last executing test programs: 2.656499995s ago: executing program 0 (id=16): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x7}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x77ff, @loopback, 0xffffffff}, 0x1c) 2.531864373s ago: executing program 0 (id=20): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0xd25f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2000004, 0x2, @perf_bp={0x0, 0x2}, 0x10088a, 0x7ff, 0x4, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0xfffffdffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom(r2, 0x0, 0x0, 0x2001, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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") ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x90d2, 0x0, 0x43a1bd76, 0x7, 0x1c03, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x87bf5ac905ea0f7f) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xe}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8f, 0x11, 0x2, 0x4, 0x3, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x200408dc}, 0x800) 1.967307455s ago: executing program 1 (id=28): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRES8=r0, @ANYRES64=0x0], 0x1, 0x2a9, &(0x7f0000002080)="$eJzs3c1qWk0YB/AniUl8szHwdlWyONBNN5WYO5CSQqlQsLhIV0qTQIkSMCC0iya73ktXvYfeQS+jN1AXAYseGzWx6Uc+TqK/H8h5cM4fZgSdEWa0vtE62D082t/5/1vk80nkIk4+n0ZELMZSpJ58Sa/LEbEQKzHuJACA+6ZabZQHRS7rnnBT2u1yo792W73QUvuUSYcAAAAAAAAAAAC4svrG6oX9/9GNWB/b/78wvC7a/w8AM+Fs/z8zq90uN9aG67dJ9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2en2eoXeJY+s+wcAXL8rzP/dW+wmAHCNfP8HgPnTnZjrF8L8DwCz79XO6xflSmW7miT5iNbHTq1TS69pe3k/3kYz9mIzCnEa/fXBUFo/e17Z3kwG1qPeOh7mjzu1pcl8KQqxPj1fSvPJZH451sbzW1GIB9PzW1PzK/H4UcTiz4EWoxBf38RhNGM3+tlR/kMpSZ6+rJzLrw7uAwAAAAAAAAAAAAAAAAAAgNtQTM5MPb9fLP6qPc3/xe8DnDtfn4uHuWzHDgAAAAAAAAAAAAAAAAAAAHfF0bv3B41mc689tfg+PMt/2T2KUfHfH72q/1bkImLsmXzcjSEr7mnxuzd1xh9MAAAAAAAAAAAAAAAAAAAwh0aHfrPuCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABkZ/T//zdXZD1GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYD78CAAA//+haesQ") r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfc, 0x5, 0x0, 0x0, 0x0, 0xfe, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xffffffffffffffa3, 0x2}, 0x80, 0x7, 0x0, 0x1, 0x8, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "60000100", "9de66ebc3914c06f0f109088d190e700", '\x00', "f8dde5bf3eba23db"}, 0x28) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0xfffc, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f00000004c0)=0x5, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) fstatfs(r3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000008406010000000000000300000d"], &(0x7f0000000f40)=""/4079, 0x4a, 0xfef, 0x6, 0x4}, 0x28) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) sendmsg$nl_xfrm(r6, &(0x7f0000000840)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x8040}, 0x20004) io_uring_enter(r7, 0x8b2, 0x6934, 0x55, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/170, 0xaa}, {&(0x7f0000000100)=""/10, 0xa}, {&(0x7f00000002c0)=""/98, 0x62}], 0x3) bind$unix(r5, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r5, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newchain={0x38, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0x10, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x4}]}}]}, 0x38}}, 0x44004) 1.966243155s ago: executing program 0 (id=29): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) syz_open_dev$vcsu(&(0x7f0000000000), 0x80e, 0x80) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x2) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x64, 0x30, 0xffff, 0x3, 0x0, {0x0, 0x0, 0x1300}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x100002, 0x0, 0x20000000, 0x8}, 0x256}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0xff}}, 0x14}}, 0x20000000) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x18, &(0x7f0000000540)=ANY=[@ANYBLOB="180000008f080000000000000010020118110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014002000b7030000fcff00008500000086002000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8feffffb702000008000000b70300007b0d0000850000007f0000004500f4fffcffffffbf91000000000000b702000001000000850000008500008d480000000000000095"], &(0x7f0000000080)='GPL\x00', 0xb, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) 1.618649366s ago: executing program 4 (id=32): syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000380), 0x1, 0x2c4, &(0x7f00000003c0)="$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") 1.503057083s ago: executing program 4 (id=34): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000002200)=[{{&(0x7f0000000380)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x18}}], 0x1, 0xe840) r1 = getpid() syz_pidfd_open(r1, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=b']) r2 = open$dir(&(0x7f0000000000)='./cgroup\x00', 0x40000, 0x60) execveat(r2, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)={[&(0x7f0000000140)='tmpfs\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='2$-*]', &(0x7f0000000200)='tmpfs\x00', &(0x7f0000000240)=')!()}*\'-\x00', &(0x7f0000000280)='tmpfs\x00', &(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000300)='{u^[\x00']}, &(0x7f0000000400)={[&(0x7f00000003c0)='tmpfs\x00']}, 0x1000) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000440)="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", 0xff}], 0x1) 1.253696757s ago: executing program 4 (id=36): r0 = syz_open_dev$loop(&(0x7f00000002c0), 0x3, 0x210400) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000940)=0x5) 1.172435742s ago: executing program 2 (id=37): perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0x800, 0x7, 0x800, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81800) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b1a439, &(0x7f0000000f80)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="41319d36b19da0f92c34d4161aedb4d9c117bb97d9a14da38deb4d799f7396c16e53eea9b38952392679dc9965aff692fc7a1de3490b4e22f3468c98ec62faff6c802527cda5cb48c5bc97b57252bea2f306513526e3e61d4e206934c90150ba2c325365d34a4866416a647a2022e5485163e3fad30730c80a46b63900f5dfdd845440d244a1e889fb14a29c06fcc85f976afbb0ce220bde0da45028db74413dd6a37b7b63c2b7a26169fc2a44d210bd17af7173aa72d2ad45542299334fe9576104e3e3e7d25997fe6c8bb5fa15b761725a39fedaf8d5533570ba136ac826592163351666324320c93c98c4", @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) renameat2(r1, &(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f00000013c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="130300007800911fdabcf8b3077fa54a07"], 0xfe33) 1.171798612s ago: executing program 4 (id=38): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80d5}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB='\b\x00'], 0x20}, 0x1, 0x0, 0x0, 0x28044010}, 0x20001040) r3 = socket$netlink(0x10, 0x3, 0xb) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) r4 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000000)=0x9, 0x4) r5 = memfd_create(&(0x7f0000001480)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\a\x00\x00\x00,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2y\xc8W\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bO\xf0\x1ab\x96\xcf\xbb\x15\xcf\xfcNm\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xfa\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xean\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1L9p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xeb;lb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x02\x00\x00\x00\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13', 0x1) fcntl$getownex(r5, 0x11, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0xa, 0x889, {"00000000002a6c9aec27d8610f00"}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000500)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="9000edff580000935c40", @ANYRES16=r5, @ANYBLOB="0700000014000100fc02000000000000000000000000000014000100fe80000000000000000000000000002214000100fc000000000000000000000000000001080002000000000014000100000000000000000000000000000000001400010000000000000000000000000000000001080002000b000000", @ANYRESDEC=r2], 0x90}, 0x1, 0x0, 0x0, 0x4040}, 0x40084) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) r8 = socket(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r3, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="600000000a1400082bbd7000fbdbdf250800030001000000080001000000000008000100020000000800030004000000080003000f000000080015000200000013000300010000000800030003000000080006695996af0300000000000800150005000000"], 0x60}, 0x1, 0x0, 0x0, 0x8850}, 0x20000000) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) 1.139291314s ago: executing program 2 (id=40): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x3, 0x155800) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x6, 0xad, 0x8, 0x81, 0x0, 0x4, 0x22060, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x4}, 0x5a0, 0x1, 0x0, 0x4, 0x5a, 0x2978, 0x3, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7, 0x4, 0xfa, 0x6, 0x0, 0x5b2f, 0x1, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xb02bd03f4a995e7b, @perf_config_ext={0xc0b, 0x9}, 0x2000, 0x8, 0xf03, 0x2, 0xb, 0xfffffffe, 0x100, 0x0, 0x8, 0x0, 0x4}, 0xffffffffffffffff, 0x75a, r3, 0x0) 1.0340923s ago: executing program 0 (id=41): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xe4d24}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040d0}, 0x1090) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0xb, 0x0, 0xffffffffffffffff, 0x1c90, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="8d57fe99e378225d590b73109567e9cf044f7da52436c7c5abd81b7577e8e287c6683d6cad6e75fd53fd68d32bf176b448a754c9e32ec32db26453da27aa4acc30b234de3332690c705eacde8d8aaeb521b06fad5c7ba044c1cf7853f51a1485f7fd80b5594d4dc455b285621ee7979a1413b0bcae5fdc63e0c4b0b18d04449e471d2c8da92e4a0a5006121921fc4b41a48796988b026e2f3fa93c2016ccd8576fbad891c3298a02fda4e831691c57767b7c72b0b114913045304ed93f0d161e150c214b9b5603093f177ccc", 0xcc}], 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x5}, 0x0, 0x10000, 0x8, 0xe9cf891527523525, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = open(&(0x7f0000000240)='./file0\x00', 0x9c200, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x2, @private0, 0x3}], 0x1c) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000000), 0x10000000000001f7, 0x0) 1.026802371s ago: executing program 3 (id=42): r0 = socket(0x840000000002, 0x3, 0xff) r1 = accept4$x25(r0, &(0x7f0000000100)={0x9, @remote}, &(0x7f0000000140)=0x12, 0x0) sendmmsg$inet(r1, &(0x7f0000003780)=[{{&(0x7f00000001c0)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f00000003c0)}}], 0x1, 0x40480d1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x325) ioctl$TUNSETLINK(r3, 0x400454cd, 0x112) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x45, 0x0, 0x3, 0x3}, 0x10) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r4, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r4, 0x80000001, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYRESHEX=r1, @ANYRESHEX=r2], 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000020000e780c68bbd9982032cfe0bf958b22fc38d3488b6a2836916a2c5eade03d434988d74032aa5c69378c0c1377b9cbeb6ead2dd142cd97f396a14f6868c8a3d281bff24619a38741494bc0a45750e0d105a85fac2eefd5ccfc377dcb046d55547d546689b46518b177db83e7ef9de8ed6f1cab89a6a3c69a27692d2e99977f10e8aaa2f08aae370e7494e51312123c55adcffa92141d0ba83a7f848d5c2647274203aa51abf230aad1576a48e3fce9636d7d5099cf51307758d972fade711cb855ae96e2a7b"], 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRES16=r5], 0x24}}, 0x0) 864.04596ms ago: executing program 0 (id=43): bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x441e, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x7, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="f3910e39642ca0f57ed64bd92cb7540100001000010026bd700000000000200100"/61, @ANYRES32=0x0, @ANYBLOB="fc01"], 0x154}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000400000001000000090000003c0003800800030004000000140002006272696467655f736c6176655f3100000800010001000000140006"], 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x3d}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x158}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 820.285003ms ago: executing program 2 (id=44): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x84) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, &(0x7f00000000c0)="2c884d6c954486b4701240b666f9df2ae6e36493df159e4af435e449a45ff717001656272b6b13580e4c018b3f903698c09199f685fff42cdabbdb424d5c6f5b48312be244544bfdcf2b39c1b0914e82b77532378bb132190b05183980efed66b617512e13d91089da0439d6474d8ad525", &(0x7f0000000400)=""/185, 0x4}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) (async) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000140), 0x4) (async) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000140), 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) (async) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) 756.977116ms ago: executing program 3 (id=45): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0xd, 0x3, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0xfffffffffffffd78, 0x5, 0x7}]}}]}, 0xac}}, 0x0) (fail_nth: 1) 680.470111ms ago: executing program 1 (id=46): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x370c, 0x100, 0x0, 0x6, 0x401, 0x9, 0x9, 0x6}, &(0x7f0000000040)={0x1c3b, 0x3, 0xc0000000000, 0x0, 0x6, 0x5, 0x9, 0xfffffffffffffff4}, &(0x7f0000000080)={0xa2b, 0x100000001, 0x6, 0x0, 0xc9c00000000, 0x100000001, 0x1, 0x2}, &(0x7f00000001c0)={r2, r3+10000000}, &(0x7f0000000240)={&(0x7f0000000200)={[0x6]}, 0x8}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0xd, 0x3, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0xfffffffffffffd78, 0x5, 0x7}]}}]}, 0xac}}, 0x0) 624.351144ms ago: executing program 2 (id=47): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x7}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f00000024c0)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x94) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 622.948464ms ago: executing program 0 (id=48): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_pgetevents(r0, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], 0x0, 0x0) r1 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x5) fchdir(r2) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000180)='./bus\x00', 0x14000278) r4 = open(&(0x7f00000000c0)='.\x00', 0x48800, 0x50) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) r5 = timerfd_create(0x0, 0x0) fallocate(r5, 0x2, 0x0, 0x6) getpgid(0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1600000004000000031000000900000000000000", @ANYRES32, @ANYBLOB="0780000000000000000000000000000000000000e6370968af4c8b3df7209e441dc8579263d0f24b6fee266a68a5e63bf974da3ca975b3d881426cf3b00a3f2985bd169854c70b9f65a2770473b88ed5d5523b50868b2475", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00 \x00'/20, @ANYRES32, @ANYRES32, @ANYRES32=r5], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000007b00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000480)={0x2, 'veth1_vlan\x00', 0x1}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r8, 0x0, 0x0}, 0x10) 439.278195ms ago: executing program 3 (id=49): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) utimensat(r4, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) setgid(0xffffffffffffffff) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000100)='^\'$\x00', &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1414000021200000400012800c0001006d6163766c616e003000028008000300030000000800010010000000100005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaaaa000008000500", @ANYRES32=r2, @ANYBLOB="a49a08000e430b8a455182e1362131a8efec8dc1f568f2f936863d9fe169c01128a1ac13b263068ded841000cf060000003e1014a5cae7d36ee2ed9637de5352f9b562fe23b0728a7adf1b49b7f8ffffffffffffff"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) accept$phonet_pipe(r4, &(0x7f0000000280), &(0x7f00000002c0)=0x10) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 400.847747ms ago: executing program 1 (id=50): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000340)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300000, 0x62) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a58000000090a010400000000000000000a0000040900020073eb0f310000000008000a40fffffffc0900010073797a310000000008000540000000081400128010000180090001006c61736e0000010000000000000000000100000a00"/128], 0x80}, 0x1, 0x0, 0x0, 0x4044010}, 0x40) setns(r1, 0x24020000) syz_clone(0x50081091, 