.222507][ T3316] team0: Port device team_slave_0 added [ 28.236668][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.243756][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.269732][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.281315][ T3316] team0: Port device team_slave_1 added [ 28.302109][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.327430][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.334458][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.360472][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.374401][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.395249][ T3314] hsr_slave_0: entered promiscuous mode [ 28.401612][ T3314] hsr_slave_1: entered promiscuous mode [ 28.407510][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 28.413352][ T3314] Cannot create hsr debugfs directory [ 28.419252][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.426231][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.452214][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.467558][ T3317] team0: Port device team_slave_0 added [ 28.497721][ T3320] hsr_slave_0: entered promiscuous mode [ 28.504008][ T3320] hsr_slave_1: entered promiscuous mode [ 28.510178][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 28.515911][ T3320] Cannot create hsr debugfs directory [ 28.522068][ T3317] team0: Port device team_slave_1 added [ 28.576297][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.583317][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.609479][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.622590][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.629539][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.655698][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.673587][ T3316] hsr_slave_0: entered promiscuous mode [ 28.679557][ T3316] hsr_slave_1: entered promiscuous mode [ 28.685601][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 28.691375][ T3316] Cannot create hsr debugfs directory [ 28.753596][ T3317] hsr_slave_0: entered promiscuous mode [ 28.759610][ T3317] hsr_slave_1: entered promiscuous mode [ 28.765572][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 28.771323][ T3317] Cannot create hsr debugfs directory [ 28.818335][ T3315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.853451][ T3315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.864239][ T3315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.875622][ T3315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.933523][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.942889][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.956654][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.965825][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.002774][ T3320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.012192][ T3320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.021280][ T3320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.030800][ T3320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.040886][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.068602][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.083847][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.097910][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.106798][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.116157][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.133751][ T1452] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.140960][ T1452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.159331][ T1452] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.166536][ T1452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.191357][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.203957][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.213347][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.222284][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.247747][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.284585][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.294788][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.324896][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.341405][ T2124] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.348486][ T2124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.356864][ T2124] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.363996][ T2124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.382430][ T2124] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.389491][ T2124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.398301][ T2124] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.405469][ T2124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.439656][ T3320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.450124][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.465329][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.473217][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.483663][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.508525][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.532402][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.550095][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.583116][ T2124] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.590268][ T2124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.605836][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.632840][ T1874] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.639967][ T1874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.650447][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.659215][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.682308][ T1874] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.689406][ T1874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.698821][ T1874] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.705975][ T1874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.757409][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.780441][ T3315] veth0_vlan: entered promiscuous mode [ 29.822519][ T3314] veth0_vlan: entered promiscuous mode [ 29.850905][ T3315] veth1_vlan: entered promiscuous mode [ 29.870818][ T3314] veth1_vlan: entered promiscuous mode [ 29.887381][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.902947][ T3315] veth0_macvtap: entered promiscuous mode [ 29.919672][ T3320] veth0_vlan: entered promiscuous mode [ 29.927166][ T3315] veth1_macvtap: entered promiscuous mode [ 29.952270][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.960646][ T3314] veth0_macvtap: entered promiscuous mode [ 29.968437][ T3314] veth1_macvtap: entered promiscuous mode [ 29.977792][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.985696][ T3320] veth1_vlan: entered promiscuous mode [ 29.998641][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.014207][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.024827][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.041200][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.068436][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.081819][ T3320] veth0_macvtap: entered promiscuous mode [ 30.092885][ T1874] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.113646][ T1874] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.126267][ T3316] veth0_vlan: entered promiscuous mode [ 30.135325][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.138285][ T3316] veth1_vlan: entered promiscuous mode [ 30.158438][ T1874] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.169390][ T3320] veth1_macvtap: entered promiscuous mode [ 30.183652][ T1874] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.211095][ T3316] veth0_macvtap: entered promiscuous mode [ 30.222490][ T1874] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.238348][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.248229][ T3316] veth1_macvtap: entered promiscuous mode [ 30.255073][ T1874] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.276545][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.297681][ T3317] veth0_vlan: entered promiscuous mode [ 30.315793][ T1874] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.326918][ T3317] veth1_vlan: entered promiscuous mode [ 30.347524][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.362131][ T1874] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.381376][ T3317] veth0_macvtap: entered promiscuous mode [ 30.389429][ T3485] xt_CT: You must specify a L4 protocol and not use inversions on it [ 30.392123][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.418802][ T1874] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.428531][ T3317] veth1_macvtap: entered promiscuous mode [ 30.438252][ T1874] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.459547][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.475247][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.501691][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.518244][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.528310][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.584960][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.618074][ T3492] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5'. [ 30.629322][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.639516][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 30.639535][ T29] audit: type=1400 audit(1769927233.285:135): avc: denied { create } for pid=3493 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.703002][ T3498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 30.711684][ T3498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 30.717245][ T3492] 8021q: adding VLAN 0 to HW filter on device bond1 [ 30.728027][ T29] audit: type=1400 audit(1769927233.325:136): avc: denied { map_create } for pid=3484 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 30.746974][ T29] audit: type=1400 audit(1769927233.325:137): avc: denied { map_read map_write } for pid=3484 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 30.766545][ T29] audit: type=1400 audit(1769927233.335:138): avc: denied { write } for pid=3493 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.786894][ T29] audit: type=1326 audit(1769927233.335:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3484 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faecd26aeb9 code=0x7ffc0000 [ 30.809643][ T2124] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.810270][ T29] audit: type=1326 audit(1769927233.335:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3484 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faecd26aeb9 code=0x7ffc0000 [ 30.855437][ T3480] syz.3.4 (3480) used greatest stack depth: 9296 bytes left [ 30.856472][ T3498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.884175][ T3492] netlink: 'syz.4.5': attribute type 10 has an invalid length. [ 30.888929][ T3500] loop0: detected capacity change from 0 to 512 [ 30.891896][ T29] audit: type=1400 audit(1769927233.535:141): avc: denied { create } for pid=3499 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 30.902169][ T3500] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.917449][ T29] audit: type=1400 audit(1769927233.535:142): avc: denied { bind } for pid=3499 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 30.930557][ T3500] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 30.954306][ T3498] bond1: (slave bond0): Enslaving as an active interface with an up link [ 30.959674][ T29] audit: type=1400 audit(1769927233.535:143): avc: denied { setopt } for pid=3499 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 30.987999][ T2124] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.997680][ T3500] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 30.998082][ T3492] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.017858][ T3492] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.041982][ T3492] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.049112][ T3492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.056452][ T3492] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.063605][ T3492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.071836][ T3500] EXT4-fs (loop0): 1 truncate cleaned up [ 31.077934][ T29] audit: type=1326 audit(1769927233.715:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3486 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7faecd22b78e code=0x7ffc0000 [ 31.102794][ T3500] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.124894][ T3492] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 31.134018][ T2124] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.296243][ T3523] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6'. [ 31.363008][ T3527] loop4: detected capacity change from 0 to 8192 [ 31.404796][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.426759][ T3308] loop4: p1 p2 p3 p4 [ 31.432042][ T3530] mmap: syz.3.11 (3530) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 31.447996][ T3530] netlink: 'syz.3.11': attribute type 39 has an invalid length. [ 31.520087][ T3308] loop4: p1 size 262144 extends beyond EOD, truncated [ 31.548917][ T3308] loop4: p2 start 2531787010 is beyond EOD, truncated [ 31.554302][ T3532] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.555794][ T3308] loop4: p3 size 100663552 extends beyond EOD, truncated [ 31.656268][ T3308] loop4: p4 size 50331648 extends beyond EOD, truncated [ 31.676196][ T3527] loop4: p1 p2 p3 p4 [ 31.700366][ T3527] loop4: p1 size 262144 extends beyond EOD, truncated [ 31.719163][ T3527] loop4: p2 start 2531787010 is beyond EOD, truncated [ 31.726065][ T3527] loop4: p3 size 100663552 extends beyond EOD, truncated [ 31.742632][ T3527] loop4: p4 size 50331648 extends beyond EOD, truncated [ 31.762968][ T3537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13'. [ 31.779833][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 31.781471][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 31.801649][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 31.819972][ T3537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13'. [ 31.830047][ T3539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13'. [ 