last executing test programs: 31.093658091s ago: executing program 32 (id=85): socket$nl_route(0x10, 0x3, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x2, &(0x7f0000000400)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xc2, r1, 0x0, 0x0, 0x36, 0x0, 0x0, r1}, &(0x7f0000000880)={0x0, 0x0, 0xfe, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) setns(0xc9, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x0, 0x9}, {0xfff1, 0x2}, {0x3, 0x1}}}, 0x24}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x7fff, @empty}, 0x1c) sendto$inet6(r7, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c, 0x0, 0x0, 0xee}, 0x28) syz_clone(0x808cd480, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 29.13966781s ago: executing program 33 (id=95): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./debug/lru_gen/file0\x00', 0x0, &(0x7f0000000180)={[{@usrquota}, {@test_dummy_encryption}], [{@context={'context', 0x3d, 'staff_u'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}, 0x1, 0x490, &(0x7f0000002440)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x84) lsetxattr$security_ima(&(0x7f0000002900)='./file0\x00', &(0x7f0000002940), &(0x7f0000002980)=@sha1={0x1, "8affff42f431c3d9a322d200008000004000"}, 0xe2f2, 0x0) timerfd_create(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffff7fe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0106000000000000fa0009000000240004801300010062726f6164636173742d6c696e6b00000c0007800800050011000000"], 0x38}, 0x1, 0x0, 0x0, 0x20044885}, 0x0) semtimedop(r1, &(0x7f00000003c0)=[{0x2, 0x4, 0x800}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="48000000410005010100000000000000031100000000001c0001000600060086dd000010000344714cdde1a0d9000184", @ANYRESHEX=r0], 0x48}, 0x1, 0x0, 0x0, 0x48095}, 0x48850) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@fallback, 0xffffffffffffffff, 0x22}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000010401000000000000000000020000200500010001000000"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}]}, 0x1c}}, 0x0) setns(0xc9, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x14, 0x0, 0x1700bf5a31dc3bd3, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x24004040) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x54, 0x0, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7530, @local}}, {0x14, 0x2, @in={0x2, 0x7530, @remote}}}}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="54000000020601020000000000000000000000080500050001000000110002834d0a73683a6e65742c6e6573ffffe800050005000200000005000100070000000900020073797a31000000000500050000000000"], 0x54}}, 0xc085) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x400) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000980)={0x0, 0x1ff, 0x0, [0x8000000000000000, 0x0, 0x4, 0x0, 0xffffffffffffd2ff], [0x100, 0x8509, 0x100000000, 0x1, 0x5, 0x8, 0x1, 0x8000, 0x3, 0xe, 0x6, 0x7, 0x7, 0x9, 0x1, 0x0, 0x40, 0x7, 0x80000000, 0x0, 0x2, 0xfffffffffffffbff, 0x8bb8, 0x5, 0x14c, 0x0, 0x9, 0x2, 0x8, 0x1, 0x5, 0x0, 0x6, 0x4, 0x0, 0x8, 0x3c00000000000000, 0xb, 0x3, 0x345, 0x1fef, 0x0, 0xb06, 0x101, 0x0, 0xd, 0x1, 0x8, 0xd, 0x6, 0x4ec, 0x2, 0xffffffffffffffff, 0x3701, 0x100000, 0x81, 0x7fffffff, 0x100000001, 0xb22, 0x6, 0x3b, 0xc, 0x4, 0x8000000000000000, 0x100000001, 0xb, 0x800, 0x200, 0x0, 0x53c0000000000, 0x401, 0xfffffffffffff812, 0x1, 0x8, 0x0, 0xfffffffffffffff6, 0x70, 0x1, 0x0, 0x3, 0x3, 0x2, 0x7, 0x8001, 0x8000000000000001, 0xfffffffffffffff9, 0x6, 0x1, 0x2, 0x8, 0x1, 0x9, 0xffffffffffffc09b, 0xfffffffffffffc00, 0x0, 0x8, 0xffff, 0x9, 0x0, 0x6, 0x200, 0x0, 0xe, 0x8b63, 0xb, 0x7f, 0x2, 0x1, 0x5, 0x8242, 0x4, 0x5, 0x7, 0x80000094c9, 0x326, 0x7, 0x5e, 0x9, 0x400000000000, 0xc17c, 0x4]}) openat(0xffffffffffffff9c, &(0x7f0000000dc0)='./file1\x00', 0x42, 0xc0) lsetxattr$security_ima(&(0x7f00000029c0)='./file0\x00', &(0x7f0000002a00), &(0x7f0000002a40)=@v1={0x2, "f49c802a4b"}, 0x6, 0x0) 27.745289782s ago: executing program 4 (id=101): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000100)={0x0, 0x0}) close(r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000200)}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="200000001400030500008000fbdbdf25021f56ff96", @ANYRES32=r3, @ANYBLOB="08000100ac1414aa"], 0x20}, 0x1, 0x0, 0x0, 0xc094}, 0x48006) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x4000854}, 0x0) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000014c0)=@newtaction={0x1c, 