last executing test programs: 3.095499233s ago: executing program 2 (id=61): socket$rds(0x15, 0x5, 0x0) (async) r0 = socket$rds(0x15, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xc8, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xc8, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000012c0)={0x3, &(0x7f00000001c0)=[{0x25, 0x0, 0x1, 0x3}, {0xac, 0x0, 0x4, 0x4}, {0x6, 0x0, 0x9}]}) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000824}, 0x0) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00'}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, &(0x7f0000000240)="8000", 0x2, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14) (async) sendto$packet(r7, &(0x7f0000000240)="8000", 0x2, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14) stat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x2, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) (async) r8 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r8, r8, 0x0, 0x21) (async) sendfile(r8, r8, 0x0, 0x21) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x38}, 0x2}, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x38}, 0x2}, 0x0) bind$rds(r0, &(0x7f00000001c0)={0x2, 0x1, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) 2.190245883s ago: executing program 1 (id=67): socket$unix(0x1, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb}, [@generic={0x91, 0x1, 0x1, 0xbb}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0xb) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0x5, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000036c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003900)={&(0x7f0000003880)={0x34, r6, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xb, &(0x7f0000000100)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f0000001d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0xfffdfffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x10, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1000}, {}, {}, [@exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x3ff, 0x87, &(0x7f0000000440)=""/135, 0x41100, 0x40, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0xa, 0x400, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000600)=[0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff, r3], &(0x7f0000000640)=[{0x4, 0x1, 0x6, 0x9}, {0x1, 0x5, 0x4}], 0x10, 0x800}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) inotify_init1(0x80800) 2.138784494s ago: executing program 1 (id=69): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1240, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'pim6reg1\x00', @multicast}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.065402266s ago: executing program 2 (id=71): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='fdinfo\x00') fchdir(r2) sendmmsg$unix(r1, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d4}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4005}}], 0x2, 0x40000004) 2.032918506s ago: executing program 2 (id=73): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1240, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'pim6reg1\x00', @multicast}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.762623542s ago: executing program 4 (id=77): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{0x0, 0x7fffffff, 0x3, 0x8, 0x7, 0x5, 0xfff, 0x0, 0x8, 0x1, 0x0, 0x5508, 0xba, 0xb}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = timerfd_create(0x8, 0x80800) timerfd_settime(r1, 0x3, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0xa]}}}}]}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) unshare(0x6a040000) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x5c, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext={0x9, 0xc64}, 0x10096, 0x0, 0x800000, 0x1, 0x5, 0x2, 0x6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)=@newlink={0x34, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x4600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x4000000) 1.701576484s ago: executing program 1 (id=78): quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000018c0)=@newsa={0x180, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x7, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0x9}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffd}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth={0x48, 0x1, {{'tgr160\x00'}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="00e2e958c27ff7319a42152facfb579c3c00000000000000", @ANYRES16, @ANYBLOB="002426bd7000fcdbdf251c00000008000300", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x6048845}, 0x0) 1.620441675s ago: executing program 1 (id=79): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000a2000)={0x0, 0x0}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x830d}, 0x100600, 0x2, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90224fc602f0004020a0c0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.227871264s ago: executing program 2 (id=80): socket$unix(0x1, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb}, [@generic={0x91, 0x1, 0x1, 0xbb}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0xb) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0x5, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000036c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003900)={&(0x7f0000003880)={0x34, r6, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xb, &(0x7f0000000100)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x10, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1000}, {}, {}, [@exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x3ff, 0x87, &(0x7f0000000440)=""/135, 0x41100, 0x40, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0xa, 0x400, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000600)=[0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff, r3], &(0x7f0000000640)=[{0x4, 0x1, 0x6, 0x9}, {0x1, 0x5, 0x4}], 0x10, 0x800}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) inotify_init1(0x80800) 1.145947775s ago: executing program 2 (id=81): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xff, 0x0, 0x0, 0xff, 0x0, 0x4, 0x8840, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4, 0x0, 0x1}, 0xffffffffffffffff, 0xc, r0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0xfffffffffffff8fe, 0xfffffffe, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000000108030000000000000000000100000109"], 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x20000044) msgget$private(0x0, 0x404) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0xb0, r3, 0x1, 0x70bd2d, 0x65dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0xb}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x80}, {0x8, 0xb, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0xffa, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x9, &(0x7f0000000380), 0x9c) r6 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x38}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2aa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3ff, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1000}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x9) readlink(0x0, 0x0, 0x0) 1.066342797s ago: executing program 1 (id=82): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001200)='io\x00') socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000900)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x6, 0x3a, '\xe2\xbf\xd9\xaf/\x8b1\xaew\f\xee\x03\x1f\xf0\vHk\xd3~a3\xd0\x94\r]\xad>\xa3\x15^\xa0\x9e\xd0\x0f\x80\x1e\x84\x1a\xa0\xd8\xcat\x99\x1b\xe9r\xcf\xfd2@\xec\xcc2t\xa0Yy\xdf\xaf!\xba\x82cV\xe2,&\xe64\xe2\xc1Mh\xde\xb9\x92\xe6\x03\xaam\x9f\xcb+\x89\xb0-o\x90?bJ\xf6]_\x92\xc1\xc5b\xb9\xdd\"K\x01/\xde\xd9]\xa3\xa5\x1b\x8c\xe8\xb0OZ\xbd\x98\xd7\x1f\x92S\xc8\xd0\xb1hk\x13w\xdc\xd6\'\xfb{\x9eA\xf5C\xcc\x13\x9f\x11\x81\xa5\xe9\x9c\xe1\xecv\a\x92P\xc2\xbf\xb1\xb2\xcfz?