31.843707][ T3539] team0 (unregistering): Port device team_slave_0 removed [ 31.856726][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 31.868381][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 31.881958][ T3539] team0 (unregistering): Port device team_slave_1 removed [ 31.884306][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 32.112496][ T3549] loop1: detected capacity change from 0 to 1024 [ 32.135926][ T3549] ======================================================= [ 32.135926][ T3549] WARNING: The mand mount option has been deprecated and [ 32.135926][ T3549] and is ignored by this kernel. Remove the mand [ 32.135926][ T3549] option from the mount to silence this warning. [ 32.135926][ T3549] ======================================================= [ 32.211897][ T3549] EXT4-fs (loop1): Invalid log cluster size: 788529156 [ 32.214527][ T3553] dvmrp0: entered allmulticast mode [ 32.354087][ T3562] program syz.4.21 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 32.409629][ T3563] loop4: detected capacity change from 0 to 512 [ 32.431635][ T3563] EXT4-fs: Ignoring removed oldalloc option [ 32.437836][ T3563] EXT4-fs: inline encryption not supported [ 32.450918][ T3563] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 32.499639][ T3563] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.21: bg 0: block 64: padding at end of block bitmap is not set [ 32.536188][ T3577] loop2: detected capacity change from 0 to 128 [ 32.550310][ T3563] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.21: Failed to acquire dquot type 0 [ 32.571028][ T3578] loop3: detected capacity change from 0 to 1024 [ 32.584017][ T3577] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 32.627154][ T3580] tipc: Started in network mode [ 32.632169][ T3580] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 32.643932][ T3578] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.22: Failed to acquire dquot type 0 [ 32.660255][ T3563] EXT4-fs (loop4): 1 truncate cleaned up [ 32.666408][ T3563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.679800][ T3577] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 32.689516][ T3578] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 32.736817][ T52] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 32.766201][ T3578] EXT4-fs (loop3): 1 truncate cleaned up [ 32.776229][ T3580] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 32.784622][ T3580] tipc: Enabled bearer , priority 10 [ 32.807779][ T3563] syz.4.21 (3563) used greatest stack depth: 9200 bytes left [ 32.818822][ T3578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.841161][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.851697][ T3586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'. [ 32.946849][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.011867][ T3596] loop3: detected capacity change from 0 to 764 [ 33.161152][ T3602] loop3: detected capacity change from 0 to 2048 [ 33.212731][ T3602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.259943][ T3602] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.296074][ T3549] loop1: detected capacity change from 0 to 512 [ 33.316195][ T3549] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.17: corrupted inode contents [ 33.374909][ T3549] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 33.397314][ T3549] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.17: corrupted inode contents [ 33.423257][ T3609] loop2: detected capacity change from 0 to 512 [ 33.429825][ T3549] EXT4-fs error (device loop1): ext4_evict_inode:301: inode #15: comm syz.1.17: mark_inode_dirty error [ 33.430156][ T3609] EXT4-fs: Ignoring removed i_version option [ 33.447146][ T3609] EXT4-fs: Ignoring removed bh option [ 33.463511][ T3549] EXT4-fs (loop1): 1 orphan inode deleted [ 33.482137][ T3549] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.515130][ T3609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.539711][ T3549] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 33.550059][ T3609] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.567250][ T3613] netlink: 'syz.0.32': attribute type 39 has an invalid length. [ 33.581613][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.662711][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.689310][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.751314][ T3617] ISOFS: unable to read i-node block [ 33.756717][ T3617] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 33.794601][ T3621] netlink: 24 bytes leftover after parsing attributes in process `syz.4.35'. [ 33.809572][ T3621] netlink: 24 bytes leftover after parsing attributes in process `syz.4.35'. [ 33.879063][ T3621] team0 (unregistering): Port device team_slave_0 removed [ 33.899208][ T3621] team0 (unregistering): Port device team_slave_1 removed [ 33.920640][ T9] tipc: Node number set to 1 [ 34.001928][ T3629] EXT4-fs (loop2): Invalid log cluster size: 788529156 [ 34.169684][ T3642] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20003 [ 34.199965][ T3645] Cannot find del_set index 0 as target [ 34.234487][ T3623] IPv6: addrconf: prefix option has invalid lifetime [ 34.299105][ T3649] EXT4-fs: Ignoring removed bh option [ 34.307880][ T3642] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 34.332073][ T3649] EXT4-fs: inline encryption not supported [ 34.355308][ T3649] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 34.355309][ T3642] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.41: inode has both inline data and extents flags [ 34.355490][ T3642] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.41: couldn't read orphan inode 15 (err -117) [ 34.399899][ C1] hrtimer: interrupt took 45841 ns [ 34.493668][ T3660] capability: warning: `syz.4.48' uses 32-bit capabilities (legacy support in use) [ 34.527905][ T3642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.566097][ T3663] pimreg3: entered allmulticast mode [ 34.624112][ T3665] netlink: 'syz.1.50': attribute type 39 has an invalid length. [ 34.733476][ T3629] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.45: corrupted inode contents [ 34.776121][ T3629] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 34.813255][ T3669] team0 (unregistering): Port device team_slave_0 removed [ 34.835685][ T3629] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.45: corrupted inode contents [ 34.849279][ T3669] team0 (unregistering): Port device team_slave_1 removed [ 34.874164][ T3629] EXT4-fs error (device loop2): ext4_evict_inode:301: inode #15: comm syz.2.45: mark_inode_dirty error [ 34.887533][ T3629] EXT4-fs (loop2): 1 orphan inode deleted [ 34.893970][ T3629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.924105][ T3629] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 34.952065][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.981874][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.998549][ T3674] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 35.056032][ T3686] FAULT_INJECTION: forcing a failure. [ 35.056032][ T3686] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 