0x76, 0x1, 0x6, 0x0, {0x0, 0x0, 0x300}, [{0x4}, {0x4}]}, 0x1c}}, 0x40000) ioctl$RNDCLEARPOOL(r4, 0x5206, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) r5 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x500, &(0x7f0000000a40)="$eJzs3c9vVF0ZAOD3Tju0X7+BFmWhRgURRUOY/gAaggthozGExEhcuYDaDk3TGabptEgri7J0byKJK/0T3LkwYeXCnTvducGFCSrRUBMX8+XeubSl7dAB2g50nie53HvOvfQ9Z4Zzzr2HzpwAetaZiFiLiGMRcTcihvP8JN/iemtLr3v54tH0+otH00k0m7f/lWTn07zY8ndSn+Y/czAifvT9iJ8mO+M2Vlbnp6rVymKeHl2qLYw2VlYvzhXynInJ8cmxq5euTHRYk/49rzhd+93z783d/PEffv+VZ39e+/bP02KVfnE8O7e1HvupVfVilLaV9OZBBOuS/vzfzzso7ndZeDtpa/tcRJzN2v9w9HXQjgCAj1uzORzN4a1pAOCoS5//S5EUyvlcQCkKhXK5NYd3KoYK1Xpj6cJwffn+TGRzWCNRLNybq1bG8rnCkSgmaXo8O95MT2xLX4qIkxHxy4FPsnR5ul6d6eaNDwD0sE+3jf//HWiN/wDAETfY7QIAAIfO+A8Avcf4DwC95y3Gf58OBIAjwvM/APQe4z8A9J49x//Hh1MOAOBQ/PDWrXRrrufffz3zYGX5O6UHF2cqjflybXm6PF1fXCjP1uuz1Up5utnc6+dV6/WF8csbycbK6p1affn+0p252tRs5U7FFz4DQPedPP30r0lErF37JNtiy1oOxmo42grdLgDQNX3dLgDQNT7PA72rg2d80wBwxO2yRO9r2v6K0JN3X/wV6K7zXzT/D73K/D/0rneb///uvpcDOHzm/6F3NZuJNf8BoMeY4wfe6///AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEeVsi0plLO1wNfSPwvlcsTxiBiJYnJvrloZi4gTEfGXgeJAmh7vdqEBgPdU+EeSr/91fvhcafvZY8n/BrJ9RPzs17d/9XBqaWlxPM3/90b+0pM8f+JYNyoAAGx1fWdWa5zO91se5F++eDT9ajvMIj6/0VpcNI27nm+tM/3Rn+0HoxgRQ/9J8nRLer/Stw/x1x5HxBc26/9wS4TSYMRIvvLp9vhp7OMHEH/z9U+yuZnN+IXX4heyc+m+mL0Wn9+HskCveXqj1U/mbS9tYnn7K8SZbL97+x/Meqj396r/W9/R/xU2+r++HfGTrM2f2Ui/uSTPL//xBzsym8Otc48jvtS/W/xkI37Spv8912Ed//blr55td675m4jzsXv8llrWzY4u1RZGGyurF+dqU7OV2cr9iYnJ8cmxq5euTIwORLUyNprNVP9ptxj/vHbhRLv4af2H2sQf3KP+3+iw/r/9/92ffO0N8b/19d3f/1NviJ+Oid/sMP7U0PU2y3e3Vv+faVP/vd7/Cx3Gf/b31ZkOLwUADkFjZXV+qlqtLO5xkN5r7nWNg4/zINYiPoBi9OhBeg/+ARRjx0G3eybgoG02+m6XBAAAAAAAAAAAAAAAaKexsjo/EAf7caJu1xEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICj67MAAAD//y2oyxU=") r6 = socket$kcm(0xa, 0x922000000003, 0x11) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xa, &(0x7f00000008c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r7, @ANYBLOB="00000000000000000f080000040000001800000000000000000000000900000095000000000000009500000000000000"], &(0x7f0000000940)='GPL\x00', 0x4}, 0x94) sendmsg$kcm(r6, &(0x7f0000000180)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000680)="f4001100032b3b25fe8007000000007a2c08000000090000ff110000000000000000fffffff50000", 0x28}], 0x1}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x4) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) lseek(r5, 0xa8, 0x1) socket(0x1, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x1000000, 0x8010, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f00000005c0)={0xa690b000, &(0x7f0000000640), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x0) 27.46593562s ago: executing program 4 (id=104): setns(0xc9, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ptype\x00') socket$kcm(0x2, 0xa, 0x2) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/233, 0xe9}], 0x1, 0x4004f, 0xf5ffffff) 26.989677388s ago: executing program 4 (id=107): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@getchain={0x2c, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {}, {0xfff3}}, [{0xfffffffffffffff0, 0xb, 0x3}]}, 0x2c}}, 0x20000000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x1, @bearer=@l2={'eth', 0x3a, 'ipvlan1\x00'}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4001000}, 0x4000000) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e22, @local}, 0x10) listen(r2, 0x5) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x802, 0x80000000, 0x0, 0x9, 0x800000, 0x42, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x4a, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$inet(0x2, 0x3, 0x87) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@ipv4_newroute={0x38, 0x18, 0x2, 0x4, 0x0, {0x2, 0x80, 0x80, 0x0, 0xfe, 0xbf50908f34263107, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @SEG6_LOCAL_SRH={0x0, 0x2, {0x29, 0x0, 0x4, 0x0, 0x7, 0x10, 0x10, [@mcast1, @ipv4={'\x00', '\xff\xff', @local}, @dev={0xfe, 0x80, '\x00', 0x21}, @empty, @local]}}}]}, 0x38}}, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file1\x00', 0x3000000, &(0x7f0000000640)={[{@mblk_io_submit}]}, 0x4, 0x521, &(0x7f0000000680)="$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") bind$netlink(0xffffffffffffffff, &(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x4000010, 0xffffffffffffffff, 0x4) close(0x3) socket$kcm(0x2, 