last executing test programs: 1m47.732309858s ago: executing program 2 (id=3077): unshare(0x62040200) 1m46.809699181s ago: executing program 2 (id=3087): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000000)=0x10000, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0), 0x4) r2 = socket$netlink(0x10, 0x3, 0xf) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r3, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x9}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)=ANY=[@ANYBLOB="09cff08f790514eead0000001fb978d7d5045653da37b8124c40c004aa4e14bd72c7056077e2f3", @ANYRES16=r6, @ANYBLOB="010026bd700000000000020000000800", @ANYRES32=0x0, @ANYBLOB="0c009900f8ffffff62000000"], 0x28}, 0x1, 0x0, 0x0, 0x24000098}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)="91", 0x1}], 0x1, &(0x7f0000002380)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r8], 0x18, 0x40000}}], 0x1, 0x20000000) sendmsg$unix(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="cc", 0x7e8}], 0x1, &(0x7f00000011c0)=[@rights={{0x14, 0x1, 0x1, [r8]}}], 0x18, 0x4040040}, 0x4000011) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r10, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r2) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x84, r12, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000011}, 0x4008000) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2a, 0x0, {{@in6=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0x2f, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@remote, 0x0, 0x3c}, 0x2, @in=@remote, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x0) connect$inet6(r9, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r6, 0x8, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="080029bd7000ffdbdf253200000008000300", @ANYRES32=0x0, @ANYBLOB='\x00.\x00\x00\x00\x00\b\x00\x00\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r13 = socket(0x10, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r14, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000010001fff26bd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="05160000740f0000240012800b0074617000001400028008000100000000000055f39c3e3a6de1a33c7cb7b1cc8547d229db860498c4f3f5c24600dc0a8793c3e9ba8a3dd5989482a4ac30bae4cf58b25197a5324c4cd1c711c6ccc9bd472d293ab5c3c7a13c90fe757b2132754532183eaac01cdc739efd21bbdcce18fba15ecef33f32543057e1afc8ef8a616d74e0cd211709ce29fc74ac13d1c13acd97165418556656b032a6121b3ea6c92377cffe18961763eeedf31755811a31758dd3fad1aa7a5ce9b38ad0397847ac6d2df0b8983a617452620a19f3b4a1a6d16d37f72f", @ANYRES32=r14, @ANYBLOB="060003008000000008000a00", @ANYRES32=r14, @ANYBLOB], 0x4c}}, 0x4000) 1m46.42440232s ago: executing program 2 (id=3089): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x86) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x1029, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800ef0100007000000000000a00"], 0x30}, 0x1, 0x11}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000000)=0x40c, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0xa, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000a0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000100000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0xc288, &(0x7f0000000080)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m46.179027986s ago: executing program 2 (id=3096): r0 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x20000000000009, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffbfffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x100, 0x6, 0x200, 0xa47, 0x815, 0xffffffffffffffff}) r5 = gettid() syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000380), 0x1, 0x50f, &(0x7f0000000fc0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c03, 0x180) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0xfffffffe, 0x0, 0x0, 0xfffffffffe000001}) pipe(0x0) r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r2, &(0x7f0000000200)={0xffffffffffffffff, r7, 0x401}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f00000000d0)='sysfs\x00', 0x0, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f00000001c0)={0xf, 0x1f, 0x2, 0x4}, 0xf) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r10, &(0x7f0000000200)='100 0', 0x5) sendmsg$DEVLINK_CMD_GET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x34, r9, 0x1, 0x0, 0x0, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, 0x0, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x5, 0x4, 0x7cb3, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1000003}, 0x50) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000040)="aa", 0x1, 0x20000040, &(0x7f0000000100)={0xa, 0x2, 0xffffff7c, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c) socket$netlink(0x10, 0x3, 0x0) 1m45.278703709s ago: executing program 2 (id=3105): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r0, 0x8926, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) unshare(0x6020400) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_regs={0x7}}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xfffb, 0xf, 0x1, 0x0, 0x72, 0x2}}, {0x8, 0x2, [0x2, 0x4]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01000000000000004a0000004a00000003000000060000060000000100000005000000ce0000000000000005000000080000000900000001000000dfe000008f440000054b100000000000000a040000000000003000"/101], &(0x7f00000003c0)=""/116, 0x67, 0x74, 0x0, 0xb241, 0x10000}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0xd, &(0x7f0000000080)=@raw=[@alu={0x4, 0x1, 0x7, 0xb, 0x8, 0xfffffffffffffff4, 0x10}, @jmp={0x5, 0x1, 0x8, 0x6, 0xa, 0x1, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xa}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000100)='GPL\x00', 0x0, 0xb7, &(0x7f00000001c0)=""/183, 0x41000, 0x32, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000480)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x1, 0x4}, 0x10, 0xb21b, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000500)=[{0x1, 0x1, 0x1, 0x4}, {0x3, 0x4, 0x6, 0x5}, {0x1, 0x4, 0xc, 0xd}, {0x4, 0x2, 0xb, 0x4}, {0x5, 0x4, 0x7, 0x9}, {0x0, 0x4, 0x10, 0x4}, {0x2, 0x5, 0x3}], 0x10, 0x2}, 0x94) openat$nci(0xffffffffffffff9c, 0x0, 0x5400, 0x3f00) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000140)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '\x94l\\\xec\xd1\xcb\x9a}\xab7\x1f\xde\xb5\x83>\fG\\x00', 0x3a, '/dev\x14bus/usb/00#/00#\x00', 0x3a, './file0'}, 0x51) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x109001, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x34ff, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d400000015001d03"], 0xd4}}, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) connect(r8, &(0x7f00000002c0)=@caif=@rfm={0x25, 0xc, "2e5f951f37789a0475a3b772db7f5886"}, 0x80) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) 1m40.666098012s ago: executing program 2 (id=3190): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xffe0}, {0xffff, 0xffff}, {0x14, 0x1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) 1m40.665757512s ago: executing program 32 (id=3190): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xffe0}, {0xffff, 0xffff}, {0x14, 0x1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) 1m0.793574328s ago: executing program 4 (id=3853): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m0.568628303s ago: executing program 4 (id=3860): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x4}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$kcm(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f00000000c0)={0x0, 0x92e, [0x4, 0x0, 0x7f, 0xffffffff807b8077, 0x3, 0xfffffffffffffff8]}) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000000)=@in6={0xa, 0x4e1c, 0x3, @empty, 0x3}, 0x88, 0x0}, 0x8000) sendmsg$sock(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x26000091) 1m0.237979692s ago: executing program 4 (id=3862): r0 = syz_usbip_server_init(0x5) socket$pppl2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x45, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_config_ext={0x8, 0x7}, 0x1004, 0x1, 0xf2ec6ba1, 0x9, 0x2, 0x80004001, 0x9, 0x0, 0x0, 0x0, 0x30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000004480)={0x1, 0x8, &(0x7f0000000780)=@raw=[@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f6f9fe5}}], &(0x7f00000007c0)='GPL\x00', 0x5, 0x1000, &(0x7f00000033c0)=""/4096, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f00000043c0)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r1, 0x3, &(0x7f0000004400)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000004440)=[{0x3, 0x4, 0x2, 0xb}, {0x1, 0x3, 0x0, 0xa}, {0x1, 0x5, 0x8}], 0x10, 0xc5ec}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000700)={r2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x1, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYBLOB="f144ef566aaa2604da071bbeb6f430dfed6346ac280ad0be1430acfe313e69a2fa6cfe678c61c9f409a06bfd99bec80be2031abda528aae9370d25e0b4fbf0cf85b7fb437e3447f576f632761291515cb5463d90d1bb7568142a060494f630902b3ef5334efb547f8cf0b2458c7979b0db9ca4f520c1f1b85f556cf01d", @ANYBLOB="e1000e322868363b38d9db095899a1945e4a06000f3ebe5067157346e5624f6d506a1c219ece53b17f14f64e7fa1124f331eb2d46b4e89a95ce23ee44d7d"], 0xf6, 0xa19, &(0x7f0000002980)="$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") r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x3, 0x100) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, r4) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x511000) write$usbip_server(r0, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], 0xec1) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) syz_io_uring_setup(0x2606, &(0x7f0000000140)={0x0, 0x34f2, 0x8, 0x3, 0x2d}, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f0000000340)) socket$nl_netfilter(0x10, 0x3, 0xc) 58.781492348s ago: executing program 4 (id=3880): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@sysvgroups}, {@nodelalloc}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00e3ff000000000000001c000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b3d6ad7bcf8408af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbf000007040000f0ffffffb702000008000000182300000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000080)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25d7dbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x7, 0xffe0}}}, 0x24}}, 0x4000010) r8 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0xfe33) pivot_root(&(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000680)='./file0\x00') setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000280)=r4, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="000000000000bbbbbbbbbbbb86dd6000000000140640fe8000000000000000000000000000bbfe80000000000000ee000000000000aa4e224e22", @ANYRES32=0x0, @ANYRES32=0x41424344, @ANYBLOB="5004100390780000"], 0x0) preadv(r1, &(0x7f0000000d00)=[{&(0x7f0000000340)=""/199, 0xc7}, {&(0x7f00000006c0)=""/217, 0xd9}, {&(0x7f00000007c0)=""/5, 0x5}, {&(0x7f0000000800)=""/88, 0x58}, {&(0x7f0000000900)=""/189, 0xbd}, {&(0x7f00000009c0)=""/244, 0xf4}, {&(0x7f0000000ac0)=""/144, 0x90}, {&(0x7f0000000b80)=""/96, 0x60}, {&(0x7f0000000c00)=""/65, 0x41}, {&(0x7f0000000c80)=""/114, 0x72}], 0xa, 0x2, 0xf45) open(&(0x7f0000000300)='./file0\x00', 0x200440, 0x75) 58.393923647s ago: executing program 4 (id=3885): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$BLKSSZGET(r3, 0x1268, 0x0) timer_create(0x4, &(0x7f0000000000)={0x0, 0xa, 0x1, @thr={0x0, 0x0}}, 0x0) unshare(0x2a060400) r4 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001082abd62000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b"], 0x30}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x74, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xc, 0x10}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x9, 0x2}}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x8}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_FLAGS={0x20, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x2000c12, &(0x7f00000007c0)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000009,session=0x0000000000000023,utf8,map=acorn,check=strict,mode=0x00000000000000c9,cruft,map=off,check=strict,overriderockperm,block=0x0000000000000200,cruft,nocompress,cruft,session=0x000000000000002e,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c7362736563746f723d3078303030303030303030303030303004332c0091386ba63f775915b6b981669f99a6758fc6130e2e181f4e5ed46c0b97ee8c6ce2d08017924dd527144bf683e31335a3b7f24e5a1a93da15e92a08550215ecc4070da2db21d6ac07dadb5cb173d0b41818198ff783f10620b9875eeda06e2edde06600000000"], 0x1, 0xa2f, &(0x7f00000018c0)="$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") sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x2eb4, 0x2000007ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x200080, 0x10) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001900010028bd7000fcdbdf251d01020008000900", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x30004016) dup(r1) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x10002, &(0x7f0000000200)={[{@nobarrier}, {@dioread_lock}, {@noquota}, {@auto_da_alloc}, {@block_validity}, {@nodioread_nolock}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000002c0)=0x20) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 57.964357838s ago: executing program 4 (id=3894): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2e0470a, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4ad, &(0x7f0000001080)="$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") setsockopt(r1, 0x0, 0x24, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setns(0xc9, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x300) 57.940794768s ago: executing program 33 (id=3894): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2e0470a, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4ad, &(0x7f0000001080)="$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") setsockopt(r1, 0x0, 0x24, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setns(0xc9, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x300) 49.79165486s ago: executing program 0 (id=3980): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setns(0xc9, 0x0) r5 = socket$netlink(0x10, 0x3, 0xb) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20804}, 0x44800) memfd_create(&(0x7f00000001c0)='^\x00', 0x2) getsockopt$sock_buf(r5, 0x1, 0x3d, &(0x7f0000000000)=""/132, &(0x7f00000000c0)=0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6174000000000000000000a900000000000000000000000000000000000000000200"/73], 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) truncate(&(0x7f0000000100)='./file1\x00', 0xffffffffffff0001) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000180)=@raw=[@alu={0x4, 0x1, 0x9, 0x8, 0x4, 0xfffffffffffffffe, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000240)='GPL\x00', 0x6, 0x20, &(0x7f0000000280)=""/32, 0x41100, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xa, 0x2, 0x200}, 0x10, 0x302e1, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000400)=[{0x2, 0x4, 0x5}, {0x3, 0x4, 0xc, 0x1}, {0x5, 0x2, 0x3}, {0x4, 0x5, 0x10, 0x4}, {0x1, 0x4, 0x7, 0x1}, {0x4, 0x4, 0xd, 0x4}]}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000000a000000040000000000000c050000000a0000000000000e01000000cb75438e25c994e4f24b02000000070000000000000801000146cdfcb1554c41e60b040000000300c9a4e6cd8ef927ce00000d0000000400000001040000"], &(0x7f0000000640)=""/24, 0x6e, 0x18}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="08000000a8a20000ff0700004f06000080000000", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0000008002000000050000000000000000000000000000000000000090d145a925b837be65ff1ed1e406f9613e9b70bec4027cdfe9669395560a9caa0d136005984eb517bb666bfe4919bc0cb8b51fbfb997e48adb59e8dd4ebd6a082d746e2f709c977e63e782be6daa"], 0x50) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@ipv6_deladdr={0x48, 0x15, 0x1, 0x70bd26, 0x25dfdbfc, {0xa, 0x78, 0x80, 0xfd, r7}, [@IFA_CACHEINFO={0x14, 0x6, {0x5, 0x10001, 0x6, 0xfd68}}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0xffff, 0x80000, 0x5}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x77}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 48.327144396s ago: executing program 0 (id=3987): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000009c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffff8000, 0xff}, 0x10, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000010100)={@fallback=r9, 0x2e, 0x0, 0x8, &(0x7f0000010000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0, 0x0, &(0x7f00000100c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000101c0)={r7, r6, 0x0, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000010140)=ANY=[@ANYRES32=r8, @ANYRES32=r11, @ANYRES64=r10], 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r12 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000200)=0x1, 0x12) r13 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r13, &(0x7f00000001c0), 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000089b43f7cbaab572a3c000000020000000000000002000006000000000000000003000300000000000000000000000200000000000000000000001100"/80, @ANYRES64=0x0], 0x0, 0x56}, 0x28) socket$inet6_tcp(0xa, 0x1, 0x0) 48.045900503s ago: executing program 0 (id=3991): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$BLKSSZGET(r3, 0x1268, 0x0) timer_create(0x4, &(0x7f0000000000)={0x0, 0xa, 0x1, @thr={0x0, 0x0}}, 0x0) unshare(0x2a060400) r4 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001082abd62000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b"], 0x30}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x74, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xc, 0x10}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x9, 0x2}}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x8}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_FLAGS={0x20, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x2000c12, &(0x7f00000007c0)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000009,session=0x0000000000000023,utf8,map=acorn,check=strict,mode=0x00000000000000c9,cruft,map=off,check=strict,overriderockperm,block=0x0000000000000200,cruft,nocompress,cruft,session=0x000000000000002e,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c7362736563746f723d3078303030303030303030303030303004332c0091386ba63f775915b6b981669f99a6758fc6130e2e181f4e5ed46c0b97ee8c6ce2d08017924dd527144bf683e31335a3b7f24e5a1a93da15e92a08550215ecc4070da2db21d6ac07dadb5cb173d0b41818198ff783f10620b9875eeda06e2edde06600000000"], 0x1, 0xa2f, &(0x7f00000018c0)="$eJzs3c1vXFdfB/DvHduJH/chydOGUqK2nqQkdVvj2A5NiLooiT1JXPyCbEdqxKIpjYOiGAotSG2F1FRCrFqBBGIBu4oVq0rdUBaoGwQ7umKBhPovVKzCyujOjO2xPeNxjGO76edjzcx9+d1zfnfuy/HM3JkTflxWjm8YW1mp33Y5fvMf9yFjDrGrk99/+dUX5e2zBzmSnrxe/FPSn6Sa9CZ5LumbmJyfm+lS0P3kdpJvkyLJ0TQed+R2ir/Mz9fHv03x92W9HR3Zacl0s8JP2kHvfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcBgVE5Ojo2PFkUzN3ny72pBUt5iYnJ8rsrKydc7qMg3f1Hv9Lr7pWm9SlLf096929f3cyfXZzyapnsnzjbHn6x2Spz+fPPXsiTee6a2sLt8pm/+Xozsv9sOPP7n/7vLy0gdt5xbFHmZ1yDT2keu12amFuamZK9dr1amFuerlixdHz9+4tlC9NjVdW7i1sFibqU7M164szs1XhyZeqY5dvnyhWhu5NXdz9vrkyHRtdeKlXx8fHb1YfWvkd2pX5hfmZs+/NbIwcWNqenpq9no9ppxdxlwqd8TfnlqsLtauzFSrd+8tL13YlFlPNu2/ZdBYt/Upg8a7BY2Pjo+PjY2Pj33W7D17bcLF1y+/fml0tHd0k2yJeEw7LYfLzzpv5r0/icMuVRrtfzKdqczmZt5Ote3fRCYzn7nMdJjftNr+nz1f27batLT/zVa+t2X+qfLuTF5sjvZ3aP875LJ/fx/m43yS+3k3y1nOUj448Iz29+96apnNVBYyl6nM5Ep9SrU5pZrLuZiLGc07uZHBLKQ31zKV6dSykFtZyGJq9T1qIvOp5UoWM5f5VDOUibySasZyOZdzIdXUMpJbmcvNzOZ6JnOlXsrd3Ks/7xe2yXEtaGwnQePbBG1pzB+5/a9t/ueEJ1Bl2638GM7isDsrzfb/SPfQoYn9SAgAAADYc7/67zl28ul/+++kyAv1z+WvTU3XRg86LQAAAGAP1S/Xe7586CuHXkjh9T8AAAA8aYr6d+yKJAMZbAytfhPKmwAAAADwhKh//v9iisH1CV7/AwAAwBOm+2/sd40ohld//rd6p/F4pxnRGCsGrk1N10Ym5qbfGMu5+q8M1L9psKW0nqToq3/94NWcbkSdHmg8DqyXWNbZX0aNjbwxlldzprkiQy+VDy8NtYkcb0S+3Ih8uTWyJxsiL5SRAPCkO7NNe7zT9v/VDDcihk/Vm/zeUxva4J56yzqqZQWAw2Ktj53/bXZp1qb9b0a82Kn9/41tXv+XEU/n7mDjkoKRvJf3s5w7GU7zioPBdqWu9kbQuAxhuMu7AQPNSxa+u1TJ8Jb3A/rX1rU1dinjGW77jkBLucVqDhcacT2PZxsAwH47s207vNb+927X/g9v//q/pc11SSEAHAZrPdg/6sDgzoMPeh0BgI200gAAAAAAAAAAAAAAAAAAAAAAAAAAALD3dvQD/v9xLlleXkp221lAm4Hv/vWff6ljzOdPJf2PkuH2A5XsTc6Hf6AnyUHV/mYeealyGx+Wp87AxoEDPjEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwL4qkp930SnI0yWiS8/uf1ePz4KAT2CvV3S1WPMzDfJRje50OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBPXfP3/ytpPD7VmJTeSnI2ye0kv3vQOT6K/i7zH+5THofPH9TvW37/v5L0ZaVIb2Ozp+ibmJyfmyl3heJoOf/7L7/6orx1LPLT1YGtvSqUBZQ1bOhcollDy5S+jUv9or7UwOTSh/f/5P0/qk5ere+YVxevTU/OXJ//rfXAZ4uvG10gtHaDsJrvn539l79qmXykWfnX5Zq2t7nea/V6J7fW+yvtlu5Q7w7cW14aL2tarL29+Kd/WGmd9XROJy8NJUMba/r98tahptObn8+Nih+KvyiO5W9zu779y2ejWCnKTXS8vv4/u3tveWnkvfeX76zl9Om9j1oKOJHBJHc2HmVdchqsn0/aqu91lb6y1tF6UHl3skt522opcWz9ed2wDr+o7zIDj7QO1c7rUNfleW9mdGFzRivlQfLXf/xMzm27pY+2KfFclxrbKn4o/qu4kf/Mn7f0/1Ept//ZtD062xRRj2zZU1rnbTi8KmfX13y8dcY7m8vseFTyGHye38tvrm3/Ssv5v7mtOhw3a+ejN1smdjhuVg+tbY6Llhq3HBdN3Y6LrUfqPxzf0qKsqx9GJze1SM2zT6dlmnmebER1yPOX81rSe+qRziivdTmjdFt+t8f/3xVD+Z880P8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw+BVJT7vpleRskhNJjpfj1WRlc8yDXdRXGSh2k+ae2U3OPz5FxxUtHuZhPsqx/c4IAAAAAAAAgMfj6uT3X371RXmrfx7fk1+rNOdUk94kJ4q/6ZuYnJ+b6VJQX3J79SP9/vYhHSbndnn38/Xxb8ux57rUd7CXDwDAj9r/BQAA//+CGm1g") sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x2eb4, 0x2000007ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x200080, 0x10) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001900010028bd7000fcdbdf251d01020008000900", @ANYBLOB="08000a00c5"], 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x30004016) dup(r1) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x10002, &(0x7f0000000200)={[{@nobarrier}, {@dioread_lock}, {@noquota}, {@auto_da_alloc}, {@block_validity}, {@nodioread_nolock}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000002c0)=0x20) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 46.676833737s ago: executing program 0 (id=4000): perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x12022, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$int_in(r0, 0x5452, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000640)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@stripe={'stripe', 0x3d, 0xb9}}]}, 0x1, 0x437, &(0x7f0000000900)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x6000, 0xb5) io_uring_setup(0x2e3a, 0x0) syz_clone(0x4000000, 0x0, 0xfffffffffffffc8d, 0x0, 0x0, 0x0) creat(&(0x7f0000000200)='./file1\x00', 0x0) epoll_create1(0x80000) syz_open_pts(r1, 0x600200) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) unshare(0x26040680) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='cgroup\x00') lseek(r2, 0x2000, 0x0) syz_read_part_table(0x5e6, &(0x7f0000000800)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0x2) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xff) unshare(0x2c040480) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback={0x0, 0x3fc}}) 46.466401032s ago: executing program 0 (id=4005): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x60, 0x0, 0x8, 0x0, 0x0, 0x21000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0x0, 0xc8, 0x3, 0x0, 0xfffffffffbfffffd, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004840)=@newtaction={0x112c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x778, 0x1, [@m_mpls={0x108, 0x1d, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0xd1, 0x6, "8d5fd25810b56a4b209a3016ba72dcc2385479ce43c262ce7833a0fdeb60dd0f51764595c93a964a6d08ba66827375198e77ce9efd31f11de9b22cb0378685d2d027857ca63904992e2147758a7eb2be9a81e1e93d7f04d64ee6a1e11d81ef56a7f294a6e10998689a5a18cd4dd240ccf57d9f440594c275a458d15f06efb164e3b15dee7497e867fb0a8ca14827b9a6de5d085fe0eeb79208fb4f80819a2eb4857382b207ebfa31c4bf09e5d1586176f03a28f96b3a8b0437eba3e802ab30a9fcdb196a4ba5cf192de398c8f7"}, {0xc}, {0xc, 0x8, {0x99c02496482d25f9}}}}, @m_csum={0x200, 0x15, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x4, 0x4, 0x108e, 0x2873}, 0x13}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x80, 0x3, 0x5, 0x80}, 0x1a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000001, 0x9180, 0x6, 0x2, 0x7fffffff}, 0x6}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x7, 0x0, 0xfe4, 0x5}, 0x23}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x3, 0x4, 0x6, 0x7}, 0x19}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfff, 0xe773, 0x7, 0xfffffff8, 0x2}, 0x39}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xa0a8, 0x1, 0x1, 0x80}, 0x1c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xd, 0x8, 0x6, 0x8}, 0x3f}}]}, {0xf3, 0x6, "7064c854d46fd7062246ada5d5b5a6766b8a86a9cf042e9bcb86178248ab9ab1253fe9ce1d651a7e8806b55b63f164d4b13613f7c0f8c784b4bafe52a5d28ff6f55ae4de03a6353501ca1edd8e179fc0440ebccc98d33b2120a50b5b1448277dd336f21c6d6ca9ff64338b42905fdc223ff22d687430099dc37d33164b7c2080089361e598bcf92130b1a72794042c315a67c04eb59c879e91543c3bc97353287e4fd8360e0ea57e595a9b8d1418c6bd3770634e89fb7d53db952173d28020a2fb7ff85871423ec96e51e928bb3b4884a19f5fb2271040c150c1b5eeccd6ec20b9bb3fdd005bc8893e40406b7528fd"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_gact={0x88, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x14eda0e6, 0x10000000, 0x9, 0x3549}}]}, {0x43, 0x6, "4c63c05694b3d0d8500a1d725fa8fffb9aaf020b416e9ca0615412b45a1118f9ceacf52133a3564564c213000fc3d0f9aac7085a2013b198e721d6067a010c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x7c, 0x9, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x5c80281e, 0x4, 0xe, 0x3}, 0xfffc}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x6, 0x3, 0x8000}, 0x5391}}]}, {0x13, 0x6, "e631e5e8259b55d7f9158c3cb6c028"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0x98, 0x5, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, {0x47, 0x6, "b57a1021f27ca537f175d12c18d7a1bfbecf83526b8dbd29001469f0afcc95db53415661ba805ffd7fb64c3c548e81b6677f386e09f2eeb64fbb842ec6ce03d17e3809"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0xe8, 0x13, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}]}, {0xac, 0x6, "8da3f4b073862aa40274f8988c0e733d1b38f0757b784a8a2a5ab1cf2d45118cc85568c9ccde26e6e66aa4443bfdb9455692d80df9de68fe87d1c50b84b43d25b6d8b38a5591988af4e5d1e0862c09514fc79475ebda2bc5ceec001a279a9aeeb3abef7c949f75e4767e789e5c14fcfcdc3cb5d6a6f3c3a3ca6050c45e1485555695c2da45c5dc2debd996409e30b6edfc4c3f5bc003cb408e02bdc2c7065ad8f78d6eceff6b2e3a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_vlan={0x110, 