0x0, 0xf5ff, 0x0, 0x0, 0x0) 312.461892ms ago: executing program 3 (id=51): r0 = socket(0xa, 0x3, 0x3a) shutdown(r0, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000001ec0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r3, 0x0, 0x7ffffffe}}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'sit0\x00', @random="0000230c1100"}) sendmsg$BATADV_CMD_GET_VLAN(r0, 0x0, 0x20000801) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)={0xcf57, 0x2925, 0xffff, 0x9dff, 0x8, "1762243aacc3af60"}) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) time(0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) chroot(&(0x7f00000002c0)='./file0\x00') dup3(r1, r0, 0x80000) syz_clone3(&(0x7f00000006c0)={0x20040080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) 311.735212ms ago: executing program 2 (id=52): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800090000000000010000001c140000fe00000100000000080001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) 268.572735ms ago: executing program 2 (id=53): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1203, 0x48a4d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_CARRIER={0x5, 0x21, 0x3}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) unshare(0x2040400) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000480)={&(0x7f0000000180), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r3, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x8001) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000040), 0x1b3, 0x0) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000140)={0x2, 0x0, 0x98, &(0x7f0000000080)={0xffffffff, 0x0, 0xa}}) syz_read_part_table(0x104d, &(0x7f0000001080)="$eJzsz8utwjAUBNDJ7+VlRUvQARs6oQGKyYYq6IYygmwSqAAhpHM2Hn801g1f1bzSf3JJuhqSY/ZlGbaralmmZFw3Q59bkr/53pejZms679bQJTlM7Vwevbuq8flxe7p+fEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+AGPAAAA//9YsAg0") r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e80)=ANY=[@ANYBLOB="80010000", @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf25150000006c0101800d000100"], 0x180}}, 0x20000080) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') getdents64(r7, &(0x7f0000002f40)=""/4098, 0x1002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x13, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r11, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000004c0)={'lo\x00'}) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0xfffffffffffffcab, &(0x7f0000000280)={&(0x7f0000000ac0)=@ipv4_getrule={0xfffffffffffffe78, 0x22, 0x100, 0x70bd28, 0x25dfdbfc, {0x2, 0x14, 0x80, 0xc, 0xe, 0x0, 0x0, 0x6, 0x1}, ["", ""]}, 0x18}}, 0x40080c0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x0, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0xffff0000, 0xc11270e446e71eb1, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x2, 0xb7, 0x4, 0xe8, 0x6, 0x1268, 0xb2a}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) ioctl$BLKFINISHZONE(r7, 0x40101288, &(0x7f0000000000)={0x1, 0x4}) 243.643396ms ago: executing program 3 (id=54): close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a0f8ff4100000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x96, &(0x7f0000000080)=""/150}, 0x94) epoll_create1(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) unshare(0x28000600) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xb0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x5, 0x8}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2d09000000000000000002000000080002000000000008000100", @ANYRES32=0x0, @ANYBLOB='\b\x00\a'], 0x2c}}, 0x0) signalfd4(r2, &(0x7f0000000000)={[0x100000001]}, 0x8, 0x80000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r6, 0x4004743c, 0xf0ff1f00000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$getflags(0xffffffffffffffff, 0x401) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000240)={'veth0_virt_wifi\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}}) fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000004100)=ANY=[@ANYBLOB="de583e537609324e6a4b8e52eb468484cfb01ea746fb4e2b29128521b717760a3ec4a26c71bd997eba046fd229af017ebaec05434f58a78015be4b4a1795cdb4219383c9b09b6cc6c6e6135ba4158b0d2714dacf14cdab999916949d9da22e5834562b8bdad6100729caffb71e8c8a3c350c6e6322053ae4c0ad8be19c97a9734dcedb97b40539b5f2ffd78423afa9d6d0f629527ae05311858bea3009dabc8a481752e1bb2ca008806caa8f912f929ac3a2db7d9e7e02389c091db541f3285529545cef9e8395b419c1ce5c5d32f17e447cb24af4ccf6f64c5c2bc861fefd1e4008cf667b763d44cf17a19d5c8495cd809998276c12a89d137d38e59b90f9ff3fb2467e8eb0d5534abd924443a558fc775769a0e76aee1b7890fa4a9178a1172876d9b41b8388103728c7663fd7677b0178688b74a5fd2c3e625ecc4b8cee5d2eacff82c71c1e0b1347b874a309ac07b4a3e034f6295c5de63d0f7d6390c2e67dbc07572b4ea568c788214670c6cc143fad5d99d4f469e3ae8551f14f290e9f88673015b34af633bafb9c8319cf3c681ac8032c3f9815b18619be31fe5db7059665040517359a65aa1ada5832cae8e15dd88391de25cc6fca6633f69ed9d8fb02a433be1d7adb712795349f1cf8ce89c8b1a7f446e8ad3588bc396e539f686e8b086b0f19bb388c54f5e02557e5127a3e9cc7235f417e9dbdf1cf651033ed8ee91cb970dc2a26dbcae7d2944511ba13dadff637957c4c287bc3c81578957b514a8e6c62dd276b39430e816f7baa3463aa3e6a0fe84ed31254d471138c01bf411a46dbe00577b8425d5be46e804611ee292442dd256557fda7e26e45bcaeee8a5ff2f7573e2978c6a8758ffac4e71491979b634d537979cf7b4daad85de6d10ad9e219ce566e7223e81e577aa050a7c98c8dab7f6e5bca0cf10646b319e6845efc9e92b4c8ac5fdc9899746346896bde19703519d3c3cf347c3fb777fb60231c3888645e68ef2cf63ac91e518228160d07710856c3575f9b1fb277d136c66c1b57a3485cf9809e9f3560415c1efc763964b55ae5f06dcdbe183f25e90014705b91917d8250ff49fe0968806095a3cdb031c59a58eedf62c2e4e79d13876d66e36836ce94ba2b3166ea491f26486913bfcdfdd9612ed41db8966fd6e26e78c9746c7aa4e5862593a22af571cd9822cf40dbb36d47f2ae14cbc095417ffe794651a16fa2d18dfab8a2bb3a27b2ea14ab66e1c892dec12c44f157a3bf207366ff3d08714f7fd0db8ab0f742b3e9b0c562d282416e8e73539bb18646eba2078eadd6768b0f739c8d66dd53aa7be9bdc5ee3802dcd388dd240a4519a716d8f30970e89b20c86067782b97bc9d85273ec77563c996213852d2d2db7b8bba6e7a90c89e753787bba0b98b1997bb3690a1732f86e45ad088f50f3124b9f4913fbad6010c9f69ba721b8bd377d8f29857b4e8f6cd3314235ca81c6f14653d5e1f3a6d9fd0556483b7d3ca5089581986ba0c56f62f95102a157d6761ba2323b873c6b0d79fc8380cf31c676172ad76942ec881f20710339d042705c25193f95b810085b0b85c94244a711989deb3922a8691b88d203097a6374dda233465834f9f476565f6f54e2b70062d6688ffd9123acba7c9aa7c728037cda4edde84685640ea6f077c195d2274062b96f80c6ab46be9197cd6fab86835d8f48a0ec0c2ef3798ac4f4d2af93311b256ebb2bba9a1dbc0089b0783ff6e1bdae047a6e46676e30e10d14e45e36578a7c5f6bbfad2065abe225a542b21b7f5166bc57c1fdd6f4f7725d22b25760e993555ebc9bd2e58d8c925b51b7dd4828d36eabf4fb7906a93b8d7042f5597738b4bd412a9dd848fe148507aa6415dbb460f32666f3ccfeabd8078714ed2de6c24951b06961b6480d7703cea3c54221dfc60e92679b2d35f944238dc83988eb6ed047103ccb9145af025ce36e17df6ed1329d4db6dc650a6b1f4f89cf556ff2c61627f410d7e85aa97085b2532f3ceaf5a4423e5fcf7d6bb80b3941b35252158075d614617d3f536ee63b9b0e23086a515221af7568e4deab2e42f6a1e469c89f62f91964548e774da4c44133116bcd8f53df64843557aca1441c045a378d37e3ef764903ee9984f26a870e25490b372d8cc42767c01e5750ee96cf9d0e03b9553827d4919279ac72d15655dd407f8ffecbe3f9a0570d4074be23a0d503c4635e90662817bec3cb7a95a2d3acec577d0c55d1eb08e3598f20a7110eef0dec8195c009a4bfe2b72608c31afff56a9a3666234c640c08aaca43aad714889a50f9538873361ff6c4a2b147c39051098bbea5e0a7385690a1834945dc49e8b4601aec0dd7a5d33864d0bb208ea2731058114a9c8c33a643136f87048dffaed6bffc2ccc2a69693738c058301a59b2c69c2257f0c20b2da112f77377413720c7754d0162eabf9aae9b8d37c6a72509bb5ecd4d7d053c6fcc99887bc40b13a087f422dde22a37f481c68b495bc0a6bc115f90b4ce2e44215a73fd93a96b0edfbb2b3287804623b83e6b6515f286643f38849706e470d8b09db16d260d964b388ce3b09b243a9f255ae11afc7537d419150aa620fc94e0966e26220c6b92c7c80b12af0788a54d9aa603cf3b12dcb651a1296be30c7c6176bdc9ac2d8b203db25cdb83c9cb7208ffeeee2856d60628dc55d279ccb224683188fd6dde3eb81685ba80b4736331d1c63ee99fa7ce5d86be0e80247bdf244ea9a03710a8b2b7a39fa0f72a6a9c5cf5a55c8b20e68ac321c4f1088fc22b6e81f4867d32047bcde2934ba20b029f010ed6cef6b1f9d05aaf5f0036468faea0919bffb8f6ac8740667a79ae24d37561260448174308f1865e42dd72f9c720208a0771ed8e96829d84090e26e0069ad29fc160bde2e3cf446921d8257c84a92fcb9c9d0d168368f92848990123fa000de53d4f150f01ea4ec95ca44a63047a98bed47d07826f0889920ba65cee959745a8df2ff3289c9369b