last executing test programs: 8.655238877s ago: executing program 1 (id=2): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000180)=0x6) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x1, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) 8.575366959s ago: executing program 1 (id=6): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6d, 0x1, @perf_bp={0x0, 0x3}, 0x100000, 0x0, 0xa, 0x4, 0x9, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000000014000000110001"], 0x94}, 0x1, 0x0, 0x0, 0x40801}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) mkdir(0x0, 0x1ff) 8.470435182s ago: executing program 1 (id=7): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x404180, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000080)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001002bbd70000200000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0) ftruncate(r6, 0xc17a) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x168, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x122}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {0x0, [0x0, 0x0, 0x0, 0x1]}}}}, {{@ip={@rand_addr=0x64010101, @empty, 0xffffffff, 0xffffffff, 'batadv_slave_1\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x4, 0x2, 0x47}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r7, {0xffffffff}}, './file0\x00'}) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x850) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f00000005c0)='fd', 0x0, r8) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r10, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200029bd7000fcdbdf25080003001c5bd814c1161348a5bea944f7cf9bbf261f60a8d2d09c9c62b09dd1d090d9c6fda034b713bb5a208f25316cf729feb902aa7c78a471f2c72f03a9de5ad658e10f025a4192db8171b4c52c1f2836f3c4b7a3208fb8ea9f0c06771c13100521e8b9c14a6af483d2a270a89383b3ecb269393f00000000", @ANYRES32=r11, @ANYBLOB="0c009900810000802e0000000a00060008021100000100000a001a0008021100000100000a00060008021100000100008dd10986dd1fb4233aec3f34463853bba0ac04a597178fafb7e456186a300649ae38e18f9da92f8fb96571e3479941e2bf28cb12f91259d2dd6ef24b2ceba98dcbc74a656bff460e4551db45f8516d3c09f59f064af4451156090eb9f77fd5c748bf8674f0ce3554653179d2cb6b21ab81d9c89a94022383ee875c4bddc43b3f731b87d9005b93466ce0f2"], 0x4c}}, 0x20004040) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="20002abd7000fbdbdf257400000008000300", @ANYRES32=r11, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x800) open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f1"], 0x0) 8.219548088s ago: executing program 0 (id=1): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0x101, 0x8, 0x0, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400335c17dc1ac4e6e600005304010000000000000000000500000a14000000f30301000000000000000000e20000000a"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x14, r2, 0x733, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000) syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000ff0000000000010000000000340008803000008008000a000100000024e414e85753ec031161a0acc0000100d1732899f611cd8994034d07413dc957630e5493c285aca40065cb6311be696b2bb9f77e7b"], 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x11ec81, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xb0, 0x0, 0x9, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_TUPLE={0x58, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x4}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/devices/usb1/1-0:1.0/usb1-port1/disable\x00', 0x1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r5) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r6, 0x10001, 0x0) sendmsg$nl_route(r6, 0x0, 0x41) mount(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000500)='autofs\x00', 0x0, &(0x7f0000000280)='gid=0,no9\xe1\x12 \x91\xfdP\x83\x0e\xb9G!8\xb0\x89\x99\x81\x02\x85\x1cE\b\x9f\x0f8-\xf6\xa4 \x99\x8d\x1d\x8a\xc7\xc5\x96\xe8Ee\xd5\xac\x18(\x9d\tIr\xdd\\\x95\x9eu}\x06ib\x88\x8c\x9d\xde\xeaT0;\xb4\x1f\x8cm\x15y\xb4[Gc\xaf\xee#\xcf>Qk\xcf\xfc\x12bY\xfc&\x93\xe0\xcc#\x93w\x84@/VV\xbc\x0eL\xeb~1\x832\xa7\xf7l\x1b\xffh\x96O\x84h\x1b\'\x15\xae\xc8\xfbrK1\x1b\x82\\kU{!\x8fe\xbd\xfa\xf3\xac\xdc\x9a7\xbb\xdf\xdf\n\xc4U\xfa\x15\x03e\xe2[\xa6\xd3\xce%\b#s\x05\x00\x00\xc0\x03\x84\x0e\xc3\x0e\xce\x1e\xe4\xc8\xd4s\xd8\xe4W\x8a\x18j\xc4S\xbf\xc9\xcc1\x87\xa0\f\x91/\x8b\a\xdd\x1bj\xff\xae\xfcJM\x9b\xc3\xe6q\xc1T\x19\xa9,\xef\x8ax\xbb\x18\xe7\x99\xff\x10\x15S\x19\'?\xfbt/\x86\xc6\xd3\xb2c\xc4*\x06\x05NT\xaa_\x97\xda8\xc8\xd0\x8d\x87Yk\xa1\x83\x9f\x86.[\x83\xdf&\x13\xcc\xb9\x01`D7R\xb7o\xa1\x1e\xffD#\t\x18i\xed\xa4<\x9c\x02\x00\x82\xbd\x93\x9e+\x03\xc6w?