0xa, 0x2) perf_event_open(&(0x7f0000000c00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x7}, 0x9696a46c4adce67c, 0x0, 0x790, 0x0, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) syz_clone3(&(0x7f0000000c80)={0x85880080, 0x0, &(0x7f0000000d00), 0x0, {0x3}, &(0x7f0000000d40)=""/55, 0x37, &(0x7f0000000d80)=""/19, &(0x7f0000000dc0)=[0x0], 0x1}, 0x58) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e22, @local}, 0x10) socket$packet(0x11, 0x3, 0x300) 26.940418394s ago: executing program 34 (id=107): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@getchain={0x2c, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {}, {0xfff3}}, [{0xfffffffffffffff0, 0xb, 0x3}]}, 0x2c}}, 0x20000000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x1, @bearer=@l2={'eth', 0x3a, 'ipvlan1\x00'}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4001000}, 0x4000000) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e22, @local}, 0x10) listen(r2, 0x5) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x802, 0x80000000, 0x0, 0x9, 0x800000, 0x42, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x4a, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$inet(0x2, 0x3, 0x87) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@ipv4_newroute={0x38, 0x18, 0x2, 0x4, 0x0, {0x2, 0x80, 0x80, 0x0, 0xfe, 0xbf50908f34263107, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @SEG6_LOCAL_SRH={0x0, 0x2, {0x29, 0x0, 0x4, 0x0, 0x7, 0x10, 0x10, [@mcast1, @ipv4={'\x00', '\xff\xff', @local}, @dev={0xfe, 0x80, '\x00', 0x21}, @empty, @local]}}}]}, 0x38}}, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file1\x00', 0x3000000, &(0x7f0000000640)={[{@mblk_io_submit}]}, 0x4, 0x521, &(0x7f0000000680)="$eJzs3d9rK1kdAPDvTJtue2/XZlXkuuDu4q7cu+hN2q2rVWR3BdGnBXV9v9Y2LaVpU5p0vS2LdvEPEERU8A/wRfDBR0H2TxDhgr6LiiJ6rz7qHZlkqv2RtLFNm2v6+cBpzsmZOd9zhmaSmTnMBHBtvRARb0TEWES8HBEzxftpkWK/k/LlHj18ZylPSWTZW39NIineO2grL49HxM1itcmI+OqXIr6RnIzb3N1bX6zXa9tFudra2Ko2d/furm0srtZWa5vz83M/j4hXF2azwoXGWY6I177wxx989ydffO2Xn/jm7+79+c638m597kOdfkfE0oUC9NBpu9TeFgfybbR9GcGGJB9PaWzYvQAAoB/5b/z3R8RH27//Z2Ks/WsOAAAAGCXZ69PxzyQiAwAAAEZWGhHTkaSVYi7AdKRppdKZw/vBuJHWG83Wx1caO5vLeV1EOUrpylq9NlvMFS5HKcnLc8Uc24PyK8fK8xHxTER8f2aqXa4sNerLwz75AQAAANfEzeePHv//YyZt5wEAAIARU+5ZAAAAAEaFQ34AAAAYfY7/AQAAYKR9+c0385QdPMd7+e3dnfXG23eXa831ysbOUmWpsb1VWW00Vtv37Ns4q716o7H1ydjcuV9t1ZqtanN3795GY2ezdW/tyCOwAQAAgCv0zPPv/TaJiP3PTrVTFPcBBDjiD8PuADBIY8PuADA048PuADA0pTOXsIeAUZecUX9y8k7nXGH86nL6AwAADN7tD5+8/j9R1J19bgD4f2auDwBcP0ev7k0NrR/A1SuddwbgrUH3BBiW93VenupV3/PmHX1c/++cY8iyc3UMAAAYmOl2StJKcQwwHWlaqUQ8HY+zcpSSlbV6bbao+81M6am8PNdeMzlzzjAAAAAAAAAAAAAAAAAAAAAAAAAA0JFlSWQAAADASItI/5S07+YfcXvmpemjZweOPfXrx2/98P5iq7U9FzGR/G0mf2siIlo/Kt5/JfNIAAAAABiuqfxP5zi9eJ0bdpcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDWPHr6zdJCuMu5fPh8R5W7xx2Oy/ToZpYi48fckxg+tl0TE2ADi778bEbe6xU/icZZl5aIX3eJPXXL8cnvTdI+fRsTNAcSH6+y9fP/zRrfPXxovtF+7f/7Gi3RRvfd/6X/2f2M99j9PHyv38uyDn1V7xn834tnx7vufg/hJJ/6REHnhxT7H+PWv7e11rTjUZLf4h2NVWxtb1ebu3t21jcXV2mptc35+7lMLn154dWG2urJWrxV/u4b53kd+8fi08d/oEb98dPwntv9LfY0+i389uP/wA51CqVv8Oy92//691SN+Wnz3fazI5/W3D/L7nfxhz/3018+dNv7lHuOfPGP8d/oaf3zm5a985/dda05sDQDgKjR399YX6/Xa9imZyT6W+Z8yERdt5/WB9udJyMTZy0w+IV29jEz27c7/48XaueDqJzLZRVYfjwF0Y+LE53QszttgErGft9XnPyQAADBi/vuj/7QrSAAAAAAAAAAAAAAAAAAAAMBlOudtySYjou+Fj8fcH85QAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABO9e8AAAD//zDU0hs=") bind$netlink(0xffffffffffffffff, &(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x4000010, 0xffffffffffffffff, 0x4) close(0x3) socket$kcm(0x2, 0xa, 0x2) perf_event_open(&(0x7f0000000c00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x7}, 0x9696a46c4adce67c, 0x0, 0x790, 0x0, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) syz_clone3(&(0x7f0000000c80)={0x85880080, 0x0, &(0x7f0000000d00), 0x0, {0x3}, &(0x7f0000000d40)=""/55, 0x37, &(0x7f0000000d80)=""/19, &(0x7f0000000dc0)=[0x0], 0x1}, 0x58) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e22, @local}, 0x10) socket$packet(0x11, 0x3, 0x300) 23.795257413s ago: executing program 6 (id=133): open(&(0x7f0000000000)='./file0\x00', 0x108843, 0x98) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24004840) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000600)={0xffffffffffffffff}, 0x84000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x1, 0x10, 0x0, 0x5f, {{0x9, 0x4, 0x3, 0x7, 0x24, 0x68, 0x0, 0x0, 0x29, 