810d332403bcbb01d0db90d64adc1e269c4555a7ea41ad10df3e06a3c8d73d0fd7e21dcca4fadb5225ffd2f52e67a76eb2c90b9211a32da4c26f5547803810254f2dd379d1a555e4ab52fbe0a36c8cd3c84aa8025e48583e42150c64fe3b3b2bd0e29d75d5da6f068fe5026dedbbdaf4bbc15ea6c0845617e78b9292e79d81c1efc2f0a57ebb9c7679f78523007d61a4353cf1b2254674483da00c064272b29b386d28ae8c16fb9176927b7ae4786f1353502d99fc5e18989b1303235ceb0dc404aa5308ed0c8960040e458315a35066530a72536ef6f68ca7a381a44dd3a8df2e3a7665e910f3c6da1d6c780c31d0def5150c728552eb28d309b0840de2fbf35b36b4701bcc3db76f3432d96c1f79249733c05b9c081ff684b791e23572436119248fc515314e391aba55d803a13bf197a61d277fe8a4cea8d41182bd82e5e9ff03746da2daf1360ba5d2750d39658da50158c3f25cf92f8f0c8eef92d037f2eddae06732260f70aa1eb0ce3cb03f17509d9bda128cfafe047dc787da4d1d67ba19e9fb71e3cbd93077627075d21fe91c97ce38dbb2d9b9d967917fa0e555cc841e3f3970178a5ee2411216926eecec9647e0cf5752e555e63f4489e290ab8b6264d82abbb24637e103e6246b18ca37f9bfca0431de1d76ccf47965201b4e4656566fdb4d58000f4ba232eb6cc1da1086c81cc49c4022540b5c919c072596b50ccc45a8e4875b8c9ff2e29aed37ba3c843da4b5d9c8f63acd7b13611561650c42198b88a62f04d8c05588fa18c405c7ebaa37cf651510a20d0b0b46f7a88ed1bbdc4c4d6f28749216784c3773451b05a464d15ec616357e290ad75b3e44d5e69ad9265b80ad5dca0a20e2d9cbb0f7d4384382caa8df37eeabb1c278a57ac017f96e6a3fd5eddf20fed773f6ef82bbd031c5acfa9e9f888d4885bee2a886f86e17f0119fdd3097840cd54834eb2cb91e162d209d81c956cd73efa61052ce99bccf34bdb5aac658753ae8ac3144bd85664dc00a99ae11ca2ec37395cec1eddab9f9e96449bfce54966e51187ae382bf838348099421c1a13eb057a9755d1f5d127daf77a9da97d199e687d675157738ea053a654107fc20f79fa2163e85fbfcbee6d74592c16329fa4813fe280466c8b816b46df97f9cbbab7c42fad5cec1a33401610f20df59dceabf7a841777c78683e7c74fd1a05b50489cc6fd5a196f39763c58d5ec2a04cda5b35ce4447bb8686d1a5a35c2649fa4e2819c02174c0e1210f9c70997fcf71951a90589c61ae16c58bd1796e9287abb87f4105a3079d46cbbd3a6334ed590d693331bfbcb1c0e139e706fb303fcd75f26919ac4db05231fa7f9f79452c4913900ec24bde2c191e5ea5a6a0ecf42a5c55df30270877f62253f8036bb7c7d79ebfaa525e40ba0e0d6f651c82140fc98882efeffd1b860384f43a2c28179acac208380c26e3ce34a0cf45a5d7ecefbc0edb8d82b10b805c0039a4edd6421f44d3401fa86c782574f32f57eb0dc7771dfdaf5efc2791e4353ad1e0f858fba5280ab064eaf2d6797a8d12afc1e26ab6102ade74750168c3d0e7c93502c703359fbe7f03a7e60ea92d4abbeb4e10dafb5203f9b20c6bdf9a6e0c4aa86a6e3dcf16878643809961adc52d6fdba30966fad0c99265db44c816ea8b22735096505119c0cd1004147cd7694da1020a504fa650a0e009e0a77390ff2f4ad7896cb33b15aa16a4673748f8cfdf757ea7bc13d32fb7fe8b1af9c635d82a8df59c4aae4bd21c5c43566f9600a3b3256052c315a1c0607347f63088c91994feee76267ff70931d94034734bce519576571c36003420379947226d3c10a7d06db2817132995543528a0855d55758a27505a58771233be7cf7758f54886f31082cdfe2fa9b45c5754847073d5ca103d63067181ab17cf3be5b5ef7248b87f5bb4eda73c70143339b936e1dc52c0375f881cdb66e77307af2869351bde6e58e929196fa73cf12de1b87ae1eefc2606e99da5ef3a06278ad14f4a632df65dc8086d85fca5176c889f758a0e2ccc448f52c9aef84db056062e4a998fd9c613cb00b1769f6922ffe32afc25c824ff2f1775f0f07ad592fd3553c2306488bc19e9e0df01ff313be344c4d29ee3b75b745c9da66f6efadd25f79a8b9d48f96723576f706fd387a06eaf2993a4f7a2f249ba437c05e9a6664d7d0b9ae2fc7233ae004c0515d051524947b0365b830099553f067604637e755ce5bb1282a110dddb79acaa88716d5f48c1eb8211c599af56946285af40122f634cef3744718c09d94f04779f2e992c75d9c773f1ecd34745d7aba15ac5942c3c131eb74bf7fd6cbed070f475f32d762c5647ced0d5ad41435188311427271e5aeedd40a4a273d33150d8ca860eeaef2e324b462a3d499770dadab83f68576b27875713ea8b76e09d2c4887dc65fb8350148521f27f9e82e35e76ec0f877a548503dced0881a7cf5d3b621e6b6eb894b984bba742d9d636813749cc821b562c0cacd72abde3abce45ff8f10f6f5bf5bf6f6c4ba9fb1c5c0d07108717ab0232df11f8f23845c7b43e169052af5729ce17be783bff22a457af37d75caacc1f4348201464b51455946617fccfc125f01ca4769320e68f24721718eaf1cfd4b970f1fa9352388524e62c8eb9340fbc5c0193895262f7bc7bd5a5b6ec56b83c52ecd4cad630ea65f18e3f85dc6f122cbf82d717f7598cf91cd54c5614576aa0d6450b21415bf17c62e344463e4463f33c0eb7aa24351c128784de36ec3ef4c17bae62a665b88be353afb0a80f1e1277d9f09198f066c5657c11e99c3143e706bf7d559666a9bb94e89556f90b78db052436a283c9270cd3f84846906ecd561323690a6861119940445d81e4347e91e6d0f9b37bcd16b9dfa81d5e3f238940542ba3cdf884e4fb1adb188897290be1de29e5d56c0fb32fd2a6bf68ac9661f2d8e919140208c30ab7a89b5c3daf6d349d0fb93d8e173430576d59e422bc5d817cf9308e8bb06caded345e80bb4615eef8ed5936ab93e9f49e2d8a17d6e2ecff13b7e7a15b5c", @ANYRESHEX=r0, @ANYBLOB="02961d83fcb387fc4d6f11"], 0x14) 164.539551ms ago: executing program 1 (id=55): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x8100}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x0, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x40}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) 160.692001ms ago: executing program 4 (id=56): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000dc0)=@newae={0x40, 0x1e, 0x601, 0x70bd2d, 0x25dfdbff, {{@in6=@remote, 0x4d6, 0x2, 0x3c}, @in=@multicast1, 0x75, 0x3500}}, 0x40}, 0x1, 0x0, 0x0, 0x20000004}, 0x4040010) 147.998651ms ago: executing program 1 (id=57): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x2) (async) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r5, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) getsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000040)=""/28, &(0x7f0000000080)=0x1c) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x40047452, 0xf0ff1f00000000) 96.577534ms ago: executing program 4 (id=58): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) fcntl$setpipe(r2, 0x407, 0xb) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x80, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={'wg2\x00', {0x2, 0x4e21, @rand_addr=0x64010101}}) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e24, 0x3, @remote, 0x100}, {0xa, 0x4e20, 0x1d, @remote, 0x9}, 0x0, {[0x0, 0x4, 0x6, 0x8, 0xb9, 0x6, 0x4]}}, 0x5c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r5, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x10100, 0x20) sendmsg$kcm(r6, &(0x7f0000000380)={&(0x7f0000000100)=@rc={0x1f, @none, 0xfa}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000580)="7705e14e5e0e35b9f317d9aaac1265f32a2ee7ff0d98f13ca6731bc1b9826b0dd34f77f225de469aa1ebf41220d48d5be60ac7f62eb0bcb619f128566dd3cc9bddc54b1bccfe515311718510e4f34f725f0e80a5420b4a0a21426a62ac583a76382475f17c67150bbb0a86bc0bf0d44cdcb7cddda863037a26a67dc3a82e4ca4ccc0ae5b8252ae7fc0426e46cbe8da442357035ff3e3882ab3abc098808ef4e049516f8a7eaa042e1ba7ee7aa037a41150aaebda0337a7463eae0b4c961d90a9c7cdd46e1f645238a63a9957d946d5aead69079f", 0xd4}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000160a01080000000000000000020000040900020073797a30000000000900010073797a300000000004000380080007"], 0x60}}, 0x24040880) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000740)={0x0, 0xc9, "7acaf98a2531d589d13ccc22920f48e57c4396d9185ae9086a37185a8acbbd46abd8e3cdb1be6f20e20760e5efed8971e04a3846d6429b42d5dab7efdbd97dd184995a690b2d1557905f54eac760714f304121aaa22062769370106197fc2fe2f4faadf65559d075bfbfc96627fde517558d0ffcff2def5b021c901463203e187296abce6effb0d09f09503e6b831b74464a27160616296598a72441bc199505d65ad6117b6f806ada39edd5ae6aeb53735e23d9788032949f063622de76c6aec41de4f71e0a7f3d33"}, &(0x7f0000000840)=0xd1) mkdirat(r4, &(0x7f0000000440)='./file0\x00', 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000dc0)=@newae={0x40, 0x1e, 0x601, 0x70bd2d, 0x25dfdbff, {{@in6=@remote, 0x4d6, 0x2, 0x3c}, @in=@multicast1, 0x75, 0x3500}}, 0x40}, 0x1, 0x0, 0x0, 0x20000004}, 0x4040010) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x34, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x6fe409ce1fc0bb98}, 0x4000) 65.798737ms ago: executing program 3 (id=59): lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000200)={0x0, 0xfb, 0x9b, 0x0, 0x4, "7ae2560b03f21689e9846a78384af81a", "b9f8b251f1eab05423fd74e18ccb58b4e4052b6f4a3c5201b2f351e12e221128b7e8098a3ec6722e8e1996f8fa590603db19ac05872006c25f3daaf522e76ac05a9a73627a1ae0cc7117be06ecdc4d99183ed10bfa85708d69425c9227fee13e6c660eae00edc5636ffae5075f3d3fbfdd0687fca9143f02fe492ea7ebc55852b2229d1f2eb9"}, 0x9b, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") r0 = socket$pppl2tp(0x18, 0x1, 0x1) close(0x3) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000040)=0x84) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)=0x3d) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='.