\x83\x05\x0e\xf3TB]\xc0V\x1b\xf3\xfe\xe1s1r\xcb\xbc9\x19#3k\xd4#r\x9e=C\xd6k\xf89S\xb3\xf4\x84\xd8)\x17L\xeb\xf4\xf3iW\xe6\x9b\x8a\x13\x01\x0ej\x88N\xb5\xf7e;\xdd\xe1\xfc\x9c\x8a\xae>=n\xb3\x12\x7f\x94\x19~\x93\x92xK\x9b\x9e\xa6\x9e\x16v\"e\xe80\xa3%oS\xb4\xad\xb1\xb6\xe0\xef\x1fy\xf2\x1aN\xd7\xee\\*6\xa6\x8e\x84 \xc5\xc0\xd4/\x0eVg\xc1\xd9\xcb\xdc\xc7p)1\x00u\xa5\x8c\n\x91l\xef\x17\xfc\xc2\xef\xb9\x03\b*\x1c\xc6\xe8\x9a\xe0o\xba\x1d {%\x904\xa2\x8f\xed\xca%Z\x1a#\xddA7\x1b\xdf\xd5]\xc6\x0f\x9a\xf5)g\x8c\x98\x9e\xe6\x9b\xbd\x96\xc3\xb6}3\x98r\\.o\xe0\xee\x1d\x80\x0f\x8c\xa0%>]\x9a{=\xdd\x80\x13.\x96\xf9]u\x96P\xdb+A\xaa\xce\x9dP\xde\v\x16\x1d\x05\xbe\xd3\x8c\x99\xb2\x1b\xccX\xfdy\x05\xb0Q]bB') r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r7) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB=')\v\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x1c}}, 0x2404c044) 8.045047442s ago: executing program 1 (id=8): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x103830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = memfd_create(&(0x7f0000000040)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89Z\x99\xb0\x12\xdd\xb2FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xa3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]', 0x1) r2 = dup(r1) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000020bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff000000006a030000000100001d400500000000004704000001ed00007203feff000000001d44000000000000730a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$kcm(0x10, 0x2, 0x10) splice(r0, &(0x7f0000000340)=0x9, r2, &(0x7f0000000380)=0x4, 0x8, 0x8) socket$kcm(0x29, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000440), 0x8, 0x100) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000480)) socket(0xa, 0x3, 0x87) capget(&(0x7f0000000040)={0x19980330}, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x800000, &(0x7f00000004c0)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e100ae1c5e1438db39d11a"], 0x1, 0x389, &(0x7f00000005c0)="$eJzs3U1rY1UYB/CncfqqbboQQUU8zM5NaOtepsgMiAWlTmR0Idyx6RiaaUoSKhlEZyG49Ru4H1y6E8Qv0IXu3bnrxuUshonkJumkndhhXtrLOL8flPuk9/zbc27I5WxunsNrP97c2W5XtrNOlC6lKEVE6W7Ecl4NTA2PpbyeeS/G3I53ytf+euuTzz7/cH1j4/JmSlfWr767llJaevu3r7/5+eLvnZc//WXp19k4WP7i8J+1vw9eO3j98P7Vr+rtVG+n3WYnZel6s9nJrjdqaave3qmk9HGjlrVrqb7brrWOnd9uNPf2uinb3Vpc2GvV2u2U7XbTTq2bOs3UaXVTdiOr76ZKpZIWF4JHqd7Z3MzWB/XcKeMundeEOAOt1nrW/wzPPnSmeqeQCQEAhXqC/f+x/Mwz3f9Ph/3/eRrf//N/1d//zww/v8fZ/wMAAAAAAAAAAAAAwPPgbq9X7vV65dGxN3pIePi64Olxxh56/0/8FD0/ztbYg3tzEY0f9qv71cFx7PsCGlGLlSjHvf5tYWRQX/lg4/JKyi3H4s3v8vzFPyKqL+XR9e2o5/nVKMfy5PzqIJ+O8tE/TsfCeH4tyvHq5PzaxPxMrPw0lq9EOf78MprRiK389vYg/+1qSu9/tHEiP5uPAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODFUEkjb8ag7/1+NWI+9of9+ysPBiwf748/yB/111+Jctyb3J9/ZWJ//gvxxoVi1w4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+3urZ2s0ai1zqsY9fzPfzMzKv47NTUYfvvEqfk4Pnj2UX/nKYvSY6Xmh4uccOp+r9fLixvfP/OpzuXFdESc73v6BEV/kqeM6Q0v4NP/r1dOvxqzEXGmK13qF6XiL/hjF0XcjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBYR02/+y+mip4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARWl3b+1kjUatdYZF0WsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4nvwbAAD//5TNCec=") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x57) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) io_setup(0x8, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioperm(0x1000, 0x1000, 0x8000000000000001) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto(r5, 0x0, 0x0, 0x40000, &(0x7f0000002500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @empty}, 0x1, 0x2, 0x4, 0x81}}, 0x80) io_setup(0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000400)=0xffffffffffffffff, 0x4) io_submit(0x0, 0x0, &(0x7f00000004c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000000c0)) 7.940757644s ago: executing program 4 (id=5): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6d, 0x1, @perf_bp={0x0, 0x3}, 0x100000, 0x0, 0xa, 0x4, 0x9, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000000014000000110001"], 0x94}, 0x1, 0x0, 0x0, 0x40801}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) mkdir(0x0, 0x1ff) 7.900021736s ago: executing program 2 (id=3): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x2, 0x0, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075d, 0x2}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x6, 0x0, 0x0, 0xa, 0x10, 0x96f23147092a967e}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x7, 0x7}, 0x7602, 0x5, 0x0, 0x2, 0xfffffffffffffe, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r3, &(0x7f00000001c0)=@other={'decodes', ' ', 'io'}, 0xb) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', &(0x7f0000000180)={0x402040, 0x69, 0x2a}, 0x18) r5 = openat(r4, &(0x7f0000000100)='./file1\x00', 0x29c381, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000000c0)=0x10) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) write(r3, &(0x7f0000000040)="5feaa6df391935080377d1c4de0c219b34bc96c13907f68f6e46c057afd94ff7a9d05371e7af38bbf31c48bbe8001985d1ead8b9ff30e573cc27641feb372d9a9971a74d4af4275d94510bdf86752e63a47bcb4d3f5ea43cacadfdcf6a737111c0dbbaa7aa91b72dc5df766bfcb67026368b7cfebadd2fba52b999", 