\xff\x86\x0fOPF@4I\xc2\xe3]cQ\x86);@\x8a\x10\xa5\xaa\xc2\xab\xbaPh,\x1c{\xf9M*E\xaf\xf5\x9e\n3s\xf9\x18\x15\xdf\xc4\x87\x93&n\x05|\x80@Q\xbcKO\x83),\x03\a\xb4\x91y\xe6\x1e\xfa\x94SC\x9b\xf4\x94\x93\xaf\x7f\xd2=\x924\x01\xde\xf04R\xa5#\x13k\'\x1bI\xb5\xc2\x9a\fo\xf8\x90qe\xde\xbcG\x8fP\xbb\xe1_\x9b\xd6\x02\xf1\x15\f4\xbdS3ip\x9b\xce\x9a\xc8+\x9f\x06\xec\xb28\x058~Sg\fSp`a\x96\xf6*\xff\xec\xa1u\xe6e\x03i\x1d\x0e\xac\x1bn\"m(q\xbb\xa9\xf4m\xf5\x87\x8f\xadO\xc7;\xa82s\x01\xc7\x83\xc3C\b\x97\x804\x93\x0f\xbaB\xa2=2\xe8CW\x8b\aq\xfdA\xaa\xf3\xe7,\xe4\x86\\', 0x3a, '', 0x3a, './file0'}, 0x194) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x1, 0x39}, 0x10040, 0x0, 0x0, 0x4, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$inet_udp(0x2, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4044d, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x7, 0x9, 0xd, 0xf18, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x200000ffd000) syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYRES8=r1, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002020000000000000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB='\n\x00\x00p\x00\x00\x00', @ANYRESHEX], 0x64}, 0x1, 0x0, 0x0, 0x20048090}, 0x20008014) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) process_mrelease(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x23) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000200)) 939.3405ms ago: executing program 3 (id=83): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='fdinfo\x00') fchdir(r2) sendmmsg$unix(r1, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d4}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4005}}], 0x2, 0x40000004) 881.457011ms ago: executing program 0 (id=84): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) 880.780411ms ago: executing program 3 (id=85): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x5) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8005, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000000)=0x6, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000340)='--&\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000500)=0xb87) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0x14081, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400004, 0x0, 0x9, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {0x2}}, './file1/file0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000008000000000000000600000018120000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000852000000500000018110000", @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000001850000007000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000a5f2118d63051e72751a9c5986000000c3b280000100000085200000040000db1591bd00070f000000000000fdffffff9500000000000000731acabb0d806101"], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x7c, 0x30, 0xb, 0x5, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x14}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_MARK={0x8, 0x5, 0x8}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r6 = syz_open_dev$sg(&(0x7f0000000540), 0x508d48d4, 0x40902) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x5309, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x100c404, &(0x7f0000000080)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030303030372c757365667265652c646f74732c64656275672c646f74732c636865636b3d7374726963742c6e66732c6e6f646f74732c6e6f646f74732c646f74732c6e6f646f74732c6e6f646f74732c6e6f646f74732c666c7573682c6e6f646f74732c6e6f64268e732c646f74732c666c7573682c646f74732c64656275672c6e6f646f74732c646f74732c73686f77657865632c646f74732c6e6f646f74732c646f74732c00"], 0x1, 0x1f5, &(0x7f0000000600)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 858.413342ms ago: executing program 0 (id=86): socket$unix(0x1, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb}, [@generic={0x91, 0x1, 0x1, 0xbb}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0xb) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0x5, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000036c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003900)={&(0x7f0000003880)={0x34, r6, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xb, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000340)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB="000000000000000000fffffffffffffff3000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f0000001d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0xfffdfffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x10, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1000}, {}, {}, [@exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x3ff, 0x87, &(0x7f0000000440)=""/135, 0x41100, 0x40, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0xa, 0x400, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000600)=[0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff, r3], &(0x7f0000000640)=[{0x4, 0x1, 0x6, 0x9}, {0x1, 0x5, 0x4}], 0x10, 0x800}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) inotify_init1(0x80800) 775.103554ms ago: executing program 0 (id=87): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r2 = socket$kcm(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@private1}}, &(0x7f0000000540)=0xe8) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x100048, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@pcr={'pcr', 0x3d, 0x3f}}, {@smackfsdef={'smackfsdef', 0x3d, 'euid'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@permit_directio}, {@smackfstransmute={'smackfstransmute', 0x3d, 'ext3\x00'}}, {@appraise}, {@subj_role={'subj_role', 0x3d, '\xc1'}}, {@euid_eq={'euid', 0x3d, r4}}]}}) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket(0x2, 0x80805, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000240)={0x3b, @empty, 0x4e22, 0x3, 'nq\x00', 0x10, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0x4, 0x6c}, {@loopback, 0x4e23, 0x4, 0xcd, 0x1}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8941, &(0x7f0000000040)={'bridge0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}) 749.325924ms ago: executing program 4 (id=88): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0xb, 0x103381) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000017c0)=@urb_type_control={0x2, {}, 0x2000006, 0x0, &(0x7f00000002c0)={0x9a, 0x8, 0x9, 0x7}, 0x8, 0x1ec, 0x8, 0x0, 0x313, 0x1, 0x0}) 748.855064ms ago: executing program 2 (id=89): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) setresuid(0x0, 0x0, 0x0) shutdown(r1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001340)=ANY=[@ANYBLOB="611570000000000061136c0000000000bfa000000000000014000000ee0016055e03010000000000040500000001000069163e0000000000bf07000000000000260507000fff0720d706000020000000140600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a0030094fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a29aa1c3afabafe9b38065f0caa7dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af92e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a033730eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba58678fe399506c0b1c0c1c3957498847f486953471e6e3111758d10d5aef8cd3a847b8c777742d4784e6c40f71817a4e1e162b277ef2ad6ba03228741ca6b464b572ca0d67bb716f6902fff3d70ff8800f277eb9038591a5df0fb3db3c7da38035f2ed6b1b7de6dd655c2b55ab79daabe06d47b74a0a0ca92395c5eeda3b97dd21c46716437ea65cfdfaf3e3daffaff57db0569b616310694c6e251c2624a777a81ad2d3655d61feb6149618397cd44a28b50ed08d0123d33bc994e891da5288e91ccb039981e4e12fcb17ac64c3204b1411efd2edc4ffbd6854d822a39953ffffb8c636c24349be5e525b0dd0791ebbc2ede15cfe4b032a543bec24741603ae10852b55e503ec30737086dac9bfd99b9d57c7984effa03ed0cb414b5e206a8cb0f949f5a91250c972a149ad44861f95d543f68db73013e056a61d9c871ca7383da61bddbdf42102986bdda4067ac1fce90955db585283222731ccc2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r7 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000140)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '\x94l\\\xec\xd1\xcb\x9a}\xab7\x1f\xde\xb5\x83>\fG\\x0-', 0x3a, '/dev\x14bus/usb/00#/00#\x00', 0x3a, './file0'}, 0x51) socket$inet6(0xa, 0x3, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0xfffffffffffffffd, 0xbd5, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setreuid(0xffffffffffffffff, 0xee01) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) 590.075258ms ago: executing program 4 (id=90): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) r0 = socket$inet(0xa, 0x801, 0x84) getsockname$inet(r0, &(0x7f0000000500)={0x2, 0x0, @initdev}, &(0x7f0000000540)=0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x401, 0x7ab8}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 64) syz_emit_ethernet(0x0, 0x0, 0x0) (async, rerun: 64) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x68}}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000000700)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="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"/1504, 0x5e0}, {&(0x7f0000000600)="3001fb90647586f45c1659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce203f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763dfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f0300009eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc9986272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f000000000000", 0xe5}, {&(0x7f0000000b00)="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", 0x18e}, {&(0x7f0000000cc0)="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", 0x153}, {&(0x7f00000007c0)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04296e", 0x9e}], 0x5, &(0x7f0000000740)=[@ip_retopts={{0x78, 0x0, 0x7, {[@rr={0x7, 0x1b, 0xea, [@rand_addr=0x64010101, @empty, @local, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0xc, 0x77, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp={0x44, 0x8, 0x30, 0x0, 0x6, [0x3]}, @timestamp_addr={0x44, 0x14, 0xea, 0x1, 0x4, [{@broadcast, 0x5}, {@broadcast, 0xf47}]}, @timestamp_prespec={0x44, 0x14, 0x69, 0x3, 0x1, [{@broadcast, 0x8}, {@empty, 0x6}]}, @lsrr={0x83, 0xb, 0x4, [@empty, @loopback]}, @noop]}}}], 0x78}, 0x840) (async, rerun: 64) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000380)='cubic', 0x5) (rerun: 64) r6 = accept4(r1, &(0x7f0000000180)=@qipcrtr, &(0x7f0000000240)=0x80, 0x800) recvmmsg(r6, &(0x7f00000030c0)=[{{&(0x7f0000000300)=@generic, 0x80, &(0x7f0000002c40)=[{&(0x7f0000001c40)=""/4096, 0x1000}], 0x1, &(0x7f0000002c80)=""/125, 0x7d}, 0xdc}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002d00)=""/147, 0x93}], 0x1, &(0x7f0000002e00)=""/172, 0xac}, 0xd14e}, {{&(0x7f0000002ec0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003080)=[{&(0x7f0000002f40)=""/79, 0x4f}, {&(0x7f0000000440)=""/154, 0x9a}], 0x2}, 0x4}], 0x3, 0x10020, &(0x7f0000000100)) 588.012968ms ago: executing program 3 (id=91): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x8, 0xffffffffffffffff, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8004, 0x4, 'lblcr\x00', 0x0, 0x2, 0x71}, 0x2c) close(0x3) sendto$packet(r0, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000100005070000", @ANYRES32=r4, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100039042cbd7000eaffffff000003e4", @ANYRES32=r4, @ANYBLOB="83000400040000002800128008000100736974001c00028006000d00ff07000008000300e0000001080001002d"], 0x48}, 0x1, 0x0, 0x0, 0x24048014}, 0x4040) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x140, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETSW2(r6, 0x402c542c, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000001c0), &(0x7f0000000280)=0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={0x0}}, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) ioctl$RTC_UIE_ON(r5, 0x7003) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f0000000100)={0x16, 0x20, 0x11, 0x1e, 0x2, 0x6, 0x5, 0x14e}) ioctl$PPPIOCGIDLE32(0xffffffffffffffff, 0x8008743f, &(0x7f0000000000)) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7ffb, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_DEV_REPLACE(r8, 0xca289435, 0x0) 513.352ms ago: executing program 4 (id=92): socket$unix(0x1, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb}, [@generic={0x91, 0x1, 0x1, 0xbb}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0xb) socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x5, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000036c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003900)={&(0x7f0000003880)={0x34, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xb, &(0x7f0000000100)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) inotify_init1(0x80800) 458.341121ms ago: executing program 3 (id=93): sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}}], 0x1, 0x400122a0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYRESHEX=r1], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r4, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x2}, {0xfff1, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040041}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000001814010000000000000000000800010000e6ffff070003"], 0x20}}, 0x400c044) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$nl_route(r6, 0x0, 0x0) mlockall(0x7) bind$inet(r8, &(0x7f0000000e80)={0x2, 0x4e20, @multicast2}, 0x10) 447.414551ms ago: executing program 4 (id=94): perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x30004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 362.309972ms ago: executing program 4 (id=95): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000940)=[{{&(0x7f0000000640)=@nfc, 0x80, &(0x7f0000000840)=[{&(0x7f00000006c0)=""/135, 0x87}, {&(0x7f0000000780)=""/139, 0x8b}], 0x2, &(0x7f0000000880)=""/169, 0xa9}, 0x2}], 0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x400, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) socket$packet(0x11, 0x3, 0x300) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000980)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000a00)={'pimreg\x00'}) writev(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x2, 0x800, 0x26, 0xfffffffffffffff0, 0x7, 0x8, 0x1}, &(0x7f0000000100)={0x7fff7fff, 0xf08, 0x6, 0x0, 0x7, 0x3, 0x9, 0xaa9e}, &(0x7f0000000140)={0x1ff80, 0x5c, 0x10000000000000, 0x52, 0x0, 0xc6da, 0x3, 0xfe}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000340)={&(0x7f00000001c0)={[0x4]}, 0x8}) r8 = epoll_create(0x3ff) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000240)={0x80002005}) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r9, &(0x7f0000000000)={0x20000001}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0xc2) mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x100000a, 0x11, r10, 0x0) read(r10, &(0x7f0000001400)=""/4096, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) getpid() sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010000304021f18fb73116dde0763d2c880ff1df0d015604d2300"/44, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800b00010062726964676500000c000280060027000e000000"], 0x3c}, 0x1, 0x4000000000000, 0x0, 0x4}, 0x8044) 244.339685ms ago: executing program 0 (id=96): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) 226.207005ms ago: executing program 0 (id=97): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0), 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600200001400000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a70000090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100100040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xc8}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600200001400000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a70000090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100100040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xc8}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@gettaction={0x12, 0x32, 0x605, 0x70bd25, 0x25dfdbfe}, 0x20}, 0x1, 0x0, 0x0, 0x850}, 0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)) (async) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x1, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x533}, 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x1, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x533}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)="2f30af5718ed6629a5", &(0x7f00000005c0)="2ec14661a8ee7bd73dc5e96dd5b58b77e007e3ac4fc4314847c745fe2302bd778ca1dcead23a021036fe515ebf99", 0xffff7515, r4}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) (async) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) r6 = socket(0x15, 0x5, 0x0) socket$pptp(0x18, 0x1, 0x2) getsockopt(r6, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r7, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000380)}, 0x20) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$TCGETS2(r9, 0x802c542a, &(0x7f00000000c0)) socket$nl_rdma(0x10, 0x3, 0x14) (async) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x140b, 0x1, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019700)={0x11, 0x18, &(0x7f0000019800)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @map_fd, @map_idx={0x18, 0x3, 