\x00', 0x80a5, &(0x7f00000008c0)=ANY=[], 0x10, 0x0, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fstat(r2, &(0x7f0000000100)) 0s ago: executing program 1 (id=60): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f0000000680)='g', 0x1, 0x841, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000240)='+', 0x1}], 0x1, 0x0, 0xf2ff}}], 0x1, 0x4000045) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.151' (ED25519) to the list of known hosts. [ 33.279025][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 33.279041][ T29] audit: type=1400 audit(1770582669.295:70): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.308169][ T29] audit: type=1400 audit(1770582669.315:71): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.310547][ T3300] cgroup: Unknown subsys name 'net' [ 33.336663][ T29] audit: type=1400 audit(1770582669.345:72): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.469049][ T3300] cgroup: Unknown subsys name 'cpuset' [ 33.475415][ T3300] cgroup: Unknown subsys name 'rlimit' [ 33.647045][ T29] audit: type=1400 audit(1770582669.655:73): avc: denied { setattr } for pid=3300 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.683445][ T29] audit: type=1400 audit(1770582669.665:74): avc: denied { create } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.704005][ T29] audit: type=1400 audit(1770582669.665:75): avc: denied { write } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.724461][ T29] audit: type=1400 audit(1770582669.665:76): avc: denied { read } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.744745][ T29] audit: type=1400 audit(1770582669.675:77): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.769905][ T29] audit: type=1400 audit(1770582669.675:78): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.793251][ T29] audit: type=1400 audit(1770582669.695:79): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.821035][ T3303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 33.887738][ T3300] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.961390][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 35.995223][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 36.037973][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 36.060847][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 36.108611][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 36.138528][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.145642][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.152986][ T3315] bridge_slave_0: entered allmulticast mode [ 36.159837][ T3315] bridge_slave_0: entered promiscuous mode [ 36.185882][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.193040][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.200319][ T3315] bridge_slave_1: entered allmulticast mode [ 36.206972][ T3315] bridge_slave_1: entered promiscuous mode [ 36.223104][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.230337][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.237655][ T3321] bridge_slave_0: entered allmulticast mode [ 36.244451][ T3321] bridge_slave_0: entered promiscuous mode [ 36.256056][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.263268][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.270550][ T3321] bridge_slave_1: entered allmulticast mode [ 36.277042][ T3321] bridge_slave_1: entered promiscuous mode [ 36.306593][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.313733][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.321168][ T3318] bridge_slave_0: entered allmulticast mode [ 36.328040][ T3318] bridge_slave_0: entered promiscuous mode [ 36.344188][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.360826][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.367971][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.375293][ T3318] bridge_slave_1: entered allmulticast mode [ 36.381816][ T3318] bridge_slave_1: entered promiscuous mode [ 36.388390][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.395475][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.402842][ T3314] bridge_slave_0: entered allmulticast mode [ 36.409473][ T3314] bridge_slave_0: entered promiscuous mode [ 36.417153][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.426311][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.433778][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.441152][ T3314] bridge_slave_1: entered allmulticast mode [ 36.447667][ T3314] bridge_slave_1: entered promiscuous mode [ 36.460191][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.490226][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.499743][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.506867][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.514319][ T3312] bridge_slave_0: entered allmulticast mode [ 36.520839][ T3312] bridge_slave_0: entered promiscuous mode [ 36.537709][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.552605][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.566419][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.573665][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.580965][ T3312] bridge_slave_1: entered allmulticast mode [ 36.587355][ T3312] bridge_slave_1: entered promiscuous mode [ 36.595100][ T3315] team0: Port device team_slave_0 added [ 36.607054][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.631733][ T3315] team0: Port device team_slave_1 added [ 36.638180][ T3318] team0: Port device team_slave_0 added [ 36.649383][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.659506][ T3321] team0: Port device team_slave_0 added [ 36.670623][ T3318] team0: Port device team_slave_1 added [ 36.682216][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.697433][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.708061][ T3321] team0: Port device team_slave_1 added [ 36.719464][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.726451][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.752652][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.785262][ T3312] team0: Port device team_slave_0 added [ 36.796376][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.803419][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.829511][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.841943][ T3314] team0: Port device team_slave_0 added [ 36.852923][ T3312] team0: Port device team_slave_1 added [ 36.859033][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.865997][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.892175][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.907412][ T3314] team0: Port device team_slave_1 added [ 36.914310][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.921283][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.947295][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.963670][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.970703][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.996700][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.012317][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.020037][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.046617][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.078143][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.086051][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.113779][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.134903][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.141953][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.168228][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.187731][ T3315] hsr_slave_0: entered promiscuous mode [ 37.194001][ T3315] hsr_slave_1: entered promiscuous mode [ 37.200525][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.207497][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.233613][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.245308][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.252301][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.278491][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.345205][ T3318] hsr_slave_0: entered promiscuous mode [ 37.351614][ T3318] hsr_slave_1: entered promiscuous mode [ 37.357496][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 