0x18, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x401, 0x4, 0x4, 0x2}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xae, 0x6, "31912acc842880a572cd8e74af19a527012802d4caa0aae8fda8bcf6f8a9a2fc5fe4d640011a484cbe6e12061492ba11909ef2c4130b0cd984797c4f2c928d7d22936d8f5bee2b396640f57752c21d8d6bd434e4f865f164610fcb126198ba60077877dbbefb18be913f91e145745f3d70c22a6c6f90c3b60092c340607c843a4e29dcb646f340ba6e819cf98818cdafa5ff251c701e780705314e93851e0bc01c9e4eae4bcaa33f852e"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0x58, 0x18, 0x0, 0x0, {{0x9}, {0x4}, {0x2c, 0x6, "e3bfd8a3867ba2f12a8b79ba3f372a3e3db7ebf7d85890bd667327fd56d9c25d8020e303362744cb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0x80, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x55, 0x6, "10c55c2bcae048e47eceeb5b55f2f4589c55292e7e290bcfaeff14016754cf5174d2fea86ee0b754450d2967627cbbeb14714cb6369fbc9e93d97ecb88a3a4c5f42c24a23ddfe73535608ef4373c67fe67"}, {0xc, 0x7, {0x3163ef1afb664209}}, {0xc, 0x8, {0x3}}}}]}, {0x414, 0x1, [@m_mpls={0x14c, 0x17, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xaf}, @TCA_MPLS_LABEL={0x8, 0x5, 0xf35f8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x61, 0x200, 0x10000000, 0x5e4dc134, 0x10000}, 0x3}}]}, {0xf1, 0x6, "a4a8c682805f946518a7c28486fc93f9db7ff3fbc540b7a91b0edbee63343453bbcdc4c8592c7c06dd19d16ebf284d533c4a72a7c53a106bd2e408fea8a8c7f25d727257231cd2129812ffeab81ea1728c06fd1fa470ff7ab556a95f80c0f152dcfeb0b5a72fdd9a8f4d9f9ea1b5efc78c0dd8a63d272bd6e2e35e1af01ce08c3cf7fa63a189cd9400b332d700d96bacd6bec40c38d4e3234abdb3c413d8528c6fe2e85b39b6d7e861e1089e4d34dabdbe6272153f150be9bfdc03cf30a35fe9a835b14ebed9aeafd603b21e20bf76b2c75062c9300a517c2a3fd9bf44c264d0b4c3ffa4027d0bf0e593f384cb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x48, 0x14, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xfffffff2, 0xfffffff8, 0xfffffffffffffffa, 0x5, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_xt={0xdc, 0x20, 0x0, 0x0, {{0x7}, {0xb4, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xd8}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x38, 0x6, {0x100, 'filter\x00', 0x9, 0x5, "e23a9ce89f3f765456e3ce982c6e"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x37c8867465a45c5d}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_xt={0x60, 0x1e, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_TARG={0x2a, 0x6, {0xfff, 'nat\x00', 0x4, 0x9}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0xbc, 0x11, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}]}, {0x6c, 0x6, "6e22ee1413c6943c07a7d4296dbec36a0aa3d3cb7a9219f19d65aa53ffeb4b93d617f978a21d9510c65c315aa921bdee0f9f3b3fe38c68a8b18dfc2e385586549dcd429b9519aa179b6843ba91e5b2b7f3f190595432817d9c6b04c2973fa73dbba88fcf5a0465bf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x3c, 0x1, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x400}]]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbmod={0x48, 0x15, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x94, 0x1, [@m_mpls={0x90, 0x6, 0x0, 0x0, {{0x9}, {0x4}, {0x64, 0x6, "85b5842492f234d502eb802189b8bd6d19da20650f4d9199ce28bdce647e655394c4836ab45a8583a86ba574d9a9551b34e6929948edf8e7465b997164a3a09745ff43068993319a24d53f690b7cba8ea8747cc1fac3ecbfaab9ff9b02bf6520"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, {0x410, 0x1, [@m_ife={0x11c, 0x13, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_DMAC={0xa, 0x3, @remote}]}, {0xcf, 0x6, "921ebaa53d0d67c6f77d3e4c4a1ad216029fd4fbc2c65951d71591db612524ad93ec7ab36b3910a588c374533f1ca2ec478b08f0bad37b16f112a610ba170eca7c511a7aba94a7e5f04129e2585b4c27dd05479bbfde518b8e3fd92085450e932945df64ac14777a975d764148c052a863e4882e50b27fd868ead83887a4024b010bb436265efc8e9ca112e55389f2e30646257f8239371998d37487ca7e4f4fdc03d6478de1207b8952d2a2220dc4bace15abb207939f51263180378eff1bc31ee84a69e918ad9f7d3940"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_gact={0x13c, 0x9, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x266c, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xbde, 0x3}}]}, {0xf8, 0x6, "32c67d3efc8a479de439b41c17423ce6f4af66c9bf469b8acb6f382b81a40caf7672b719fcca73bac6e57a6ea8f25987c0a2c282516050a3c2d8f8977ffd6fb42712d67a6819fceff36f32b944741fb5d8ebe0066a73a7f34c688f19babc326016889624ecf57ecf123ed564bb5e02a2176c856ff74e429ace69a098705d6ce0850537be5bab8a07498ab6fe71d994c144616701868ad7e46c714aca921f4d7aff46cb16090580b603e0faa58f9cc73e659dcfab46e86a32277c855625d6f41568f9f6b7eb9ae19a8917119ac82c52a4c0b36462836ac9bb6ba0cfccc6d2bc1383f1b62da1241534de1c26eee22195f9c4f21a4a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_sample={0xe0, 0x14, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x200, 0x8, 0x0, 0x0, 0x4}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffffd}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7fffffff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x91a9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1054}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}]}, {0x5a, 0x6, "c34d9b85ab8d8f994a28b7b8f96e58d8e199e300182c2cc3f32e77a77bcab1c6a47ef3deb93da8e345a69a50fd65c39a5e47e7fa5085b06f685d6bfb7398a1310f4fbe0e696507666076cc039931a1d4dfebd63c6cdd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_nat={0xd4, 0x12, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xa2e, 0x8, 0x80000000}, @loopback, @local, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x81, 0xffffffffffffffff, 0x6, 0x9}, @multicast2, @multicast1, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x1, 0x8, 0x5, 0x81}, @broadcast, @multicast1, 0xffffff00, 0x2001}}]}, {0x32, 0x6, "65cbb0dc3afdebc035c5e42acb1a77debedd498b781ac049debe476d90e44e5f425541d74d81bb467eaf61d8be03"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0xe8, 0x1, [@m_sample={0xe4, 0x14, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}]}, {0xad, 0x6, "e8557cb5e62d9a0dd489a72dbd83c887d409d09bb289e6a232dd5737468a910b984ad5dd849dd06cd696bab626e8bde3291cf78d436f92da6af2a3da0c3ab8a88bde7ee67acd50c455032f5a406bea2dc512fe5218c25fabc930301c4efd79de47f3498a224a6050816ef0825440ad29e8b73b50318f93f4f5bfbb5717d653417b93420b88da4ae3558a5c3c6f0069d77351ac55e23a71a4235cf550784999be3e39580729a9a83369"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x112c}}, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfdc3) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10040d, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = gettid() timer_create(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x140, 0x12, 0x60a, 0x0, 0x202, 0x298, 0x2e8, 0x2e8, 0x298, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x1, 0x8b, 0xd2, 0x4, 0x4, 0x4, 0xa216}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@srh1={{0x90}, {0x3c, 0x1, 0xd1, 0x1, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @dev={0xfe, 0x80, '\x00', 0x22}, [0xff, 0xffffff00, 0x0, 0xffff00], [0xffffff00, 0x0, 0xff, 0xffffffff], [0xff000000, 0xffffffff, 0xff, 0xff000000], 0x900, 0x4000}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0xfebc) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_clone(0x4400, &(0x7f0000000840)="fb22190ebafee16bb96a655c77aa9d049095b0ac1389c47135a933d3cf69564f56dfb3c4828040a9ecc3d1854913df0b22ed88bcc672b4f22aef1c7edeeeded10887e22dc17e65d87cd8450d91a15f7515b2adb2107a65fd319ecd596e4053610a837aa1b23145fad603a67856d147fd6b82e1d13077752cf031b96945bdeb58c83d161c8f4be3361df0936f851f0653f02fd7f5318570c39bfa7fcd7d2a8155d53e8b75def63c43a91d5756a0e41d97e004299a942a866a0918461fc268e6083e73dcb772f7d9ef5ba847840525b1103e528108e3b7a496d48cefcea9ba6df7fb50bae079869505dd51188d8b2c27402c92ce7824bb", 0xf6, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)) r6 = getpgid(r5) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000003, &(0x7f0000000040), 0x1, 0x4e6, &(0x7f0000000240)="$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") r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) tgkill(r6, r1, 0x14) setsockopt$inet6_int(r7, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) mmap$IORING_OFF_SQES(0x0, 0x3, 0xa, 0x12, r9, 0x10000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet6_buf(r7, 0x29, 0x6, &(0x7f0000000140)=""/19, &(0x7f0000000240)=0x14) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x20000014}) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r10, &(0x7f0000000800)={0xa0000006}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000040)={0x80002000}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x5ff5, 0x800, 0x0, 0x800010100000}, 0x0, &(0x7f00000000c0)={0x1c, 0x40002, 0x0, 0x0, 0x0, 0x200000000, 0x6a9}, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 45.561909104s ago: executing program 0 (id=4013): gettid() timer_create(0x9, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000440)={{0x77359400}}, &(0x7f0000000480)) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc8, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:var_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wlan1\x00'}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x1, @mcast1, 0x2}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r3) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='P\x00\x00', @ANYRES16=r5, @ANYBLOB="000228ad7000fcdbdf25130000003c00018038000400200001000a004e21000000ff200100000000000000000000000000020000000014000200142a49f7ac1414aa00000000000000007ad093505442dcdb7a39425890556dfe11cd0f99a7d15f1726306762791c8aa4dcd81df2ed8650ad3c60443483fa462d106bb93b22b69095fcf29a84435527ca8160462728475956007b344129f8b51cf3982dc416587fb56ce4adadb5df154d2dd7336f8bacd692b8fd21ff88"], 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x40) write$binfmt_script(r3, &(0x7f0000000080), 0x4) close(r3) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x100000000000600d, 0x1) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x110) fadvise64(r6, 0x0, 0x6, 0x4) io_uring_enter(r3, 0x7cb7, 0xea1f, 0x4, &(0x7f0000000040)={[0x1]}, 0x8) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x80900, 0x0, 0x2, 0x0, &(0x7f0000000280)=0x6}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0xa, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100000100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc, 0x3, 0x401, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x1, 0x4, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffa, 0x4, 0x0, 0x4, 0x1, 0x9, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000005, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x8, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xf9, 0x7]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x400, 0x0, 0x3c9}, &(0x7f0000000100), &(0x7f0000000000), 0x0) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) pread64(r7, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) 45.483690796s ago: executing program 34 (id=4013): gettid() timer_create(0x9, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000440)={{0x77359400}}, &(0x7f0000000480)) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc8, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:var_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wlan1\x00'}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x1, @mcast1, 0x2}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r3) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='P\x00\x00', @ANYRES16=r5, @ANYBLOB="000228ad7000fcdbdf25130000003c00018038000400200001000a004e21000000ff200100000000000000000000000000020000000014000200142a49f7ac1414aa00000000000000007ad093505442dcdb7a39425890556dfe11cd0f99a7d15f1726306762791c8aa4dcd81df2ed8650ad3c60443483fa462d106bb93b22b69095fcf29a84435527ca8160462728475956007b344129f8b51cf3982dc416587fb56ce4adadb5df154d2dd7336f8bacd692b8fd21ff88"], 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x40) write$binfmt_script(r3, &(0x7f0000000080), 0x4) close(r3) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x100000000000600d, 0x1) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x110) fadvise64(r6, 0x0, 0x6, 0x4) io_uring_enter(r3, 0x7cb7, 0xea1f, 0x4, &(0x7f0000000040)={[0x1]}, 0x8) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x80900, 0x0, 0x2, 0x0, &(0x7f0000000280)=0x6}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0xa, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100000100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc, 0x3, 0x401, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x1, 0x4, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffa, 0x4, 0x0, 0x4, 0x1, 0x9, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000005, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x8, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xf9, 0x7]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x400, 0x0, 0x3c9}, &(0x7f0000000100), &(0x7f0000000000), 0x0) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) pread64(r7, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) 9.265966921s ago: executing program 6 (id=4611): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x8f4, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x3, 0xd7df, 0xbd}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) 9.182227343s ago: executing program 6 (id=4612): r0 = syz_usbip_server_init(0x5) socket$pppl2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x45, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_config_ext={0x8, 0x7}, 0x1004, 0x1, 0xf2ec6ba1, 0x9, 0x2, 0x80004001, 0x9, 0x0, 0x0, 0x0, 0x30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000004480)={0x1, 0x8, &(0x7f0000000780)=@raw=[@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f6f9fe5}}], &(0x7f00000007c0)='GPL\x00', 0x5, 0x1000, &(0x7f00000033c0)=""/4096, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f00000043c0)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r1, 0x3, &(0x7f0000004400)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000004440)=[{0x3, 0x4, 0x2, 0xb}, {0x1, 0x3, 0x0, 0xa}, {0x1, 0x5, 0x8}], 0x10, 0xc5ec}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000600)=ANY=[@ANYRESHEX, @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYBLOB="f144ef566aaa2604da071bbeb6f430dfed6346ac280ad0be1430acfe313e69a2fa6cfe678c61c9f409a06bfd99bec80be2031abda528aae9370d25e0b4fbf0cf85b7fb437e3447f576f632761291515cb5463d90d1bb7568142a060494f630902b3ef5334efb547f8cf0b2458c7979b0db9ca4f520c1f1b85f556cf01d", @ANYBLOB="e1000e322868363b38d9db095899a1945e4a06000f3ebe5067157346e5624f6d506a1c219ece53b17f14f64e7fa1124f331eb2d46b4e89a95ce23ee44d7d"], 0xf6, 0xa19, &(0x7f0000002980)="$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") add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) write$usbip_server(r0, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], 0xec1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 8.451726221s ago: executing program 6 (id=4623): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000580)='x', &(0x7f0000000080)=@tcp6=r5, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f00000001c0), &(0x7f0000000040)=@tcp=r0}, 0x20) syz_emit_ethernet(0xd81, &(0x7f0000002740)=ANY=[], 0x0) 8.390542063s ago: executing program 6 (id=4625): perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x12022, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$int_in(r0, 0x5452, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000640)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@stripe={'stripe', 0x3d, 0xb9}}]}, 0x1, 0x437, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x6000, 0xb5) io_uring_setup(0x2e3a, 0x0) syz_clone(0x4000000, 0x0, 0xfffffffffffffc8d, 0x0, 0x0, 0x0) creat(&(0x7f0000000200)='./file1\x00', 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='cgroup\x00') lseek(r1, 0x2000, 0x0) syz_read_part_table(0x5e6, &(0x7f0000000800)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0x2) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setns(0xc9, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xff) unshare(0x2c040480) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback={0x0, 0x3fc}}) 8.205263547s ago: executing program 6 (id=4628): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000001000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) 7.914152534s ago: executing program 6 (id=4638): r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xa, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x4}, 0x202, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000004, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x32c3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000040)=""/114, 0x29}], 0x2, 0x2, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r7, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0x13, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_fd={0x18, 0x6, 0x1, 0x0, r5}, @call={0x85, 0x0, 0x0, 0xf9b}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2e4b744ab4cfdbf0}}}, &(0x7f0000000680)='GPL\x00', 0x9, 0x50, &(0x7f0000000740)=""/80, 0x41100, 0x1, '\x00', 0x0, @cgroup_skb, r6, 0x8, &(0x7f00000007c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x2, 0xc, 0x3, 0x7f6}, 0x10, r8, r1, 0x2, 0x0, &(0x7f0000000840)=[{0x1, 0x2, 0xe, 0x8}, {0x3, 0x4, 0x10, 0xa}], 0x10, 0x7}, 0x94) r9 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x86, &(0x7f00000010c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500007800000000000190780a010102ac1414aa0304907801000000470800000000000000110000000000000a010100440c0001ac1414bb4e210000443caa01ac1414aa000000000000000000000000ac1414000000000000000000000000000000000000000000ac1e00010000000dac14140000000000"], 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="02030003110000002cbd7000fbdbdf2503000900800000001c8737af296d0290168a530a05df4563050006006c0000000a004e2400000008ff010000000000000000000000000001000000000000000002000100000000004000070c000000c005000500000000000a004e2400000009000000000000000000000000000000000600000000000000048f33d9aeaa79536ca308f578790d5741b55771e2c6661de3dbb0cac526"], 0x88}, 0x1, 0x7}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x541c, &(0x7f0000000000)) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180), 0x4, 0x2000000000000357}}, 0x3c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000314010027bd7000ffdbdf250900020073797a31000000000800410073697700140033006772657461703000"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x44800) 7.912797234s ago: executing program 35 (id=4638): r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xa, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x4}, 0x202, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000004, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x32c3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000040)=""/114, 0x29}], 0x2, 0x2, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r7, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0x13, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_fd={0x18, 0x6, 0x1, 0x0, r5}, @call={0x85, 0x0, 0x0, 0xf9b}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2e4b744ab4cfdbf0}}}, &(0x7f0000000680)='GPL\x00', 0x9, 0x50, &(0x7f0000000740)=""/80, 0x41100, 0x1, '\x00', 0x0, @cgroup_skb, r6, 0x8, &(0x7f00000007c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x2, 0xc, 0x3, 0x7f6}, 0x10, r8, r1, 0x2, 0x0, &(0x7f0000000840)=[{0x1, 0x2, 0xe, 0x8}, {0x3, 0x4, 0x10, 0xa}], 0x10, 0x7}, 0x94) r9 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x86, &(0x7f00000010c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500007800000000000190780a010102ac1414aa0304907801000000470800000000000000110000000000000a010100440c0001ac1414bb4e210000443caa01ac1414aa000000000000000000000000ac1414000000000000000000000000000000000000000000ac1e00010000000dac14140000000000"], 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="02030003110000002cbd7000fbdbdf2503000900800000001c8737af296d0290168a530a05df4563050006006c0000000a004e2400000008ff010000000000000000000000000001000000000000000002000100000000004000070c000000c005000500000000000a004e2400000009000000000000000000000000000000000600000000000000048f33d9aeaa79536ca308f578790d5741b55771e2c6661de3dbb0cac526"], 0x88}, 0x1, 0x7}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x541c, &(0x7f0000000000)) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180), 0x4, 0x2000000000000357}}, 0x3c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000314010027bd7000ffdbdf250900020073797a31000000000800410073697700140033006772657461703000"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x44800) 6.44605944s ago: executing program 3 (id=4667): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x2, 0xb563}, 0x0, 0x11100, 0x9e4, 0x5, 0x8, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000980)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f00000009c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf250e00000008003b000200000005002f000100000005003700010000000500300001000000050030000100000008000600", @ANYRES32=0x0, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000ffff2cbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2911010081800400180012800b000100697b36746e6c0000080002800400130008000a00", @ANYRES32=r3, @ANYBLOB], 0x40}, 0x1, 0x600, 0x0, 0x8014}, 0x40040) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c0000007f4eccbabb40e73bce12252c3e41fcbe1520f5d73829a2248bff188c13eb1a6d27becd479c8cd1f73e98456762b6142b5e5f9a8d03bf274bf8214408999856ed173528b2f9809e43251483560d2942b8a69db5590acde37c2e40786b5a2b00", @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf250200000008000300", @ANYRES32=r3, @ANYBLOB="05002e000100000005002e000100000008002b00050000000800320002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000881) pipe2(&(0x7f0000000000), 0x80000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x3, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fddbdf250100"], 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0401000010000700000000000000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff0000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 6.368725902s ago: executing program 3 (id=4670): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", 0x0, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) 6.312271234s ago: executing program 3 (id=4671): r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x2, 0xb563}, 0x0, 0x11100, 0x9e4, 0x5, 0x8, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route(r0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x3, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 6.238306716s ago: executing program 5 (id=4672): socket$inet_icmp(0x2, 0x2, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x44) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x200e000) r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg(r0, 0x0, 0x0, 0x0) open(0x0, 0x148640, 0x78e22799f4a46f8a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r5) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x14010, &(0x7f0000000040)=ANY=[]) connect$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x4}}, 0x10) 6.178249777s ago: executing program 3 (id=4674): perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x12022, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$int_in(r0, 0x5452, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000640)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@stripe={'stripe', 0x3d, 0xb9}}]}, 0x1, 0x437, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x6000, 0xb5) syz_clone(0x4000000, 0x0, 0xfffffffffffffc8d, 0x0, 0x0, 0x0) epoll_create1(0x80000) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='cgroup\x00') lseek(r1, 0x2000, 0x0) syz_read_part_table(0x5e6, &(0x7f0000000800)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0x2) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setns(0xc9, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xff) unshare(0x2c040480) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback={0x0, 0x3fc}}) 6.031135271s ago: executing program 3 (id=4676): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x2}, 0x112013, 0x0, 0xffffffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) dup(0xffffffffffffffff) memfd_secret(0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) copy_file_range(r1, 0x0, r1, &(0x7f00000000c0)=0x2, 0x11, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) mknod$loop(0x0, 0x100, 0x0) timer_create(0x1, 0x0, &(0x7f0000000380)) timer_create(0x1, 0x0, &(0x7f0000000380)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f00000000c0)) 5.911049254s ago: executing program 5 (id=4680): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x54, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3048, 0x46195}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x3}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="850000000800000076000000000000002700000000000000950000000000000059555056018162a13bba6471b8c10eb639fc9c42c074f76a88343333723857934559a3942f928cbc86b9714c03d5700012279ded91eb5305a0272dc245a9b83a12f14fa6e992b1bf43b0026cc40f380b3599ad0b166987ee0530f560d1489f814dca48f1c56c56a7ab07"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x6, &(0x7f0000000280)=[{0xc, 0x10, 0x9, 0x5}, {0x2, 0x0, 0x80, 0x78}, {0x5, 0x5, 0x4, 0x6}, {0xfff7, 0x7, 0x6, 0x40}, {0x6, 0xc, 0x5, 0x9}, {0x5, 0x7, 0x4, 0x1}]}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0xffffffffffffff10, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000002060108000000000000000001000004050005000100000017000300686173683a6e65742c69666163650000050004000200005e9ca28000030000003219b8c70591e54b7c272a81430d97cd20ae0c0365703bcdbc11389e1fc4"], 0x40}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000400000014000500fc0000000000000000000000000000010800020005000000070006"], 0x44}}, 0x0) io_uring_setup(0x383a, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x3, 0x3d6}) socket(0x1e, 0x4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2}, 0x50) io_uring_enter(r3, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 5.757800858s ago: executing program 5 (id=4683): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000045c0), 0x1012e, 0x2, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) dup(0xffffffffffffffff) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, 