0x7b) 0s ago: executing program 4 (id=9): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x2000040, &(0x7f0000000000)=ANY=[@ANYBLOB="003547e22817a389d68b0d15b98ad02e59785f28c3aa2961f7b0c0c47eef2bf5bd1ce19bd09d3f917f0562c4f3f6420329cd2632232c81c2f7913033325080c6a89cd14b62bf899c35a9b1e5093b58dc15bee9e62b713346cc9eba1f080b146fd809966dc7e99fbb5c49b3820557ebbf19eb465bb2b8"], 0x1, 0x537, &(0x7f0000000580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x3, 0x1, 0x2}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x44, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xfffffffd, 0xf}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, 0x0) kernel console output (not intermixed with test programs): [ 23.458243][ T28] audit: type=1400 audit(1786072247.509:103): avc: denied { search } for pid=3178 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.480403][ T28] audit: type=1400 audit(1786072247.509:104): avc: denied { search } for pid=3178 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.826051][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 26.826068][ T28] audit: type=1400 audit(1786072250.869:124): avc: denied { write } for pid=3264 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.860804][ T28] audit: type=1400 audit(1786072250.909:125): avc: denied { write } for pid=3275 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.240' (ED25519) to the list of known hosts. [ 30.400232][ T28] audit: type=1400 audit(1786072254.449:126): avc: denied { mounton } for pid=3283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.423347][ T28] audit: type=1400 audit(1786072254.469:127): avc: denied { mount } for pid=3283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.425678][ T3283] cgroup: Unknown subsys name 'net' [ 30.451222][ T28] audit: type=1400 audit(1786072254.499:128): avc: denied { unmount } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.549620][ T3283] cgroup: Unknown subsys name 'cpuset' [ 30.555918][ T3283] cgroup: Unknown subsys name 'rlimit' [ 30.648073][ T28] audit: type=1400 audit(1786072254.689:129): avc: denied { setattr } for pid=3283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.680297][ T28] audit: type=1400 audit(1786072254.699:130): avc: denied { create } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.701315][ T28] audit: type=1400 audit(1786072254.699:131): avc: denied { write } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.721992][ T28] audit: type=1400 audit(1786072254.699:132): avc: denied { read } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 30.742506][ T28] audit: type=1400 audit(1786072254.709:133): avc: denied { mounton } for pid=3283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.763304][ T3287] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 30.791747][ T3283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 32.210022][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.217247][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.224512][ T3297] bridge_slave_0: entered allmulticast mode [ 32.230918][ T3297] bridge_slave_0: entered promiscuous mode [ 32.237735][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.244928][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.252142][ T3297] bridge_slave_1: entered allmulticast mode [ 32.258722][ T3297] bridge_slave_1: entered promiscuous mode [ 32.306679][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.313877][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.321145][ T3300] bridge_slave_0: entered allmulticast mode [ 32.327660][ T3300] bridge_slave_0: entered promiscuous mode [ 32.342863][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.352151][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.359460][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.366624][ T3300] bridge_slave_1: entered allmulticast mode [ 32.373150][ T3300] bridge_slave_1: entered promiscuous mode [ 32.397943][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.429321][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.453655][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.469835][ T3297] team0: Port device team_slave_0 added [ 32.478716][ T3297] team0: Port device team_slave_1 added [ 32.509305][ T3300] team0: Port device team_slave_0 added [ 32.532278][ T3300] team0: Port device team_slave_1 added [ 32.545457][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.552695][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.559859][ T3296] bridge_slave_0: entered allmulticast mode [ 32.566395][ T3296] bridge_slave_0: entered promiscuous mode [ 