37.363330][ T3318] Cannot create hsr debugfs directory [ 37.371368][ T3312] hsr_slave_0: entered promiscuous mode [ 37.377458][ T3312] hsr_slave_1: entered promiscuous mode [ 37.383446][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 37.389271][ T3312] Cannot create hsr debugfs directory [ 37.399778][ T3321] hsr_slave_0: entered promiscuous mode [ 37.405889][ T3321] hsr_slave_1: entered promiscuous mode [ 37.411841][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 37.417846][ T3321] Cannot create hsr debugfs directory [ 37.467840][ T3314] hsr_slave_0: entered promiscuous mode [ 37.473976][ T3314] hsr_slave_1: entered promiscuous mode [ 37.480019][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 37.485767][ T3314] Cannot create hsr debugfs directory [ 37.675054][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.686844][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.697802][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.709482][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.735352][ T3321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.745625][ T3321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.758445][ T3321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.767445][ T3321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.800821][ T3318] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.811218][ T3318] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.826763][ T3318] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.856052][ T3318] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.870566][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.885828][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.894681][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.913469][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.929852][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.940107][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.962500][ T2224] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.969652][ T2224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.984559][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.991733][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.003754][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.011025][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.020761][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.036704][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.051271][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.076373][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.096949][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.104207][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.117441][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.124550][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.145192][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.171534][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.191039][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.198139][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.208878][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.230658][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.237768][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.274286][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.287189][ T3312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.297809][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.326604][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.333827][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.369061][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.376253][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.411655][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.423040][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.454053][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.465262][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.483084][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.500201][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.507348][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.541915][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.549382][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.579139][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.597799][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.667052][ T3315] veth0_vlan: entered promiscuous mode [ 38.690871][ T3315] veth1_vlan: entered promiscuous mode [ 38.733743][ T3315] veth0_macvtap: entered promiscuous mode [ 38.757102][ T3312] veth0_vlan: entered promiscuous mode [ 38.771376][ T3315] veth1_macvtap: entered promiscuous mode [ 38.792033][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.811248][ T3312] veth1_vlan: entered promiscuous mode [ 38.832034][ T3321] veth0_vlan: entered promiscuous mode [ 38.845273][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.859100][ T3318] veth0_vlan: entered promiscuous mode [ 38.871589][ T3321] veth1_vlan: entered promiscuous mode [ 38.880644][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.892330][ T3318] veth1_vlan: entered promiscuous mode [ 38.910956][ T3321] veth0_macvtap: entered promiscuous mode [ 38.922849][ T3312] veth0_macvtap: entered promiscuous mode [ 38.932991][ T3468] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.949848][ T3321] veth1_macvtap: entered promiscuous mode [ 38.959214][ T3312] veth1_macvtap: entered promiscuous mode [ 38.966456][ T3468] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.976371][ T3318] veth0_macvtap: entered promiscuous mode [ 38.987119][ T3318] veth1_macvtap: entered promiscuous mode [ 38.993788][ T3468] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.003173][ T3468] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.030211][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.039369][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 39.039386][ T29] audit: type=1400 audit(1770582675.045:90): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.2v4Toy/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 39.070081][ T29] audit: type=1400 audit(1770582675.055:91): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.094597][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.109916][ T29] audit: type=1400 audit(1770582675.055:92): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.2v4Toy/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 39.112485][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.135466][ T29] audit: type=1400 audit(1770582675.055:93): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.164810][ T29] audit: type=1400 audit(1770582675.055:94): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.2v4Toy/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.173611][ T3314] veth0_vlan: entered promiscuous mode [ 39.191498][ T29] audit: type=1400 audit(1770582675.055:95): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.2v4Toy/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 39.224256][ T29] audit: type=1400 audit(1770582675.055:96): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.224377][ T2224] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.244226][ T29] audit: type=1400 audit(1770582675.105:97): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.244261][ T29] audit: type=1400 audit(1770582675.105:98): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="gadgetfs" ino=4518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 39.301538][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.310713][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.321974][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.347870][ T2224] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.347923][ T29] audit: type=1400 audit(1770582675.355:99): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.360170][ T2224] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.391745][ T3314] veth1_vlan: entered promiscuous mode [ 39.411635][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.436478][ T2224] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.464837][ T2224] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.475835][ T3314] veth0_macvtap: entered promiscuous mode [ 39.489640][ T2224] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.507336][ T3314] veth1_macvtap: entered promiscuous mode [ 39.531025][ T2224] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.542238][ T3484] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.550369][ T3484] bridge_slave_1: left allmulticast mode [ 39.556336][ T3484] bridge_slave_1: left promiscuous mode [ 39.562272][ T3484] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.582999][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.620203][ T3493] loop1: detected capacity change from 0 to 1024 [ 39.636200][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.650953][ T61] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.662712][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.676498][ T3496] loop2: detected capacity change from 0 to 512 [ 39.684276][ T3493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.686422][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.711574][ T3496] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 39.720564][ T3496] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 39.750867][ T61] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.788302][ T61] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.806754][ T61] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.850965][ T3496] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.3: Allocating blocks 41-42 which overlap fs metadata [ 39.875028][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.884236][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.893427][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.905637][ T3496] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.3: Failed to acquire dquot type 1 [ 39.917391][ T3496] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 39.932741][ T3496] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.3: corrupted inode contents [ 39.944517][ T3496] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.3: mark_inode_dirty error [ 39.949693][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.977307][ T3506] netlink: 'syz.0.8': attribute type 1 has an invalid length. [ 40.000880][ T3496] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.3: corrupted inode contents [ 40.014338][ T3496] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.3: mark_inode_dirty error [ 40.025583][ T3496] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.3: corrupted inode contents [ 40.096777][ T3496] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 40.116757][ T3516] tipc: Started in network mode [ 40.122114][ T3516] tipc: Node identity 7f000001, cluster identity 4711 [ 40.154117][ T3496] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.3: corrupted inode contents [ 40.196234][ T3516] tipc: New replicast peer: 172.20.20.187 [ 40.202418][ T3516] tipc: Enabled bearer , priority 10 [ 40.219214][ T3520] Zero length message leads to an empty skb [ 40.229731][ T3496] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.3: mark_inode_dirty error [ 40.268497][ T3522] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.287942][ T3496] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 40.325865][ T3504] Set syz1 is full, maxelem 65536 reached [ 40.342696][ T3496] EXT4-fs (loop2): 1 truncate cleaned up [ 40.364844][ T3496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.400262][ T3496] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 40.431256][ T3496] syz.2.3 (3496) used greatest stack depth: 10000 bytes left [ 40.481414][ T3531] loop4: detected capacity change from 0 to 1024 [ 40.492329][ T3531] ======================================================= [ 40.492329][ T3531] WARNING: The mand mount option has been deprecated and [ 40.492329][ T3531] and is ignored by this kernel. Remove the mand [ 40.492329][ T3531] option from the mount to silence this warning. [ 40.492329][ T3531] ======================================================= [ 40.539360][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.550266][ T3531] EXT4-fs: Ignoring removed bh option [ 40.565683][ T3531] EXT4-fs (loop4): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 40.588716][ T3531] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 40.616379][ T3539] loop0: detected capacity change from 0 to 512 [ 40.652611][ T3541] loop2: detected capacity change from 0 to 128 [ 40.662355][ T3539] EXT4-fs warning (device loop0): ext4_xattr_inode_get:546: inode #11: comm syz.0.20: ea_inode file size=4 entry size=6 [ 40.696041][ T3539] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 40.710721][ T3539] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.20: corrupted inode contents [ 40.727271][ T3539] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.20: mark_inode_dirty error [ 40.739273][ T3539] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.20: corrupted inode contents [ 40.751667][ T3547] netlink: 40 bytes leftover after parsing attributes in process `syz.2.19'. [ 40.761134][ T3539] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3001: inode #15: comm syz.0.20: mark_inode_dirty error [ 40.779703][ T3539] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3004: inode #15: comm syz.0.20: mark inode dirty (error -117) [ 40.803125][ T3539] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 40.808493][ T3547] macvlan2: entered allmulticast mode [ 40.825975][ T3539] EXT4-fs (loop0): 1 orphan inode deleted [ 40.832744][ T3539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.905746][ T3560] tipc: Started in network mode [ 40.910785][ T3560] tipc: Node identity 7f000001, cluster identity 4711 [ 40.924690][ T3560] tipc: New replicast peer: 172.20.20.187 [ 40.930620][ T3560] tipc: Enabled bearer , priority 10 [ 40.963592][ T3561] netlink: 'syz.1.24': attribute type 21 has an invalid length. [ 40.980158][ T3563] netlink: 'syz.4.26': attribute type 2 has an invalid length. [ 40.987957][ T3563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26'. [ 41.014272][ T3558] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 41.125575][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.133686][ T3568] loop1: detected capacity change from 0 to 512 [ 41.158679][ T3568] FAT-fs (loop1): Directory bread(block 199916) failed [ 41.188470][ T3568] FAT-fs (loop1): Directory bread(block 199917) failed [ 41.210708][ T3568] FAT-fs (loop1): Directory bread(block 199918) failed [ 41.224486][ T3568] FAT-fs (loop1): Directory bread(block 199919) failed [ 41.250351][ T3568] FAT-fs (loop1): Directory bread(block 199920) failed [ 41.257414][ T3568] FAT-fs (loop1): Directory bread(block 199921) failed [ 41.277359][ T3568] FAT-fs (loop1): Directory bread(block 199922) failed [ 41.285032][ T3568] FAT-fs (loop1): Directory bread(block 199923) failed [ 41.318556][ T802] tipc: Node number set to 2130706433 [ 41.479770][ T3583] loop4: detected capacity change from 0 to 512 [ 41.525927][ T3586] FAULT_INJECTION: forcing a failure. [ 41.525927][ T3586] name failslab, interval 1, probability 0, space 0, times 1 [ 41.538710][ T3586] CPU: 1 UID: 0 PID: 3586 Comm: syz.3.31 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.538797][ T3586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 41.538817][ T3586] Call Trace: [ 41.538830][ T3586] [ 41.538841][ T3586] __dump_stack+0x1d/0x30 [ 41.538879][ T3586] dump_stack_lvl+0x95/0xd0 [ 41.538907][ T3586] dump_stack+0x15/0x1b [ 41.539008][ T3586] should_fail_ex+0x263/0x280 [ 41.539096][ T3586] should_failslab+0x8c/0xb0 [ 41.539125][ T3586] kmem_cache_alloc_noprof+0x68/0x490 [ 41.539245][ T3586] ? skb_clone+0x151/0x1f0 [ 41.539270][ T3586] skb_clone+0x151/0x1f0 [ 41.539291][ T3586] __netlink_deliver_tap+0x2c9/0x500 [ 41.539337][ T3586] netlink_unicast+0x66b/0x690 [ 41.539380][ T3586] netlink_sendmsg+0x5c8/0x6f0 [ 41.539415][ T3586] ? __pfx_netlink_sendmsg+0x10/0x10 [ 41.539437][ T3586] ____sys_sendmsg+0x5af/0x600 [ 41.539459][ T3586] ___sys_sendmsg+0x195/0x1e0 [ 41.539489][ T3586] __x64_sys_sendmsg+0xd4/0x160 [ 41.539563][ T3586] x64_sys_call+0x17ba/0x3000 [ 41.539595][ T3586] do_syscall_64+0xc0/0x2a0 [ 41.539636][ T3586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.539663][ T3586] RIP: 0033:0x7fd8edb2aeb9 [ 41.539690][ T3586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.539765][ T3586] RSP: 002b:00007fd8ec55e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 41.539791][ T3586] RAX: ffffffffffffffda RBX: 00007fd8edda6090 RCX: 00007fd8edb2aeb9 [ 41.539809][ T3586] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 41.539851][ T3586] RBP: 00007fd8ec55e090 R08: 0000000000000000 R09: 0000000000000000 [ 41.539865][ T3586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.539877][ T3586] R13: 00007fd8edda6128 R14: 00007fd8edda6090 R15: 00007ffd46113ac8 [ 41.539896][ T3586] [ 41.678768][ T3586] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.743642][ T3586] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.791549][ T3590] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 41.818531][ T3592] tmpfs: Bad value for 'mpol' [ 41.877653][ T3584] FAT-fs (loop1): FAT read failed (blocknr 128) [ 42.011617][ T3584] FAT-fs (loop1): Directory bread(block 199916) failed [ 42.048317][ T3394] tipc: Node number set to 2130706433 [ 42.233988][ T3613] netlink: 28 bytes leftover after parsing attributes in process `syz.0.43'. [ 42.323681][ T3614] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: 0, delta: -1 [ 42.332126][ T3614] ref_ctr decrement failed for inode: 0x35 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88810a7fec00 [ 42.343328][ T3614] uprobe: syz.2.44:3614 failed to unregister, leaking uprobe [ 42.430888][ T3619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'. [ 42.441548][ T3621] FAULT_INJECTION: forcing a failure. [ 42.441548][ T3621] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 42.455311][ T3621] CPU: 1 UID: 0 PID: 3621 Comm: syz.3.45 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.455389][ T3621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 42.455406][ T3621] Call Trace: [ 42.455416][ T3621] [ 42.455426][ T3621] __dump_stack+0x1d/0x30 [ 42.455456][ T3621] dump_stack_lvl+0x95/0xd0 [ 42.455571][ T3621] dump_stack+0x15/0x1b [ 42.455677][ T3621] should_fail_ex+0x263/0x280 [ 42.455720][ T3621] should_fail+0xb/0x20 [ 42.455757][ T3621] should_fail_usercopy+0x1a/0x20 [ 42.455844][ T3621] _copy_from_user+0x1c/0xb0 [ 42.455866][ T3621] ___sys_sendmsg+0xc1/0x1e0 [ 42.455978][ T3621] __x64_sys_sendmsg+0xd4/0x160 [ 42.456005][ T3621] x64_sys_call+0x17ba/0x3000 [ 42.456031][ T3621] do_syscall_64+0xc0/0x2a0 [ 42.456064][ T3621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.456111][ T3621] RIP: 0033:0x7fd8edb2aeb9 [ 42.456131][ T3621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.456199][ T3621] RSP: 002b:00007fd8ec57f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 42.456222][ T3621] RAX: ffffffffffffffda RBX: 00007fd8edda5fa0 RCX: 00007fd8edb2aeb9 [ 42.456235][ T3621] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 42.456314][ T3621] RBP: 00007fd8ec57f090 R08: 0000000000000000 R09: 0000000000000000 [ 42.456331][ T3621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.456347][ T3621] R13: 00007fd8edda6038 R14: 00007fd8edda5fa0 R15: 00007ffd46113ac8 [ 42.456374][ T3621] [ 42.697867][ T3628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.50'. [ 42.884441][ T3641] syz.3.54 (3641) used obsolete PPPIOCDETACH ioctl [ 43.017455][ T3653] loop3: detected capacity change from 0 to 512 [ 43.029735][ T3644] loop2: detected capacity change from 0 to 8192 [ 43.052273][ T3653] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.061159][ T3653] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 43.074480][ T3306] ================================================================== [ 43.083061][ T3306] BUG: KCSAN: data-race in fill_mg_cmtime / simple_unlink [ 43.090256][ T3306] [ 43.092608][ T3306] write to 0xffff888104e81b1c of 4 bytes by task 3301 on cpu 0: [ 43.100324][ T3306] simple_unlink+0x54/0x80 [ 43.104798][ T3306] shmem_unlink+0x12d/0x140 [ 43.109465][ T3306] shmem_rename2+0x18e/0x310 [ 43.114088][ T3306] vfs_rename+0xa9e/0xbf0 [ 43.118552][ T3306] do_renameat2+0x39a/0x850 [ 43.123101][ T3306] __x64_sys_rename+0x58/0x70 [ 43.127812][ T3306] x64_sys_call+0x24e/0x3000 [ 43.132440][ T3306] do_syscall_64+0xc0/0x2a0 [ 43.137421][ T3306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.143444][ T3306] [ 43.145792][ T3306] read to 0xffff888104e81b1c of 4 bytes by task 3306 on cpu 1: [ 43.153356][ T3306] fill_mg_cmtime+0x5b/0x260 [ 43.157984][ T3306] generic_fillattr+0x24a/0x340 [ 43.162952][ T3306] shmem_getattr+0x181/0x200 [ 43.167583][ T3306] vfs_getattr_nosec+0x146/0x1e0 [ 43.172598][ T3306] vfs_getattr+0x48/0x60 [ 43.176895][ T3306] vfs_statx_path+0x28/0x140 [ 43.181567][ T3306] vfs_statx+0xc4/0x170 [ 43.185750][ T3306] vfs_fstatat+0x115/0x170 [ 43.190376][ T3306] __se_sys_newfstatat+0x55/0x3e0 [ 43.195445][ T3306] __x64_sys_newfstatat+0x55/0x70 [ 43.200508][ T3306] x64_sys_call+0x111f/0x3000 [ 43.205232][ T3306] do_syscall_64+0xc0/0x2a0 [ 43.209789][ T3306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.215730][ T3306] [ 43.218077][ T3306] value changed: 0x051aefac -> 0x05902853 [ 43.223811][ T3306] [ 43.226157][ T3306] Reported by Kernel Concurrency Sanitizer on: [ 43.232332][ T3306] CPU: 1 UID: 0 PID: 3306 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 43.241655][ T3306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 43.251830][ T3306] ================================================================== [ 43.279233][ T3653] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.59: Allocating blocks 41-42 which overlap fs metadata [ 43.293530][ T3653] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.59: Allocating blocks 41-42 which overlap fs metadata [ 43.299970][ T3305] loop2: p1 p2 p3 p4 [ 43.311227][ T3638] netlink: 344 bytes leftover after parsing attributes in process `syz.2.53'. [ 43.320559][ T3652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.58'. [ 43.321434][ T3305] loop2: p1 start 16777216 is beyond EOD, truncated [ 43.329363][ T3652] netlink: 'syz.4.58': attribute type 30 has an invalid length. [ 43.338669][ T3305] loop2: p4 start 16777223 is beyond EOD, truncated [ 43.368086][ T3653] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.59: Failed to acquire dquot type 1 [ 43.380015][ T3644] loop2: p1 p2 p3 p4 [ 43.384102][ T3644] loop2: p1 start 16777216 is beyond EOD, truncated [ 43.395919][ T3653] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 43.410767][ T3653] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.59: corrupted inode contents [ 43.420923][ T3644] loop2: p4 start 16777223 is beyond EOD, truncated [ 43.430883][ T3653] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.59: mark_inode_dirty error [ 43.442362][ T3657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.58'. [ 43.442803][ T3665] xt_recent: Unsupported userspace flags (000000b1) [ 43.451133][ T3657] netlink: 'syz.4.58': attribute type 30 has an invalid length. [ 43.473364][ T3653] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.59: corrupted inode contents [ 43.493641][ T3653] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.59: mark_inode_dirty error [ 43.517920][ T61] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.526093][ T3653] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.59: corrupted inode contents [ 43.544427][ T61] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.549552][ T3653] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 43.591156][ T3653] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.59: corrupted inode contents [ 43.599836][ T61] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.617115][ T3653] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.59: mark_inode_dirty error [ 43.635923][ T61] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.638840][ T3653] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 43.655607][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 43.667469][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 43.679805][ T3653] EXT4-fs (loop3): 1 truncate cleaned up [ 43.688970][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 43.693029][ T3653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.704869][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 43.735692][ T3653] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 43.759527][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.