0x0}, 0x48043) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x4, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) inotify_init1(0x0) open(&(0x7f0000000180)='./bus\x00', 0x149cc2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0xf6b5be0cc78dc1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x117006, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, r1, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r7, &(0x7f00000004c0)=ANY=[], 0xfdef) 5.330203058s ago: executing program 3 (id=4685): perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x12022, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$int_in(r0, 0x5452, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000640)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@stripe={'stripe', 0x3d, 0xb9}}]}, 0x1, 0x437, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x6000, 0xb5) io_uring_setup(0x2e3a, 0x0) epoll_create1(0x80000) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='cgroup\x00') lseek(r1, 0x2000, 0x0) syz_read_part_table(0x5e6, &(0x7f0000000800)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0x2) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setns(0xc9, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xff) unshare(0x2c040480) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback={0x0, 0x3fc}}) 5.24461813s ago: executing program 36 (id=4685): perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x12022, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$int_in(r0, 0x5452, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000640)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@stripe={'stripe', 0x3d, 0xb9}}]}, 0x1, 0x437, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x6000, 0xb5) io_uring_setup(0x2e3a, 0x0) epoll_create1(0x80000) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='cgroup\x00') lseek(r1, 0x2000, 0x0) syz_read_part_table(0x5e6, &(0x7f0000000800)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0x2) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setns(0xc9, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xff) unshare(0x2c040480) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback={0x0, 0x3fc}}) 4.83778391s ago: executing program 5 (id=4687): perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x12022, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$int_in(r0, 0x5452, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000640)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@stripe={'stripe', 0x3d, 0xb9}}]}, 0x1, 0x437, &(0x7f0000000900)="$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") syz_clone(0x4000000, 0x0, 0xfffffffffffffc8d, 0x0, 0x0, 0x0) epoll_create1(0x80000) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='cgroup\x00') lseek(r1, 0x2000, 0x0) syz_read_part_table(0x5e6, &(0x7f0000000800)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0x2) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setns(0xc9, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xff) unshare(0x2c040480) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback={0x0, 0x3fc}}) 4.748026042s ago: executing program 5 (id=4688): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x60, 0x0, 0x8, 0x0, 0x0, 0x21000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0x0, 0xc8, 0x3, 0x0, 0xfffffffffbfffffd, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004840)=@newtaction={0x10f4, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x740, 0x1, [@m_mpls={0x108, 0x1d, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0xd1, 0x6, "8d5fd25810b56a4b209a3016ba72dcc2385479ce43c262ce7833a0fdeb60dd0f51764595c93a964a6d08ba66827375198e77ce9efd31f11de9b22cb0378685d2d027857ca63904992e2147758a7eb2be9a81e1e93d7f04d64ee6a1e11d81ef56a7f294a6e10998689a5a18cd4dd240ccf57d9f440594c275a458d15f06efb164e3b15dee7497e867fb0a8ca14827b9a6de5d085fe0eeb79208fb4f80819a2eb4857382b207ebfa31c4bf09e5d1586176f03a28f96b3a8b0437eba3e802ab30a9fcdb196a4ba5cf192de398c8f7"}, {0xc}, {0xc, 0x8, {0x99c02496482d25f9}}}}, @m_csum={0x1c8, 0x15, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x4, 0x4, 0x108e, 0x2873}, 0x13}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x80, 0x3, 0x5, 0x80}, 0x1a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000001, 0x9180, 0x6, 0x2, 0x7fffffff}, 0x6}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x7, 0x0, 0xfe4, 0x5}, 0x23}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xa0a8, 0x1, 0x1, 0x80}, 0x1c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xd, 0x8, 0x6, 0x8}, 0x3f}}]}, {0xf3, 0x6, "7064c854d46fd7062246ada5d5b5a6766b8a86a9cf042e9bcb86178248ab9ab1253fe9ce1d651a7e8806b55b63f164d4b13613f7c0f8c784b4bafe52a5d28ff6f55ae4de03a6353501ca1edd8e179fc0440ebccc98d33b2120a50b5b1448277dd336f21c6d6ca9ff64338b42905fdc223ff22d687430099dc37d33164b7c2080089361e598bcf92130b1a72794042c315a67c04eb59c879e91543c3bc97353287e4fd8360e0ea57e595a9b8d1418c6bd3770634e89fb7d53db952173d28020a2fb7ff85871423ec96e51e928bb3b4884a19f5fb2271040c150c1b5eeccd6ec20b9bb3fdd005bc8893e40406b7528fd"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_gact={0x84, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x14eda0e6, 0x10000000, 0x9, 0x3549}}]}, {0x40, 0x6, "4c63c05694b3d0d8500a1d725fa8fffb9aaf020b416e9ca0615412b45a1118f9ceacf52133a3564564c213000fc3d0f9aac7085a2013b198e721d606"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x80, 0x9, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x5c80281e, 0x4, 0xe, 0x3}, 0xfffc}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x6, 0x3, 0x8000}, 0x5391}}]}, {0x15, 0x6, "e631e5e8259b55d7f9158c3cb6c02829c0"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0x98, 0x5, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, {0x47, 0x6, "b57a1021f27ca537f175d12c18d7a1bfbecf83526b8dbd29001469f0afcc95db53415661ba805ffd7fb64c3c548e81b6677f386e09f2eeb64fbb842ec6ce03d17e3809"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0xe8, 0x13, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}]}, {0xac, 0x6, "8da3f4b073862aa40274f8988c0e733d1b38f0757b784a8a2a5ab1cf2d45118cc85568c9ccde26e6e66aa4443bfdb9455692d80df9de68fe87d1c50b84b43d25b6d8b38a5591988af4e5d1e0862c09514fc79475ebda2bc5ceec001a279a9aeeb3abef7c949f75e4767e789e5c14fcfcdc3cb5d6a6f3c3a3ca6050c45e1485555695c2da45c5dc2debd996409e30b6edfc4c3f5bc003cb408e02bdc2c7065ad8f78d6eceff6b2e3a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_vlan={0x110, 0x18, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x401, 0x4, 0x4, 0x2}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xae, 0x6, "31912acc842880a572cd8e74af19a527012802d4caa0aae8fda8bcf6f8a9a2fc5fe4d640011a484cbe6e12061492ba11909ef2c4130b0cd984797c4f2c928d7d22936d8f5bee2b396640f57752c21d8d6bd434e4f865f164610fcb126198ba60077877dbbefb18be913f91e145745f3d70c22a6c6f90c3b60092c340607c843a4e29dcb646f340ba6e819cf98818cdafa5ff251c701e780705314e93851e0bc01c9e4eae4bcaa33f852e"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0x58, 0x18, 0x0, 0x0, {{0x9}, {0x4}, {0x2c, 0x6, "e3bfd8a3867ba2f12a8b79ba3f372a3e3db7ebf7d85890bd667327fd56d9c25d8020e303362744cb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0x80, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x55, 0x6, "10c55c2bcae048e47eceeb5b55f2f4589c55292e7e290bcfaeff14016754cf5174d2fea86ee0b754450d2967627cbbeb14714cb6369fbc9e93d97ecb88a3a4c5f42c24a23ddfe73535608ef4373c67fe67"}, {0xc, 0x7, {0x3163ef1afb664209}}, {0xc, 0x8, {0x3}}}}]}, {0x414, 0x1, [@m_mpls={0x14c, 0x17, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xaf}, @TCA_MPLS_LABEL={0x8, 0x5, 0xf35f8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x61, 0x200, 0x10000000, 0x5e4dc134, 0x10000}, 0x3}}]}, {0xf1, 0x6, "a4a8c682805f946518a7c28486fc93f9db7ff3fbc540b7a91b0edbee63343453bbcdc4c8592c7c06dd19d16ebf284d533c4a72a7c53a106bd2e408fea8a8c7f25d727257231cd2129812ffeab81ea1728c06fd1fa470ff7ab556a95f80c0f152dcfeb0b5a72fdd9a8f4d9f9ea1b5efc78c0dd8a63d272bd6e2e35e1af01ce08c3cf7fa63a189cd9400b332d700d96bacd6bec40c38d4e3234abdb3c413d8528c6fe2e85b39b6d7e861e1089e4d34dabdbe6272153f150be9bfdc03cf30a35fe9a835b14ebed9aeafd603b21e20bf76b2c75062c9300a517c2a3fd9bf44c264d0b4c3ffa4027d0bf0e593f384cb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x48, 0x14, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xfffffff2, 0xfffffff8, 0xfffffffffffffffa, 0x5, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_xt={0xdc, 0x20, 0x0, 0x0, {{0x7}, {0xb4, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xd8}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x38, 0x6, {0x100, 'filter\x00', 0x9, 0x5, "e23a9ce89f3f765456e3ce982c6e"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x37c8867465a45c5d}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_xt={0x60, 0x1e, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_TARG={0x2a, 0x6, {0xfff, 'nat\x00', 0x4, 0x9}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0xbc, 0x11, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}]}, {0x6c, 0x6, "6e22ee1413c6943c07a7d4296dbec36a0aa3d3cb7a9219f19d65aa53ffeb4b93d617f978a21d9510c65c315aa921bdee0f9f3b3fe38c68a8b18dfc2e385586549dcd429b9519aa179b6843ba91e5b2b7f3f190595432817d9c6b04c2973fa73dbba88fcf5a0465bf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x3c, 0x1, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x400}]]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbmod={0x48, 0x15, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x94, 0x1, [@m_mpls={0x90, 0x6, 0x0, 0x0, {{0x9}, {0x4}, {0x64, 0x6, "85b5842492f234d502eb802189b8bd6d19da20650f4d9199ce28bdce647e655394c4836ab45a8583a86ba574d9a9551b34e6929948edf8e7465b997164a3a09745ff43068993319a24d53f690b7cba8ea8747cc1fac3ecbfaab9ff9b02bf6520"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, {0x410, 0x1, [@m_ife={0x11c, 0x13, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_DMAC={0xa, 0x3, @remote}]}, {0xcf, 0x6, "921ebaa53d0d67c6f77d3e4c4a1ad216029fd4fbc2c65951d71591db612524ad93ec7ab36b3910a588c374533f1ca2ec478b08f0bad37b16f112a610ba170eca7c511a7aba94a7e5f04129e2585b4c27dd05479bbfde518b8e3fd92085450e932945df64ac14777a975d764148c052a863e4882e50b27fd868ead83887a4024b010bb436265efc8e9ca112e55389f2e30646257f8239371998d37487ca7e4f4fdc03d6478de1207b8952d2a2220dc4bace15abb207939f51263180378eff1bc31ee84a69e918ad9f7d3940"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_gact={0x13c, 0x9, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x266c, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xbde, 0x3}}]}, {0xf8, 0x6, "32c67d3efc8a479de439b41c17423ce6f4af66c9bf469b8acb6f382b81a40caf7672b719fcca73bac6e57a6ea8f25987c0a2c282516050a3c2d8f8977ffd6fb42712d67a6819fceff36f32b944741fb5d8ebe0066a73a7f34c688f19babc326016889624ecf57ecf123ed564bb5e02a2176c856ff74e429ace69a098705d6ce0850537be5bab8a07498ab6fe71d994c144616701868ad7e46c714aca921f4d7aff46cb16090580b603e0faa58f9cc73e659dcfab46e86a32277c855625d6f41568f9f6b7eb9ae19a8917119ac82c52a4c0b36462836ac9bb6ba0cfccc6d2bc1383f1b62da1241534de1c26eee22195f9c4f21a4a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_sample={0xe0, 0x14, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x200, 0x8, 0x0, 0x0, 0x4}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffffd}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7fffffff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x91a9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1054}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}]}, {0x5a, 0x6, "c34d9b85ab8d8f994a28b7b8f96e58d8e199e300182c2cc3f32e77a77bcab1c6a47ef3deb93da8e345a69a50fd65c39a5e47e7fa5085b06f685d6bfb7398a1310f4fbe0e696507666076cc039931a1d4dfebd63c6cdd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_nat={0xd4, 0x12, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xa2e, 0x8, 0x80000000}, @loopback, @local, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x81, 0xffffffffffffffff, 0x6, 0x9}, @multicast2, @multicast1, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x1, 0x8, 0x5, 0x81}, @broadcast, @multicast1, 0xffffff00, 0x2001}}]}, {0x32, 0x6, "65cbb0dc3afdebc035c5e42acb1a77debedd498b781ac049debe476d90e44e5f425541d74d81bb467eaf61d8be03"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0xe8, 0x1, [@m_sample={0xe4, 0x14, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}]}, {0xad, 0x6, "e8557cb5e62d9a0dd489a72dbd83c887d409d09bb289e6a232dd5737468a910b984ad5dd849dd06cd696bab626e8bde3291cf78d436f92da6af2a3da0c3ab8a88bde7ee67acd50c455032f5a406bea2dc512fe5218c25fabc930301c4efd79de47f3498a224a6050816ef0825440ad29e8b73b50318f93f4f5bfbb5717d653417b93420b88da4ae3558a5c3c6f0069d77351ac55e23a71a4235cf550784999be3e39580729a9a83369"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x10f4}}, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfdc3) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10040d, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = gettid() timer_create(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x140, 0x12, 0x60a, 0x0, 0x202, 0x298, 0x2e8, 0x2e8, 0x298, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x1, 0x8b, 0xd2, 0x4, 0x4, 0x4, 0xa216}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@srh1={{0x90}, {0x3c, 0x1, 0xd1, 0x1, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @dev={0xfe, 0x80, '\x00', 0x22}, [0xff, 0xffffff00, 0x0, 0xffff00], [0xffffff00, 0x0, 0xff, 0xffffffff], [0xff000000, 0xffffffff, 0xff, 0xff000000], 0x900, 0x4000}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0xfebc) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_clone(0x4400, &(0x7f0000000840)="fb22190ebafee16bb96a655c77aa9d049095b0ac1389c47135a933d3cf69564f56dfb3c4828040a9ecc3d1854913df0b22ed88bcc672b4f22aef1c7edeeeded10887e22dc17e65d87cd8450d91a15f7515b2adb2107a65fd319ecd596e4053610a837aa1b23145fad603a67856d147fd6b82e1d13077752cf031b96945bdeb58c83d161c8f4be3361df0936f851f0653f02fd7f5318570c39bfa7fcd7d2a8155d53e8b75def63c43a91d5756a0e41d97e004299a942a866a0918461fc268e6083e73dcb772f7d9ef5ba847840525b1103e528108e3b7a496d48cefcea9ba6df7fb50bae079869505dd51188d8b2c27402c92ce7824bb", 0xf6, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)) r6 = getpgid(r5) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000003, &(0x7f0000000040), 0x1, 0x4e6, &(0x7f0000000240)="$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") r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) tgkill(r6, r1, 0x14) setsockopt$inet6_int(r7, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) mmap$IORING_OFF_SQES(0x0, 0x3, 0xa, 0x12, r9, 0x10000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet6_buf(r7, 0x29, 0x6, &(0x7f0000000140)=""/19, &(0x7f0000000240)=0x14) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x20000014}) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r10, &(0x7f0000000800)={0xa0000006}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000040)={0x80002000}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x5ff5, 0x800, 0x0, 0x800010100000}, 0x0, &(0x7f00000000c0)={0x1c, 0x40002, 0x0, 0x0, 0x0, 0x200000000, 0x6a9}, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 4.394663601s ago: executing program 5 (id=4694): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)={0x33, 0x17, 0x1, {0x2a, './cgroup.cpu/test/memory.oom_control/file0'}}, 0x33) setxattr$security_evm(&(0x7f00000000c0)='./cgroup.cpu/test/memory.oom_control/file0\x00', &(0x7f0000000180), &(0x7f00000003c0)=ANY=[], 0xfd, 0x0) write(r0, &(0x7f0000000380)='10000', 0x5) unlinkat(r0, &(0x7f0000000080)='./cgroup.cpu/test/memory.oom_control/file0\x00', 0x0) syncfs(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) unshare(0x62040200) 4.346438423s ago: executing program 37 (id=4694): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)={0x33, 0x17, 0x1, {0x2a, './cgroup.cpu/test/memory.oom_control/file0'}}, 0x33) setxattr$security_evm(&(0x7f00000000c0)='./cgroup.cpu/test/memory.oom_control/file0\x00', &(0x7f0000000180), &(0x7f00000003c0)=ANY=[], 0xfd, 0x0) write(r0, &(0x7f0000000380)='10000', 0x5) unlinkat(r0, &(0x7f0000000080)='./cgroup.cpu/test/memory.oom_control/file0\x00', 0x0) syncfs(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) unshare(0x62040200) 2.194673236s ago: executing program 8 (id=4709): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) unshare(0x22020600) syz_open_procfs(0x0, 0x0) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r2, 0x0, 0x0}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000540)={@private0, 0x802, 0x0, 0xff, 0x9, 0xa4, 0x43}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f00000003c0)=""/118) msgctl$MSG_INFO(0x0, 0xc, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) close(r3) 1.61262584s ago: executing program 8 (id=4712): r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000500000a0900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a310000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080005400000000014000000110001"], 0xac}}, 0x24004000) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) write$cgroup_int(r0, &(0x7f0000000000)=0x2, 0x12) unshare(0x28000600) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='local_lock\x00', &(0x7f0000000200)='all\x00', 0x0) 1.534870832s ago: executing program 8 (id=4714): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000180)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec777000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.446197834s ago: executing program 8 (id=4716): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x2}, 0x112013, 0x0, 0xffffffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) dup(0xffffffffffffffff) memfd_secret(0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) copy_file_range(r1, &(0x7f0000000080)=0x6923, r1, 0x0, 0x11, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) mknod$loop(0x0, 0x100, 0x0) timer_create(0x1, 0x0, &(0x7f0000000380)) timer_create(0x1, 0x0, &(0x7f0000000380)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f00000000c0)) 1.445665724s ago: executing program 1 (id=4717): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000980)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f00000009c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf250e00000008003b000200000005002f000100000005003700010000000500300001000000050030000100000008000600", @ANYRES32=0x0, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000ffff2cbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2911010081800400180012800b000100697b36746e6c0000080002800400130008000a00", @ANYRES32=r3, @ANYBLOB], 0x40}, 0x1, 0x600, 0x0, 0x8014}, 0x40040) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c0000007f4eccbabb40e73bce12252c3e41fcbe1520f5d73829a2248bff188c13eb1a6d27becd479c8cd1f73e98456762b6142b5e5f9a8d03bf274bf8214408999856ed173528b2f9809e43251483560d2942b8a69db5590acde37c2e40786b5a2b00", @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf250200000008000300", @ANYRES32=r3, @ANYBLOB="05002e000100000005002e000100000008002b00050000000800320002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000881) pipe2(&(0x7f0000000000), 0x80000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x3, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fddbdf250100"], 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0401000010000700000000000000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff0000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 1.436398215s ago: executing program 7 (id=4718): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x54, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3048, 0x46195}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x3}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="850000000800000076000000000000002700000000000000950000000000000059555056018162a13bba6471b8c10eb639fc9c42c074f76a88343333723857934559a3942f928cbc86b9714c03d5700012279ded91eb5305a0272dc245a9b83a12f14fa6e992b1bf43b0026cc40f380b3599ad0b166987ee0530f560d1489f814dca48f1c56c56a7ab07"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x6, &(0x7f0000000280)=[{0xc, 0x10, 0x9, 0x5}, {0x2, 0x0, 0x80, 0x78}, {0x5, 0x5, 0x4, 0x6}, {0xfff7, 0x7, 0x6, 0x40}, {0x6, 0xc, 0x5, 0x9}, {0x5, 0x7, 0x4, 0x1}]}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0xffffffffffffff10, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000002060108000000000000000001000004050005000100000017000300686173683a6e65742c69666163650000050004000200005e9ca28000030000003219b8c70591e54b7c272a81430d97cd20ae0c0365703bcdbc11389e1fc4"], 0x40}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000400000014000500fc0000000000000000000000000000010800020005000000070006"], 0x44}}, 0x0) io_uring_setup(0x383a, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x3, 0x3d6}) socket(0x1e, 0x4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2}, 0x50) io_uring_enter(r3, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 1.389923586s ago: executing program 8 (id=4719): openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb763e", 0x10, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ra}}}}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000804}, 0x40) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000180)={[{@noblock_validity}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@grpjquota}]}, 0x3, 0x79b, &(0x7f0000001200)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0xb, 0x4, 0x4, 0xfffffff9}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x40000) 1.248681009s ago: executing program 1 (id=4720): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x9, 0x0, 0x81, 0xfffffff9, 0xa}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000023000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, r3, 0x25, 0x2}, 0x3a) syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[], 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)={[{@usrquota}]}, 0x1, 0x4bf, &(0x7f0000000a40)="$eJzs3c1rHOcZAPBndy1ZkuX6o6XYLtQGF9wPrNUHxVLbS09tD4ZSQy8tuKq0Vl2ttEK7ci3hg9zefOghJCSQ5JB7/oJc4lNMIOSc3EMOwSFxFEhCAhtmdtfWx668JPJu4vn9YKx35h3t875enlez78zsBJBZ55J/chGjEfF2RBxrrO7c4Vzjx9aDW3PJkot6/cpHuXS/ZL21a+v3jkTEZkQMRcRf/hDxz9zeuNX1jcXZcrm02lwv1pZWitX1jYvXl2YXSgul5YnpSzMz0+NTkzMH1tc7///3ncuv/Wnw1c/+d//eM2+8njRrtFm3vR8HqdH1gTixbduhiPjdkwjWB4Vmf4b73RC+keT9+2FEnE/z/1gU0ncTyIJ6vV7/qn64U/VmfY/N5m8B33f59Bg4lx+LiEY5nx8baxzD/yhG8uVKtfara5W15ZeOpgPC8RjIX7teLo03Pyscj4Fcsj6Rlh+tT+5an4pIj4GfLQyn62NzlfJ8Lwc6YI8ju/L/00Ij/4GM8JEfskv+Q3Y18t8pHMgif/8hu+Q/ZJf8h+yS/5Bd8h+yS/5Ddsl/yC75D5n058uXk6Xeuv99/sb62mLlxsX5UnVxbGltbmyusroytlCpLKT37Cw97vXKlcrKxK9j7WaxVqrWitX1jatLlbXl2tX0vv6rpYGe9Aroxomzd9/NRcTmb4bTJTHYrJOr8HSr13Pu5oeMKvR7AAL6xtQfZJfP+ECbr+jdYahTxcrBtwXojXy/GwD0zYXTzv9BVpn/h+wy/w/Z5RgfMP8P2WP+H7JrtMPzv45ue3bXeET8ICLeKQwcbj3rC3ga5D/INY//Lxz72eju2sHc5+kpgsGI+M+LV56/OVurrU4k2z9+uL32QnP7ZD/aDzxO65x+K09beQwAZNfWg1tzraWXcT/8feMihL3xDzXnJofSc5QjW7kd1yrkDujahc3bEXGqXfxcOjdyvHnmY2SrsCf+yebPXOMl0vYeSp+b3pv4p7fF/+m2+Ge+9f8KZMPdZPwZb5d/+TSn42H+7Rx/Rg/o2olk/Cu0HX/zD8e/Qofx72yXMf718n/f7xj/dsSZtuNvK95QGmt3/KRtF7qMf//vf/1xp7r6K43XaRe/JSkVa0srxer6xsX0e+QWSssT05dmZqbHpyZniukcdbE1U73Xb0+9dW+//o90iL9f/5Ntv+iy/1/85M2/ndsn/s/Pt3//T+4Tfzgiftll/E8m3/tHp7ok/nyH/uf3iZ9sm+oyfvW5Px7uclcAoAeq6xuLs+VyaVWhfeHL+neiGQoKvS30e2QCnrRHSd/vlgAAAAAAAAAAAADd6sXlxP3uIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA0+DrAAAA//+mX9Qt") r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xf6) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '@:%#^+,)\x00'}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$SG_IO(r5, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", 0x0, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) 1.19418225s ago: executing program 8 (id=4721): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x40, 0x0, 0x4}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0xecca, 0x1225, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x11, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x2, 0x0, 0x2, 0xa, 0x9, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000002480)) syz_clone3(&(0x7f000000dd80)={0x110022000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) pause() syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000007, 0x204031, 0xffffffffffffffff, 0x77543000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xbd9, &(0x7f0000000080)=0x1) 1.19387423s ago: executing program 1 (id=4722): r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000500000a0900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a310000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d300000000000000800054000000000140000001100"], 0xac}}, 0x24004000) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) write$cgroup_int(r0, &(0x7f0000000000)=0x2, 0x12) unshare(0x28000600) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='local_lock\x00', &(0x7f0000000200)='all\x00', 0x0) 1.157733781s ago: executing program 1 (id=4723): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000580)='x', &(0x7f0000000080)=@tcp6=r5, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f00000001c0), &(0x7f0000000040)=@tcp=r0}, 0x20) syz_emit_ethernet(0xd81, &(0x7f0000002740)=ANY=[], 0x0) 1.132450782s ago: executing program 7 (id=4724): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x60}, 0x28) syz_emit_ethernet(0x101b, &(0x7f0000001300)={@random="86c93428086c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@mpls_mc={0x8848, {[{0x52b1, 0x0, 0x1}], @llc={@snap={0xaa, 0x0, "f8bb", 'fgO', 0xa00, "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"}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x44f1301bddefb818, 0xf, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000003"], 0x98}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x400c804) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x30, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000003c0)={0x80000001, {{0x2, 0x4e23, @private=0xa010100}}, 0x0, 0x9, [{{0x2, 0x4e23, @empty}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x40}}}, {{0x2, 0x4e21, @multicast2}}]}, 0x510) 1.125174952s ago: executing program 1 (id=4725): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)={0x33, 0x17, 0x1, {0x2a, './cgroup.cpu/test/memory.oom_control/file0'}}, 0x33) setxattr$security_evm(&(0x7f00000000c0)='./cgroup.cpu/test/memory.oom_control/file0\x00', &(0x7f0000000180), &(0x7f00000003c0)=ANY=[], 