35.069212][ T3686] CPU: 1 UID: 0 PID: 3686 Comm: syz.1.57 Not tainted syzkaller #0 PREEMPT(voluntary) [ 35.069234][ T3686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 35.069257][ T3686] Call Trace: [ 35.069261][ T3686] [ 35.069267][ T3686] __dump_stack+0x1d/0x30 [ 35.069286][ T3686] dump_stack_lvl+0x95/0xd0 [ 35.069309][ T3686] dump_stack+0x15/0x1b [ 35.069332][ T3686] should_fail_ex+0x263/0x280 [ 35.069379][ T3686] should_fail+0xb/0x20 [ 35.069471][ T3686] should_fail_usercopy+0x1a/0x20 [ 35.069517][ T3686] _copy_to_user+0x20/0xa0 [ 35.069531][ T3686] simple_read_from_buffer+0xb5/0x130 [ 35.069555][ T3686] proc_fail_nth_read+0x10e/0x150 [ 35.069628][ T3686] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 35.069646][ T3686] vfs_read+0x1ab/0x7f0 [ 35.069659][ T3686] ? __rcu_read_unlock+0x4e/0x70 [ 35.069747][ T3686] ? __fget_files+0x184/0x1c0 [ 35.069762][ T3686] ? mutex_lock+0x57/0x90 [ 35.069828][ T3686] ksys_read+0xdc/0x1a0 [ 35.069860][ T3686] __x64_sys_read+0x40/0x50 [ 35.069955][ T3686] x64_sys_call+0x2889/0x3000 [ 35.069972][ T3686] do_syscall_64+0xc0/0x2a0 [ 35.069993][ T3686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.070008][ T3686] RIP: 0033:0x7faecd22b78e [ 35.070033][ T3686] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 35.070057][ T3686] RSP: 002b:00007faecbcc6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 35.070113][ T3686] RAX: ffffffffffffffda RBX: 00007faecbcc76c0 RCX: 00007faecd22b78e [ 35.070129][ T3686] RDX: 000000000000000f RSI: 00007faecbcc70a0 RDI: 0000000000000003 [ 35.070142][ T3686] RBP: 00007faecbcc7090 R08: 0000000000000000 R09: 0000000000000000 [ 35.070151][ T3686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.070159][ T3686] R13: 00007faecd4e6038 R14: 00007faecd4e5fa0 R15: 00007fff84b75168 [ 35.070172][ T3686] [ 35.985425][ T3703] netlink: 'syz.2.62': attribute type 39 has an invalid length. [ 36.443208][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 36.443227][ T29] audit: type=1400 audit(1769927239.095:244): avc: denied { read write } for pid=3717 comm="syz.0.65" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 36.472875][ T29] audit: type=1400 audit(1769927239.095:245): avc: denied { open } for pid=3717 comm="syz.0.65" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 36.525442][ T29] audit: type=1400 audit(1769927239.155:246): avc: denied { connect } for pid=3717 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.544854][ T29] audit: type=1400 audit(1769927239.155:247): avc: denied { write } for pid=3717 comm="syz.0.65" path="socket:[6361]" dev="sockfs" ino=6361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.653355][ T3731] capability: warning: `syz.2.70' uses deprecated v2 capabilities in a way that may be insecure [ 36.673487][ T3734] set_capacity_and_notify: 6 callbacks suppressed [ 36.673507][ T3734] loop1: detected capacity change from 0 to 1024 [ 36.691421][ T3734] EXT4-fs: Ignoring removed orlov option [ 36.712471][ T3735] loop0: detected capacity change from 0 to 1024 [ 36.750198][ T29] audit: type=1400 audit(1769927239.315:248): avc: denied { create } for pid=3732 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 36.776883][ T29] audit: type=1400 audit(1769927239.425:249): avc: denied { wake_alarm } for pid=3738 comm="syz.2.73" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 36.781119][ T3735] EXT4-fs (loop0): Invalid log cluster size: 788529156 [ 36.817457][ T3739] loop2: detected capacity change from 0 to 512 [ 36.823281][ T3734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.853195][ T3739] ------------[ cut here ]------------ [ 36.858769][ T3739] EA inode 11 i_nlink=2 [ 36.858784][ T3739] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.2.73/3739 [ 36.873835][ T3739] Modules linked in: [ 36.877836][ T3739] CPU: 0 UID: 0 PID: 3739 Comm: syz.2.73 Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.882842][ T3734] EXT4-fs (loop1): shut down requested (1) [ 36.887468][ T3739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 36.900317][ T29] audit: type=1400 audit(1769927239.555:250): avc: denied { read } for pid=2985 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 36.903378][ T3739] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 36.925379][ T29] audit: type=1400 audit(1769927239.555:251): avc: denied { search } for pid=2985 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.931992][ T3739] Code: 74 e6 9a ff 4c 8d 2d cd 21 3e 05 49 8d 7e 40 e8 84 d0 b6 ff 49 8b 6e 40 4c 89 e7 e8 b8 cb b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 ef e1 d0 03 66 66 66 66 66 66 2e [ 36.953491][ T29] audit: type=1400 audit(1769927239.555:252): avc: denied { search } for pid=2985 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.973435][ T3739] RSP: 0018:ffffc9001b3c35a8 EFLAGS: 00010246 [ 36.994859][ T29] audit: type=1400 audit(1769927239.555:253): avc: denied { add_name } for pid=2985 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.001051][ T3739] [ 37.024204][ T3739] RAX: ffff8881043e0a90 RBX: ffff888107a0adb8 RCX: ffffffff81be1958 [ 37.032327][ T3739] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86fc3b10 [ 37.040355][ T3739] RBP: 000000000000000b R08: 0001888107a0ad6b R09: 0000000000000000 [ 37.048536][ T3739] R10: ffffc9001b3c34d8 R11: 0001c9001b3c34d8 R12: ffff888107a0ad68 [ 37.056677][ T3739] R13: ffffffff86fc3b10 R14: ffff888107a0ad20 R15: 0000000000000001 [ 37.060326][ T3745] syzkaller0: entered promiscuous mode [ 37.064713][ T3739] FS: 00007f3be37276c0(0000) GS:ffff8882aeb57000(0000) knlGS:0000000000000000 [ 37.070170][ T3745] syzkaller0: entered allmulticast mode [ 37.079247][ T3739] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.091834][ T3739] CR2: 00007ffc246110c8 CR3: 000000011b6f2000 CR4: 00000000003506f0 [ 37.094681][ T3734] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 37.100038][ T3739] Call Trace: [ 37.100051][ T3739] [ 37.100063][ T3739] ext4_xattr_set_entry+0x77c/0x1010 [ 37.109318][ T3734] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 37.112160][ T3739] ext4_xattr_ibody_set+0x184/0x3c0 [ 37.115500][ T3734] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 37.120411][ T3739] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 37.129520][ T3734] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 37.134503][ T3739] __ext4_expand_extra_isize+0x246/0x280 [ 37.143571][ T3734] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 37.149090][ T3739] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 37.178093][ T3739] ext4_evict_inode+0x7c3/0xd40 [ 37.183030][ T3739] ? __pfx_ext4_evict_inode+0x10/0x10 [ 37.188489][ T3739] evict+0x2af/0x510 [ 37.189906][ T3734] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 37.192448][ T3739] ? __dquot_initialize+0x146/0x7c0 [ 37.192481][ T3739] iput+0x4b9/0x650 [ 37.210539][ T3739] ext4_process_orphan+0x1a9/0x1c0 [ 37.215693][ T3739] ext4_orphan_cleanup+0x6a8/0xa00 [ 37.221008][ T3739] ext4_fill_super+0x3476/0x3800 [ 37.225531][ T3734] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 37.226042][ T3739] ? set_blocksize+0x1a3/0x310 [ 