0x0, @remote, @local, {[@timestamp={0x44, 0x10, 0x33, 0x0, 0x3, [0x5, 0xfff, 0x6]}]}}}}}) sendmsg$can_bcm(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x1d, r2}, 0x10, &(0x7f00000007c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="331990b4fd43a0c32f7c19ff270373e2b75e8751b176d39a6ea9f3b713b7bc183023c1968feb3d608d64f960d87325e6f7fd1c1f", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000060010000000000004008030000f4f525cf3e32085a"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) inotify_init1(0x800) bpf$ITER_CREATE(0xb, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40042, 0x1) close(r3) syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) r4 = timerfd_create(0x1, 0x80000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x8c, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2841, 0x10) flock(r0, 0x5) setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) removexattr(0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r6, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 23.491446294s ago: executing program 6 (id=136): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket(0x2, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000680)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000002c0)={r2, 0x400}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r2, 0x1}, &(0x7f0000000340)=0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x143041, 0x0) pwritev2(r4, &(0x7f00000005c0)=[{&(0x7f0000000600)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000000640)={0x17c04, 0xffffffffffffffff, 0x7fff, 0x3, 0xc, 0x6}) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000e40000000000000000000200000a20000000000a010400000000000000000200000a0900010073797a300000000040000000030a010400000000000000000200000a0900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000048000000060a01040000000000000000020000030900010073797a30000000000900020073797a30000000001c00048018000180080001006c6f67000c00028008000540000000f2"], 0xd0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write$binfmt_elf32(r5, 0x0, 0x458) socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffffff, 0x0, 0xc5) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0), 0x880, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r6, 0x40043311, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000500)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, r7, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r8, 0x0, 0x1, &(0x7f0000000400)=0xffffff7e, 0x4) write$binfmt_elf32(r5, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x1, 0xfc, 0x0, 0xfffffffffffffff9, 0x3, 0x3, 0x8, 0xcc, 0x38, 0x2d1, 0x3, 0x8, 0x20, 0x1, 0x5, 0x2, 0x6}, [{0x7a4605b21d5aa257, 0xfffffffe, 0x8000, 0x0, 0x7, 0x7ff, 0x8, 0x80}]}, 0x58) 23.117923402s ago: executing program 6 (id=138): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$NS_GET_PARENT(r1, 0x8004b709, 0x0) 22.974365466s ago: executing program 6 (id=139): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000200)}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="200000001400030500008000fbdbdf25021f56ff96", @ANYRES32=r2, @ANYBLOB="08000100ac1414aa"], 0x20}, 0x1, 0x0, 0x0, 0xc094}, 0x48006) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x4000854}, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000014c0)=@newtaction={0x1c, 0x76, 0x1, 0x6, 0x0, {0x0, 0x0, 0x300}, [{0x4}, {0x4}]}, 0x1c}}, 0x40000) ioctl$RNDCLEARPOOL(r3, 0x5206, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) r4 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x500, &(0x7f0000000a40)="$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") r5 = socket$kcm(0xa, 0x922000000003, 0x11) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xa, &(0x7f00000008c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r6, @ANYBLOB="00000000000000000f080000040000001800000000000000000000000900000095000000000000009500000000000000"], &(0x7f0000000940)='GPL\x00', 0x4}, 0x94) sendmsg$kcm(r5, &(0x7f0000000180)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000680)="f4001100032b3b25fe8007000000007a2c08000000090000ff110000000000000000fffffff50000", 0x28}], 0x1}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x4) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) lseek(r4, 0xa8, 0x1) socket(0x1, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x1000000, 0x8010, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f00000005c0)={0xa690b000, &(0x7f0000000640), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x0) 22.385048996s ago: executing program 5 (id=149): inotify_init() fcntl$notify(0xffffffffffffffff, 0x402, 0x80000002) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xdafbe5d6891b6e4) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000001c0)='.