0x5, 0x0, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], &(0x7f0000000000)='GPL\x00', 0x2, 0xf6, &(0x7f0000019600)=""/246}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019700)={0x11, 0x18, &(0x7f0000019800)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @map_fd, @map_idx={0x18, 0x3, 0x5, 0x0, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], &(0x7f0000000000)='GPL\x00', 0x2, 0xf6, &(0x7f0000019600)=""/246}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000040000000300000000000011030000000000000000612e003bd75c1dc690ec575e0b1d5f773d0daec8c99938d0cc6b1f12f5f2ca4927de5204fd9fce4a627f78c5d289f67438ddfb9fc3ea1211087dc807238d2d70"], 0x0, 0x2c}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) 118.511678ms ago: executing program 0 (id=98): socket$inet_sctp(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1c206}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x2a, 0x645, &(0x7f0000000600)="$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") r0 = epoll_create1(0x80000) epoll_wait(r0, &(0x7f0000000100)=[{}], 0x1, 0xff) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f00000000c0)) 117.791328ms ago: executing program 1 (id=99): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="09000000050000000002000040"], 0x50) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r3, &(0x7f0000000080), 0x0}, 0x20) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x7, 0xff, 0x9, 0x9, 0x0, 0x4, 0x24000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x56, 0xe75}, 0x10444, 0x4, 0x4a38, 0x4, 0xa61, 0x8f9, 0x9, 0x0, 0x8, 0x0, 0x5}, 0x0, 0x2003, r2, 0xa) r5 = perf_event_open(&(0x7f0000000800)={0x4, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4000000008, 0x0, 0x5, 0x4, 0x8, 0x8, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, 0x0, 0xff7fffffffffffff, r4, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ppoll(0x0, 0x0, &(0x7f0000001240), &(0x7f0000001280), 0x8) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) sendto$inet(r9, &(0x7f0000000240)="6bb41d3f", 0x4, 0xc0400c0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5, {0x0, 0xee00}}, './file0\x00'}) setsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@private=0xa010100, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4e23, 0x4, 0x4e23, 0x4, 0x2, 0x20, 0x1808285d7a8924b1, 0x5d, r10, r11}, {0x1, 0x400, 0x73, 0x8000, 0x6, 0x200, 0xce1, 0x5}, {0x1, 0x3, 0x9, 0xd63}, 0x8, 0x6e6bc0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x32}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3502, 0x3, 0x3, 0x6, 0x9, 0x0, 0x8000}}, 0xe8) sendto(r9, &(0x7f0000001e00)="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", 0xca9, 0x2000c010, 0x0, 0x0) r12 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_bp={0x0, 0xa}, 0x1022e0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2001000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x40082406, &(0x7f0000000080)='cpu~-0\xd9\xc8\xb9\xdbJ`g\x9b\xe8\xa2\n\x00|') sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r10], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2204c080) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e000100776972"], 0x40}}, 0x0) 49.824519ms ago: executing program 3 (id=100): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0xb, 0x103381) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000017c0)=@urb_type_control={0x2, {}, 0x2000006, 0x0, &(0x7f00000002c0)={0x9a, 0x8, 0x9, 0x7}, 0x8, 0x1ec, 0x8, 0x0, 0x313, 0x1, 0x0}) 0s ago: executing program 3 (id=101): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c0000000206010800000000000000000000020009000200817245d70000000005000400000005001400078008001240080100000800114000000000050001000600000005000500000000000d000300686173683a6d6163"], 0x5c}}, 0x4004804) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c060000a13f010828bd7000", @ANYBLOB="0000000004"], 0x3c}}, 0x80) openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) (async) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000480)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x58, &(0x7f00000002c0)}, 0x10) (async, rerun: 32) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') (rerun: 32) pread64(r4, &(0x7f0000000080)=""/200, 0xc8, 0x9) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x3, 0x0, 0x1}}, 0x26) kernel console output (not intermixed with test programs): [ 17.628462][ T28] audit: type=1400 audit(1782666258.852:103): avc: denied { search } for pid=3176 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 17.650522][ T28] audit: type=1400 audit(1782666258.852:104): avc: denied { search } for pid=3176 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.527145][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 18.527159][ T28] audit: type=1400 audit(1782666259.742:120): avc: denied { write } for pid=3232 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.556313][ T28] audit: type=1400 audit(1782666259.762:121): avc: denied { write } for pid=3243 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.791143][ T28] audit: type=1400 audit(1782666260.012:122): avc: denied { write } for pid=3246 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.814093][ T28] audit: type=1400 audit(1782666260.012:123): avc: denied { write } for pid=3257 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.728715][ T28] audit: type=1400 audit(1782666260.942:124): avc: denied { write } for pid=3262 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.751631][ T28] audit: type=1400 audit(1782666260.962:125): avc: denied { write } for pid=3273 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.106' (ED25519) to the list of known hosts. [ 22.309999][ T28] audit: type=1400 audit(1782666263.532:126): avc: denied { mounton } for pid=3280 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.333032][ T28] audit: type=1400 audit(1782666263.552:127): avc: denied { mount } for pid=3280 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.333785][ T3280] cgroup: Unknown subsys name 'net' [ 22.360757][ T28] audit: type=1400 audit(1782666263.592:128): avc: denied { unmount } for pid=3280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.480741][ T3280] cgroup: Unknown subsys name 'cpuset' [ 22.486763][ T3280] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 22.635137][ T28] audit: type=1400 audit(1782666263.852:129): avc: denied { setattr } for pid=3280 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.666432][ T3285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.699620][ T3280] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.070822][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 24.070836][ T28] audit: type=1400 audit(1782666265.292:140): avc: denied { execmem } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.334413][ T28] audit: type=1400 audit(1782666265.552:141): avc: denied { read } for pid=3294 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 24.379826][ T28] audit: type=1400 audit(1782666265.552:142): avc: denied { open } for pid=3294 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 24.414315][ T28] audit: type=1400 audit(1782666265.582:143): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 24.456656][ T28] audit: type=1400 audit(1782666265.582:144): avc: denied { module_request } for pid=3294 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 24.501405][ T28] audit: type=1400 audit(1782666265.582:145): avc: denied { sys_module } for pid=3294 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 24.737853][ T3294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.744935][ T3294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.752245][ T3294] bridge_slave_0: entered allmulticast mode [ 24.758641][ T3294] bridge_slave_0: entered promiscuous mode [ 24.765313][ T3294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.772421][ T3294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.779588][ T3294] bridge_slave_1: entered allmulticast mode [ 24.786002][ T3294] bridge_slave_1: entered promiscuous mode [ 24.818706][ T3294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.829028][ T3294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.872944][ T3294] team0: Port device team_slave_0 added [ 24.879396][ T3294] team0: Port device team_slave_1 added [ 24.920515][ T3294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.927513][ T3294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.953448][ T3294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.978286][ T3294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.985267][ T3294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.011143][ T3294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.029204][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.036413][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.043552][ T3302] bridge_slave_0: entered allmulticast mode [ 25.049845][ T3302] bridge_slave_0: entered promiscuous mode [ 25.070704][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.077771][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.085033][ T3302] bridge_slave_1: entered allmulticast mode [ 25.091457][ T3302] bridge_slave_1: entered promiscuous mode [ 25.140449][ T3294] hsr_slave_0: entered promiscuous mode [ 25.146353][ T3294] hsr_slave_1: entered promiscuous mode [ 25.157504][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.181752][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.203726][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.210901][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.218041][ T3298] bridge_slave_0: entered allmulticast mode [ 25.224522][ T3298] bridge_slave_0: entered promiscuous mode [ 25.245600][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.252745][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.259919][ T3298] bridge_slave_1: entered allmulticast mode [ 25.266347][ T3298] bridge_slave_1: entered promiscuous mode [ 25.275252][ T3302] team0: Port device team_slave_0 added [ 25.280867][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.287948][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.295071][ T3300] bridge_slave_0: entered allmulticast mode [ 25.301546][ T3300] bridge_slave_0: entered promiscuous mode [ 25.316860][ T3302] team0: Port device team_slave_1 added [ 25.326275][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.333433][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.340583][ T3300] bridge_slave_1: entered allmulticast mode [ 25.346853][ T3300] bridge_slave_1: entered promiscuous mode [ 25.379828][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.393059][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.400081][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.426027][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.440037][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.450097][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.463158][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.470307][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.477376][ T3301] bridge_slave_0: entered allmulticast mode [ 25.483960][ T3301] bridge_slave_0: entered promiscuous mode [ 25.490659][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.497594][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.523474][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.537505][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.554789][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.561956][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.569146][ T3301] bridge_slave_1: entered allmulticast mode [ 25.575555][ T3301] bridge_slave_1: entered promiscuous mode [ 25.591135][ T3298] team0: Port device team_slave_0 added [ 25.610526][ T3300] team0: Port device team_slave_0 added [ 25.616855][ T3298] team0: Port device team_slave_1 added [ 25.628321][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.641978][ T3300] team0: Port device team_slave_1 added [ 25.656591][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.680658][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.687698][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.713686][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.742775][ T3302] hsr_slave_0: entered promiscuous mode [ 25.748712][ T3302] hsr_slave_1: entered promiscuous mode [ 25.754605][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 25.762476][ T3302] Cannot create hsr debugfs directory [ 25.768177][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.775182][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.801075][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.812482][ T3301] team0: Port device team_slave_0 added [ 25.818955][ T3301] team0: Port device team_slave_1 added [ 25.826914][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.833905][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.859885][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.871142][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.878113][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.904006][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.928698][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.935713][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.961626][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.972965][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.979968][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.005947][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.051426][ T3300] hsr_slave_0: entered promiscuous mode [ 26.057490][ T3300] hsr_slave_1: entered promiscuous mode [ 26.063200][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 26.068916][ T3300] Cannot create hsr debugfs directory [ 26.085128][ T3301] hsr_slave_0: entered promiscuous mode [ 26.091104][ T3301] hsr_slave_1: entered promiscuous mode [ 26.096899][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 26.102614][ T3301] Cannot create hsr debugfs directory [ 26.110064][ T3298] hsr_slave_0: entered promiscuous mode [ 26.116064][ T3298] hsr_slave_1: entered promiscuous mode [ 26.121918][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 26.127625][ T3298] Cannot create hsr debugfs directory [ 26.191204][ T3294] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.199827][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 26.221250][ T3294] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.229956][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 26.246844][ T3294] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.255668][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 26.263085][ T3294] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.271676][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 26.359277][ T3302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.367620][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 26.376108][ T3302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.384674][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 26.392334][ T3302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.400920][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 26.408536][ T3302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.417276][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 26.449363][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.457868][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 26.465518][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.474137][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 26.481835][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.490579][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 26.498300][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.506586][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 26.544900][ T3298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.553498][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 26.561818][ T3298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.570369][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 26.577937][ T3298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.586728][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 26.594251][ T3298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.602700][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 26.637997][ T3294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.646710][ T3301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.655182][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 26.662933][ T3301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.671831][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 26.679378][ T3301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.687938][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 26.706268][ T3294] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.715375][ T2305] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.722460][ T2305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.730250][ T3301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.738492][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 26.761240][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.768299][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.777347][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.802586][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.827043][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.834903][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.849762][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.856850][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.865391][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.872543][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.882090][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.889123][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.908731][ T2305] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.915819][ T2305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.932286][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.965074][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.980067][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.987166][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.002476][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.018460][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.027777][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.034860][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.047634][ T3294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.085500][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.104595][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.111691][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.136548][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.143644][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.247104][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.275447][ T3294] veth0_vlan: entered promiscuous mode [ 27.296678][ T3294] veth1_vlan: entered promiscuous mode [ 27.310458][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.324787][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.349556][ T3294] veth0_macvtap: entered promiscuous mode [ 27.375144][ T3294] veth1_macvtap: entered promiscuous mode [ 27.384176][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.398085][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.422722][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.447742][ T68] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.463083][ T68] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.482549][ T68] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.492988][ T68] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.523795][ T28] audit: type=1400 audit(1782666268.732:146): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/root/syzkaller.J7hEE9/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 27.551151][ T3302] veth0_vlan: entered promiscuous mode [ 27.554488][ T28] audit: type=1400 audit(1782666268.762:147): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 27.561658][ T3302] veth1_vlan: entered promiscuous mode [ 27.582978][ T28] audit: type=1400 audit(1782666268.762:148): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/root/syzkaller.J7hEE9/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 27.604958][ T3298] veth0_vlan: entered promiscuous mode [ 27.617173][ T28] audit: type=1400 audit(1782666268.762:149): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 27.617468][ T3294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.641040][ T3298] veth1_vlan: entered promiscuous mode [ 27.688643][ T3302] veth0_macvtap: entered promiscuous mode [ 27.700520][ T3301] veth0_vlan: entered promiscuous mode [ 27.714285][ T3302] veth1_macvtap: entered promiscuous mode [ 27.721180][ T3298] veth0_macvtap: entered promiscuous mode [ 27.728507][ T3298] veth1_macvtap: entered promiscuous mode [ 27.737752][ T3300] veth0_vlan: entered promiscuous mode [ 27.745755][ T3301] veth1_vlan: entered promiscuous mode [ 27.759028][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.771655][ T3300] veth1_vlan: entered promiscuous mode [ 27.780566][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.794955][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.807755][ T39] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.816959][ T39] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.828127][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.843280][ T3301] veth0_macvtap: entered promiscuous mode [ 27.850103][ T39] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.859020][ T39] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.881480][ T2305] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.895853][ T3301] veth1_macvtap: entered promiscuous mode [ 27.904624][ T2305] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.914832][ T2305] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.924188][ T3300] veth0_macvtap: entered promiscuous mode [ 27.931720][ T3300] veth1_macvtap: entered promiscuous mode [ 27.945499][ T2305] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.960099][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.977375][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.992864][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.016222][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.024680][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.034102][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.050478][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.065958][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.069622][ T3510] FAULT_INJECTION: forcing a failure. [ 28.069622][ T3510] name failslab, interval 1, probability 0, space 0, times 1 [ 28.088006][ T3511] macsec1: entered promiscuous mode [ 28.090057][ T3510] CPU: 0 UID: 0 PID: 3510 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(lazy) [ 28.090082][ T3510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 28.090100][ T3510] Call Trace: [ 28.090106][ T3510] [ 28.090114][ T3510] __dump_stack+0x1d/0x30 [ 28.090202][ T3510] dump_stack_lvl+0x95/0xd0 [ 28.090221][ T3510] dump_stack+0x15/0x1b [ 28.090294][ T3510] should_fail_ex+0x25e/0x270 [ 28.090318][ T3510] should_failslab+0x8c/0xb0 [ 28.090368][ T3510] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 28.090388][ T3510] ? dst_alloc+0xbd/0x100 [ 28.090410][ T3510] ? dst_alloc+0xbd/0x100 [ 28.090467][ T3510] ? __pfx_ip6_dst_gc+0x10/0x10 [ 28.090489][ T3510] dst_alloc+0xbd/0x100 [ 28.090511][ T3510] ip6_create_rt_rcu+0x15e/0x330 [ 28.090560][ T3510] ip6_pol_route_lookup+0xf20/0x10c0 [ 28.090663][ T3510] ? __wake_up+0x88/0xb0 [ 28.090681][ T3510] ? netlink_broadcast_filtered+0xccd/0xd30 [ 28.090710][ T3510] ? __pfx_ip6_pol_route_lookup+0x10/0x10 [ 28.090847][ T3510] fib6_rule_lookup+0x3d6/0x4c0 [ 28.090864][ T3510] ? __pfx_ip6_pol_route_lookup+0x10/0x10 [ 28.090890][ T3510] ? nlmsg_notify+0xcf/0x170 [ 28.090917][ T3510] rt6_lookup+0xbe/0x120 [ 28.090942][ T3510] ip6_mc_find_dev+0x4c/0x100 [ 28.090965][ T3510] ip6_mc_find_idev+0x20/0x120 [ 28.090985][ T3510] ip6_mc_source+0xc6/0xbc0 [ 28.091016][ T3510] ? __ipv6_sock_mc_join+0x327/0x360 [ 28.091115][ T3510] do_ipv6_mcast_group_source+0x2ea/0x330 [ 28.091171][ T3510] ? lockref_put_return+0xf7/0x130 [ 28.091220][ T3510] ? __rcu_read_unlock+0x4e/0x70 [ 28.091242][ T3510] ? __rcu_read_unlock+0x4e/0x70 [ 28.091266][ T3510] ? terminate_walk+0x1d5/0x200 [ 28.091360][ T3510] ? lock_sock_nested+0x84/0x110 [ 28.091379][ T3510] do_ipv6_setsockopt+0x1282/0x2040 [ 28.091480][ T3510] ? kstrtoull+0x111/0x140 [ 28.091573][ T3510] ? avc_has_perm_noaudit+0xa3/0x120 [ 28.091672][ T3510] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 28.091701][ T3510] ipv6_setsockopt+0x59/0x130 [ 