37.235188][ T3734] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 37.239611][ T3739] ? setup_bdev_super+0x30e/0x370 [ 37.239640][ T3739] ? __pfx_ext4_fill_super+0x10/0x10 [ 37.258913][ T3739] get_tree_bdev_flags+0x291/0x300 [ 37.264088][ T3739] ? __pfx_ext4_fill_super+0x10/0x10 [ 37.269631][ T3739] get_tree_bdev+0x1f/0x30 [ 37.274143][ T3739] ext4_get_tree+0x1c/0x30 [ 37.278636][ T3739] vfs_get_tree+0x57/0x1d0 [ 37.283180][ T3739] do_new_mount+0x288/0x700 [ 37.287812][ T3739] path_mount+0x4d0/0xbc0 [ 37.292305][ T3739] ? user_path_at+0xbf/0x130 [ 37.296949][ T3739] __se_sys_mount+0x28c/0x2e0 [ 37.300698][ T3314] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 37.301770][ T3739] __x64_sys_mount+0x67/0x80 [ 37.315110][ T3739] x64_sys_call+0x2cca/0x3000 [ 37.319841][ T3739] do_syscall_64+0xc0/0x2a0 [ 37.320090][ T3314] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 37.324417][ T3739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.339453][ T3739] RIP: 0033:0x7f3be4ccc14a [ 37.343552][ T3314] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 37.344046][ T3739] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.362963][ T3314] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 37.372453][ T3739] RSP: 002b:00007f3be3726e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 37.389655][ T3739] RAX: ffffffffffffffda RBX: 00007f3be3726ee0 RCX: 00007f3be4ccc14a [ 37.397907][ T3739] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f3be3726ea0 [ 37.399927][ T3314] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 37.405938][ T3739] RBP: 0000200000000180 R08: 00007f3be3726ee0 R09: 0000000000800700 [ 37.405961][ T3739] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 37.405975][ T3739] R13: 00007f3be3726ea0 R14: 000000000000046f R15: 000000000000002c [ 37.406002][ T3739] [ 37.424213][ T3735] loop0: detected capacity change from 0 to 512 [ 37.430903][ T3739] ---[ end trace 0000000000000000 ]--- [ 37.433648][ T3739] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.73: iget: bad extra_isize 90 (inode size 256) [ 37.439138][ T3314] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 37.460091][ T3739] EXT4-fs (loop2): Remounting filesystem read-only [ 37.467991][ T3314] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 37.485012][ T3739] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 37.497702][ T3314] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 37.517009][ T3735] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.66: corrupted inode contents [ 37.531166][ T3739] EXT4-fs (loop2): 1 orphan inode deleted [ 37.537429][ T3739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.550853][ T3735] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 37.559736][ T3735] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.66: corrupted inode contents [ 37.618489][ T3735] EXT4-fs error (device loop0): ext4_evict_inode:301: inode #15: comm syz.0.66: mark_inode_dirty error [ 37.630545][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.641381][ T3735] EXT4-fs (loop0): 1 orphan inode deleted [ 37.647634][ T3735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.693281][ T3757] loop2: detected capacity change from 0 to 128 [ 37.695218][ T3758] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.801175][ T3748] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.827751][ T3769] syz.2.81 uses obsolete (PF_INET,SOCK_PACKET) [ 37.839548][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.862854][ T3729] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 37.921108][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.933079][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.083390][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.092395][ T3793] loop0: detected capacity change from 0 to 128 [ 38.130577][ T3793] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.162954][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.206358][ T3803] loop3: detected capacity change from 0 to 512 [ 38.214037][ T3803] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 38.238217][ T3793] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 38.271012][ T3803] EXT4-fs (loop3): 1 truncate cleaned up [ 38.277158][ T3803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.370961][ T3793] __nla_validate_parse: 4 callbacks suppressed [ 38.370982][ T3793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.89'. [ 38.400260][ T3803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.92'. [ 38.443358][ T52] bridge_slave_1: left allmulticast mode [ 38.449113][ T52] bridge_slave_1: left promiscuous mode [ 38.454905][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.480534][ T3793] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.491223][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.515481][ T52] bridge_slave_0: left allmulticast mode [ 38.521392][ T52] bridge_slave_0: left promiscuous mode [ 38.521961][ T3825] netlink: 28 bytes leftover after parsing attributes in process `syz.3.95'. [ 38.527267][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.617380][ T3836] netlink: 176 bytes leftover after parsing attributes in process `syz.0.98'. [ 38.679885][ T3837] loop4: detected capacity change from 0 to 1024 [ 38.712619][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.722134][ T3837] EXT4-fs (loop4): Invalid log cluster size: 788529156 [ 38.729467][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.742590][ T52] bond0 (unregistering): Released all slaves [ 38.817441][ T3843] loop3: detected capacity change from 0 to 1024 [ 38.832534][ T52] hsr_slave_0: left promiscuous mode [ 38.873651][ T52] hsr_slave_1: left promiscuous mode [ 38.890089][ T3843] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 38.899644][ T3843] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 38.911650][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.919168][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.944488][ T3843] EXT4-fs (loop3): invalid journal inode [ 38.964759][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.972343][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.989646][ T3843] EXT4-fs (loop3): can't get journal size [ 39.000471][ T3843] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 17104912: comm syz.3.99: lblock 2 mapped to illegal pblock 17104912 (length 1) [ 39.019232][ T52] veth1_macvtap: left promiscuous mode [ 39.020033][ T3843] EXT4-fs (loop3): failed to initialize system zone (-117) [ 39.024778][ T52] veth0_macvtap: left promiscuous mode [ 39.039594][ T52] veth1_vlan: left promiscuous mode [ 39.045000][ T3843] EXT4-fs (loop3): mount failed [ 39.049965][ T52] veth0_vlan: left promiscuous mode [ 39.125184][ T52] pimreg3 (unregistering): left allmulticast mode [ 39.273169][ T3779] chnl_net:caif_netlink_parms(): no params data found [ 39.355288][ T3892] Zero length message leads to an empty skb [ 39.375918][ T3779] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.383061][ T3779] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.390660][ T3779] bridge_slave_0: entered allmulticast mode [ 39.397080][ T3779] bridge_slave_0: entered promiscuous mode [ 39.405706][ T3779] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.412893][ T3779] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.420342][ T3779] bridge_slave_1: entered allmulticast mode [ 39.426952][ T3779] bridge_slave_1: entered promiscuous mode [ 39.446311][ T3779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.473446][ T3779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.531203][ T3779] team0: Port device team_slave_0 added [ 39.537920][ T3779] team0: Port device team_slave_1 added [ 39.577486][ T3779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.584620][ T3779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.610667][ T3779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.622095][ T3903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.714887][ T3903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.744410][ T3837] loop4: detected capacity change from 0 to 512 [ 39.751225][ T3779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.758233][ T3779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.784209][ T3779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.833353][ T3837] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.97: corrupted inode contents [ 39.847754][ T3905] ip_vti0: entered promiscuous mode [ 39.859756][ T3837] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 39.892879][ T3837] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.97: corrupted inode contents [ 39.941065][ T3905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.103'. [ 40.026574][ T3779] hsr_slave_0: entered promiscuous mode [ 40.043444][ T3837] EXT4-fs error (device loop4): ext4_evict_inode:301: inode #15: comm syz.4.97: mark_inode_dirty error [ 40.058953][ T3779] hsr_slave_1: entered promiscuous mode [ 40.065206][ T3779] debugfs: 'hsr0' already exists in 'hsr' [ 40.071160][ T3779] Cannot create hsr debugfs directory [ 40.077445][ T3837] EXT4-fs (loop4): 1 orphan inode deleted [ 40.081558][ T3915] can0: slcan on ttyS3. [ 40.092550][ T3837] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.160048][ T3914] can0 (unregistered): slcan off ttyS3. [ 40.213897][ T3779] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 40.242941][ T3779] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 40.254102][ T3930] netlink: 172 bytes leftover after parsing attributes in process `syz.2.108'. [ 40.263167][ T3930] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 40.279192][ T3779] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 40.290487][ T3934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1536 sclass=netlink_route_socket pid=3934 comm=syz.2.108 [ 40.322369][ T3779] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 40.330253][ T3837] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 40.448988][ T3779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.477057][ T3779] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.501750][ T1874] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.508932][ T1874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.530781][ T3953] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.110: corrupted in-inode xattr: invalid ea_ino [ 40.551757][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.558841][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.566827][ T3953] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.110: couldn't read orphan inode 15 (err -117) [ 40.598301][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.621985][ T3779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.641041][ T3953] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.716819][ T3779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.890779][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.948266][ T3980] netlink: 'syz.0.115': attribute type 3 has an invalid length. [ 41.040235][ T3779] veth0_vlan: entered promiscuous mode [ 41.049179][ T3992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.117'. [ 41.053578][ T3779] veth1_vlan: entered promiscuous mode [ 41.100893][ T3998] sg_read: process 97 (syz.2.119) changed security contexts after opening file descriptor, this is not allowed. [ 41.102341][ T3779] veth0_macvtap: entered promiscuous mode [ 41.121683][ T3779] veth1_macvtap: entered promiscuous mode [ 41.125358][ T4000] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 41.133981][ T3779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.162774][ T3779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.180539][ T4004] netlink: 28 bytes leftover after parsing attributes in process `syz.0.122'. [ 41.190632][ T1874] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.222110][ T1874] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.237409][ T1874] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.270463][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.326869][ T4018] team0: Device gtp0 is of different type [ 41.335294][ T4014] loop4: p1 < > p3 [ 41.345009][ T4014] loop4: p3 size 134217728 extends beyond EOD, truncated [ 41.357724][ T4020] Invalid logical block size (3) [ 41.368357][ T4020] netlink: 'syz.0.127': attribute type 6 has an invalid length. [ 41.379315][ T4020] netlink: 'syz.0.127': attribute type 6 has an invalid length. [ 41.441245][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 41.449393][ T4030] netlink: 24 bytes leftover after parsing attributes in process `syz.4.129'. [ 41.460156][ T4030] netlink: 24 bytes leftover after parsing attributes in process `syz.4.129'. [ 41.498769][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 41.498786][ T29] audit: type=1400 audit(1769927244.145:338): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 41.537216][ T29] audit: type=1400 audit(1769927244.185:339): avc: denied { create } for pid=4034 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 41.538510][ T4033] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.582804][ T29] audit: type=1400 audit(1769927244.215:340): avc: denied { write } for pid=4034 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 41.597630][ T4033] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.602051][ T29] audit: type=1400 audit(1769927244.215:341): avc: denied { ioctl } for pid=4034 comm="syz.0.131" path="socket:[7258]" dev="sockfs" ino=7258 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 41.635854][ T4045] batadv_slave_0: entered promiscuous mode [ 41.705103][ T4049] netlink: 'syz.0.133': attribute type 6 has an invalid length. [ 41.711027][ T4043] batadv_slave_0: left promiscuous mode [ 41.718867][ T29] audit: type=1400 audit(1769927244.355:342): avc: denied { read } for pid=4042 comm="syz.0.133" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 41.741719][ T29] audit: type=1400 audit(1769927244.355:343): avc: denied { open } for pid=4042 comm="syz.0.133" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 41.830240][ T29] audit: type=1400 audit(1769927244.435:344): avc: denied { create } for pid=4053 comm="syz.2.