\x00', 0x20000000) write$binfmt_elf32(r0, &(0x7f0000000600)=ANY=[@ANYRES64=r1], 0x69) close(r0) inotify_add_watch(r0, &(0x7f0000000440)='./tracing/uprobe_events\x00', 0x420000a4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0xef, 0x6e, 0x0, 0x0, 0x8, 0x20020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}, 0x10031, 0x1000000, 0x0, 0x0, 0x8, 0x80004}, 0x0, 0xffffffffffffbfff, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x20040000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x8000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000008c0)='ns/pid_for_children\x00') r3 = fsmount(0xffffffffffffffff, 0x0, 0x80) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4, &(0x7f0000000500)=0xfffffa0d, 0x4) connect$inet6(r4, &(0x7f0000000540)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/uprobe_events\x00', 0x401, 0x48) write(r5, &(0x7f0000000140)='p:__st/event1 ./file0:0x0 arg2=%bx', 0x22) perf_event_open$cgroup(&(0x7f0000000080)={0x4, 0x80, 0x2, 0x5, 0x3, 0x3d, 0x0, 0xe, 0x40000, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x7fff, 0x1}, 0x102590, 0x3, 0x5, 0x3, 0x1000, 0x9, 0x4, 0x0, 0xffff, 0x0, 0x8}, r3, 0xffffffffffffffff, r5, 0x4) ioctl$DM_TABLE_LOAD(r2, 0xc138fd09, &(0x7f0000000900)={0x4, 0x0, 0x0, 0x170, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@linear={0x0, 0x2000, 0x0, 0x38, 'linear\x00', {@ram={'/dev/ram', 0x0}, 0x20, '0'}}]}) ioctl$DM_DEV_SUSPEND(r2, 0xc138fd06, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a0000000300000000200000c0"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r6, &(0x7f0000000600), 0x0}, 0x20) ioctl$DM_DEV_REMOVE(r2, 0xc138fd04, &(0x7f0000000d80)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) 22.285771676s ago: executing program 6 (id=150): perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdffffffffffffffd, 0xffffffffffffffff, 0xb) pipe2(0x0, 0x800) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000a80), 0x60680, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x2) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc8, 0x3}, 0x100100, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x7, 0x0, 0x24a4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0xc0a85320, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x100b) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x109402) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='aio\x00', 0x6000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000400)='100', 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000ffff27bd7000fedbdf2500000000", @ANYRESHEX=r1, @ANYBLOB="05930200000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r4, @ANYRES8=r1, @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x20028001}, 0x8000002) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000ac0)=0x7) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x41, 0x3, 0x200, 0x0, 0x50020000, 0x0, 0x0, 0x0, 0x168, 0x1f0, 0x1f0, 0x168, 0x1f0, 0x3, 0x0, {[{{@ip={@remote, @multicast2, 0xff, 0x0, 'veth1_to_batadv\x00', 'vlan1\x00', {}, {}, 0x6, 0x3, 0x35}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x4, 0x0, 0x2, 0x7, 0x6], 0x2, 0x3}, {0xffffffffffffffff, [0x6, 0x6, 0x0, 0x1, 0x4, 0x2], 0x5, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260) rt_tgsigqueueinfo(0x0, 0x0, 0x18, &(0x7f0000000940)={0x7fff, 0xa, 0x27}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000000)={0x0, 0x328000, 0x800, 0xb, 0x3}, 0x20) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f00000000c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r6, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b00)=@deltaction={0x138, 0x31, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x5c, 0x1, [{0x14, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xfffffd68, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1007}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x6, 0x2080) 22.169927688s ago: executing program 5 (id=151): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt(r0, 0xff, 0x24, 0x0, 0x0) (fail_nth: 1) 22.15568604s ago: executing program 5 (id=152): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000001c0)={0x1, &(0x7f0000000380)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x40000000000007, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x2, @perf_bp={0x0, 0x1}, 0x9679149b910765de, 0x8f2, 0xfffffffd, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) getrusage(0x0, &(0x7f0000000500)) r1 = fsopen(&(0x7f0000000080)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) setns(0xc9, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000740)='cmdline\x00') preadv(r4, 0x0, 0x0, 0x9, 0x6a76) fchdir(r2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r6], 0x4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000700)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f00000008c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000127bd7000fedbdf250300000005002d000100000008002c000c00000008000600", @ANYRES32=r8, @ANYBLOB="2f62405dd9b9a111890cd175cd77a095f259568be6441174a023c5675a60a759b515633290ec05cb0fc59d18043a5a1924def2fc053d20e91abfbaf15b1597b8ce8bd526aa5363781ab5afaf92420b3529348afc8660cace3efc1eb9c669e47ea778468b083a1af3ab1ecb599556ad1aab17c6a3fed477c5f5925326b76c572cdb2d23bca9406c38758c8fb35582bf9c0a9373c154f42e1554f5c563e9e5a7e891230abf460a8a2a641ff5548617b33644df7f471646f8b73334b8a9b9f3cfb29d8479df0f82fb81b9b6b88ee82ae3e27d10048d58ca4fcaf656065514cb9886c7b8f87dedf1eeb7489f591c89a4cf2b1e288b"], 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x20000800) syz_open_procfs(0x0, &(0x7f0000000800)='net/rpc\x00') ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) write(0xffffffffffffffff, &(0x7f0000000880)='8 2000000000 0\n', 0xf) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000003c0)) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00e126bd7000ffdbdf253f0000000c009900030000000d00000014005e80880002000900000008000300291e00000c005e8008000600080000002c005e00080005001d00000008000700f1060000080003000200000008000900010400000800030001000000dab1435cc61781e3bacaa5ca896daa83b374a4bfde082ca46139df771a2e0ed8cbbf39a9c5e44b7e787e8ca5e8b0c9fe44a294487e2cde96"], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r9 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r9, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) sigaltstack(&(0x7f0000000a00)={0xffffffffffffffff, 0x0, 0xfffffffffffffeab}, 0x0) sigaltstack(&(0x7f0000000a40)={0x0, 0x80000002}, 0x0) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r9, 0x24, &(0x7f0000000400)={0x0, 0x3}, 0x0) 21.873419358s ago: executing program 6 (id=157): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) semop(0x0, &(0x7f0000000000)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(0x0, &(0x7f0000000040)=[{0x1, 0xbbdb, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x6, 0x7fff]) r1 = dup(r0) syz_emit_ethernet(0x66, 0x0, 0x0) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x1, 0x401d031, r1, 0x0) socket$l2tp(0x2, 0x2, 0x73) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r2, 0x5608) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000bc0)=0x1002, 0x4) sendto$inet(r3, 0x0, 0x0, 0x6000, &(0x7f0000000c00)={0x2, 0x4622, @remote}, 0x10) recvfrom(r3, 0x0, 0x0, 0x80002161, 0x0, 0xffffffffffffff89) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x40080c0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000e00)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000e40)=0x0) setresuid(r5, r4, r4) capset(&(0x7f0000000e80)={0x20080522}, &(0x7f0000000ec0)={0x200002, 0x1fffff, 0x801, 0x4, 0x7, 0x3}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) io_setup(0x10, &(0x7f0000000f00)=0x0) io_getevents(r6, 0x1, 0x1, &(0x7f0000000f40)=[{}], &(0x7f0000000f80)={0x0, 0x3938700}) 21.828170433s ago: executing program 35 (id=157): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) semop(0x0, &(0x7f0000000000)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(0x0, &(0x7f0000000040)=[{0x1, 0xbbdb, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x6, 0x7fff]) r1 = dup(r0) syz_emit_ethernet(0x66, 0x0, 0x0) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x1, 0x401d031, r1, 0x0) socket$l2tp(0x2, 0x2, 0x73) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r2, 0x5608) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000bc0)=0x1002, 0x4) sendto$inet(r3, 0x0, 0x0, 0x6000, &(0x7f0000000c00)={0x2, 0x4622, @remote}, 0x10) recvfrom(r3, 0x0, 0x0, 