28.091718][ T3510] udpv6_setsockopt+0x89/0xa0 [ 28.091742][ T3510] sock_common_setsockopt+0x69/0x80 [ 28.091812][ T3510] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 28.091832][ T3510] __sys_setsockopt+0x184/0x200 [ 28.091912][ T3510] __x64_sys_setsockopt+0x64/0x80 [ 28.091935][ T3510] x64_sys_call+0x2327/0x3020 [ 28.091955][ T3510] do_syscall_64+0x136/0x3c0 [ 28.092062][ T3510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 28.092081][ T3510] RIP: 0033:0x7fd21b87ce59 [ 28.092097][ T3510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.092113][ T3510] RSP: 002b:00007fd21a2d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 28.092132][ T3510] RAX: ffffffffffffffda RBX: 00007fd21baf5fa0 RCX: 00007fd21b87ce59 [ 28.092215][ T3510] RDX: 000000000000002e RSI: 0000000000000029 RDI: 0000000000000005 [ 28.092227][ T3510] RBP: 00007fd21a2d7090 R08: 0000000000000108 R09: 0000000000000000 [ 28.092240][ T3510] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 28.092252][ T3510] R13: 00007fd21baf6038 R14: 00007fd21baf5fa0 R15: 00007fff060d28b8 [ 28.092313][ T3510] [ 28.402655][ T3511] bridge0: entered promiscuous mode [ 28.428777][ T2305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.441323][ T3510] syz.3.4 (3510) used greatest stack depth: 11048 bytes left [ 28.447129][ T2305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.468655][ T2305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.478149][ T2305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.560535][ T3518] loop3: detected capacity change from 0 to 512 [ 28.567515][ T3522] usb usb8: usbfs: process 3522 (syz.4.5) did not claim interface 0 before use [ 28.591642][ T3518] EXT4-fs: Ignoring removed i_version option [ 28.619224][ T3518] EXT4-fs: Ignoring removed bh option [ 28.670245][ T3532] 9pnet_virtio: no channels available for device 127.0.0.1 [ 28.684028][ T3526] loop0: detected capacity change from 0 to 128 [ 28.696240][ T3526] msdos: Unknown parameter 'fl{sh' [ 28.710407][ T3518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.742790][ T3518] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 28.818089][ T3537] loop2: detected capacity change from 0 to 764 [ 28.905559][ T3538] netlink: 'syz.3.8': attribute type 12 has an invalid length. [ 28.970833][ T3537] rock: directory entry would overflow storage [ 28.977043][ T3537] rock: sig=0x5245, size=8, remaining=5 [ 29.114722][ T3538] netlink: 'syz.3.8': attribute type 29 has an invalid length. [ 29.184747][ T3538] netlink: 148 bytes leftover after parsing attributes in process `syz.3.8'. [ 29.237363][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 29.237379][ T28] audit: type=1400 audit(1782666270.452:208): avc: denied { create } for pid=3542 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 29.265275][ T28] audit: type=1400 audit(1782666270.462:209): avc: denied { write } for pid=3542 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 29.285709][ T28] audit: type=1400 audit(1782666270.462:210): avc: denied { sendto } for pid=3542 comm="syz.1.11" scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 29.286275][ T3518] syz.3.8 (3518) used greatest stack depth: 10496 bytes left [ 29.326723][ T3536] loop4: detected capacity change from 0 to 2048 [ 29.354018][ T3536] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 29.370348][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.397068][ T28] audit: type=1400 audit(1782666270.612:211): avc: denied { ioctl } for pid=3535 comm="syz.4.10" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 29.456930][ T28] audit: type=1400 audit(1782666270.672:212): avc: denied { setopt } for pid=3546 comm="syz.1.14" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.508835][ T28] audit: type=1400 audit(1782666270.702:213): avc: denied { setopt } for pid=3535 comm="syz.4.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.554909][ T3547] can0: slcan on ptm0. [ 29.596084][ T3555] bridge0: port 3(gretap0) entered blocking state [ 29.602792][ T3555] bridge0: port 3(gretap0) entered disabled state [ 29.609450][ T28] audit: type=1400 audit(1782666270.702:214): avc: denied { write } for pid=3535 comm="syz.4.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.638911][ T3555] gretap0: entered allmulticast mode [ 29.657692][ T3555] gretap0: entered promiscuous mode [ 29.679383][ T28] audit: type=1400 audit(1782666270.762:215): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 29.701134][ T3555] bridge0: port 3(gretap0) entered blocking state [ 29.707587][ T3555] bridge0: port 3(gretap0) entered forwarding state [ 29.738678][ T28] audit: type=1400 audit(1782666270.822:216): avc: denied { create } for pid=3546 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 29.787296][ T28] audit: type=1400 audit(1782666270.832:217): avc: denied { getopt } for pid=3546 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 29.830520][ T3546] can0 (unregistered): slcan off ptm0. [ 29.889764][ T3580] loop1: detected capacity change from 0 to 128 [ 29.914038][ T3580] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 29.944958][ T3549] netlink: 108 bytes leftover after parsing attributes in process `syz.3.13'. [ 29.973780][ T3557] 9p: Bad value for 'rfdno' [ 29.992329][ T3585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'. [ 30.006401][ T3549] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13'. [ 30.025061][ T3580] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 30.040888][ T3585] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 30.113277][ T3602] loop2: detected capacity change from 0 to 512 [ 30.113515][ T3602] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 30.172437][ T3585] netlink: 128 bytes leftover after parsing attributes in process `syz.2.20'. [ 30.184604][ T3605] capability: warning: `syz.4.21' uses deprecated v2 capabilities in a way that may be insecure [ 30.220486][ T3606] capability: warning: `syz.1.19' uses 32-bit capabilities (legacy support in use) [ 30.270921][ T3294] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 30.304888][ T3598] loop4: detected capacity change from 0 to 512 [ 30.353195][ T3598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.382752][ T3598] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #2: comm syz.4.21: No space for directory leaf checksum. Please run e2fsck -D. [ 30.423231][ T3598] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.21: checksumming directory block 0 [ 30.475529][ T3615] syz.1.25 uses obsolete (PF_INET,SOCK_PACKET) [ 30.519393][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.693389][ T3627] bridge0: port 3(gretap0) entered blocking state [ 30.700326][ T3627] bridge0: port 3(gretap0) entered disabled state [ 30.707166][ T3627] gretap0: entered allmulticast mode [ 30.713766][ T3627] gretap0: entered promiscuous mode [ 30.719362][ T3627] bridge0: port 3(gretap0) entered blocking state [ 30.725927][ T3627] bridge0: port 3(gretap0) entered forwarding state [ 30.811244][ T3636] loop4: detected capacity change from 0 to 512 [ 30.826794][ T3636] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.30: invalid indirect mapped block 256 (level 2) [ 30.840060][ T3636] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 30.840535][ T3636] EXT4-fs (loop4): 2 truncates cleaned up [ 30.855431][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 30.855458][ C1] EXT4-fs (loop4): initial error at time 1782666272: ext4_free_branches:1023: inode 11 [ 30.855504][ C1] EXT4-fs (loop4): last error at time 1782666272: ext4_free_branches:1023: inode 11 [ 30.882957][ T3636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.079012][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.146753][ T3644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.32'. [ 31.177157][ T3650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34'. [ 31.187681][ T3644] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 31.208078][ T3644] netlink: 128 bytes leftover after parsing attributes in process `syz.4.32'. [ 31.219495][ T3650] netlink: 128 bytes leftover after parsing attributes in process `syz.2.34'. [ 31.234840][ T3652] loop2: detected capacity change from 0 to 512 [ 31.251254][ T3652] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 31.319673][ T3644] loop4: detected