32.573015][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.580216][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.606203][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.628464][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.635713][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.643006][ T3296] bridge_slave_1: entered allmulticast mode [ 32.649584][ T3296] bridge_slave_1: entered promiscuous mode [ 32.656310][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.663332][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.689295][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.721797][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.728822][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.754785][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.777489][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.784665][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.791872][ T3302] bridge_slave_0: entered allmulticast mode [ 32.798280][ T3302] bridge_slave_0: entered promiscuous mode [ 32.806071][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.815498][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.822536][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.848540][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.872101][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.879232][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.886480][ T3302] bridge_slave_1: entered allmulticast mode [ 32.892913][ T3302] bridge_slave_1: entered promiscuous mode [ 32.900365][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.917173][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.924417][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.931643][ T3304] bridge_slave_0: entered allmulticast mode [ 32.938031][ T3304] bridge_slave_0: entered promiscuous mode [ 32.963045][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.970331][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.977499][ T3304] bridge_slave_1: entered allmulticast mode [ 32.984044][ T3304] bridge_slave_1: entered promiscuous mode [ 33.000454][ T3296] team0: Port device team_slave_0 added [ 33.008534][ T3297] hsr_slave_0: entered promiscuous mode [ 33.014684][ T3297] hsr_slave_1: entered promiscuous mode [ 33.026962][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.041679][ T3296] team0: Port device team_slave_1 added [ 33.058073][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.074549][ T3300] hsr_slave_0: entered promiscuous mode [ 33.080759][ T3300] hsr_slave_1: entered promiscuous mode [ 33.086688][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 33.092476][ T3300] Cannot create hsr debugfs directory [ 33.109861][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.120354][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.134804][ T3302] team0: Port device team_slave_0 added [ 33.145028][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.152129][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.178167][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.199405][ T3302] team0: Port device team_slave_1 added [ 33.221751][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.228800][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.254903][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.291458][ T3304] team0: Port device team_slave_0 added [ 33.300089][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.307134][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.333260][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.353056][ T3304] team0: Port device team_slave_1 added [ 33.361869][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.368903][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.394826][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.443280][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.450284][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.476266][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.492482][ T3296] hsr_slave_0: entered promiscuous mode [ 33.498746][ T3296] hsr_slave_1: entered promiscuous mode [ 33.504644][ T3296] debugfs: 'hsr0' already exists in 'hsr' [ 33.510424][ T3296] Cannot create hsr debugfs directory [ 33.521684][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.528713][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.554782][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.609485][ T3302] hsr_slave_0: entered promiscuous mode [ 33.615669][ T3302] hsr_slave_1: entered promiscuous mode [ 33.621691][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 33.627465][ T3302] Cannot create hsr debugfs directory [ 33.673784][ T3304] hsr_slave_0: entered promiscuous mode [ 33.679902][ T3304] hsr_slave_1: entered promiscuous mode [ 33.685735][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 33.691565][ T3304] Cannot create hsr