0x80002161, 0x0, 0xffffffffffffff89) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x40080c0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000e00)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000e40)=0x0) setresuid(r5, r4, r4) capset(&(0x7f0000000e80)={0x20080522}, &(0x7f0000000ec0)={0x200002, 0x1fffff, 0x801, 0x4, 0x7, 0x3}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) io_setup(0x10, &(0x7f0000000f00)=0x0) io_getevents(r6, 0x1, 0x1, &(0x7f0000000f40)=[{}], &(0x7f0000000f80)={0x0, 0x3938700}) 21.810116445s ago: executing program 5 (id=160): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000200)}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="200000001400030500008000fbdbdf25021f56ff96", @ANYRES32=r2, @ANYBLOB="08000100ac1414aa"], 0x20}, 0x1, 0x0, 0x0, 0xc094}, 0x48006) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x4000854}, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000014c0)=@newtaction={0x1c, 0x76, 0x1, 0x6, 0x0, {0x0, 0x0, 0x300}, [{0x4}, {0x4}]}, 0x1c}}, 0x40000) ioctl$RNDCLEARPOOL(r3, 0x5206, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) r4 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x500, &(0x7f0000000a40)="$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") r5 = socket$kcm(0xa, 0x922000000003, 0x11) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xa, &(0x7f00000008c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r6, @ANYBLOB="00000000000000000f080000040000001800000000000000000000000900000095000000000000009500000000000000"], &(0x7f0000000940)='GPL\x00', 0x4}, 0x94) sendmsg$kcm(r5, &(0x7f0000000180)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000680)="f4001100032b3b25fe8007000000007a2c08000000090000ff110000000000000000fffffff50000", 0x28}], 0x1}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x4) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) lseek(r4, 0xa8, 0x1) socket(0x1, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x1000000, 0x8010, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f00000005c0)={0xa690b000, &(0x7f0000000640), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x0) 21.112916875s ago: executing program 5 (id=164): close(0xffffffffffffffff) perf_event_open(&(0x7f0000000c00)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xffff38e6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter6\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/128, 0x80}], 0x1, 0x111, 0x0) (fail_nth: 2) 20.798399707s ago: executing program 5 (id=166): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x9b00, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6f9) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, @perf_config_ext={0x7, 0x15}, 0x8, 0x8, 0x43a1bd76, 0x8, 0xb, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4400000000, 0xffffffffffffffff, 0x8) ioctl$TIOCSETD(r0, 0x5423, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file2\x00', 0x1001c00, &(0x7f00000006c0)=ANY=[], 0x1, 0x392, &(0x7f00000001c0)="$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") syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x7, 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000002000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0700000004000000000100000300000028000000", @ANYRES32, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x7, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file2\x00', 0x42, 0x0) unshare(0x2020600) r5 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./mnt\x00', 0x0, &(0x7f0000000600), 0x0, 0x243, &(0x7f00000008c0)="$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") ioctl$XFS_IOC_SCRUBV_METADATA(r4, 0xc0285840, &(0x7f0000000d40)={0x2, 0x200, 0x101, 0x0, 0x0, 0x5, 0x0, &(0x7f00000007c0)=[{0x14, 0x101, 0xffff7fff}, {0x4, 0x101, 0x100}, {0xffffffff, 0x1ff, 0xfff}, {0x18, 0xfe, 0x2de6}, {0x0, 0x101, 0x7}]}) ioctl$EXT4_IOC_GETSTATE(r5, 0x40046629, &(0x7f0000000b40)) pwrite64(r4, &(0x7f00000005c0)='a', 0x200000c1, 0x9000) 20.730153054s ago: executing program 36 (id=166): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x9b00, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6f9) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, @perf_config_ext={0x7, 0x15}, 0x8, 0x8, 0x43a1bd76, 0x8, 0xb, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4400000000, 0xffffffffffffffff, 0x8) ioctl$TIOCSETD(r0, 0x5423, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file2\x00', 