capacity change from 0 to 512 [ 31.339482][ T3644] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 31.347778][ T3655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 31.349107][ T3655] netlink: 'syz.2.36': attribute type 12 has an invalid length. [ 31.355222][ T144] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.355339][ T144] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.355443][ T144] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.355542][ T144] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.399969][ T3659] msdos: Bad value for 'gid' [ 31.464535][ T3662] mmap: syz.3.38 (3662) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 31.476504][ T3659] msdos: Bad value for 'gid' [ 31.549559][ T3572] syz.0.17 (3572) used greatest stack depth: 9192 bytes left [ 31.620491][ T3659] Zero length message leads to an empty skb [ 31.841059][ T3670] tmpfs: Bad value for 'mpol' [ 32.109763][ T3677] syz.4.44 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 32.713639][ T3696] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 32.726594][ T3696] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 32.753216][ T3302] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.047348][ T3707] vlan2: entered allmulticast mode [ 33.061268][ T3707] erspan0: entered allmulticast mode [ 33.593126][ T3715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.609384][ T3715] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 33.625955][ T3715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.640770][ T3715] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 33.784173][ T3722] set_capacity_and_notify: 3 callbacks suppressed [ 33.784225][ T3722] loop4: detected capacity change from 0 to 512 [ 33.846028][ T3722] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.58: bad orphan inode 13 [ 33.889521][ T3722] loop4: lost filesystem error report for type 5 error -117 [ 33.889712][ T3722] ext4_test_bit(bit=12, block=4) = 1 [ 33.897057][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 33.897078][ C0] EXT4-fs (loop4): initial error at time 1782666275: ext4_orphan_get:1425 [ 33.897110][ C0] EXT4-fs (loop4): last error at time 1782666275: ext4_orphan_get:1425 [ 33.971765][ T3722] is_bad_inode(inode)=0 [ 33.985145][ T3722] NEXT_ORPHAN(inode)=0 [ 33.996646][ T3722] max_ino=32 [ 34.005866][ T3722] i_nlink=1 [ 34.017634][ T3722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.111921][ T3737] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 34.241427][ T28] kauditd_printk_skb: 104 callbacks suppressed [ 34.241448][ T28] audit: type=1326 audit(1782666275.462:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.0.65" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586da2ce59 code=0x7ffc0000 [ 34.304213][ T3744] EXT4-fs warning (device loop4): dx_probe:813: inode #2: comm syz.4.58: Hash code is SIPHASH, but hash not in dirent [ 34.316796][ T3744] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.58: Corrupt directory, running e2fsck is recommended [ 34.329895][ T3744] EXT4-fs warning (device loop4): dx_probe:813: inode #2: comm syz.4.58: Hash code is SIPHASH, but hash not in dirent [ 34.342367][ T3744] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.58: Corrupt directory, running e2fsck is recommended [ 34.355190][ T3744] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.58: bad entry in directory: directory entry overrun - offset=24, inode=0, rec_len=131076, size=1024 fake=0 [ 34.497997][ T28] audit: type=1326 audit(1782666275.502:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.0.65" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586da2ce59 code=0x7ffc0000 [ 34.590136][ T28] audit: type=1326 audit(1782666275.502:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.0.65" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f586da2ce59 code=0x7ffc0000 [ 34.615447][ T28] audit: type=1400 audit(1782666275.522:325): avc: denied { write } for pid=3721 comm="syz.4.58" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 34.636920][ T28] audit: type=1400 audit(1782666275.522:326): avc: denied { create } for pid=3721 comm="syz.4.58" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.656956][ T28] audit: type=1326 audit(1782666275.602:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.0.65" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586da2ce59 code=0x7ffc0000 [ 34.682579][ T28] audit: type=1326 audit(1782666275.602:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.0.65" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f586da2cbc2 code=0x7ffc0000 [ 34.707653][ T28] audit: type=1326 audit(1782666275.602:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.0.65" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f586da2cc57 code=0x7ffc0000 [ 34.734034][ T28] audit: type=1326 audit(1782666275.602:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.0.65" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f586d9e9b51 code=0x7ffc0000 [ 34.759118][ T28] audit: type=1326 audit(1782666275.602:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.0.65" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f586da2dc49 code=0x7ffc0000 [ 34.877798][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.165439][ T3781] loop4: detected capacity change from 0 to 512 [ 35.200845][ T3781] ext4: Unknown parameter 'noacl' [ 35.256595][ T3781] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 35.804142][ T3795] tmpfs: Bad value for 'mpol' [ 35.839969][ T3793] netlink: 'syz.1.79': attribute type 1 has an invalid length. [ 35.847709][ T3793] __nla_validate_parse: 6 callbacks suppressed [ 35.847740][ T3793] netlink: 131740 bytes leftover after parsing attributes in process `syz.1.79'. [ 36.245240][ T3811] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 36.273652][ T3811] loop3: detected capacity change from 0 to 256 [ 36.319081][ T3811] msdos: Unknown parameter 'nod&Žs' [ 36.513026][ T3835] netlink: 24 bytes leftover after parsing attributes in process `syz.3.91'. [ 36.686480][ T3817] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 36.777183][ T3846] netlink: 180 bytes leftover after parsing attributes in process `syz.3.93'. [ 36.804410][ T3846] netlink: 'syz.3.93': attribute type 3 has an invalid length. [ 36.966573][ T3852] netlink: 28 bytes leftover after parsing attributes in process `syz.4.95'. [ 37.010693][ T3858] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 37.049116][ T3860] ================================================================== [ 37.057218][ T3860] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 37.064929][ T3860] [ 37.067236][ T3860] write to 0xffff8881035b7728 of 8 bytes by task 3859 on cpu 0: [ 37.074844][ T3860] mas_wr_store_entry+0x33c0/0x5a90 [ 37.080040][ T3860] mas_store_prealloc+0x421/0x670 [ 37.085073][ T3860] commit_merge+0x69f/0x720 [ 37.089572][ T3860] vma_expand+0x2ce/0x430 [ 37.093892][ T3860] vma_merge_new_range+0x295/0x310 [ 37.098998][ T3860] mmap_region+0x109c/0x20c0 [ 37.103583][ T3860] do_mmap+0x970/0xbc0 [ 37.107634][ T3860] vm_mmap_pgoff+0x183/0x2d0 [ 37.112210][ T3860] ksys_mmap_pgoff+0xc1/0x310 [ 37.116873][ T3860] x64_sys_call+0x14df/0x3020 [ 37.121537][ T3860] do_syscall_64+0x136/0x3c0 [ 37.126115][ T3860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.131989][ T3860] [ 37.134296][ T3860] read to 0xffff8881035b7728 of 8 bytes by task 3860 on cpu 1: [ 37.141818][ T3860] mtree_range_walk+0x210/0x480 [ 37.146649][ T3860] mas_walk+0x1ac/0x340 [ 37.150789][ T3860] lock_vma_under_rcu+0xc9/0x210 [ 37.155707][ T3860] do_user_addr_fault+0x237/0x1060 [ 37.160807][ T3860] exc_page_fault+0x62/0xa0 [ 37.165296][ T3860] asm_exc_page_fault+0x26/0x30 [ 37.170130][ T3860] [ 37.172433][ T3860] value changed: 0x00007fd21a2b6fff -> 0x00007fd21a295fff [ 37.179518][ T3860] [ 37.181823][ T3860] Reported by Kernel Concurrency Sanitizer on: [ 37.187951][ T3860] CPU: 1 UID: 0 PID: 3860 Comm: syz.3.101 Not tainted syzkaller #0 PREEMPT(lazy) [ 37.197128][ T3860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 37.207166][ T3860] ================================================================== [ 37.218687][ T3856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'. [ 37.229646][ T3856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.99'.