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 41.850155][ T29] audit: type=1400 audit(1769927244.435:345): avc: denied { create } for pid=4053 comm="syz.2.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 41.870331][ T29] audit: type=1400 audit(1769927244.435:346): avc: denied { write } for pid=4053 comm="syz.2.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 41.891878][ T4054] set_capacity_and_notify: 5 callbacks suppressed [ 41.891912][ T4054] loop2: detected capacity change from 0 to 8192 [ 41.906018][ T29] audit: type=1400 audit(1769927244.525:347): avc: denied { add_name } for pid=4032 comm="syz.5.130" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.977348][ T4066] loop4: detected capacity change from 0 to 1024 [ 41.998115][ T3779] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.074258][ T4066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 42.103522][ T4077] loop5: detected capacity change from 0 to 764 [ 42.110044][ T4066] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.153951][ T4082] loop0: detected capacity change from 0 to 128 [ 42.175604][ T4083] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.140: bg 0: block 112: padding at end of block bitmap is not set [ 42.192052][ T4082] /dev/loop0: Can't open blockdev [ 42.208870][ T4083] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 117 [ 42.221488][ T4083] EXT4-fs (loop4): This should not happen!! Data will be lost [ 42.221488][ T4083] [ 42.262232][ T4084] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm syz.4.140: lblock 0 mapped to illegal pblock 0 (length 6) [ 42.422508][ T4095] loop2: detected capacity change from 0 to 128 [ 42.435575][ T4093] loop5: detected capacity change from 0 to 1024 [ 42.455670][ T4093] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 42.468693][ T4095] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.491329][ T4095] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 42.512385][ T4093] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.147: lblock 2 mapped to illegal pblock 2 (length 1) [ 42.527090][ T4093] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.147: lblock 0 mapped to illegal pblock 48 (length 1) [ 42.554510][ T4093] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.147: Failed to acquire dquot type 0 [ 42.555129][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.576801][ T4093] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 42.595356][ T4093] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.147: mark_inode_dirty error [ 42.618205][ T4093] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 42.657668][ T4093] EXT4-fs (loop5): 1 orphan inode deleted [ 42.671624][ T4093] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.683930][ T1874] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 42.708470][ T1874] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 0 [ 42.735154][ T3779] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.792964][ T4113] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 42.828415][ T1874] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 42.855722][ T1874] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 0 [ 42.878695][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 42.904859][ T3779] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 42.952909][ T3779] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 42.988134][ T3779] EXT4-fs error (device loop5): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 43.035402][ T4123] loop4: detected capacity change from 0 to 128 [ 43.050862][ T4123] FAT-fs (loop4): bogus number of FAT sectors [ 43.056965][ T4123] FAT-fs (loop4): Can't find a valid FAT filesystem [ 43.144986][ T4123] tipc: Started in network mode [ 43.149942][ T4123] tipc: Node identity 56a23868b3b, cluster identity 4711 [ 43.157290][ T4123] tipc: Enabled bearer , priority 0 [ 43.177645][ T4123] syzkaller0: entered promiscuous mode [ 43.183383][ T4123] syzkaller0: entered allmulticast mode [ 43.204427][ T4123] tipc: Resetting bearer [ 43.235648][ T4123] macvlan1: entered promiscuous mode [ 43.249103][ T4123] macvlan1: left promiscuous mode [ 43.302972][ T4122] tipc: Resetting bearer [ 43.321209][ T4122] tipc: Disabling bearer [ 43.484907][ T4137] loop4: detected capacity change from 0 to 8192 [ 43.621236][ T4142] loop4: detected capacity change from 0 to 128 [ 43.690290][ T4142] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.751665][ T4142] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 43.857152][ T3320] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.878806][ T4111] syz.0.152 (4111) used greatest stack depth: 7432 bytes left [ 44.274164][ T4160] openvswitch: netlink: Missing key (keys=40, expected=80) [ 44.390574][ T4166] __nla_validate_parse: 9 callbacks suppressed [ 44.390590][ T4166] netlink: 152 bytes leftover after parsing attributes in process `syz.4.168'. [ 44.421454][ T4167] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 44.431839][ T4167] SELinux: failed to load policy [ 44.493964][ T4172] loop0: detected capacity change from 0 to 128 [ 44.523024][ T4172] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.563554][ T4172] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 44.580391][ T4055] EXT4-fs: Ignoring removed orlov option [ 44.602729][ T4055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.629720][ T3316] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.741770][ T4178] Alternate GPT is invalid, using primary GPT. [ 44.748151][ T4178] loop5: p1 p2 p3 [ 44.802124][ T4191] netlink: 168 bytes leftover after parsing attributes in process `syz.2.174'. [ 44.825284][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 44.825345][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 44.836371][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 44.891360][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 44.902928][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 44.918177][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 45.038817][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.134635][ T4210] IPv6: addrconf: prefix option has invalid lifetime [ 45.209117][ T4214] EXT4-fs: Ignoring removed oldalloc option [ 45.218677][ T4214] EXT4-fs: inline encryption not supported [ 45.229142][ T4216] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.244153][ T4214] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 45.251909][ T4216] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.263308][ T4214] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 45.289360][ T4214] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #3: block 1: comm syz.4.183: lblock 1 mapped to illegal pblock 1 (length 1) [ 45.304200][ T4214] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.183: Failed to acquire dquot type 0 [ 45.306318][ T4216] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.323523][ T4214] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.183: Freeing blocks not in datazone - block = 0, count = 4096 [ 45.354875][ T4223] 9pnet_fd: p9_fd_create_tcp (4223): problem connecting socket to 127.0.0.1 [ 45.364219][ T4214] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.183: Invalid inode bitmap blk 0 in block_group 0 [ 45.380276][ T52] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 45.382463][ T4214] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 45.404841][ T52] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 0 [ 45.426475][ T4214] EXT4-fs (loop4): 1 orphan inode deleted [ 45.433102][ T4214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.478471][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.500412][ T4232] ext4: Unknown parameter 'nouser_xattr' [ 45.522412][ T4232] netlink: 44 bytes leftover after parsing attributes in process `syz.5.189'. [ 45.563439][ T4232] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 45.585525][ T4232] EXT4-fs (loop5): Remounting filesystem read-only [ 45.593397][ T4232] EXT4-fs (loop5): 1 truncate cleaned up [ 45.599449][ T4241] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 45.608753][ T4241] EXT4-fs (loop2): filesystem is read-only [ 45.615997][ T4241] EXT4-fs (loop2): failed to initialize system zone (-117) [ 45.626002][ T4232] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.630296][ T4241] EXT4-fs (loop2): mount failed [ 45.656029][ T4232] netlink: 8 bytes leftover after parsing attributes in process `syz.5.189'. [ 45.665006][ T4232] netlink: 24 bytes leftover after parsing attributes in process `syz.5.189'. [ 45.680908][ T4249] vhci_hcd vhci_hcd.3: invalid port number 128 [ 45.701324][ T3779] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.784220][ T4265] Driver unsupported XDP return value 0 on prog (id 30) dev N/A, expect packet loss! [ 45.805929][ T4259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.847387][ T4259] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.898708][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.938516][ T4283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.963695][ T4283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.963930][ T4284] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.203: inode has both inline data and extents flags [ 45.972671][ T4283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.993291][ T4283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.007332][ T4284] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.203: couldn't read orphan inode 15 (err -117) [ 46.020713][ T4284] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.039559][ T4284] netlink: 72 bytes leftover after parsing attributes in process `syz.2.203'. [ 46.056853][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.313892][ T4303] batadv_slave_0: entered promiscuous mode [ 46.334274][ T4303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.211'. [ 46.351366][ T4302] batadv_slave_0: left promiscuous mode [ 46.404374][ T4299] ================================================================== [ 46.412503][ T4299] BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout [ 46.419838][ T4299] [ 46.422171][ T4299] read-write to 0xffffc9000119fe28 of 8 bytes by task 4295 on cpu 1: [ 46.430239][ T4299] shmem_writeout+0x2f1/0x920 [ 46.434929][ T4299] shrink_folio_list+0x1e75/0x2710 [ 46.440057][ T4299] evict_folios+0x2a4e/0x35b0 [ 46.444766][ T4299] try_to_shrink_lruvec+0x5f6/0x960 [ 46.449979][ T4299] shrink_lruvec+0x24e/0x1bc0 [ 46.454673][ T4299] shrink_node+0x68e/0x2000 [ 46.459182][ T4299] do_try_to_free_pages+0x404/0xcc0 [ 46.464397][ T4299] try_to_free_mem_cgroup_pages+0x222/0x470 [ 46.470303][ T4299] try_charge_memcg+0x37e/0xa10 [ 46.475156][ T4299] obj_cgroup_charge_pages+0x23/0xc0 [ 46.480459][ T4299] __memcg_kmem_charge_page+0x9e/0x170 [ 46.485933][ T4299] __alloc_frozen_pages_noprof+0x18a/0x350 [ 46.491759][ T4299] alloc_pages_mpol+0xb3/0x260 [ 46.496802][ T4299] alloc_pages_noprof+0x8f/0x130 [ 46.501761][ T4299] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 46.507673][ T4299] __kvmalloc_node_noprof+0x471/0x680 [ 46.513066][ T4299] ip_set_alloc+0x24/0x30 [ 46.517410][ T4299] hash_netiface_create+0x282/0x740 [ 46.522623][ T4299] ip_set_create+0x3cf/0x970 [ 46.527217][ T4299] nfnetlink_rcv_msg+0x509/0x5d0 [ 46.532172][ T4299] netlink_rcv_skb+0x123/0x220 [ 46.536970][ T4299] nfnetlink_rcv+0x167/0x1720 [ 46.541748][ T4299] netlink_unicast+0x5c0/0x690 [ 46.546535][ T4299] netlink_sendmsg+0x5c8/0x6f0 [ 46.551345][ T4299] ____sys_sendmsg+0x5af/0x600 [ 46.556131][ T4299] ___sys_sendmsg+0x195/0x1e0 [ 46.560826][ T4299] __x64_sys_sendmsg+0xd4/0x160 [ 46.565682][ T4299] x64_sys_call+0x17ba/0x3000 [ 46.570460][ T4299] do_syscall_64+0xc0/0x2a0 [ 46.574987][ T4299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.580974][ T4299] [ 46.583322][ T4299] read to 0xffffc9000119fe28 of 8 bytes by task 4299 on cpu 0: [ 46.590893][ T4299] shmem_fallocate+0x5c0/0x920 [ 46.595672][ T4299] vfs_fallocate+0x3b6/0x450 [ 46.600273][ T4299] __x64_sys_fallocate+0x7a/0xd0 [ 46.605225][ T4299] x64_sys_call+0x1cd4/0x3000 [ 46.609912][ T4299] do_syscall_64+0xc0/0x2a0 [ 46.614439][ T4299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.620339][ T4299] [ 46.622682][ T4299] value changed: 0x0000000000000768 -> 0x0000000000000777 [ 46.629873][ T4299] [ 46.632197][ T4299] Reported by Kernel Concurrency Sanitizer on: [ 46.638348][ T4299] CPU: 0 UID: 0 PID: 4299 Comm: syz.2.208 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 46.649557][ T4299] Tainted: [W]=WARN [ 46.653360][ T4299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 46.663421][ T4299] ================================================================== [ 47.028103][ T4295] syz.2.208 (4295) used greatest stack depth: 6344 bytes left [ 52.093189][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 52.093208][ T29] audit: type=1400 audit(1769927254.745:429): avc: denied { getattr } for pid=4313 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=509 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.125533][ T29] audit: type=1400 audit(1769927254.755:430): avc: denied { read } for pid=4315 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=509 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.147346][ T29] audit: type=1400 audit(1769927254.755:431): avc: denied { open } for pid=4315 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=509 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.172304][ T29] audit: type=1400 audit(1769927254.795:432): avc: denied { create } for pid=4312 comm="dhcpcd-run-hook" name="resolv.conf.eth2.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.194888][ T29] audit: type=1400 audit(1769927254.795:433): avc: denied { write } for pid=4312 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.ipv4ll" dev="tmpfs" ino=2334 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.221316][ T29] audit: type=1400 audit(1769927254.795:434): avc: denied { append } for pid=4312 comm="dhcpcd-run-hook" name="resolv.conf.eth2.ipv4ll" dev="tmpfs" ino=2334 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.245638][ T29] audit: type=1400 audit(1769927254.825:435): avc: denied { unlink } for pid=4323 comm="rm" name="resolv.conf.eth2.ipv4ll" dev="tmpfs" ino=2334 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1