0xfd, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) unlinkat(r0, &(0x7f0000000080)='./cgroup.cpu/test/memory.oom_control/file0\x00', 0x0) syncfs(0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) unshare(0x62040200) 642.844714ms ago: executing program 7 (id=4726): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/738], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcf8}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0xd, 0x4d1a}, 0x1, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xe40c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_bp={0x0}, 0x8080, 0x3, 0x43a1bd76, 0x7, 0x4, 0x5, 0x2, 0x0, 0x0, 0x0, 0x208c}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004840) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020aff0100000000000000000200000114000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) syz_emit_ethernet(0x76, &(0x7f0000000480)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x40, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private2, [@dstopts={0x0, 0x0, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) 484.257268ms ago: executing program 7 (id=4727): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x2}, 0x112013, 0x0, 0xffffffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) dup(0xffffffffffffffff) memfd_secret(0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) copy_file_range(r1, &(0x7f0000000080)=0x6923, r1, &(0x7f00000000c0)=0x2, 0x11, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) mknod$loop(0x0, 0x100, 0x0) timer_create(0x1, 0x0, &(0x7f0000000380)) timer_create(0x1, 0x0, &(0x7f0000000380)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f00000000c0)) 364.906101ms ago: executing program 7 (id=4728): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x2, 0xb563}, 0x0, 0x11100, 0x9e4, 0x5, 0x8, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000980)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f00000009c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf250e00000008003b000200000005002f000100000005003700010000000500300001000000050030000100000008000600", @ANYRES32=0x0, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000ffff2cbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2911010081800400180012800b000100697b36746e6c0000080002800400130008000a00", @ANYRES32=r3, @ANYBLOB], 0x40}, 0x1, 0x600, 0x0, 0x8014}, 0x40040) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c0000007f4eccbabb40e73bce12252c3e41fcbe1520f5d73829a2248bff188c13eb1a6d27becd479c8cd1f73e98456762b6142b5e5f9a8d03bf274bf8214408999856ed173528b2f9809e43251483560d2942b8a69db5590acde37c2e40786b5a2b00", @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf250200000008000300", @ANYRES32=r3, @ANYBLOB="05002e000100000005002e000100000008002b00050000000800320002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000881) pipe2(&(0x7f0000000000), 0x80000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x3, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fddbdf250100"], 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0401000010000700000000000000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff0000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 33.666849ms ago: executing program 1 (id=4729): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[], 0xfdef) (fail_nth: 10) 25.971549ms ago: executing program 7 (id=4730): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0xf, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}}, 0x0, 0x0, 0x2, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000007c0), 0xfe, 0x526, &(0x7f0000001100)="$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") 0s ago: executing program 9 (id=4686): socket$inet_icmp(0x2, 0x2, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x44) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x200e000) r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg(r0, 0x0, 0x0, 0x0) open(0x0, 0x148640, 0x78e22799f4a46f8a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r5) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x14010, &(0x7f0000000040)=ANY=[]) connect$tipc(r2, 0x0, 0x0) kernel console output (not intermixed with test programs): 0 PID: 17779 Comm: syz.3.4082 Not tainted syzkaller #0 PREEMPT(lazy) [ 283.758020][T17779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 283.758034][T17779] Call Trace: [ 283.758041][T17779] [ 283.758050][T17779] __dump_stack+0x1d/0x30 [ 283.758087][T17779] dump_stack_lvl+0x95/0xd0 [ 283.758110][T17779] dump_stack+0x15/0x1b [ 283.758132][T17779] should_fail_ex+0x262/0x280 [ 283.758163][T17779] should_fail+0xb/0x20 [ 283.758257][T17779] should_fail_usercopy+0x1a/0x20 [ 283.758290][T17779] _copy_to_user+0x20/0xa0 [ 283.758311][T17779] simple_read_from_buffer+0xb5/0x130 [ 283.758383][T17779] proc_fail_nth_read+0x10e/0x150 [ 283.758444][T17779] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 283.758478][T17779] vfs_read+0x18e/0x7c0 [ 283.758501][T17779] ? __rcu_read_unlock+0x4e/0x70 [ 283.758532][T17779] ? __fget_files+0x184/0x1c0 [ 283.758562][T17779] ? mutex_lock+0x57/0x90 [ 283.758631][T17779] ksys_read+0xdc/0x1a0 [ 283.758654][T17779] __x64_sys_read+0x40/0x50 [ 283.758694][T17779] x64_sys_call+0x2135/0x2550 [ 283.758757][T17779] do_syscall_64+0x112/0x360 [ 283.758791][T17779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.758816][T17779] RIP: 0033:0x7f78cb42e90e [ 283.758833][T17779] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 283.758881][T17779] RSP: 002b:00007f78c9ec6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 283.758903][T17779] RAX: ffffffffffffffda RBX: 00007f78c9ec76c0 RCX: 00007f78cb42e90e [ 283.758919][T17779] RDX: 000000000000000f RSI: 00007f78c9ec70a0 RDI: 0000000000000006 [ 283.758933][T17779] RBP: 00007f78c9ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 283.758997][T17779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.759016][T17779] R13: 00007f78cb6f6038 R14: 00007f78cb6f5fa0 R15: 00007fff83f30128 [ 283.759037][T17779] [ 283.912411][T17788] ip6t_srh: unknown srh invflags 4000 [ 283.927996][ C0] EXT4-fs (loop1): initial error at time 1787369411: ext4_orphan_get:1403: inode 11 [ 283.928031][ C0] EXT4-fs (loop1): last error at time 1787369411: ext4_orphan_get:1403: inode 11 [ 283.983649][T17776] loop1: lost filesystem error report for type 5 error -117 [ 284.003417][T17790] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 284.053714][T17776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 284.069287][T17790] SELinux: failed to load policy [ 284.072286][T17791] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4085'. [ 284.112054][T17795] futex_wake_op: syz.5.4087 tries to shift op by 144; fix this program [ 284.137728][T17797] futex_wake_op: syz.6.4088 tries to shift op by 144; fix this program [ 284.145069][T17790] loop7: detected capacity change from 0 to 512 [ 284.158048][T17795] futex_wake_op: syz.5.4087 tries to shift op by 144; fix this program [ 284.167372][T17797] futex_wake_op: syz.6.4088 tries to shift op by 144; fix this program [ 284.177392][T17790] EXT4-fs (loop7): blocks per group (95) and clusters per group (32768) inconsistent [ 284.215704][T17803] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4090'. [ 284.224756][T17803] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4090'. [ 284.233885][T17803] netlink: 'syz.5.4090': attribute type 12 has an invalid length. [ 284.298125][T15044] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.502726][T17830] ip_tables: iptables: counters copy to user failed while replacing table [ 284.710468][T17834] siw: device registration error -23 [ 284.952837][T17839] futex_wake_op: syz.1.4099 tries to shift op by 144; fix this program [ 284.962428][T17838] ip6t_srh: unknown srh invflags 4000 [ 284.972150][T17839] futex_wake_op: syz.1.4099 tries to shift op by 144; fix this program [ 284.985221][T17838] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 285.017131][T17838] SELinux: failed to load policy [ 285.085829][T17844] loop7: detected capacity change from 0 to 512 [ 285.106550][T17838] loop5: detected capacity change from 0 to 512 [ 285.135807][T17844] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 285.150627][T17838] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 285.203425][T17844] EXT4-fs (loop7): 1 truncate cleaned up [ 285.220726][T17844] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.281214][T17853] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4108'. [ 285.290170][T17853] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4108'. [ 285.299121][T17853] netlink: 'syz.5.4108': attribute type 12 has an invalid length. [ 285.323470][T17844] FAULT_INJECTION: forcing a failure. [ 285.323470][T17844] name failslab, interval 1, probability 0, space 0, times 0 [ 285.342630][T17844] CPU: 1 UID: 0 PID: 17844 Comm: syz.7.4105 Not tainted syzkaller #0 PREEMPT(lazy) [ 285.342661][T17844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 285.342676][T17844] Call Trace: [ 285.342683][T17844] [ 285.342692][T17844] __dump_stack+0x1d/0x30 [ 285.342729][T17844] dump_stack_lvl+0x95/0xd0 [ 285.342753][T17844] dump_stack+0x15/0x1b [ 285.342777][T17844] should_fail_ex+0x262/0x280 [ 285.342874][T17844] should_failslab+0x8c/0xb0 [ 285.342903][T17844] __kmalloc_noprof+0xd4/0x4c0 [ 285.342931][T17844] ? do_handle_open+0x3a9/0x7c0 [ 285.342998][T17844] ? do_handle_open+0x3a9/0x7c0 [ 285.343029][T17844] do_handle_open+0x3a9/0x7c0 [ 285.343060][T17844] __x64_sys_open_by_handle_at+0x44/0x50 [ 285.343119][T17844] x64_sys_call+0x1395/0x2550 [ 285.343145][T17844] do_syscall_64+0x112/0x360 [ 285.343182][T17844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.343208][T17844] RIP: 0033:0x7fdfc298e0d9 [ 285.343226][T17844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.343245][T17844] RSP: 002b:00007fdfc13e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 285.343339][T17844] RAX: ffffffffffffffda RBX: 00007fdfc2c15fa0 RCX: 00007fdfc298e0d9 [ 285.343355][T17844] RDX: 0000000000320000 RSI: 0000200000000040 RDI: 0000000000000004 [ 285.343371][T17844] RBP: 00007fdfc13e7090 R08: 0000000000000000 R09: 0000000000000000 [ 285.343392][T17844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.343407][T17844] R13: 00007fdfc2c16038 R14: 00007fdfc2c15fa0 R15: 00007fffb99b45f8 [ 285.343430][T17844] [ 285.345927][T17858] loop1: detected capacity change from 0 to 1024 [ 285.385103][T17851] loop3: detected capacity change from 0 to 512 [ 285.530192][T17431] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.581989][T17866] siw: device registration error -23 [ 285.703024][T17874] syzkaller0: entered promiscuous mode [ 285.714825][T17874] syzkaller0: entered allmulticast mode [ 285.740078][T17874] tipc: Started in network mode [ 285.752763][T17874] tipc: Node identity 7ac9a76b28c, cluster identity 4711 [ 285.767534][T17880] loop5: detected capacity change from 0 to 136 [ 285.774294][T17874] tipc: Enabled bearer , priority 0 [ 285.789539][T17880] Attempt to read inode for relocated directory [ 285.823345][T17874] tipc: Resetting bearer [ 285.855058][T17871] tipc: Resetting bearer [ 285.869257][T17871] tipc: Disabling bearer [ 285.879215][T17889] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4123'. [ 285.968156][T17897] tun0: tun_chr_ioctl cmd 2147767506 [ 285.991620][T17899] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4128'. [ 286.017608][T17899] FAULT_INJECTION: forcing a failure. [ 286.017608][T17899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.033640][T17901] siw: device registration error -23 [ 286.039827][T17897] loop7: detected capacity change from 0 to 512 [ 286.041418][T17899] CPU: 1 UID: 0 PID: 17899 Comm: syz.5.4128 Not tainted syzkaller #0 PREEMPT(lazy) [ 286.041469][T17899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 286.041484][T17899] Call Trace: [ 286.041491][T17899] [ 286.041499][T17899] __dump_stack+0x1d/0x30 [ 286.041525][T17899] dump_stack_lvl+0x95/0xd0 [ 286.041549][T17899] dump_stack+0x15/0x1b [ 286.041570][T17899] should_fail_ex+0x262/0x280 [ 286.041716][T17899] should_fail+0xb/0x20 [ 286.041765][T17899] should_fail_usercopy+0x1a/0x20 [ 286.041812][T17899] _copy_from_iter+0xcc/0xe70 [ 286.041905][T17899] ? __alloc_skb+0x516/0x6f0 [ 286.041988][T17899] ? __alloc_skb+0x209/0x6f0 [ 286.042053][T17899] netlink_sendmsg+0x4a4/0x6f0 [ 286.042089][T17899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.042166][T17899] ____sys_sendmsg+0x532/0x580 [ 286.042194][T17899] ___sys_sendmsg+0x195/0x1e0 [ 286.042231][T17899] __x64_sys_sendmsg+0xd4/0x160 [ 286.042286][T17899] x64_sys_call+0x22ab/0x2550 [ 286.042313][T17899] do_syscall_64+0x112/0x360 [ 286.042348][T17899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.042446][T17899] RIP: 0033:0x7f1ca7eee0d9 [ 286.042467][T17899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.042488][T17899] RSP: 002b:00007f1ca6947028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.042532][T17899] RAX: ffffffffffffffda RBX: 00007f1ca8175fa0 RCX: 00007f1ca7eee0d9 [ 286.042548][T17899] RDX: 0000000000000040 RSI: 0000200000000140 RDI: 0000000000000004 [ 286.042563][T17899] RBP: 00007f1ca6947090 R08: 0000000000000000 R09: 0000000000000000 [ 286.042577][T17899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.042660][T17899] R13: 00007f1ca8176038 R14: 00007f1ca8175fa0 R15: 00007ffe67259318 [ 286.042681][T17899] [ 286.268001][T17897] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.280656][T17897] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.303150][T17897] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.303530][T17909] gretap0 speed is unknown, defaulting to 1000 [ 286.368032][T17918] syzkaller0: entered promiscuous mode [ 286.383489][T17918] syzkaller0: entered allmulticast mode [ 286.408237][T17918] tipc: Enabled bearer , priority 0 [ 286.417420][T17897] netlink: 164 bytes leftover after parsing attributes in process `syz.7.4127'. [ 286.455904][T17926] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4139'. [ 286.466706][T17918] tipc: Resetting bearer [ 286.480894][T17929] FAULT_INJECTION: forcing a failure. [ 286.480894][T17929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.501148][T17916] tipc: Resetting bearer [ 286.506460][T17929] CPU: 1 UID: 0 PID: 17929 Comm: syz.5.4140 Not tainted syzkaller #0 PREEMPT(lazy) [ 286.506517][T17929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 286.506531][T17929] Call Trace: [ 286.506538][T17929] [ 286.506547][T17929] __dump_stack+0x1d/0x30 [ 286.506720][T17929] dump_stack_lvl+0x95/0xd0 [ 286.506798][T17929] dump_stack+0x15/0x1b [ 286.506819][T17929] should_fail_ex+0x262/0x280 [ 286.506875][T17929] should_fail+0xb/0x20 [ 286.506901][T17929] should_fail_usercopy+0x1a/0x20 [ 286.506950][T17929] _copy_from_user+0x1c/0xb0 [ 286.506970][T17929] __sys_bpf+0x1e2/0xc30 [ 286.506993][T17929] ? get_pid_task+0x92/0xc0 [ 286.507014][T17929] ? vfs_write+0x800/0x9a0 [ 286.507103][T17929] __x64_sys_bpf+0x69/0x80 [ 286.507139][T17929] x64_sys_call+0xf26/0x2550 [ 286.507165][T17929] do_syscall_64+0x112/0x360 [ 286.507243][T17929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.507266][T17929] RIP: 0033:0x7f1ca7eee0d9 [ 286.507294][T17929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.507315][T17929] RSP: 002b:00007f1ca6947028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 286.507337][T17929] RAX: ffffffffffffffda RBX: 00007f1ca8175fa0 RCX: 00007f1ca7eee0d9 [ 286.507352][T17929] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 286.507367][T17929] RBP: 00007f1ca6947090 R08: 0000000000000000 R09: 0000000000000000 [ 286.507454][T17929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.507469][T17929] R13: 00007f1ca8176038 R14: 00007f1ca8175fa0 R15: 00007ffe67259318 [ 286.507512][T17929] [ 286.676860][ T6147] IPVS: starting estimator thread 0... [ 286.683440][T17916] tipc: Disabling bearer [ 286.771506][T17936] IPVS: using max 2736 ests per chain, 136800 per kthread [ 286.789072][ T9] gretap0 speed is unknown, defaulting to 1000 [ 286.800794][T17940] loop5: detected capacity change from 0 to 512 [ 286.833335][T17931] loop3: detected capacity change from 0 to 1764 [ 286.851724][T17931] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 286.964409][T17962] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4152'. [ 286.970638][T17960] syz.1.4151 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 286.973529][T17962] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4152'. [ 286.990226][T17960] CPU: 0 UID: 0 PID: 17960 Comm: syz.1.4151 Not tainted syzkaller #0 PREEMPT(lazy) [ 286.990270][T17960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 286.990286][T17960] Call Trace: [ 286.990294][T17960] [ 286.990325][T17960] __dump_stack+0x1d/0x30 [ 286.990353][T17960] dump_stack_lvl+0x95/0xd0 [ 286.990414][T17960] dump_stack+0x15/0x1b [ 286.990437][T17960] dump_header+0x80/0x240 [ 286.990462][T17960] oom_kill_process+0x294/0x420 [ 286.990518][T17960] out_of_memory+0x981/0xbc0 [ 286.990553][T17960] try_charge_memcg+0x624/0xa10 [ 286.990641][T17960] __obj_cgroup_charge+0x105/0x230 [ 286.990678][T17960] __memcg_slab_post_alloc_hook+0x495/0x8a0 [ 286.990810][T17960] __kmalloc_node_track_caller_noprof+0x349/0x4e0 [ 286.990884][T17960] ? __addrconf_sysctl_register+0x60/0x340 [ 286.990973][T17960] ? __addrconf_sysctl_register+0x60/0x340 [ 286.991013][T17960] kmemdup_noprof+0x2b/0x70 [ 286.991049][T17960] __addrconf_sysctl_register+0x60/0x340 [ 286.991107][T17960] addrconf_init_net+0x339/0x450 [ 286.991137][T17960] ? ip6addrlbl_net_init+0x335/0x340 [ 286.991176][T17960] ops_init+0x22a/0x2e0 [ 286.991264][T17960] ? mutex_unlock+0x4e/0x90 [ 286.991293][T17960] setup_net+0x9f/0x230 [ 286.991324][T17960] copy_net_ns+0x31a/0x460 [ 286.991371][T17960] create_new_namespaces+0x1f6/0x420 [ 286.991437][T17960] unshare_nsproxy_namespaces+0x115/0x150 [ 286.991483][T17960] ksys_unshare+0x42b/0x710 [ 286.991577][T17960] __x64_sys_unshare+0x1f/0x30 [ 286.991606][T17960] x64_sys_call+0x1e33/0x2550 [ 286.991672][T17960] do_syscall_64+0x112/0x360 [ 286.991743][T17960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.991768][T17960] RIP: 0033:0x7f4a337de0d9 [ 286.991786][T17960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.991807][T17960] RSP: 002b:00007f4a32237028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 286.991829][T17960] RAX: ffffffffffffffda RBX: 00007f4a33a65fa0 RCX: 00007f4a337de0d9 [ 286.991864][T17960] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 286.991879][T17960] RBP: 00007f4a33875024 R08: 0000000000000000 R09: 0000000000000000 [ 286.991893][T17960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.991908][T17960] R13: 00007f4a33a66038 R14: 00007f4a33a65fa0 R15: 00007ffeccebca18 [ 286.991994][T17960] [ 287.000195][T17960] memory: usage 88kB, limit 96kB, failcnt 277 [ 287.009202][T17962] netlink: 'syz.6.4152': attribute type 12 has an invalid length. [ 287.013758][T17960] memory+swap: usage 88kB, limit 9007199254740988kB, failcnt 0 [ 287.042301][T17964] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4153'. [ 287.049088][T17960] kmem: usage 88kB, limit 9007199254740988kB, failcnt 0 [ 287.083827][T17970] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4154'. [ 287.088221][T17960] Memory cgroup stats for /syz1/test: [ 287.276487][T17960] cache 0 [ 287.284870][T17960] rss 0 [ 287.287959][T17960] shmem 0 [ 287.291418][T17960] mapped_file 0 [ 287.294922][T17960] dirty 0 [ 287.298052][T17960] writeback 0 [ 287.301608][T17960] workingset_refault_anon 0 [ 287.306112][T17960] workingset_refault_file 0 [ 287.310653][T17960] swap 0 [ 287.313564][T17960] swapcached 0 [ 287.316924][T17960] pgpgin 0 [ 287.319985][T17960] pgpgout 0 [ 287.328190][T17960] pgfault 38 [ 287.335323][T17960] pgmajfault 0 [ 287.341582][T17960] inactive_anon 0 [ 287.348723][T17960] active_anon 0 [ 287.353189][T17960] inactive_file 0 [ 287.366118][T17991] pimreg: entered allmulticast mode [ 287.370052][T17960] active_file 0 [ 287.374991][T17960] unevictable 0 [ 287.388943][T17960] hierarchical_memory_limit 98304 [ 287.394341][T17960] hierarchical_memsw_limit 9223372036854771712 [ 287.400542][T17960] total_cache 0 [ 287.405347][T17960] total_rss 0 [ 287.408693][T17960] total_shmem 0 [ 287.412935][T17960] total_mapped_file 0 [ 287.417042][T17960] total_dirty 0 [ 287.441663][T17960] total_writeback 0 [ 287.449242][T17960] total_workingset_refault_anon 0 [ 287.459241][T17960] total_workingset_refault_file 0 [ 287.465436][T17960] total_swap 0 [ 287.468974][T17997] netlink: 'syz.5.4164': attribute type 12 has an invalid length. [ 287.500234][T17960] total_swapcached 0 [ 287.504912][T17960] total_pgpgin 0 [ 287.508540][T17960] total_pgpgout 0 [ 287.512439][T17960] total_pgfault 38 [ 287.516317][T17960] total_pgmajfault 0 [ 287.520313][T17960] total_inactive_anon 0 [ 287.524941][T17960] total_active_anon 0 [ 287.528973][T17960] total_inactive_file 0 [ 287.537352][T17960] total_active_file 0 [ 287.541735][T17960] total_unevictable 0 [ 287.545749][T17960] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.4151,pid=17959,uid=0 [ 287.561919][T17960] Memory cgroup out of memory: Killed process 17959 (syz.1.4151) total-vm:96104kB, anon-rss:1420kB, file-rss:22108kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 287.674820][T18015] FAULT_INJECTION: forcing a failure. [ 287.674820][T18015] name failslab, interval 1, probability 0, space 0, times 0 [ 287.702180][T18015] CPU: 0 UID: 0 PID: 18015 Comm: syz.6.4167 Not tainted syzkaller #0 PREEMPT(lazy) [ 287.702249][T18015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 287.702262][T18015] Call Trace: [ 287.702268][T18015] [ 287.702275][T18015] __dump_stack+0x1d/0x30 [ 287.702300][T18015] dump_stack_lvl+0x95/0xd0 [ 287.702324][T18015] dump_stack+0x15/0x1b [ 287.702382][T18015] should_fail_ex+0x262/0x280 [ 287.702418][T18015] should_failslab+0x8c/0xb0 [ 287.702447][T18015] kmem_cache_alloc_noprof+0x7f/0x3e0 [ 287.702632][T18015] ? sk_prot_alloc+0x3f/0x180 [ 287.702655][T18015] ? sk_prot_alloc+0x3f/0x180 [ 287.702756][T18015] sk_prot_alloc+0x3f/0x180 [ 287.702777][T18015] sk_alloc+0x34/0x3e0 [ 287.702800][T18015] rxrpc_create+0xa4/0x350 [ 287.702822][T18015] __sock_create+0x2e5/0x580 [ 287.702858][T18015] __sys_socket+0xaf/0x180 [ 287.702885][T18015] __x64_sys_socket+0x3f/0x50 [ 287.702939][T18015] x64_sys_call+0x246e/0x2550 [ 287.702967][T18015] do_syscall_64+0x112/0x360 [ 287.703002][T18015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.703104][T18015] RIP: 0033:0x7f27b623e0d9 [ 287.703170][T18015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.703193][T18015] RSP: 002b:00007f27b4c97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 287.703213][T18015] RAX: ffffffffffffffda RBX: 00007f27b64c5fa0 RCX: 00007f27b623e0d9 [ 287.703230][T18015] RDX: 000000000000000a RSI: 0000000000000002 RDI: 0000000000000021 [ 287.703245][T18015] RBP: 00007f27b4c97090 R08: 0000000000000000 R09: 0000000000000000 [ 287.703333][T18015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.703345][T18015] R13: 00007f27b64c6038 R14: 00007f27b64c5fa0 R15: 00007ffc0a12d4b8 [ 287.703364][T18015] [ 287.789051][T18022] loop7: detected capacity change from 0 to 512 [ 287.968458][T18011] loop5: detected capacity change from 0 to 1764 [ 287.972148][T18029] pimreg: entered allmulticast mode [ 287.985782][T18011] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 288.084388][T18039] netlink: 'syz.3.4179': attribute type 12 has an invalid length. [ 288.175252][T18048] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.224935][T18048] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.281845][T18048] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.305561][T18032] loop6: detected capacity change from 0 to 1764 [ 288.321574][T18032] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 288.334674][T18048] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.389089][ T6164] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.406382][ T64] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.421416][ T6164] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.431427][ T64] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.736232][T18093] loop7: detected capacity change from 0 to 512 [ 289.065374][T18106] FAULT_INJECTION: forcing a failure. [ 289.065374][T18106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.080576][T18106] CPU: 0 UID: 0 PID: 18106 Comm: syz.5.4206 Not tainted syzkaller #0 PREEMPT(lazy) [ 289.080604][T18106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 289.080617][T18106] Call Trace: [ 289.080625][T18106] [ 289.080633][T18106] __dump_stack+0x1d/0x30 [ 289.080669][T18106] dump_stack_lvl+0x95/0xd0 [ 289.080765][T18106] dump_stack+0x15/0x1b [ 289.080783][T18106] should_fail_ex+0x262/0x280 [ 289.080814][T18106] should_fail+0xb/0x20 [ 289.080845][T18106] should_fail_usercopy+0x1a/0x20 [ 289.080904][T18106] _copy_from_iter+0xcc/0xe70 [ 289.080937][T18106] ? __alloc_skb+0x516/0x6f0 [ 289.080970][T18106] ? __alloc_skb+0x209/0x6f0 [ 289.081136][T18106] netlink_sendmsg+0x4a4/0x6f0 [ 289.081172][T18106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.081216][T18106] ____sys_sendmsg+0x532/0x580 [ 289.081243][T18106] ___sys_sendmsg+0x195/0x1e0 [ 289.081273][T18106] __x64_sys_sendmsg+0xd4/0x160 [ 289.081301][T18106] x64_sys_call+0x22ab/0x2550 [ 289.081391][T18106] do_syscall_64+0x112/0x360 [ 289.081426][T18106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.081473][T18106] RIP: 0033:0x7f1ca7eee0d9 [ 289.081503][T18106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.081525][T18106] RSP: 002b:00007f1ca6947028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.081545][T18106] RAX: ffffffffffffffda RBX: 00007f1ca8175fa0 RCX: 00007f1ca7eee0d9 [ 289.081558][T18106] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 289.081621][T18106] RBP: 00007f1ca6947090 R08: 0000000000000000 R09: 0000000000000000 [ 289.081636][T18106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.081651][T18106] R13: 00007f1ca8176038 R14: 00007f1ca8175fa0 R15: 00007ffe67259318 [ 289.081752][T18106] [ 289.279016][T18108] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 289.383619][T18116] syzkaller0: entered promiscuous mode [ 289.399998][T18116] syzkaller0: entered allmulticast mode [ 289.438372][T18116] tipc: Enabled bearer , priority 0 [ 289.447477][T18115] tipc: Resetting bearer [ 289.457953][T18115] tipc: Disabling bearer [ 289.692670][T18143] futex_wake_op: syz.5.4218 tries to shift op by 144; fix this program [ 289.728112][T18143] futex_wake_op: syz.5.4218 tries to shift op by 144; fix this program [ 289.987050][T18153] ip_tables: iptables: counters copy to user failed while replacing table [ 290.500509][T18159] __nla_validate_parse: 4 callbacks suppressed [ 290.500523][T18159] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4226'. [ 290.560145][T18162] syzkaller0: entered promiscuous mode [ 290.566155][T18162] syzkaller0: entered allmulticast mode [ 290.576757][T18163] ip_tables: iptables: counters copy to user failed while replacing table [ 290.619452][T18162] tipc: Enabled bearer , priority 0 [ 290.773353][T18161] tipc: Resetting bearer [ 290.819313][T18161] tipc: Disabling bearer [ 290.827251][T18169] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4230'. [ 291.072083][T18176] set_capacity_and_notify: 3 callbacks suppressed [ 291.072101][T18176] loop3: detected capacity change from 0 to 8192 [ 291.090834][ T28] kauditd_printk_skb: 107 callbacks suppressed [ 291.090932][ T28] audit: type=1400 audit(1787369418.366:2440): avc: denied { read write } for pid=18175 comm="syz.3.4233" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 291.091194][T18176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.121383][ T28] audit: type=1400 audit(1787369418.366:2441): avc: denied { open } for pid=18175 comm="syz.3.4233" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 291.129580][T18176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.176173][T18176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.183853][T18176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.192684][ T28] audit: type=1400 audit(1787369418.366:2442): avc: denied { ioctl } for pid=18175 comm="syz.3.4233" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 291.222344][T18176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.230085][T18176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.276555][T18185] loop5: detected capacity change from 0 to 512 [ 291.296207][T18173] loop6: detected capacity change from 0 to 1764 [ 291.324858][T18173] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 291.353962][T18188] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 291.360564][T18188] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 291.368479][T18188] vhci_hcd vhci_hcd.0: Device attached [ 291.398797][T18188] loop7: detected capacity change from 0 to 1764 [ 291.407540][T18188] iso9660: Unknown parameter '0x000000000000000800000000000000000000000' [ 291.420934][T18189] vhci_hcd: cannot find a urb of seqnum 25161 max seqnum 0 [ 291.428612][ T64] vhci_hcd vhci_hcd.7: stop threads [ 291.433951][ T64] vhci_hcd vhci_hcd.7: release socket [ 291.439440][ T64] vhci_hcd vhci_hcd.7: disconnect device [ 292.016011][T18203] ip_tables: iptables: counters copy to user failed while replacing table [ 292.097476][T18206] FAULT_INJECTION: forcing a failure. [ 292.097476][T18206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.153229][T18206] CPU: 1 UID: 0 PID: 18206 Comm: syz.7.4242 Not tainted syzkaller #0 PREEMPT(lazy) [ 292.153261][T18206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 292.153274][T18206] Call Trace: [ 292.153281][T18206] [ 292.153296][T18206] __dump_stack+0x1d/0x30 [ 292.153389][T18206] dump_stack_lvl+0x95/0xd0 [ 292.153410][T18206] dump_stack+0x15/0x1b [ 292.153432][T18206] should_fail_ex+0x262/0x280 [ 292.153548][T18206] should_fail+0xb/0x20 [ 292.153591][T18206] should_fail_usercopy+0x1a/0x20 [ 292.153700][T18206] _copy_to_user+0x20/0xa0 [ 292.153718][T18206] simple_read_from_buffer+0xb5/0x130 [ 292.153745][T18206] proc_fail_nth_read+0x10e/0x150 [ 292.153819][T18206] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 292.153860][T18206] vfs_read+0x18e/0x7c0 [ 292.153884][T18206] ? __rcu_read_unlock+0x4e/0x70 [ 292.153910][T18206] ? __fget_files+0x184/0x1c0 [ 292.153942][T18206] ? mutex_lock+0x57/0x90 [ 292.154023][T18206] ksys_read+0xdc/0x1a0 [ 292.154048][T18206] __x64_sys_read+0x40/0x50 [ 292.154093][T18206] x64_sys_call+0x2135/0x2550 [ 292.154116][T18206] do_syscall_64+0x112/0x360 [ 292.154170][T18206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.154242][T18206] RIP: 0033:0x7fdfc294e90e [ 292.154259][T18206] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 292.154344][T18206] RSP: 002b:00007fdfc13e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 292.154367][T18206] RAX: ffffffffffffffda RBX: 00007fdfc13e76c0 RCX: 00007fdfc294e90e [ 292.154384][T18206] RDX: 000000000000000f RSI: 00007fdfc13e70a0 RDI: 0000000000000003 [ 292.154459][T18206] RBP: 00007fdfc13e7090 R08: 0000000000000000 R09: 0000000000000000 [ 292.154475][T18206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.154489][T18206] R13: 00007fdfc2c16038 R14: 00007fdfc2c15fa0 R15: 00007fffb99b45f8 [ 292.154512][T18206] [ 292.526874][T18213] siw: device registration error -23 [ 292.649058][ T28] audit: type=1400 audit(1787369419.886:2443): avc: denied { write } for pid=18205 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.668150][T18222] ip6t_srh: unknown srh invflags 4000 [ 292.704231][ T28] audit: type=1400 audit(1787369419.986:2444): avc: denied { write } for pid=18223 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.729155][T18222] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 292.748768][T18222] SELinux: failed to load policy [ 292.850063][T18240] program syz.5.4249 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.882473][T18222] loop3: detected capacity change from 0 to 512 [ 292.884680][ T28] audit: type=1400 audit(1787369420.166:2445): avc: denied { write } for pid=18230 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.918574][T18222] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 292.965174][ T28] audit: type=1400 audit(1787369420.236:2446): avc: denied { write } for pid=18250 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 293.167747][ T28] audit: type=1400 audit(1787369420.446:2447): avc: denied { write } for pid=18260 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 293.204936][T18229] loop7: detected capacity change from 0 to 1764 [ 293.224184][ T28] audit: type=1400 audit(1787369420.486:2448): avc: denied { write } for pid=18279 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 293.250883][T18229] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 293.390301][ T28] audit: type=1400 audit(1787369420.666:2449): avc: denied { write } for pid=18284 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 293.427534][T18308] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 293.434118][T18308] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 293.441967][T18308] vhci_hcd vhci_hcd.0: Device attached [ 293.513503][T18308] loop6: detected capacity change from 0 to 1764 [ 293.524233][T18308] iso9660: Unknown parameter '0x000000000000000800000000000000000000000' [ 293.548463][T18309] vhci_hcd: cannot find a urb of seqnum 25161 max seqnum 0 [ 293.558079][ T64] vhci_hcd vhci_hcd.6: stop threads [ 293.563722][ T64] vhci_hcd vhci_hcd.6: release socket [ 293.569357][ T64] vhci_hcd vhci_hcd.6: disconnect device [ 293.607642][T18318] ip_tables: iptables: counters copy to user failed while replacing table [ 293.810866][T18322] syzkaller0: entered promiscuous mode [ 293.816747][T18322] syzkaller0: entered allmulticast mode [ 293.826983][T18322] tipc: Enabled bearer , priority 0 [ 293.837453][T18323] siw: device registration error -23 [ 293.845148][T18321] tipc: Resetting bearer [ 293.856838][T18321] tipc: Disabling bearer [ 293.966769][T18325] loop7: detected capacity change from 0 to 128 [ 293.978691][T18325] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 294.011414][T18325] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.028037][T18325] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4261'. [ 294.045819][T17431] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 294.087296][T18331] loop5: detected capacity change from 0 to 1024 [ 294.094214][T18331] EXT4-fs: Ignoring removed orlov option [ 294.119571][T18331] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.139579][T18331] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4263'. [ 294.164576][T14676] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.283271][T18344] loop1: detected capacity change from 0 to 512 [ 294.290010][T18344] EXT4-fs: Ignoring removed oldalloc option [ 294.303738][T18344] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.351801][T15044] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.370363][T18349] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4269'. [ 294.387760][T18349] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4269'. [ 294.405702][T18349] netlink: 'syz.7.4269': attribute type 12 has an invalid length. [ 294.418917][T18353] syzkaller0: entered promiscuous mode [ 294.428833][T18353] syzkaller0: entered allmulticast mode [ 294.447423][T18353] tipc: Enabled bearer , priority 0 [ 294.464717][T18352] tipc: Resetting bearer [ 294.483353][T18357] siw: device registration error -23 [ 294.483810][T18352] tipc: Disabling bearer [ 294.553456][T18361] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4275'. [ 294.597703][T18361] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4275'. [ 294.654027][T18361] netlink: 'syz.6.4275': attribute type 12 has an invalid length. [ 294.894187][T18379] ip_tables: iptables: counters copy to user failed while replacing table [ 295.316579][T18376] EXT4-fs (loop5): invalid first ino: 0 [ 295.382212][T18376] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 295.391043][T18376] EXT4-fs (loop5): invalid journal inode [ 295.398681][T18376] EXT4-fs (loop5): can't get journal size [ 295.422953][T18376] EXT4-fs (loop5): 1 truncate cleaned up [ 295.433103][T18376] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.446082][T18394] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 295.452674][T18394] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 295.460628][T18394] vhci_hcd vhci_hcd.0: Device attached [ 295.479894][T18395] vhci_hcd: cannot find a urb of seqnum 25161 max seqnum 1 [ 295.493389][ T6147] vhci_hcd vhci_hcd.3: stop threads [ 295.498909][T18398] syzkaller0: entered promiscuous mode [ 295.500481][T14676] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.504515][ T6147] vhci_hcd vhci_hcd.3: release socket [ 295.519103][T18398] syzkaller0: entered allmulticast mode [ 295.521781][ T6147] vhci_hcd vhci_hcd.3: disconnect device [ 295.531156][T18398] tipc: Enabled bearer , priority 0 [ 295.542715][T18397] tipc: Resetting bearer [ 295.568959][T18397] tipc: Disabling bearer [ 295.751178][T18413] ip6t_srh: unknown srh invflags 4000 [ 295.760984][T18413] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 295.768555][T18413] SELinux: failed to load policy [ 295.808257][T18413] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 295.928483][T18425] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4297'. [ 295.939314][T18426] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4297'. [ 295.960367][T18425] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4297'. [ 296.128799][T18436] ip_tables: iptables: counters copy to user failed while replacing table [ 296.442564][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 296.442578][ T28] audit: type=1400 audit(1787369423.726:2454): avc: denied { mount } for pid=18439 comm="syz.3.4303" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 296.591438][ T28] audit: type=1400 audit(1787369423.866:2455): avc: denied { unmount } for pid=12868 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 296.628782][T18442] ip6t_srh: unknown srh invflags 4000 [ 296.645701][T18442] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 296.653532][T18442] SELinux: failed to load policy [ 296.657030][T18445] usb usb5: usbfs: interface 0 claimed by hub while 'syz.3.4305' sets config #1 [ 296.674997][T18447] set_capacity_and_notify: 4 callbacks suppressed [ 296.675013][T18447] loop1: detected capacity change from 0 to 512 [ 296.687967][T18447] EXT4-fs: Ignoring removed bh option [ 296.698848][T18448] FAULT_INJECTION: forcing a failure. [ 296.698848][T18448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.711892][T18448] CPU: 0 UID: 0 PID: 18448 Comm: syz.7.4307 Not tainted syzkaller #0 PREEMPT(lazy) [ 296.711938][T18448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 296.711953][T18448] Call Trace: [ 296.711961][T18448] [ 296.711971][T18448] __dump_stack+0x1d/0x30 [ 296.711996][T18448] dump_stack_lvl+0x95/0xd0 [ 296.712028][T18448] dump_stack+0x15/0x1b [ 296.712056][T18448] should_fail_ex+0x262/0x280 [ 296.712089][T18448] should_fail+0xb/0x20 [ 296.712120][T18448] should_fail_usercopy+0x1a/0x20 [ 296.712156][T18448] _copy_from_iter+0xcc/0xe70 [ 296.712218][T18448] ? __alloc_skb+0x516/0x6f0 [ 296.712247][T18448] ? __alloc_skb+0x209/0x6f0 [ 296.712347][T18448] netlink_sendmsg+0x4a4/0x6f0 [ 296.712386][T18448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.712421][T18448] ____sys_sendmsg+0x532/0x580 [ 296.712487][T18448] ___sys_sendmsg+0x195/0x1e0 [ 296.712591][T18448] __sys_sendmmsg+0x185/0x320 [ 296.712626][T18448] __x64_sys_sendmmsg+0x57/0x70 [ 296.712694][T18448] x64_sys_call+0x1fb4/0x2550 [ 296.712722][T18448] do_syscall_64+0x112/0x360 [ 296.712760][T18448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.712786][T18448] RIP: 0033:0x7fdfc298e0d9 [ 296.712819][T18448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.712840][T18448] RSP: 002b:00007fdfc13e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 296.712925][T18448] RAX: ffffffffffffffda RBX: 00007fdfc2c15fa0 RCX: 00007fdfc298e0d9 [ 296.712941][T18448] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 000000000000000a [ 296.712984][T18448] RBP: 00007fdfc13e7090 R08: 0000000000000000 R09: 0000000000000000 [ 296.713072][T18448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.713087][T18448] R13: 00007fdfc2c16038 R14: 00007fdfc2c15fa0 R15: 00007fffb99b45f8 [ 296.713110][T18448] [ 296.737279][T18442] loop5: detected capacity change from 0 to 512 [ 296.813866][ T28] audit: type=1326 audit(1787369424.096:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18453 comm="syz.3.4309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cb46e0d9 code=0x7ffc0000 [ 296.830107][T18442] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 296.843418][T18454] loop3: detected capacity change from 0 to 128 [ 296.864304][ T28] audit: type=1326 audit(1787369424.096:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18453 comm="syz.3.4309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cb46e0d9 code=0x7ffc0000 [ 296.884615][T18447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.902842][ T28] audit: type=1326 audit(1787369424.126:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18453 comm="syz.3.4309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cb46e0d9 code=0x7ffc0000 [ 296.928603][T18447] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.961439][ T28] audit: type=1326 audit(1787369424.126:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18453 comm="syz.3.4309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cb46e0d9 code=0x7ffc0000 [ 297.051686][ T28] audit: type=1326 audit(1787369424.126:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18453 comm="syz.3.4309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f78cb46e0d9 code=0x7ffc0000 [ 297.077182][ T28] audit: type=1326 audit(1787369424.126:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18453 comm="syz.3.4309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cb46e0d9 code=0x7ffc0000 [ 297.102670][ T28] audit: type=1326 audit(1787369424.126:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18453 comm="syz.3.4309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cb46e0d9 code=0x7ffc0000 [ 297.135092][T18464] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 297.141620][T18464] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 297.161186][ T28] audit: type=1326 audit(1787369424.126:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18453 comm="syz.3.4309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78cb46e0d9 code=0x7ffc0000 [ 297.185915][T18459] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4310'. [ 297.190344][T18464] vhci_hcd vhci_hcd.0: Device attached [ 297.203582][T15044] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.231296][T18465] vhci_hcd: cannot find a urb of seqnum 25161 max seqnum 0 [ 297.245692][ T64] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.254579][ T64] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.263386][ T64] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.272260][ T6151] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.277533][ T49] vhci_hcd vhci_hcd.7: stop threads [ 297.286125][T18454] SELinux: syz.3.4309 (18454) wrote to checkreqprot. This is no longer supported. [ 297.301545][ T49] vhci_hcd vhci_hcd.7: release socket [ 297.307028][ T49] vhci_hcd vhci_hcd.7: disconnect device [ 297.486890][T18487] ip6t_srh: unknown srh invflags 4000 [ 297.497814][T18487] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 297.506879][T18487] SELinux: failed to load policy [ 297.576757][T18487] loop6: detected capacity change from 0 to 512 [ 297.607948][T18487] EXT4-fs (loop6): blocks per group (95) and clusters per group (32768) inconsistent [ 297.651840][T18490] ip_tables: iptables: counters copy to user failed while replacing table [ 298.075624][T18494] gretap0 speed is unknown, defaulting to 1000 [ 298.314052][T18509] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4330'. [ 298.577278][T18517] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 298.583859][T18517] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 298.823200][T18517] vhci_hcd vhci_hcd.0: Device attached [ 298.846597][T18518] vhci_hcd: connection closed [ 298.846944][ T6167] vhci_hcd vhci_hcd.6: stop threads [ 298.857383][ T6167] vhci_hcd vhci_hcd.6: release socket [ 298.869522][ T6167] vhci_hcd vhci_hcd.6: disconnect device [ 298.940445][T18536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4338'. [ 299.116506][T18547] ip_tables: iptables: counters copy to user failed while replacing table [ 299.297179][T18551] loop7: detected capacity change from 0 to 512 [ 299.339121][T18551] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 299.502813][T18551] EXT4-fs (loop7): failed to open journal device unknown-block(0,0) -ENXIO [ 299.553108][T18561] No source specified [ 299.578980][T18561] FAULT_INJECTION: forcing a failure. [ 299.578980][T18561] name failslab, interval 1, probability 0, space 0, times 0 [ 299.592373][T18561] CPU: 0 UID: 0 PID: 18561 Comm: syz.6.4346 Not tainted syzkaller #0 PREEMPT(lazy) [ 299.592402][T18561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 299.592415][T18561] Call Trace: [ 299.592422][T18561] [ 299.592430][T18561] __dump_stack+0x1d/0x30 [ 299.592455][T18561] dump_stack_lvl+0x95/0xd0 [ 299.592478][T18561] dump_stack+0x15/0x1b [ 299.592499][T18561] should_fail_ex+0x262/0x280 [ 299.592531][T18561] should_failslab+0x8c/0xb0 [ 299.592557][T18561] kmem_cache_alloc_noprof+0x7f/0x3e0 [ 299.592582][T18561] ? vm_area_alloc+0x2c/0xb0 [ 299.592606][T18561] ? vm_area_alloc+0x2c/0xb0 [ 299.592632][T18561] vm_area_alloc+0x2c/0xb0 [ 299.592656][T18561] mmap_region+0x11e8/0x2090 [ 299.592706][T18561] do_mmap+0xa20/0xc70 [ 299.592736][T18561] vm_mmap_pgoff+0x183/0x2d0 [ 299.592762][T18561] ksys_mmap_pgoff+0xc1/0x310 [ 299.592795][T18561] ? __x64_sys_mmap+0x49/0x70 [ 299.592828][T18561] x64_sys_call+0x23b3/0x2550 [ 299.592854][T18561] do_syscall_64+0x112/0x360 [ 299.592889][T18561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.592912][T18561] RIP: 0033:0x7f27b623e0d9 [ 299.592928][T18561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.592948][T18561] RSP: 002b:00007f27b4c97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 299.592970][T18561] RAX: ffffffffffffffda RBX: 00007f27b64c5fa0 RCX: 00007f27b623e0d9 [ 299.592985][T18561] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000000000000 [ 299.592999][T18561] RBP: 00007f27b4c97090 R08: ffffffffffffffff R09: 0000000000000000 [ 299.593014][T18561] R10: 0000000000014032 R11: 0000000000000246 R12: 0000000000000001 [ 299.593029][T18561] R13: 00007f27b64c6038 R14: 00007f27b64c5fa0 R15: 00007ffc0a12d4b8 [ 299.593050][T18561] [ 299.876537][T18569] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4349'. [ 299.925630][T18575] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4352'. [ 300.095505][T18592] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4358'. [ 300.184118][T18595] loop7: detected capacity change from 0 to 1024 [ 300.245395][T18601] ip_tables: iptables: counters copy to user failed while replacing table [ 300.447044][T18595] EXT4-fs: Ignoring removed orlov option [ 300.453034][T18595] EXT4-fs: Ignoring removed orlov option [ 300.536496][T18595] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.564976][T18595] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 300.627484][T18595] EXT4-fs error (device loop7): ext4_lookup:1791: inode #2: comm syz.7.4359: deleted inode referenced: 15 [ 300.710635][T18609] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4363'. [ 300.790844][T18617] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 300.797403][T18617] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 300.808067][T18617] vhci_hcd vhci_hcd.0: Device attached [ 300.828653][T18617] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(5) [ 300.829415][T17431] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.835189][T18617] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 300.855749][T18617] vhci_hcd vhci_hcd.0: Device attached [ 300.894187][T18617] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(8) [ 300.900407][T18628] syzkaller0: entered promiscuous mode [ 300.900769][T18617] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 300.900903][T18617] vhci_hcd vhci_hcd.0: Device attached [ 300.912028][T18628] syzkaller0: entered allmulticast mode [ 300.921066][T18617] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 300.939146][T18617] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(12) [ 300.945835][T18617] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 300.954451][T18617] vhci_hcd vhci_hcd.0: Device attached [ 301.009182][T18639] __nla_validate_parse: 1 callbacks suppressed [ 301.009198][T18639] netlink: 128 bytes leftover after parsing attributes in process `syz.7.4371'. [ 301.045236][T18643] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4376'. [ 301.052181][T18645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4374'. [ 301.063545][ T1041] usb 13-1: new high-speed USB device number 2 using vhci_hcd [ 301.425288][T18672] ip_tables: iptables: counters copy to user failed while replacing table [ 301.508171][T18674] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4389'. [ 301.561570][T18674] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4389'. [ 301.840737][T18678] netlink: 128 bytes leftover after parsing attributes in process `syz.7.4390'. [ 301.933828][T18622] vhci_hcd: connection closed [ 301.934248][ T64] vhci_hcd vhci_hcd.6: stop threads [ 301.944413][T18630] vhci_hcd: connection closed [ 301.944602][T18618] vhci_hcd: connection reset by peer [ 301.954716][T18634] vhci_hcd: connection closed [ 301.955322][ T64] vhci_hcd vhci_hcd.6: release socket [ 301.966060][ T64] vhci_hcd vhci_hcd.6: disconnect device [ 301.974837][ T64] vhci_hcd vhci_hcd.6: stop threads [ 301.980429][ T64] vhci_hcd vhci_hcd.6: release socket [ 301.986370][ T64] vhci_hcd vhci_hcd.6: disconnect device [ 301.993462][ T64] vhci_hcd vhci_hcd.6: stop threads [ 301.998884][ T64] vhci_hcd vhci_hcd.6: release socket [ 302.011154][ T64] vhci_hcd vhci_hcd.6: disconnect device [ 302.017348][ T64] vhci_hcd vhci_hcd.6: stop threads [ 302.023427][ T64] vhci_hcd vhci_hcd.6: release socket [ 302.028993][ T64] vhci_hcd vhci_hcd.6: disconnect device [ 302.067174][T18684] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 302.073723][T18684] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 302.088191][T18684] vhci_hcd vhci_hcd.0: Device attached [ 302.288637][T18684] loop7: detected capacity change from 0 to 1764 [ 302.295292][T18684] iso9660: Unknown parameter '0x000000000000000800000000000000000000000' [ 302.372709][T18685] vhci_hcd: cannot find a urb of seqnum 25161 max seqnum 0 [ 302.391306][ T64] vhci_hcd vhci_hcd.7: stop threads [ 302.396561][ T64] vhci_hcd vhci_hcd.7: release socket [ 302.402015][ T64] vhci_hcd vhci_hcd.7: disconnect device [ 302.409649][T18688] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.423178][T18688] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18688 comm=syz.3.4393 [ 302.423377][T18692] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4394'. [ 302.436374][T18688] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18688 comm=syz.3.4393 [ 302.449658][T18692] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4394'. [ 302.458202][ T3385] usb 16-1: enqueue for inactive port 0 [ 302.482928][T18688] loop3: detected capacity change from 0 to 128 [ 302.538746][ T28] kauditd_printk_skb: 170 callbacks suppressed [ 302.538763][ T28] audit: type=1400 audit(1787369429.816:2634): avc: denied { read write } for pid=18691 comm="syz.1.4394" name="cpu_dma_latency" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 302.572759][ T28] audit: type=1400 audit(1787369429.816:2635): avc: denied { open } for pid=18691 comm="syz.1.4394" path="/231/dev/cpu_dma_latency" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 302.655399][T18705] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4400'. [ 302.668757][T18705] loop1: detected capacity change from 0 to 1024 [ 302.675695][T18705] EXT4-fs: Ignoring removed orlov option [ 302.710418][ T3385] usb 16-1: enqueue for inactive port 0 [ 302.712902][T18705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.735389][ T28] audit: type=1400 audit(1787369430.016:2636): avc: denied { write } for pid=18704 comm="syz.1.4400" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 302.761945][ T28] audit: type=1400 audit(1787369430.036:2637): avc: denied { mounton } for pid=18704 comm="syz.1.4400" path="/233/file1/sys" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 302.786374][T18705] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.834959][T18705] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.876044][T18705] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.926556][T18705] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.965214][T18720] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4405'. [ 303.005526][T18722] siw: device registration error -23 [ 303.026458][T18723] ip_tables: iptables: counters copy to user failed while replacing table [ 303.512055][ T28] audit: type=1400 audit(1787369430.786:2638): avc: denied { write } for pid=15044 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 303.543539][ T28] audit: type=1400 audit(1787369430.786:2639): avc: denied { write } for pid=15044 comm="syz-executor" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 303.544231][T18730] gretap0 speed is unknown, defaulting to 1000 [ 303.581490][T15044] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.585992][ T28] audit: type=1400 audit(1787369430.786:2640): avc: denied { write } for pid=15044 comm="syz-executor" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 303.616341][ T28] audit: type=1400 audit(1787369430.786:2641): avc: denied { write } for pid=15044 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 303.658665][ T28] audit: type=1400 audit(1787369430.816:2642): avc: denied { write } for pid=15044 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 303.680576][ T28] audit: type=1400 audit(1787369430.816:2643): avc: denied { write } for pid=15044 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 303.732616][T18737] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 303.817868][T18747] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 303.824424][T18747] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 303.851781][T18753] siw: device registration error -23 [ 303.862231][T18747] vhci_hcd vhci_hcd.0: Device attached [ 303.868423][T18750] loop6: detected capacity change from 0 to 128 [ 303.911469][ T3385] usb 16-1: SetAddress Request (3) to port 0 [ 303.918118][T18750] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 303.928225][ T3385] usb 16-1: new SuperSpeed USB device number 3 using vhci_hcd [ 303.974608][T18750] System zones: 1-3, 19-19, 35-36 [ 303.986999][T18747] loop7: detected capacity change from 0 to 1764 [ 303.988866][T18750] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 303.997665][T18747] iso9660: Unknown parameter '0x000000000000000800000000000000000000000' [ 304.048736][T18748] vhci_hcd: cannot find a urb of seqnum 25161 max seqnum 1 [ 304.057828][ T6167] vhci_hcd vhci_hcd.7: stop threads [ 304.063312][ T6167] vhci_hcd vhci_hcd.7: release socket [ 304.071755][T18750] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 304.073187][ T6167] vhci_hcd vhci_hcd.7: disconnect device [ 304.187550][T16944] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 304.271876][T18770] gretap0 speed is unknown, defaulting to 1000 [ 304.387483][T18779] ip_tables: iptables: counters copy to user failed while replacing table [ 304.489068][T18775] loop6: detected capacity change from 0 to 256 [ 304.521233][T18757] loop3: detected capacity change from 0 to 1024 [ 304.672160][T18757] EXT4-fs: Ignoring removed orlov option [ 304.742417][T18757] EXT4-fs: Ignoring removed orlov option [ 304.851713][T18789] loop7: detected capacity change from 0 to 1024 [ 304.931017][T18757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.005196][T18757] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.4419: deleted inode referenced: 15 [ 305.017727][T18797] syzkaller0: entered promiscuous mode [ 305.023203][T18797] syzkaller0: entered allmulticast mode [ 305.031789][T18799] gretap0 speed is unknown, defaulting to 1000 [ 305.129043][T18806] loop6: detected capacity change from 0 to 512 [ 305.145920][T18806] msdos: Unknown parameter 'erroots' [ 305.209287][T18811] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 305.215833][T18811] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 305.229910][T18811] vhci_hcd vhci_hcd.0: Device attached [ 305.243488][T12868] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.263319][T18811] loop5: detected capacity change from 0 to 1764 [ 305.284558][T18811] iso9660: Unknown parameter '0xffffffffffffffff00000000000000000000000' [ 305.303970][T18812] vhci_hcd: cannot find a urb of seqnum 25161 max seqnum 1 [ 305.332008][ T6164] vhci_hcd vhci_hcd.5: stop threads [ 305.337386][ T6164] vhci_hcd vhci_hcd.5: release socket [ 305.343043][ T6164] vhci_hcd vhci_hcd.5: disconnect device [ 305.389439][T18824] netlink: 'syz.1.4442': attribute type 12 has an invalid length. [ 305.439052][T18822] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.461503][T18822] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.475854][T18822] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #12: comm syz.6.4441: corrupted xattr block 6: invalid header [ 305.490782][T18822] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 305.514190][T18822] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #12: comm syz.6.4441: corrupted xattr block 6: invalid header [ 305.530264][T18822] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 305.539745][T18822] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #12: comm syz.6.4441: corrupted xattr block 6: invalid header [ 305.557993][T18839] ip6t_srh: unknown srh invflags 4000 [ 305.592559][T18839] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 305.604525][T18841] ip_tables: iptables: counters copy to user failed while replacing table [ 305.634557][T18839] SELinux: failed to load policy [ 305.798945][T18843] EXT4-fs (loop7): blocks per group (95) and clusters per group (32768) inconsistent [ 305.837097][T18822] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 305.888336][T16944] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.980473][T18848] ip6t_srh: unknown srh invflags 4000 [ 305.994160][T18848] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 306.003915][T18848] SELinux: failed to load policy [ 306.071405][T18848] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 306.125367][T18859] __nla_validate_parse: 4 callbacks suppressed [ 306.125384][T18859] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4455'. [ 306.144388][T18857] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4454'. [ 306.166071][T18861] Illegal XDP return value 16128 on prog (id 417) dev syz_tun, expect packet loss! [ 306.191664][ T1041] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 306.255997][T18871] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 306.262578][T18871] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 306.289893][T18871] vhci_hcd vhci_hcd.0: Device attached [ 306.314847][T18877] ip6t_srh: unknown srh invflags 4000 [ 306.329694][T18871] iso9660: Unknown parameter '0xffffffffffffffff00000000000000000000000' [ 306.338371][T18877] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 306.345992][T18877] SELinux: failed to load policy [ 306.357274][T18872] vhci_hcd: cannot find a urb of seqnum 25161 max seqnum 1 [ 306.372254][ T6167] vhci_hcd vhci_hcd.5: stop threads [ 306.381574][ T6167] vhci_hcd vhci_hcd.5: release socket [ 306.387052][ T6167] vhci_hcd vhci_hcd.5: disconnect device [ 306.393033][T18877] EXT4-fs (loop6): blocks per group (95) and clusters per group (32768) inconsistent [ 306.438005][T18880] tipc: Enabled bearer , priority 0 [ 306.456502][T18880] tipc: Resetting bearer [ 306.468610][T18879] tipc: Disabling bearer [ 306.506476][T18884] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4466'. [ 306.517917][T18884] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4466'. [ 306.639781][T18896] gretap0 speed is unknown, defaulting to 1000 [ 306.763332][T18910] ip_tables: iptables: counters copy to user failed while replacing table [ 307.084789][T18914] tipc: Enabled bearer , priority 0 [ 307.123858][T18914] tipc: Resetting bearer [ 307.152699][T18913] tipc: Disabling bearer [ 307.375177][T18936] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 307.381788][T18936] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 307.400853][T18934] siw: device registration error -23 [ 307.406289][T18936] vhci_hcd vhci_hcd.0: Device attached [ 307.434130][T18932] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4486'. [ 307.458616][T18936] set_capacity_and_notify: 7 callbacks suppressed [ 307.458630][T18936] loop7: detected capacity change from 0 to 1764 [ 307.472083][T18936] iso9660: Unknown parameter '0xffffffffffffffff00000000000000000000000' [ 307.487366][T18938] vhci_hcd: cannot find a urb of seqnum 25161 max seqnum 1 [ 307.498635][ T6151] vhci_hcd vhci_hcd.7: stop threads [ 307.503858][ T6151] vhci_hcd vhci_hcd.7: release socket [ 307.509323][ T6151] vhci_hcd vhci_hcd.7: disconnect device [ 307.544765][T18946] syzkaller0: entered promiscuous mode [ 307.550246][T18946] syzkaller0: entered allmulticast mode [ 307.558552][T18946] tipc: Enabled bearer , priority 0 [ 307.571589][T18946] tipc: Resetting bearer [ 307.579600][T18945] tipc: Resetting bearer [ 307.587353][T18945] tipc: Disabling bearer [ 307.608320][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 307.608335][ T28] audit: type=1400 audit(1787369434.886:2652): avc: denied { append } for pid=18950 comm="syz.6.4495" name="uprobe_events" dev="tracefs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 307.653038][T18942] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4491'. [ 307.973057][T18980] ip_tables: iptables: counters copy to user failed while replacing table [ 308.198890][ T28] audit: type=1326 audit(1787369435.476:2653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18988 comm="syz.1.4509" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a337de0d9 code=0x7ffc0000 [ 308.274156][T18989] loop1: detected capacity change from 0 to 128 [ 308.304152][ T28] audit: type=1326 audit(1787369435.476:2654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18988 comm="syz.1.4509" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a337de0d9 code=0x7ffc0000 [ 308.329682][ T28] audit: type=1326 audit(1787369435.516:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18988 comm="syz.1.4509" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a337de0d9 code=0x7ffc0000 [ 308.358345][T18991] ip6t_srh: unknown srh invflags 4000 [ 308.358814][ T28] audit: type=1326 audit(1787369435.516:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18988 comm="syz.1.4509" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a337de0d9 code=0x7ffc0000 [ 308.395205][ T28] audit: type=1326 audit(1787369435.516:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18988 comm="syz.1.4509" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f4a337de0d9 code=0x7ffc0000 [ 308.421890][T18991] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 308.427941][ T28] audit: type=1326 audit(1787369435.516:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18988 comm="syz.1.4509" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a337de0d9 code=0x7ffc0000 [ 308.431606][T18991] SELinux: failed to load policy [ 308.460348][ T28] audit: type=1326 audit(1787369435.516:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18988 comm="syz.1.4509" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a337de0d9 code=0x7ffc0000 [ 308.460379][ T28] audit: type=1326 audit(1787369435.526:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18988 comm="syz.1.4509" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a337de0d9 code=0x7ffc0000 [ 308.460481][ T28] audit: type=1326 audit(1787369435.526:2661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18988 comm="syz.1.4509" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a337de0d9 code=0x7ffc0000 [ 308.755419][T19020] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 308.761974][T19020] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 308.787098][T19020] vhci_hcd vhci_hcd.0: Device attached [ 308.834674][T18991] loop6: detected capacity change from 0 to 512 [ 308.854782][T19020] loop1: detected capacity change from 0 to 1764 [ 308.866258][T19020] iso9660: Unknown parameter '0xffffffffffffffff00000000000000000000000' [ 308.879322][T18991] EXT4-fs (loop6): blocks per group (95) and clusters per group (32768) inconsistent [ 308.884191][T19021] vhci_hcd: cannot find a urb of seqnum 25161 max seqnum 0 [ 308.909301][ T6151] vhci_hcd vhci_hcd.1: stop threads [ 308.932651][ T6151] vhci_hcd vhci_hcd.1: release socket [ 308.934436][T19024] loop3: detected capacity change from 0 to 512 [ 308.938064][ T6151] vhci_hcd vhci_hcd.1: disconnect device [ 308.973541][T19024] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 308.996977][T19024] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 309.004921][T19024] System zones: 1-12 [ 309.009598][T19024] EXT4-fs (loop3): 1 truncate cleaned up [ 309.015720][T19024] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.073671][T12868] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.146109][T19043] ip_tables: iptables: counters copy to user failed while replacing table [ 309.331135][T19050] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 309.341023][T19050] SELinux: failed to load policy [ 309.561125][ T3385] usb 16-1: device descriptor read/8, error -110 [ 309.671345][ T3385] usb 16-1: new SuperSpeed USB device number 3 using vhci_hcd [ 309.711591][ T3385] usb 16-1: enqueue for inactive port 0 [ 309.723180][ T3385] usb 16-1: enqueue for inactive port 0 [ 309.738299][T19070] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4539'. [ 309.740591][ T3385] usb 16-1: enqueue for inactive port 0 [ 309.756421][T19075] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 309.762954][T19075] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 309.773419][T19073] loop1: detected capacity change from 0 to 128 [ 309.786105][T19075] vhci_hcd vhci_hcd.0: Device attached [ 309.819110][T19075] loop7: detected capacity change from 0 to 1764 [ 309.849861][T19075] iso9660: Unknown parameter '0xffffffffffffffff00000000000000000000000' [ 309.865564][ T3385] usb usb16-port1: attempt power cycle [ 309.891146][T19076] vhci_hcd: cannot find a urb of seqnum 25161 max seqnum 1 [ 309.912184][ T6167] vhci_hcd vhci_hcd.7: stop threads [ 309.920241][ T6167] vhci_hcd vhci_hcd.7: release socket [ 309.932331][ T6167] vhci_hcd vhci_hcd.7: disconnect device [ 310.044710][T19064] loop3: detected capacity change from 0 to 1764 [ 310.079768][T19064] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 310.119598][T19093] netlink: 'syz.6.4546': attribute type 21 has an invalid length. [ 310.157627][T19095] pim6reg: entered allmulticast mode [ 310.175119][T19095] pim6reg: left allmulticast mode [ 310.565176][T19112] loop7: detected capacity change from 0 to 512 [ 310.682691][T19114] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4553'. [ 310.815461][T19123] ip_tables: iptables: counters copy to user failed while replacing table [ 311.280028][T19126] loop7: detected capacity change from 0 to 512 [ 311.302439][T19126] msdos: Unknown parameter 'erroots' [ 311.436431][T19136] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 311.442976][T19136] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 311.464183][T19136] vhci_hcd vhci_hcd.0: Device attached [ 311.508889][T19136] iso9660: Unknown parameter '0xffffffffffffffff00000000000000000000000' [ 311.519580][T19137] vhci_hcd: cannot find a urb of seqnum 25161 max seqnum 0 [ 311.535506][ T6151] vhci_hcd vhci_hcd.6: stop threads [ 311.540828][ T6151] vhci_hcd vhci_hcd.6: release socket [ 311.546456][ T6151] vhci_hcd vhci_hcd.6: disconnect device [ 311.600633][T19142] FAULT_INJECTION: forcing a failure. [ 311.600633][T19142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.643153][T19142] CPU: 1 UID: 0 PID: 19142 Comm: syz.5.4564 Not tainted syzkaller #0 PREEMPT(lazy) [ 311.643181][T19142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 311.643243][T19142] Call Trace: [ 311.643251][T19142] [ 311.643291][T19142] __dump_stack+0x1d/0x30 [ 311.643318][T19142] dump_stack_lvl+0x95/0xd0 [ 311.643338][T19142] dump_stack+0x15/0x1b [ 311.643356][T19142] should_fail_ex+0x262/0x280 [ 311.643416][T19142] should_fail+0xb/0x20 [ 311.643444][T19142] should_fail_usercopy+0x1a/0x20 [ 311.643483][T19142] _copy_from_user+0x1c/0xb0 [ 311.643502][T19142] kstrtouint_from_user+0x69/0xf0 [ 311.643532][T19142] proc_fail_nth_write+0x50/0x160 [ 311.643642][T19142] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 311.643668][T19142] vfs_write+0x254/0x9a0 [ 311.643715][T19142] ? irqentry_exit+0x58f/0x610 [ 311.643777][T19142] ? __fget_files+0x184/0x1c0 [ 311.643839][T19142] ? mutex_lock+0x57/0x90 [ 311.643911][T19142] ksys_write+0xdc/0x1a0 [ 311.643944][T19142] __x64_sys_write+0x40/0x50 [ 311.643965][T19142] x64_sys_call+0x154e/0x2550 [ 311.643992][T19142] do_syscall_64+0x112/0x360 [ 311.644027][T19142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.644073][T19142] RIP: 0033:0x7f1ca7eae90e [ 311.644088][T19142] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 311.644214][T19142] RSP: 002b:00007f1ca6946fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 311.644236][T19142] RAX: ffffffffffffffda RBX: 00007f1ca69476c0 RCX: 00007f1ca7eae90e [ 311.644250][T19142] RDX: 0000000000000001 RSI: 00007f1ca69470a0 RDI: 0000000000000006 [ 311.644263][T19142] RBP: 00007f1ca6947090 R08: 0000000000000000 R09: 0000000000000000 [ 311.644277][T19142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.644295][T19142] R13: 00007f1ca8176038 R14: 00007f1ca8175fa0 R15: 00007ffe67259318 [ 311.644319][T19142] [ 311.750880][T19155] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4565'. [ 311.949165][T19161] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4570'. [ 312.015061][T19169] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 312.033863][T19169] netlink: 'syz.7.4573': attribute type 13 has an invalid length. [ 312.153967][T19174] ip_tables: iptables: counters copy to user failed while replacing table [ 312.629936][ T28] kauditd_printk_skb: 222 callbacks suppressed [ 312.629953][ T28] audit: type=1400 audit(1787369439.906:2884): avc: denied { connect } for pid=19180 comm="syz.5.4577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 312.667832][T19184] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4578'. [ 312.677590][ T28] audit: type=1326 audit(1787369439.956:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19168 comm="syz.7.4573" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdfc298e0d9 code=0x7ffc0000 [ 312.755633][T19191] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4580'. [ 312.839622][T19203] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 312.846173][T19203] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 312.870462][T19203] vhci_hcd vhci_hcd.0: Device attached [ 312.918535][T19211] set_capacity_and_notify: 3 callbacks suppressed [ 312.918558][T19211] loop7: detected capacity change from 0 to 512 [ 312.965910][T19203] loop3: detected capacity change from 0 to 1764 [ 312.977984][T19203] iso9660: Unknown parameter '0xffffffffffffffff00000000000000000000000' [ 313.008974][T19204] vhci_hcd: cannot find a urb of seqnum 25161 max seqnum 1 [ 313.024017][ T6147] vhci_hcd vhci_hcd.3: stop threads [ 313.038795][ T6147] vhci_hcd vhci_hcd.3: release socket [ 313.054331][ T6147] vhci_hcd vhci_hcd.3: disconnect device [ 313.139122][T19219] gretap0 speed is unknown, defaulting to 1000 [ 313.163301][ T28] audit: type=1326 audit(1787369440.436:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19220 comm="syz.5.4593" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca7eee0d9 code=0x7ffc0000 [ 313.200662][ T28] audit: type=1326 audit(1787369440.436:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19220 comm="syz.5.4593" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca7eee0d9 code=0x7ffc0000 [ 313.235831][ T28] audit: type=1326 audit(1787369440.446:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19220 comm="syz.5.4593" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca7eee0d9 code=0x7ffc0000 [ 313.265335][ T28] audit: type=1326 audit(1787369440.446:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19220 comm="syz.5.4593" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca7eee0d9 code=0x7ffc0000 [ 313.291570][ T28] audit: type=1326 audit(1787369440.446:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19220 comm="syz.5.4593" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f1ca7eee0d9 code=0x7ffc0000 [ 313.317983][ T28] audit: type=1326 audit(1787369440.446:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19220 comm="syz.5.4593" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca7eee0d9 code=0x7ffc0000 [ 313.334072][T19230] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4597'. [ 313.344093][ T28] audit: type=1326 audit(1787369440.446:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19220 comm="syz.5.4593" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca7eee0d9 code=0x7ffc0000 [ 313.378000][ T28] audit: type=1326 audit(1787369440.476:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19220 comm="syz.5.4593" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca7eee0d9 code=0x7ffc0000 [ 313.506414][T19238] ip_tables: iptables: counters copy to user failed while replacing table [ 313.894871][T19247] loop1: detected capacity change from 0 to 1024 [ 313.919872][T19243] FAULT_INJECTION: forcing a failure. [ 313.919872][T19243] name failslab, interval 1, probability 0, space 0, times 0 [ 313.942973][T19243] CPU: 1 UID: 0 PID: 19243 Comm: syz.3.4602 Not tainted syzkaller #0 PREEMPT(lazy) [ 313.943076][T19243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 313.943091][T19243] Call Trace: [ 313.943099][T19243] [ 313.943109][T19243] __dump_stack+0x1d/0x30 [ 313.943137][T19243] dump_stack_lvl+0x95/0xd0 [ 313.943162][T19243] dump_stack+0x15/0x1b [ 313.943236][T19243] should_fail_ex+0x262/0x280 [ 313.943272][T19243] should_failslab+0x8c/0xb0 [ 313.943300][T19243] kmem_cache_alloc_node_noprof+0x86/0x3f0 [ 313.943327][T19243] ? __alloc_skb+0x2e0/0x6f0 [ 313.943373][T19243] ? __alloc_skb+0x2e0/0x6f0 [ 313.943409][T19243] __alloc_skb+0x2e0/0x6f0 [ 313.943440][T19243] ? __alloc_skb+0x209/0x6f0 [ 313.943547][T19243] netlink_alloc_large_skb+0xbf/0xf0 [ 313.943610][T19243] netlink_sendmsg+0x40c/0x6f0 [ 313.943647][T19243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.943758][T19243] ____sys_sendmsg+0x532/0x580 [ 313.943787][T19243] ___sys_sendmsg+0x195/0x1e0 [ 313.943841][T19243] ? finish_task_switch+0x121/0x340 [ 313.943884][T19243] __x64_sys_sendmsg+0xd4/0x160 [ 313.943912][T19243] x64_sys_call+0x22ab/0x2550 [ 313.943955][T19243] do_syscall_64+0x112/0x360 [ 313.944007][T19243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.944032][T19243] RIP: 0033:0x7f78cb46e0d9 [ 313.944122][T19243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.944143][T19243] RSP: 002b:00007f78c9ec7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.944166][T19243] RAX: ffffffffffffffda RBX: 00007f78cb6f5fa0 RCX: 00007f78cb46e0d9 [ 313.944182][T19243] RDX: 00000000000048d4 RSI: 0000200000000240 RDI: 0000000000000007 [ 313.944197][T19243] RBP: 00007f78c9ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 313.944290][T19243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.944304][T19243] R13: 00007f78cb6f6038 R14: 00007f78cb6f5fa0 R15: 00007fff83f30128 [ 313.944394][T19243] [ 313.977065][T19241] loop7: detected capacity change from 0 to 512 [ 314.170636][T19241] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 314.194815][T19241] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 314.203031][T19241] System zones: 1-12 [ 314.209732][T19241] EXT4-fs (loop7): 1 truncate cleaned up [ 314.215954][T19241] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.231342][T19259] tipc: Enabled bearer , priority 0 [ 314.248328][T19259] tipc: Resetting bearer [ 314.256733][T17431] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.267066][T19258] tipc: Disabling bearer [ 314.341185][T19266] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4610'. [ 314.354918][T19272] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 314.361459][T19272] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 314.376450][T19272] vhci_hcd vhci_hcd.0: Device attached [ 314.419513][T19272] loop6: detected capacity change from 0 to 1764 [ 314.429933][T19272] iso9660: Unknown parameter '0xffffffffffffffff00000000000000000000000' [ 314.457237][T19273] vhci_hcd: cannot find a urb of seqnum 25161 max seqnum 0 [ 314.464891][ T6164] vhci_hcd vhci_hcd.6: stop threads [ 314.471321][ T6164] vhci_hcd vhci_hcd.6: release socket [ 314.477967][T19281] loop3: detected capacity change from 0 to 1024 [ 314.485133][ T6164] vhci_hcd vhci_hcd.6: disconnect device [ 314.703437][T19298] ip_tables: iptables: counters copy to user failed while replacing table [ 314.725617][T19292] loop7: detected capacity change from 0 to 512 [ 314.759390][T19292] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 314.787693][T19292] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 314.801666][T19292] System zones: 1-12 [ 314.828395][T19292] EXT4-fs (loop7): 1 truncate cleaned up [ 314.839470][T19292] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.212222][T19312] loop6: detected capacity change from 0 to 512 [ 315.232315][T19312] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 315.246175][T19313] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4624'. [ 315.264136][T19312] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 315.272257][T19312] System zones: 1-12 [ 315.276911][T19312] EXT4-fs (loop6): 1 truncate cleaned up [ 315.277582][T17431] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.283046][T19312] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.335806][T19318] loop7: detected capacity change from 0 to 1024 [ 315.356548][T16944] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 315.371850][T16944] EXT4-fs error (device loop6): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 315.394223][T16944] EXT4-fs error (device loop6): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 315.539733][T19331] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 315.546276][T19331] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 315.560886][T19331] vhci_hcd vhci_hcd.0: Device attached [ 315.572853][T19337] loop5: detected capacity change from 0 to 512 [ 315.584879][T16944] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.606336][ T64] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.622582][T19331] iso9660: Unknown parameter '0xffffffffffffffff00000000000000000000000' [ 315.643767][ T64] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.665906][T19332] vhci_hcd: cannot find a urb of seqnum 25161 max seqnum 1 [ 315.689876][ T6167] vhci_hcd vhci_hcd.3: stop threads [ 315.705205][ T6167] vhci_hcd vhci_hcd.3: release socket [ 315.722128][ T6167] vhci_hcd vhci_hcd.3: disconnect device [ 315.772295][ T64] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.785348][ T64] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.830910][T19348] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4641'. [ 315.847320][ T64] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.865949][ T64] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.891786][T19351] gretap0 speed is unknown, defaulting to 1000 [ 315.942416][ T64] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.959650][ T64] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.145268][ T64] bridge_slave_1: left promiscuous mode [ 316.151122][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.164490][ T64] bridge_slave_0: left allmulticast mode [ 316.170246][ T64] bridge_slave_0: left promiscuous mode [ 316.177874][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.191732][ T64] pimreg: left allmulticast mode [ 316.260266][T19394] ip6t_srh: unknown srh invflags 4000 [ 316.281150][T19394] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 316.285191][T19389] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4652'. [ 316.289522][T19394] SELinux: failed to load policy [ 316.320055][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.335449][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.350092][ T64] bond0 (unregistering): Released all slaves [ 316.361691][T19396] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 316.435478][ T64] tipc: Left network mode [ 316.440126][T19351] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.453149][T19351] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.472378][T19351] bridge_slave_0: entered allmulticast mode [ 316.495526][T19351] bridge_slave_0: entered promiscuous mode [ 316.529736][ T64] hsr_slave_0: left promiscuous mode [ 316.539014][ T64] hsr_slave_1: left promiscuous mode [ 316.548358][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.555999][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.567625][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.579245][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.600413][ T64] veth1_macvtap: left promiscuous mode [ 316.606555][ T64] veth0_macvtap: left promiscuous mode [ 316.612208][ T64] veth1_vlan: left promiscuous mode [ 316.617567][ T64] veth0_vlan: left promiscuous mode [ 316.664001][T19433] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 316.670547][T19433] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 316.684254][T19433] vhci_hcd vhci_hcd.0: Device attached [ 316.713979][T19433] iso9660: Unknown parameter '0xffffffffffffffff00000000000000000000000' [ 316.758419][T19434] vhci_hcd: cannot find a urb of seqnum 25161 max seqnum 1 [ 316.767025][ T49] vhci_hcd vhci_hcd.7: stop threads [ 316.773176][ T49] vhci_hcd vhci_hcd.7: release socket [ 316.774333][ T64] team0 (unregistering): Port device team_slave_1 removed [ 316.778740][ T49] vhci_hcd vhci_hcd.7: disconnect device [ 316.794061][ T64] team0 (unregistering): Port device team_slave_0 removed [ 316.836578][T19351] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.843958][T19351] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.851103][T19351] bridge_slave_1: entered allmulticast mode [ 316.855367][T19438] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 316.858069][T19351] bridge_slave_1: entered promiscuous mode [ 316.878868][ T3018] 8021q: adding VLAN 0 to HW filter on device eth13 [ 316.893540][T19351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.905450][T19351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.923781][T19351] team0: Port device team_slave_0 added [ 316.930239][T19351] team0: Port device team_slave_1 added [ 316.962266][T19351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.975596][T19351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.025559][T19351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.043560][T19351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.058088][T19351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.091878][T19351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.115144][T19451] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4667'. [ 317.143054][T19351] hsr_slave_0: entered promiscuous mode [ 317.149167][T19351] hsr_slave_1: entered promiscuous mode [ 317.173407][ T64] IPVS: stop unused estimator thread 0... [ 317.213348][T19465] msdos: Unknown parameter 'erroots' [ 317.288146][ T3018] 8021q: adding VLAN 0 to HW filter on device eth14 [ 317.370423][T19351] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 317.377356][T19479] ip6t_srh: unknown srh invflags 4000 [ 317.389407][T19351] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 317.397151][T19351] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 317.406956][T19479] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 317.418715][T19481] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 317.420801][T19351] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 317.446120][T19481] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 317.454050][T19481] System zones: 1-12 [ 317.458264][T19479] SELinux: failed to load policy [ 317.464075][T19481] EXT4-fs (loop3): 1 truncate cleaned up [ 317.470090][T19481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.499820][T19351] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 317.537989][T12868] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 317.553302][T19351] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 317.561160][T12868] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 317.581040][T19479] EXT4-fs (loop7): blocks per group (95) and clusters per group (32768) inconsistent [ 317.590724][T19351] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 317.625520][T19351] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 317.677565][T19512] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4680'. [ 317.698865][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 317.698879][ T28] audit: type=1400 audit(1787369444.946:2924): avc: denied { write } for pid=19515 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.709302][T19351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.753434][T19351] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.776844][ T6164] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.783956][ T6164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.785653][T19519] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4679'. [ 317.794755][ T3018] 8021q: adding VLAN 0 to HW filter on device eth15 [ 317.807040][T19521] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 317.813552][T19521] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 317.817727][ T6164] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.828312][ T6164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.830425][T19521] vhci_hcd vhci_hcd.0: Device attached [ 317.944672][T19535] ip_tables: iptables: counters copy to user failed while replacing table [ 317.982760][ T6147] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.016663][T19491] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.057828][ T6147] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.157254][ T6147] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.276146][ T6147] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.394562][T19521] set_capacity_and_notify: 10 callbacks suppressed [ 318.394579][T19521] loop1: detected capacity change from 0 to 1764 [ 318.418657][T19521] iso9660: Unknown parameter '0xffffffffffffffff00000000000000000000000' [ 318.461976][T19351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.470507][T19522] vhci_hcd: cannot find a urb of seqnum 25161 max seqnum 0 [ 318.491145][ T6167] vhci_hcd vhci_hcd.1: stop threads [ 318.496491][ T6167] vhci_hcd vhci_hcd.1: release socket [ 318.511400][ T3376] usb 4-1: SetAddress Request (2) to port 0 [ 318.518238][ T3376] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 318.527320][ T6167] vhci_hcd vhci_hcd.1: disconnect device [ 318.568450][ T6147] bridge_slave_1: left allmulticast mode [ 318.575437][T19544] loop7: detected capacity change from 0 to 1764 [ 318.577112][ T3376] usb 4-1: enqueue for inactive port 0 [ 318.586009][ T6147] bridge_slave_1: left promiscuous mode [ 318.596854][ T6147] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.599808][ T3376] usb 4-1: enqueue for inactive port 0 [ 318.609103][T19532] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 318.617702][ T6147] bridge_slave_0: left allmulticast mode [ 318.620330][ T28] audit: type=1400 audit(1787369445.896:2925): avc: denied { write } for pid=19549 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 318.623411][ T6147] bridge_slave_0: left promiscuous mode [ 318.646444][ T3376] usb 4-1: enqueue for inactive port 0 [ 318.682837][ T28] audit: type=1400 audit(1787369445.946:2926): avc: denied { write } for pid=19571 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 318.712325][ T6147] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.720689][ T6147] pimreg: left allmulticast mode [ 318.734881][T19574] loop5: detected capacity change from 0 to 512 [ 318.741835][T19574] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 318.752261][T19574] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 318.760173][T19574] System zones: 1-12 [ 318.766000][T19574] EXT4-fs (loop5): 1 truncate cleaned up [ 318.773816][T19574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.795877][ T28] audit: type=1400 audit(1787369446.066:2927): avc: denied { write } for pid=19576 comm="syz.5.4687" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 318.815678][T14676] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 318.829379][ T28] audit: type=1400 audit(1787369446.066:2928): avc: denied { write } for pid=14676 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 318.832187][T14676] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 318.863809][ T6147] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 318.866063][ T3376] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 318.879300][ T28] audit: type=1400 audit(1787369446.066:2929): avc: denied { write } for pid=14676 comm="syz-executor" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 318.892888][ T3376] usb 4-1: enqueue for inactive port 0 [ 318.907624][ T3376] usb 4-1: enqueue for inactive port 0 [ 318.917848][ T6147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.920600][ T3376] usb 4-1: enqueue for inactive port 0 [ 318.937580][ T6147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.948206][ T6147] bond0 (unregistering): Released all slaves [ 318.961860][ T3018] 8021q: adding VLAN 0 to HW filter on device eth16 [ 318.975340][ T3399] gretap0 speed is unknown, defaulting to 1000 [ 318.983269][ T3399] infiniband syz1: ib_query_port failed (-19) [ 319.000658][T19580] tipc: Enabled bearer , priority 0 [ 319.011745][T19580] tipc: Resetting bearer [ 319.018934][T19578] tipc: Disabling bearer [ 319.066865][ T6147] tipc: Left network mode [ 319.112007][ T6147] hsr_slave_0: left promiscuous mode [ 319.126450][ T6147] hsr_slave_1: left promiscuous mode [ 319.146121][T14909] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.168229][ T6147] veth1_macvtap: left promiscuous mode [ 319.189660][T19607] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4693'. [ 319.192696][ T6147] veth0_macvtap: left promiscuous mode [ 319.217658][ T6147] veth1_vlan: left promiscuous mode [ 319.224403][ T6147] veth0_vlan: left promiscuous mode [ 319.249228][ T28] audit: type=1400 audit(1787369446.526:2930): avc: denied { write } for pid=19595 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.292766][ T28] audit: type=1400 audit(1787369446.566:2931): avc: denied { write } for pid=19617 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.325783][ T6147] team0 (unregistering): Port device team_slave_1 removed [ 319.336277][ T6147] team0 (unregistering): Port device team_slave_0 removed [ 319.371708][ T3018] 8021q: adding VLAN 0 to HW filter on device eth17 [ 319.393822][T19624] loop1: detected capacity change from 0 to 512 [ 319.462086][T19351] veth0_vlan: entered promiscuous mode [ 319.481857][T19633] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 319.488395][T19633] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 319.497899][T19633] vhci_hcd vhci_hcd.0: Device attached [ 319.527983][T19633] loop1: detected capacity change from 0 to 1764 [ 319.541301][T19633] iso9660: Unknown parameter '0xffffffffffffffff00000000000000000000000' [ 319.564283][T19634] vhci_hcd: cannot find a urb of seqnum 25161 max seqnum 0 [ 319.583242][T19351] veth1_vlan: entered promiscuous mode [ 319.591434][ T3376] usb 4-1: SetAddress Request (3) to port 0 [ 319.598200][ T3376] usb 4-1: new SuperSpeed USB device number 3 using vhci_hcd [ 319.604476][ T6167] vhci_hcd vhci_hcd.1: stop threads [ 319.617469][ T6167] vhci_hcd vhci_hcd.1: release socket [ 319.618382][ T28] audit: type=1400 audit(1787369446.896:2932): avc: denied { write } for pid=19638 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.623098][ T6167] vhci_hcd vhci_hcd.1: disconnect device [ 319.675554][T19351] veth0_macvtap: entered promiscuous mode [ 319.700816][ T28] audit: type=1400 audit(1787369446.976:2933): avc: denied { write } for pid=19654 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.722048][T19351] veth1_macvtap: entered promiscuous mode [ 319.740363][ T6147] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.762644][ T3018] 8021q: adding VLAN 0 to HW filter on device eth18 [ 319.773476][T19556] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.780724][T19556] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.788045][T19556] bridge_slave_0: entered allmulticast mode [ 319.794599][T19556] bridge_slave_0: entered promiscuous mode [ 319.801451][T19556] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.808524][T19556] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.815733][T19556] bridge_slave_1: entered allmulticast mode [ 319.822164][T19556] bridge_slave_1: entered promiscuous mode [ 319.845107][ T6147] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.860563][T19556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.872784][T19351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.881175][T19556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.894253][T19351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.911225][T19556] team0: Port device team_slave_0 added [ 319.922427][ T6147] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.934236][T19556] team0: Port device team_slave_1 added [ 319.956902][ T6156] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.972628][ T6156] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.998085][T19556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.005257][T19556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.031213][T19556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.042310][ T49] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.054833][ T6147] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.065706][T19618] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.072811][T19618] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.079917][T19618] bridge_slave_0: entered allmulticast mode [ 320.086471][T19618] bridge_slave_0: entered promiscuous mode [ 320.093231][T19556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.100209][T19556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.127353][T19556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.132382][T19669] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4700'. [ 320.156664][T19618] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.169162][T19618] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.186880][T19618] bridge_slave_1: entered allmulticast mode [ 320.193401][T19618] bridge_slave_1: entered promiscuous mode [ 320.221211][T19556] hsr_slave_0: entered promiscuous mode [ 320.227424][T19556] hsr_slave_1: entered promiscuous mode [ 320.233478][T19556] debugfs: 'hsr0' already exists in 'hsr' [ 320.244838][T19556] Cannot create hsr debugfs directory [ 320.356533][T19618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.368514][ T3018] 8021q: adding VLAN 0 to HW filter on device eth19 [ 320.395212][ T6147] bridge_slave_1: left allmulticast mode [ 320.400954][ T6147] bridge_slave_1: left promiscuous mode [ 320.406922][ T6147] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.414955][ T6147] bridge_slave_0: left allmulticast mode [ 320.420681][ T6147] bridge_slave_0: left promiscuous mode [ 320.427107][ T6147] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.436240][ T6147] pimreg: left allmulticast mode [ 320.506373][T19697] loop7: detected capacity change from 0 to 512 [ 320.517077][ T6147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.530156][ T6147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.540483][ T6147] bond0 (unregistering): Released all slaves [ 320.548651][T19618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.587692][T19618] team0: Port device team_slave_0 added [ 320.594184][T19618] team0: Port device team_slave_1 added [ 320.609234][ T6147] tipc: Left network mode [ 320.624917][ T6147] hsr_slave_0: left promiscuous mode [ 320.630494][ T6147] hsr_slave_1: left promiscuous mode [ 320.636532][ T6147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.643889][ T6147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.651326][ T6147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.658719][ T6147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.667809][ T6147] veth1_macvtap: left promiscuous mode [ 320.673284][ T6147] veth0_macvtap: left promiscuous mode [ 320.678808][ T6147] veth1_vlan: left promiscuous mode [ 320.684261][ T6147] veth0_vlan: left promiscuous mode [ 320.749080][ T6147] team0 (unregistering): Port device team_slave_1 removed [ 320.751831][T19700] ip6t_srh: unknown srh invflags 4000 [ 320.768389][ T6147] team0 (unregistering): Port device team_slave_0 removed [ 320.770814][T19700] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 320.785504][T19700] SELinux: failed to load policy [ 320.825884][T19618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.835068][T19618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.868226][T19618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.879945][T19618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.887189][T19618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.914778][T19618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.948429][T19702] tipc: Started in network mode [ 320.953451][T19702] tipc: Node identity 76da0ead147b, cluster identity 4711 [ 320.960694][T19702] tipc: Enabled bearer , priority 0 [ 320.964412][T19700] loop1: detected capacity change from 0 to 512 [ 320.975205][T19618] hsr_slave_0: entered promiscuous mode [ 320.982553][T19618] hsr_slave_1: entered promiscuous mode [ 320.988452][T19618] debugfs: 'hsr0' already exists in 'hsr' [ 320.994938][T19618] Cannot create hsr debugfs directory [ 321.001556][T19700] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 321.031086][T19556] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 321.045528][T19556] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 321.056260][T19702] tipc: Resetting bearer [ 321.065210][T19701] tipc: Disabling bearer [ 321.077411][T19556] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 321.091653][T19556] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 321.109996][T19556] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 321.134370][T19556] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 321.173707][T19720] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4704'. [ 321.187316][T19556] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 321.197372][T19556] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 321.198459][ T6147] IPVS: stop unused estimator thread 0... [ 321.215399][ T3018] 8021q: adding VLAN 0 to HW filter on device eth20 [ 321.229950][T19726] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4705'. [ 321.242118][ T64] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.366195][T19556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.422138][T19556] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.451755][T19747] syz.1.4711 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 321.464037][T19747] CPU: 1 UID: 0 PID: 19747 Comm: syz.1.4711 Not tainted syzkaller #0 PREEMPT(lazy) [ 321.464134][T19747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 321.464147][T19747] Call Trace: [ 321.464153][T19747] [ 321.464161][T19747] __dump_stack+0x1d/0x30 [ 321.464191][T19747] dump_stack_lvl+0x95/0xd0 [ 321.464242][T19747] dump_stack+0x15/0x1b [ 321.464296][T19747] dump_header+0x80/0x240 [ 321.464317][T19747] oom_kill_process+0x294/0x420 [ 321.464431][T19747] out_of_memory+0x981/0xbc0 [ 321.464471][T19747] try_charge_memcg+0x624/0xa10 [ 321.464535][T19747] __obj_cgroup_charge+0x105/0x230 [ 321.464628][T19747] __memcg_slab_post_alloc_hook+0x495/0x8a0 [ 321.464674][T19747] ? ipv6_add_dev+0x143/0xab0 [ 321.464728][T19747] __kmalloc_cache_noprof+0x205/0x3f0 [ 321.464758][T19747] ? ipv6_add_dev+0x143/0xab0 [ 321.464791][T19747] ipv6_add_dev+0x143/0xab0 [ 321.464834][T19747] addrconf_notify+0x3ad/0x8e0 [ 321.464863][T19747] ? __pfx_addrconf_notify+0x10/0x10 [ 321.464895][T19747] raw_notifier_call_chain+0x72/0x1a0 [ 321.464921][T19747] ? blake2s_update+0x12b/0x150 [ 321.464968][T19747] call_netdevice_notifiers+0xb5/0x110 [ 321.464999][T19747] register_netdevice+0xfbf/0x11a0 [ 321.465022][T19747] register_netdev+0x3b/0x50 [ 321.465090][T19747] loopback_net_init+0x59/0x100 [ 321.465164][T19747] ops_init+0x22a/0x2e0 [ 321.465201][T19747] ? mutex_unlock+0x4e/0x90 [ 321.465303][T19747] setup_net+0x9f/0x230 [ 321.465334][T19747] copy_net_ns+0x31a/0x460 [ 321.465414][T19747] create_new_namespaces+0x1f6/0x420 [ 321.465488][T19747] unshare_nsproxy_namespaces+0x115/0x150 [ 321.465597][T19747] ksys_unshare+0x42b/0x710 [ 321.465656][T19747] __x64_sys_unshare+0x1f/0x30 [ 321.465682][T19747] x64_sys_call+0x1e33/0x2550 [ 321.465707][T19747] do_syscall_64+0x112/0x360 [ 321.465745][T19747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.465767][T19747] RIP: 0033:0x7f4a337de0d9 [ 321.465798][T19747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.465877][T19747] RSP: 002b:00007f4a32237028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 321.465899][T19747] RAX: ffffffffffffffda RBX: 00007f4a33a65fa0 RCX: 00007f4a337de0d9 [ 321.465914][T19747] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 321.465928][T19747] RBP: 00007f4a33875024 R08: 0000000000000000 R09: 0000000000000000 [ 321.465942][T19747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.465956][T19747] R13: 00007f4a33a66038 R14: 00007f4a33a65fa0 R15: 00007ffeccebca18 [ 321.465976][T19747] [ 321.466074][T19747] memory: usage 96kB, limit 96kB, failcnt 349 [ 321.512191][T19744] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4710'. [ 321.523790][T19747] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 321.744534][T19747] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 321.751802][T19747] Memory cgroup stats for /syz1/test: [ 321.751988][T19747] cache 0 [ 321.760299][T19747] rss 0 [ 321.763181][T19747] shmem 0 [ 321.766114][T19747] mapped_file 0 [ 321.769551][T19747] dirty 0 [ 321.772492][T19747] writeback 0 [ 321.775775][T19747] workingset_refault_anon 0 [ 321.780252][T19747] workingset_refault_file 0 [ 321.784796][T19747] swap 0 [ 321.787642][T19747] swapcached 0 [ 321.791012][T19747] pgpgin 0 [ 321.794044][T19747] pgpgout 0 [ 321.797160][T19747] pgfault 41 [ 321.800335][T19747] pgmajfault 0 [ 321.803725][T19747] inactive_anon 0 [ 321.807379][T19747] active_anon 0 [ 321.810857][T19747] inactive_file 0 [ 321.814586][T19747] active_file 0 [ 321.818039][T19747] unevictable 0 [ 321.821532][T19747] hierarchical_memory_limit 98304 [ 321.826702][T19747] hierarchical_memsw_limit 9223372036854771712 [ 321.832872][T19747] total_cache 0 [ 321.836321][T19747] total_rss 0 [ 321.839581][T19747] total_shmem 0 [ 321.843043][T19747] total_mapped_file 0 [ 321.847017][T19747] total_dirty 0 [ 321.850532][T19747] total_writeback 0 [ 321.854375][T19747] total_workingset_refault_anon 0 [ 321.859426][T19747] total_workingset_refault_file 0 [ 321.864535][T19747] total_swap 0 [ 321.867896][T19747] total_swapcached 0 [ 321.871837][T19747] total_pgpgin 0 [ 321.875771][T19747] total_pgpgout 0 [ 321.879397][T19747] total_pgfault 41 [ 321.883147][T19747] total_pgmajfault 0 [ 321.887037][T19747] total_inactive_anon 0 [ 321.891177][T19747] total_active_anon 0 [ 321.895157][T19747] total_inactive_file 0 [ 321.899302][T19747] total_active_file 0 [ 321.903295][T19747] total_unevictable 0 [ 321.907276][T19747] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.4711,pid=19745,uid=0 [ 321.922822][T19747] Memory cgroup out of memory: Killed process 19745 (syz.1.4711) total-vm:94056kB, anon-rss:1428kB, file-rss:22096kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 321.947766][ T3018] 8021q: adding VLAN 0 to HW filter on device eth21 [ 321.970428][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.977586][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.996327][ T6147] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.003422][ T6147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.181820][T19618] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 322.193414][T19790] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4718'. [ 322.209259][T19796] loop8: detected capacity change from 0 to 2048 [ 322.212176][T19618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 322.234682][T19618] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 322.252986][T19796] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.272362][T19618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 322.274135][T19796] EXT4-fs error (device loop8): ext4_ext_precache:648: inode #2: comm syz.8.4719: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 322.298187][T19796] EXT4-fs (loop8): Remounting filesystem read-only [ 322.315644][T19618] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 322.324425][T19351] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.327991][T19812] loop1: detected capacity change from 0 to 512 [ 322.341821][T19618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 322.352444][T19618] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 322.375425][T19618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 322.392694][ T3018] 8021q: adding VLAN 0 to HW filter on device eth22 [ 322.409923][T19816] pim6reg: entered allmulticast mode [ 322.443797][T19816] pim6reg: left allmulticast mode [ 322.462933][T19556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.500331][T19830] syz.1.4725 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 322.539147][T19830] CPU: 1 UID: 0 PID: 19830 Comm: syz.1.4725 Not tainted syzkaller #0 PREEMPT(lazy) [ 322.539182][T19830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 322.539197][T19830] Call Trace: [ 322.539204][T19830] [ 322.539213][T19830] __dump_stack+0x1d/0x30 [ 322.539267][T19830] dump_stack_lvl+0x95/0xd0 [ 322.539294][T19830] dump_stack+0x15/0x1b [ 322.539317][T19830] dump_header+0x80/0x240 [ 322.539339][T19830] oom_kill_process+0x294/0x420 [ 322.539389][T19830] out_of_memory+0x981/0xbc0 [ 322.539425][T19830] try_charge_memcg+0x624/0xa10 [ 322.539526][T19830] __obj_cgroup_charge+0x105/0x230 [ 322.539588][T19830] __memcg_slab_post_alloc_hook+0x495/0x8a0 [ 322.539626][T19830] __kmalloc_node_track_caller_noprof+0x349/0x4e0 [ 322.539659][T19830] ? __addrconf_sysctl_register+0x60/0x340 [ 322.539710][T19830] ? __addrconf_sysctl_register+0x60/0x340 [ 322.539818][T19830] kmemdup_noprof+0x2b/0x70 [ 322.539856][T19830] __addrconf_sysctl_register+0x60/0x340 [ 322.539896][T19830] addrconf_init_net+0x339/0x450 [ 322.539928][T19830] ? ip6addrlbl_net_init+0x335/0x340 [ 322.540012][T19830] ops_init+0x22a/0x2e0 [ 322.540045][T19830] ? mutex_unlock+0x4e/0x90 [ 322.540074][T19830] setup_net+0x9f/0x230 [ 322.540166][T19830] copy_net_ns+0x31a/0x460 [ 322.540199][T19830] create_new_namespaces+0x1f6/0x420 [ 322.540232][T19830] unshare_nsproxy_namespaces+0x115/0x150 [ 322.540318][T19830] ksys_unshare+0x42b/0x710 [ 322.540352][T19830] __x64_sys_unshare+0x1f/0x30 [ 322.540384][T19830] x64_sys_call+0x1e33/0x2550 [ 322.540559][T19830] do_syscall_64+0x112/0x360 [ 322.540666][T19830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.540739][T19830] RIP: 0033:0x7f4a337de0d9 [ 322.540762][T19830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.540784][T19830] RSP: 002b:00007f4a32237028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 322.540809][T19830] RAX: ffffffffffffffda RBX: 00007f4a33a65fa0 RCX: 00007f4a337de0d9 [ 322.540827][T19830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 322.540901][T19830] RBP: 00007f4a33875024 R08: 0000000000000000 R09: 0000000000000000 [ 322.540998][T19830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.541013][T19830] R13: 00007f4a33a66038 R14: 00007f4a33a65fa0 R15: 00007ffeccebca18 [ 322.541075][T19830] [ 322.558716][T19822] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4724'. [ 322.561384][T19830] memory: usage 92kB, limit 96kB, failcnt 395 [ 322.578715][T19618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.593890][T19830] memory+swap: usage 92kB, limit 9007199254740988kB, failcnt 0 [ 322.613174][T19618] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.642409][T19830] kmem: usage 92kB, limit 9007199254740988kB, failcnt 0 [ 322.667080][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.685128][T19830] Memory cgroup stats for [ 322.686668][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.694687][T19830] /syz1/test [ 322.699447][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 322.699462][ T28] audit: type=1400 audit(1787369449.976:2948): avc: denied { write } for pid=19839 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.706429][T19830] : [ 322.739040][T19618] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 322.795196][T19830] cache 0 [ 322.815419][T19618] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 322.843260][T19830] rss 0 [ 322.869505][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.889733][T19830] shmem 0 [ 322.897351][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.911336][T19830] mapped_file 0 [ 322.918153][ T28] audit: type=1400 audit(1787369450.156:2949): avc: denied { write } for pid=19857 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.920689][T19830] dirty 0 [ 322.920777][T19830] writeback 0 [ 322.920787][T19830] workingset_refault_anon 0 [ 322.920795][T19830] workingset_refault_file 0 [ 322.920803][T19830] swap 0 [ 322.979262][T19830] swapcached 0 [ 322.989887][ T3018] 8021q: adding VLAN 0 to HW filter on device eth23 [ 323.018104][T19830] pgpgin 0 [ 323.021192][T19830] pgpgout 0 [ 323.042024][T19830] pgfault 41 [ 323.045268][T19830] pgmajfault 0 [ 323.048640][T19830] inactive_anon 0 [ 323.102641][T19830] active_anon 0 [ 323.106151][T19830] inactive_file 0 [ 323.130978][T19556] veth0_vlan: entered promiscuous mode [ 323.148409][T19556] veth1_vlan: entered promiscuous mode [ 323.157430][T19830] active_file 0 [ 323.174470][T19830] unevictable 0 [ 323.185426][T19556] veth0_macvtap: entered promiscuous mode [ 323.202411][T19830] hierarchical_memory_limit 98304 [ 323.214813][T19618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.224123][ T28] audit: type=1400 audit(1787369450.506:2950): avc: denied { write } for pid=19870 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 323.250125][T19556] veth1_macvtap: entered promiscuous mode [ 323.256163][T19830] hierarchical_memsw_limit 9223372036854771712 [ 323.267111][T19830] total_cache 0 [ 323.271943][T19556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.282132][T19556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.289484][T19830] total_rss 0 [ 323.303182][T19830] total_shmem 0 [ 323.311916][T19830] total_mapped_file 0 [ 323.317472][T19830] total_dirty 0 [ 323.320949][T19830] total_writeback 0 [ 323.328412][T19830] total_workingset_refault_anon 0 [ 323.330657][T19890] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4728'. [ 323.334160][T19830] total_workingset_refault_file 0 [ 323.334199][T19830] total_swap 0 [ 323.334207][T19830] total_swapcached 0 [ 323.334217][T19830] total_pgpgin 0 [ 323.334226][T19830] total_pgpgout 0 [ 323.334236][T19830] total_pgfault 41 [ 323.334245][T19830] total_pgmajfault 0 [ 323.334311][T19830] total_inactive_anon 0 [ 323.334321][T19830] total_active_anon 0 [ 323.334331][T19830] total_inactive_file 0 [ 323.334341][T19830] total_active_file 0 [ 323.334350][T19830] total_unevictable 0 [ 323.334360][T19830] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.4725,pid=19828,uid=0 [ 323.334476][T19830] Memory cgroup out of memory: Killed process 19830 (syz.1.4725) total-vm:94056kB, anon-rss:1428kB, file-rss:22120kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 323.342051][ T49] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.383326][ T28] audit: type=1400 audit(1787369450.626:2951): avc: denied { write } for pid=19898 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 323.390680][ T49] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.468699][ T3018] 8021q: adding VLAN 0 to HW filter on device eth24 [ 323.484074][ T49] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.493404][ T49] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.539056][T19908] FAULT_INJECTION: forcing a failure. [ 323.539056][T19908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.563621][T19618] veth0_vlan: entered promiscuous mode [ 323.578109][T19618] veth1_vlan: entered promiscuous mode [ 323.578188][T19910] ================================================================== [ 323.591684][T19910] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 323.598283][T19910] [ 323.600613][T19910] write to 0xffffffff86e6fff0 of 8 bytes by task 19618 on cpu 1: [ 323.608338][T19910] data_alloc+0x308/0x380 [ 323.612678][T19910] prb_reserve+0x8e3/0xaf0 [ 323.617099][T19910] vprintk_store+0x54e/0x910 [ 323.621698][T19910] vprintk_emit+0x1a4/0x610 [ 323.626220][T19910] vprintk_default+0x26/0x30 [ 323.629840][T19618] veth0_macvtap: entered promiscuous mode [ 323.630824][T19910] vprintk+0x1d/0x30 [ 323.640411][T19910] _printk+0x79/0xa0 [ 323.644307][T19910] __netdev_printk+0x310/0x370 [ 323.649084][T19910] netdev_info+0xa6/0xd0 [ 323.653345][T19910] __dev_set_promiscuity+0x1e5/0x3c0 [ 323.658651][T19910] __dev_set_rx_mode+0x1e4/0x220 [ 323.661353][T19618] veth1_macvtap: entered promiscuous mode [ 323.663585][T19910] dev_uc_add+0x8e/0xb0 [ 323.663608][T19910] macvlan_open+0x2e7/0x570 [ 323.677933][T19910] __dev_open+0x305/0x550 [ 323.682278][T19910] __dev_change_flags+0x1c8/0x490 [ 323.687313][T19910] netif_change_flags+0x53/0xc0 [ 323.689842][T19618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.692180][T19910] do_setlink+0x8fc/0x2860 [ 323.703772][T19910] rtnl_newlink+0x115a/0x1510 [ 323.708460][T19910] rtnetlink_rcv_msg+0x64b/0x720 [ 323.713411][T19910] netlink_rcv_skb+0x11e/0x220 [ 323.714787][T19618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.718182][T19910] rtnetlink_rcv+0x1c/0x30 [ 323.729768][T19910] netlink_unicast+0x5a9/0x680 [ 323.734547][T19910] netlink_sendmsg+0x5be/0x6f0 [ 323.739332][T19910] __sys_sendto+0x411/0x470 [ 323.743842][T19910] __x64_sys_sendto+0x76/0x90 [ 323.748525][T19910] x64_sys_call+0x200c/0x2550 [ 323.753213][T19910] do_syscall_64+0x112/0x360 [ 323.757824][T19910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.763728][T19910] [ 323.766051][T19910] read to 0xffffffff86e6fff0 of 8 bytes by task 19910 on cpu 0: [ 323.773686][T19910] prb_reserve+0x21a/0xaf0 [ 323.778101][T19910] vprintk_store+0x54e/0x910 [ 323.782692][T19910] vprintk_emit+0x1a4/0x610 [ 323.787200][T19910] vprintk_default+0x26/0x30 [ 323.791793][T19910] vprintk+0x1d/0x30 [ 323.795680][T19910] _printk+0x79/0xa0 [ 323.799576][T19910] set_capacity_and_notify+0x1d5/0x230 [ 323.805047][T19910] loop_set_size+0x2e/0x70 [ 323.809471][T19910] loop_configure+0x826/0x9c0 [ 323.814146][T19910] lo_ioctl+0x1e3/0x1430 [ 323.818386][T19910] blkdev_ioctl+0x387/0x460 [ 323.822893][T19910] __se_sys_ioctl+0xce/0x140 [ 323.827494][T19910] __x64_sys_ioctl+0x43/0x50 [ 323.832089][T19910] x64_sys_call+0x239d/0x2550 [ 323.832354][T19908] CPU: 1 UID: 0 PID: 19908 Comm: syz.1.4729 Not tainted syzkaller #0 PREEMPT(lazy) [ 323.832428][T19908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 323.832442][T19908] Call Trace: [ 323.832449][T19908] [ 323.832462][T19908] __dump_stack+0x1d/0x30 [ 323.832486][T19908] dump_stack_lvl+0x95/0xd0 [ 323.832513][T19908] dump_stack+0x15/0x1b [ 323.832534][T19908] should_fail_ex+0x262/0x280 [ 323.832591][T19908] should_fail+0xb/0x20 [ 323.832619][T19908] should_fail_usercopy+0x1a/0x20 [ 323.832732][T19908] _copy_from_iter+0xcc/0xe70 [ 323.832766][T19908] ? _copy_from_iter+0x13b/0xe70 [ 323.832822][T19908] copy_page_from_iter+0x15d/0x1f0 [ 323.832915][T19908] skb_copy_datagram_from_iter+0x22d/0x480 [ 323.832963][T19908] tun_get_user+0xc1e/0x2870 [ 323.833002][T19908] ? ref_tracker_alloc+0x1eb/0x2f0 [ 323.833038][T19908] tun_chr_write_iter+0x15a/0x210 [ 323.833094][T19908] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 323.833159][T19908] vfs_write+0x57f/0x9a0 [ 323.833188][T19908] ksys_write+0xdc/0x1a0 [ 323.833232][T19908] __x64_sys_write+0x40/0x50 [ 323.833256][T19908] x64_sys_call+0x154e/0x2550 [ 323.833282][T19908] do_syscall_64+0x112/0x360 [ 323.833359][T19908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.833446][T19908] RIP: 0033:0x7f4a337de0d9 [ 323.833464][T19908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.833484][T19908] RSP: 002b:00007f4a32237028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 323.833507][T19908] RAX: ffffffffffffffda RBX: 00007f4a33a65fa0 RCX: 00007f4a337de0d9 [ 323.833523][T19908] RDX: 000000000000fdef RSI: 00002000000004c0 RDI: 00000000000000c8 [ 323.833575][T19908] RBP: 00007f4a32237090 R08: 0000000000000000 R09: 0000000000000000 [ 323.833592][T19908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 323.833618][T19908] R13: 00007f4a33a66038 R14: 00007f4a33a65fa0 R15: 00007ffeccebca18 [ 323.833674][T19908] [ 324.032704][T19910] do_syscall_64+0x112/0x360 [ 324.037667][T19910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.043553][T19910] [ 324.045861][T19910] value changed: 0xfffffffffffe47c8 -> 0x0000000000078ce0 [ 324.052950][T19910] [ 324.055257][T19910] Reported by Kernel Concurrency Sanitizer on: [ 324.061391][T19910] CPU: 0 UID: 0 PID: 19910 Comm: syz.7.4730 Not tainted syzkaller #0 PREEMPT(lazy) [ 324.070753][T19910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 324.080794][T19910] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 323.578094][T19910] loop7: detected capacity change from 0 to 512 [ 324.102767][ T28] audit: type=1400 audit(1787369451.366:2952): avc: denied { write } for pid=3283 comm="syz-executor" path="pipe:[1455]" dev="pipefs" ino=1455 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 324.181980][T19921] loop9: detected capacity change from 0 to 512 [ 324.228258][ T28] audit: type=1400 audit(1787369451.426:2953): avc: denied { write } for pid=19905 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 324.243039][T19910] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 324.261781][T19910] EXT4-fs (loop7): orphan cleanup on readonly fs [ 324.269677][T19910] Quota error (device loop7): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 324.280371][T19910] EXT4-fs warning (device loop7): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 324.295098][ T6156] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.314360][T19910] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 324.324931][T19910] EXT4-fs error (device loop7): ext4_orphan_get:1403: inode #16: comm syz.7.4730: inode has both inline data and extents flags [ 324.326048][ T6151] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.354685][ T28] audit: type=1400 audit(1787369451.436:2954): avc: denied { write } for pid=19924 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 324.389901][T19910] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 324.392877][T19910] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.4730: couldn't read orphan inode 16 (err -117) [ 324.402101][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 324.402117][ C1] EXT4-fs (loop7): initial error at time 1787369451: ext4_orphan_get:1403: inode 16 [ 324.402143][ C1] EXT4-fs (loop7): last error at time 1787369451: ext4_orphan_get:1403: inode 16 [ 324.441885][T19910] loop7: lost filesystem error report for type 5 error -117 [ 324.444460][ T6151] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.446804][T19910] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 324.473311][ T6151] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.542679][ T28] audit: type=1400 audit(1787369451.816:2955): avc: denied { write } for pid=19926 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 324.615303][ T28] audit: type=1400 audit(1787369451.896:2956): avc: denied { write } for pid=19940 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 324.681609][ T3376] usb 4-1: device descriptor read/8, error -110 [ 324.801468][ T3376] usb 4-1: new SuperSpeed USB device number 3 using vhci_hcd [ 324.831350][ T3376] usb 4-1: enqueue for inactive port 0 [ 324.837015][ T3376] usb 4-1: enqueue for inactive port 0 [ 324.842692][ T3376] usb 4-1: enqueue for inactive port 0 [ 324.867414][ T6151] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.871557][T18005] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.948667][ T6151] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.963497][ T3376] usb usb4-port1: attempt power cycle [ 325.044736][ T6151] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.124020][ T6151] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.253382][ T6151] bridge_slave_1: left allmulticast mode [ 325.259108][ T6151] bridge_slave_1: left promiscuous mode [ 325.265160][ T6151] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.273259][ T6151] bridge_slave_0: left allmulticast mode [ 325.278977][ T6151] bridge_slave_0: left promiscuous mode [ 325.284921][ T6151] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.332871][ T6151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.343736][ T6151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.353400][ T6151] bond0 (unregistering): Released all slaves [ 325.413122][ T6151] tipc: Left network mode [ 325.419771][ T6151] hsr_slave_0: left promiscuous mode [ 325.425560][ T6151] hsr_slave_1: left promiscuous mode [ 325.431754][ T6151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.439223][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.446917][ T6151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.454411][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.463874][ T6151] veth1_macvtap: left promiscuous mode [ 325.469334][ T6151] veth0_macvtap: left promiscuous mode [ 325.474907][ T6151] veth1_vlan: left promiscuous mode [ 325.480246][ T6151] veth0_vlan: left promiscuous mode [ 325.532662][ T6151] team0 (unregistering): Port device team_slave_1 removed [ 325.542675][ T6151] team0 (unregistering): Port device team_slave_0 removed [ 325.858220][ T3018] 8021q: adding VLAN 0 to HW filter on device eth1 [ 325.869222][ T6151] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.924302][ T6151] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.964562][ T6151] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.976555][ T3018] 8021q: adding VLAN 0 to HW filter on device eth2 [ 326.014333][ T6151] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.079720][ T3018] 8021q: adding VLAN 0 to HW filter on device eth3 [ 326.093789][ T6151] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.145385][ T6151] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.191582][ T3018] 8021q: adding VLAN 0 to HW filter on device eth4 [ 326.244619][ T6151] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.290618][ T3018] 8021q: adding VLAN 0 to HW filter on device eth25 [ 326.310473][ T6151] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.376955][ T6151] bridge_slave_1: left allmulticast mode [ 326.383082][ T6151] bridge_slave_1: left promiscuous mode [ 326.388779][ T6151] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.396739][ T6151] bridge_slave_0: left allmulticast mode [ 326.402497][ T6151] bridge_slave_0: left promiscuous mode [ 326.408191][ T6151] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.417866][ T6151] bridge_slave_1: left allmulticast mode [ 326.423706][ T6151] bridge_slave_1: left promiscuous mode [ 326.429400][ T6151] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.437363][ T6151] bridge_slave_0: left allmulticast mode [ 326.443391][ T6151] bridge_slave_0: left promiscuous mode [ 326.448981][ T6151] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.506986][ T6151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.516808][ T6151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.526551][ T6151] bond0 (unregistering): Released all slaves [ 326.548836][ T6151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.558317][ T6151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.567724][ T6151] bond0 (unregistering): Released all slaves [ 326.575067][ T3018] 8021q: adding VLAN 0 to HW filter on device eth26 [ 326.594047][ T6151] tipc: Left network mode [ 326.601074][ T6151] hsr_slave_0: left promiscuous mode [ 326.607352][ T6151] hsr_slave_1: left promiscuous mode [ 326.613702][ T6151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.621116][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.628796][ T6151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.636844][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.646386][ T6151] hsr_slave_0: left promiscuous mode [ 326.652151][ T6151] hsr_slave_1: left promiscuous mode [ 326.657851][ T6151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.667591][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.675980][ T6151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.684211][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.696693][ T6151] veth1_macvtap: left promiscuous mode [ 326.702495][ T6151] veth0_macvtap: left promiscuous mode [ 326.708009][ T6151] veth1_vlan: left promiscuous mode [ 326.713308][ T6151] veth0_vlan: left promiscuous mode [ 326.718995][ T6151] veth1_macvtap: left promiscuous mode [ 326.724491][ T6151] veth0_macvtap: left promiscuous mode [ 326.730047][ T6151] veth1_vlan: left promiscuous mode [ 326.735372][ T6151] veth0_vlan: left promiscuous mode [ 326.812880][ T3376] usb usb4-port1: unable to enumerate USB device [ 326.820352][ T6151] team0 (unregistering): Port device team_slave_1 removed [ 326.829555][ T6151] team0 (unregistering): Port device team_slave_0 removed [ 326.879762][ T6151] team0 (unregistering): Port device team_slave_1 removed [ 326.888823][ T6151] team0 (unregistering): Port device team_slave_0 removed [ 326.919231][ T3018] 8021q: adding VLAN 0 to HW filter on device eth27 [ 327.010107][ T3018] 8021q: adding VLAN 0 to HW filter on device eth28 [ 327.098051][ T3018] 8021q: adding VLAN 0 to HW filter on device eth29 [ 327.189551][ T3018] 8021q: adding VLAN 0 to HW filter on device eth30 [ 327.279828][ T3018] 8021q: adding VLAN 0 to HW filter on device eth31 [ 327.372478][ T3018] 8021q: adding VLAN 0 to HW filter on device eth32 [ 327.404880][ T6151] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.455298][ T6151] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.504740][ T6151] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.544547][ T6151] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.620100][ T6151] bridge_slave_1: left allmulticast mode [ 327.625899][ T6151] bridge_slave_1: left promiscuous mode [ 327.631786][ T6151] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.639408][ T6151] bridge_slave_0: left allmulticast mode [ 327.645169][ T6151] bridge_slave_0: left promiscuous mode [ 327.650770][ T6151] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.692727][ T6151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.702732][ T6151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.712017][ T6151] bond0 (unregistering): Released all slaves [ 327.746145][ T6151] hsr_slave_0: left promiscuous mode [ 327.752235][ T6151] hsr_slave_1: left promiscuous mode [ 327.758220][ T6151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.765877][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.775606][ T6151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.783389][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.794932][ T6151] veth1_macvtap: left promiscuous mode [ 327.800431][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 327.800444][ T28] audit: type=1400 audit(1787369455.076:3001): avc: denied { write } for pid=20270 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 327.830011][ T6151] veth0_macvtap: left promiscuous mode [ 327.835622][ T6151] veth1_vlan: left promiscuous mode [ 327.840882][ T6151] veth0_vlan: left promiscuous mode [ 327.846522][ T28] audit: type=1400 audit(1787369455.116:3002): avc: denied { write } for pid=20281 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 327.913884][ T6151] team0 (unregistering): Port device team_slave_1 removed [ 327.925182][ T6151] team0 (unregistering): Port device team_slave_0 removed [ 327.953533][ T3018] 8021q: adding VLAN 0 to HW filter on device eth33 [ 328.046132][ T28] audit: type=1400 audit(1787369455.326:3003): avc: denied { write } for pid=20289 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.069315][ T28] audit: type=1400 audit(1787369455.326:3004): avc: denied { write } for pid=20300 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.079352][ T3018] 8021q: adding VLAN 0 to HW filter on device eth34 [ 328.161820][ T28] audit: type=1400 audit(1787369455.446:3005): avc: denied { write } for pid=20304 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.197104][ T28] audit: type=1400 audit(1787369455.476:3006): avc: denied { write } for pid=20315 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.230463][ T3018] 8021q: adding VLAN 0 to HW filter on device eth35 [ 328.298583][ T28] audit: type=1400 audit(1787369455.576:3007): avc: denied { write } for pid=20319 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.322452][ T28] audit: type=1400 audit(1787369455.596:3008): avc: denied { write } for pid=20330 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.333013][ T3018] 8021q: adding VLAN 0 to HW filter on device eth36 [ 330.282909][ T28] audit: type=1400 audit(1787369457.566:3009): avc: denied { write } for pid=20356 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 330.318734][ T28] audit: type=1400 audit(1787369457.596:3010): avc: denied { write } for pid=20367 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1