debugfs directory [ 33.734704][ T3297] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.744810][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.767287][ T3297] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.775830][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.795874][ T3297] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.804743][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.819961][ T3297] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.828918][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.870215][ T3300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.879063][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.886868][ T3300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.895569][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.903542][ T3300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.912186][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.919858][ T3300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.928753][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.962912][ T3296] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.971832][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.979892][ T3296] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.988407][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.996614][ T3296] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.005448][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.013189][ T3296] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.022059][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.060659][ T3302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.069636][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.077347][ T3302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.086568][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.094355][ T3302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.103519][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.116507][ T3302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.125302][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.165466][ T3304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.174622][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.183134][ T3304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.192342][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.200298][ T3304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.209614][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.220482][ T3304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.229404][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.265515][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.301099][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.309972][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.322453][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.330507][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.337605][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.358796][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.366021][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.379576][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.387861][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.397811][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.407599][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.414780][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.426235][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.433356][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.443430][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.452813][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.459963][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.479934][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.487106][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.501379][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.524415][ T3296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.538420][ T3297] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.549242][ T3297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.571806][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.583986][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.591144][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.604609][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.611893][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.644744][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.651898][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.661302][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.668375][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.744296][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.847128][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.922787][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.977384][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.013922][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.058376][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.144697][ T3297] veth0_vlan: entered promiscuous mode [ 35.172955][ T3297] veth1_vlan: entered promiscuous mode [ 35.200874][ T3296] veth0_vlan: entered promiscuous mode [ 35.217637][ T3300] veth0_vlan: entered promiscuous mode [ 35.235647][ T3300] veth1_vlan: entered promiscuous mode [ 35.243101][ T3302] veth0_vlan: entered promiscuous mode [ 35.257729][ T3304] veth0_vlan: entered promiscuous mode [ 35.264382][ T3296] veth1_vlan: entered promiscuous mode [ 35.272976][ T3297] veth0_macvtap: entered promiscuous mode [ 35.281349][ T3297] veth1_macvtap: entered promiscuous mode [ 35.294065][ T3304] veth1_vlan: entered promiscuous mode [ 35.302808][ T3302] veth1_vlan: entered promiscuous mode [ 35.318342][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.327400][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.340194][ T3300] veth0_macvtap: entered promiscuous mode [ 35.357193][ T3300] veth1_macvtap: entered promiscuous mode [ 35.373396][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.391042][ T3302] veth0_macvtap: entered promiscuous mode [ 35.401532][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 35.401549][ T28] audit: type=1400 audit(1786072259.449:146): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/root/syzkaller.OZo6yt/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 35.408184][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.441308][ T28] audit: type=1400 audit(1786072259.489:147): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 35.463881][ T28] audit: type=1400 audit(1786072259.489:148): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/root/syzkaller.OZo6yt/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 35.490760][ T54] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.496935][ T28] audit: type=1400 audit(1786072259.489:149): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 35.510486][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.523939][ T28] audit: type=1400 audit(1786072259.489:150): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/root/syzkaller.OZo6yt/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 35.557728][ T3304] veth0_macvtap: entered promiscuous mode [ 35.560757][ T28] audit: type=1400 audit(1786072259.489:151): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/root/syzkaller.OZo6yt/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 35.568636][ T3304] veth1_macvtap: entered promiscuous mode [ 35.593937][ T28] audit: type=1400 audit(1786072259.489:152): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.616717][ T28] audit: type=1400 audit(1786072259.519:153): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 35.641489][ T3302] veth1_macvtap: entered promiscuous mode [ 35.641569][ T28] audit: type=1400 audit(1786072259.519:154): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="gadgetfs" ino=3674 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 35.670779][ T3297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.674474][ T3296] veth0_macvtap: entered promiscuous mode [ 35.694186][ T3296] veth1_macvtap: entered promiscuous mode [ 35.706174][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.720367][ T28] audit: type=1400 audit(1786072259.769:155): avc: denied { read write } for pid=3297 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.729334][ T175] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.769393][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.799274][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.813290][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.868892][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.905714][ T3505] xt_hashlimit: Unknown mode mask FFF20, kernel too old? [ 36.029679][ T3510] ipt_REJECT: ECHOREPLY no longer supported. [ 36.068855][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.087039][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.103163][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.228876][ T175] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.297606][ T175] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.319040][ T3516] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 36.319040][ T3516] Ue[%#s' [ 36.395402][ T3522] process 'syz.1.8' launched '/dev/fd/5' with NULL argv: empty string added [ 36.411179][ T3516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 36.448741][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.531067][ T2204] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.871666][ T2204] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.733301][ T2204] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.819082][ T2204] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.949447][ T2204] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.258081][ T2204] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.402552][ T2204] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.537431][ T2204] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.037537][ T2204] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.662721][ T54] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.646767][ T3554] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.487286][ T3554] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.608586][ C1] ================================================================== [ 51.616752][ C1] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 51.624008][ C1] [ 51.626354][ C1] read-write to 0xffff8881000c5ed8 of 8 bytes by interrupt on cpu 0: [ 51.634479][ C1] wq_worker_tick+0x64/0x240 [ 51.639115][ C1] sched_tick+0xbc/0x1f0 [ 51.643389][ C1] update_process_times+0x15e/0x190 [ 51.648634][ C1] tick_nohz_handler+0x227/0x380 [ 51.653609][ C1] __hrtimer_run_queues+0x1f8/0x510 [ 51.658850][ C1] hrtimer_interrupt+0x257/0x810 [ 51.663833][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 51.669762][ C1] sysvec_apic_timer_interrupt+0x32/0x80 [ 51.675427][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 51.681473][ C1] __sanitizer_cov_trace_const_cmp2+0x8/0x90 [ 51.687511][ C1] nft_synproxy_eval_v4+0x135/0x270 [ 51.692760][ C1] nft_synproxy_do_eval+0x1cf/0x270 [ 51.698009][ C1] nft_synproxy_eval+0x29/0x40 [ 51.702846][ C1] nft_do_chain+0x1ff/0xde0 [ 51.707394][ C1] nft_do_chain_inet+0x2f0/0x320 [ 51.712384][ C1] nf_hook_slow+0x78/0x180 [ 51.716842][ C1] ip_local_deliver+0x199/0x1e0 [ 51.721766][ C1] ip_rcv_finish+0x188/0x1a0 [ 51.726401][ C1] ip_rcv+0x62/0x160 [ 51.730344][ C1] process_backlog+0x333/0x680 [ 51.735157][ C1] __napi_poll+0x61/0x300 [ 51.739522][ C1] net_rx_action+0x456/0x930 [ 51.744149][ C1] handle_softirqs+0xb9/0x280 [ 51.748962][ C1] do_softirq+0x45/0x60 [ 51.753163][ C1] __local_bh_enable_ip+0x70/0x80 [ 51.758225][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 51.763216][ C1] nsim_dev_trap_report_work+0x521/0x630 [ 51.768893][ C1] process_scheduled_works+0x4d4/0x9a0 [ 51.774399][ C1] worker_thread+0x569/0x750 [ 51.779038][ C1] kthread+0x221/0x270 [ 51.783132][ C1] ret_from_fork+0x146/0x330 [ 51.787772][ C1] ret_from_fork_asm+0x1a/0x30 [ 51.792580][ C1] [ 51.794927][ C1] read-write to 0xffff8881000c5ed8 of 8 bytes by interrupt on cpu 1: [ 51.803056][ C1] wq_worker_tick+0x64/0x240 [ 51.807691][ C1] sched_tick+0xbc/0x1f0 [ 51.811967][ C1] update_process_times+0x15e/0x190 [ 51.817205][ C1] tick_nohz_handler+0x227/0x380 [ 51.822177][ C1] __hrtimer_run_queues+0x1f8/0x510 [ 51.827410][ C1] hrtimer_interrupt+0x257/0x810 [ 51.832389][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 51.838316][ C1] sysvec_apic_timer_interrupt+0x32/0x80 [ 51.844012][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 51.850025][ C1] fib_table_lookup+0x4fd/0xd00 [ 51.854906][ C1] inet_addr_type_dev_table+0x142/0x260 [ 51.860502][ C1] ip_route_me_harder+0x220/0x690 [ 51.865557][ C1] synproxy_send_tcp+0x1e2/0x2e0 [ 51.870532][ C1] synproxy_send_client_synack+0x55e/0x5b0 [ 51.876379][ C1] nft_synproxy_eval_v4+0x21f/0x270 [ 51.881611][ C1] nft_synproxy_do_eval+0x1cf/0x270 [ 51.886851][ C1] nft_synproxy_eval+0x29/0x40 [ 51.891652][ C1] nft_do_chain+0x1ff/0xde0 [ 51.896197][ C1] nft_do_chain_inet+0x2f0/0x320 [ 51.901185][ C1] nf_hook_slow+0x78/0x180 [ 51.905670][ C1] ip_local_deliver+0x199/0x1e0 [ 51.910567][ C1] ip_rcv_finish+0x188/0x1a0 [ 51.915193][ C1] ip_rcv+0x62/0x160 [ 51.919134][ C1] process_backlog+0x333/0x680 [ 51.923927][ C1] __napi_poll+0x61/0x300 [ 51.928285][ C1] net_rx_action+0x456/0x930 [ 51.932907][ C1] handle_softirqs+0xb9/0x280 [ 51.937608][ C1] do_softirq+0x45/0x60 [ 51.941793][ C1] __local_bh_enable_ip+0x70/0x80 [ 51.946868][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 51.951857][ C1] nsim_dev_trap_report_work+0x521/0x630 [ 51.957541][ C1] process_scheduled_works+0x4d4/0x9a0 [ 51.963041][ C1] worker_thread+0x569/0x750 [ 51.967681][ C1] kthread+0x221/0x270 [ 51.971786][ C1] ret_from_fork+0x146/0x330 [ 51.976424][ C1] ret_from_fork_asm+0x1a/0x30 [ 51.981227][ C1] [ 51.983615][ C1] value changed: 0x00000000002673c0 -> 0x0000000000269ad0 [ 51.990782][ C1] [ 51.993133][ C1] Reported by Kernel Concurrency Sanitizer on: [ 51.999328][ C1] CPU: 1 UID: 0 PID: 3548 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(lazy) [ 52.008911][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.019053][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 52.025891][ C1] ==================================================================