0x1001c00, &(0x7f00000006c0)=ANY=[], 0x1, 0x392, &(0x7f00000001c0)="$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") syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x7, 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000002000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0700000004000000000100000300000028000000", @ANYRES32, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x7, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file2\x00', 0x42, 0x0) unshare(0x2020600) r5 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./mnt\x00', 0x0, &(0x7f0000000600), 0x0, 0x243, &(0x7f00000008c0)="$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") ioctl$XFS_IOC_SCRUBV_METADATA(r4, 0xc0285840, &(0x7f0000000d40)={0x2, 0x200, 0x101, 0x0, 0x0, 0x5, 0x0, &(0x7f00000007c0)=[{0x14, 0x101, 0xffff7fff}, {0x4, 0x101, 0x100}, {0xffffffff, 0x1ff, 0xfff}, {0x18, 0xfe, 0x2de6}, {0x0, 0x101, 0x7}]}) ioctl$EXT4_IOC_GETSTATE(r5, 0x40046629, &(0x7f0000000b40)) pwrite64(r4, &(0x7f00000005c0)='a', 0x200000c1, 0x9000) 20.286087379s ago: executing program 3 (id=168): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x4}, 0x10c100, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x86) fchdir(r0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) bpf$PROG_LOAD(0x5, 0x0, 0x53) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000003300), 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'dummy0\x00', &(0x7f0000000740)=@ethtool_test={0x1a, 0x9, 0xe}}) sendmsg$nl_route(r3, 0x0, 0x24080) fsetxattr$trusted_overlay_redirect(r1, 0x0, &(0x7f0000000140)='./file0\x00', 0x8, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r5, 0x0, 0x14, &(0x7f0000000300)=""/2, &(0x7f0000000340)=0x2) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000800)={r0, 0x5, {0x0, 0x0, 0x0, 0x400, 0xfffffffffffffff7, 0x0, 0x4, 0x9, 0x1c, "c126895c2aacffc5a94eb60e787d0caa40f9085c52395c853ca3d89c04610392f44c18a4d6e0fc8fcc6c6e03b20a7ce72e4df2e299f6c36b413d3ceabb2bab5c", "68c25187d1e47a5214c92aa7b53c5a82da8dbb098c74efc8b530c6e2b1248dab9762109a84051745d20a0cd51ff66c7a975b32016b14f7ba705f420b048ec060", "c0a31ff41eff81577a2a576865f4db1a24fb8271e6236561e6c082fd37a664e8", [0x4, 0x5]}}) r6 = openat$random(0xffffffffffffff9c, &(0x7f00000009c0), 0x40000, 0x0) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000a00)={0x1}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010024bd7040010008080f00000008000300b2ac150e9b867ccdc608121318", @ANYRES32=r11, @ANYBLOB="0500290000000000"], 0x24}}, 0x18) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) 19.953656923s ago: executing program 3 (id=170): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000100), 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYRES32, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES16=r1], 0x50) close(r4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={r5, &(0x7f00000008c0)}, 0x20) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r6, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) openat$dir(0xffffffffffffff9c, 0x0, 0x44280, 0x40) sendmmsg$unix(r7, 0x0, 0x18, 0x54) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r8, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x82, 0x7fff7ffc}]}) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r9 = socket(0xa, 0x5, 0x3a) setsockopt$MRT6_INIT(r9, 0x29, 0xc8, &(0x7f00000000c0), 0x4) 19.681795171s ago: executing program 3 (id=172): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x9c41e57350004907}, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x45, 0x0, &(0x7f0000000040)) 19.58914012s ago: executing program 3 (id=173): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="200000001400030500008000fbdbdf25021f56ff96", @ANYRES32=r2, @ANYBLOB="08000100ac1414aa"], 0x20}, 0x1, 0x0, 0x0, 0xc094}, 0x48006) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x4000854}, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000014c0)=@newtaction={0x1c, 0x76, 0x1, 0x6, 0x0, {0x0, 0x0, 0x300}, [{0x4}, {0x4}]}, 0x1c}}, 0x40000) ioctl$RNDCLEARPOOL(r3, 0x5206, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) r4 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x500, &(0x7f0000000a40)="$eJzs3c9vVF0ZAOD3Tju0X7+BFmWhRgURRUOY/gAaggthozGExEhcuYDaDk3TGabptEgri7J0byKJK/0T3LkwYeXCnTvducGFCSrRUBMX8+XeubSl7dAB2g50nie53HvOvfQ9Z4Zzzr2HzpwAetaZiFiLiGMRcTcihvP8JN/iemtLr3v54tH0+otH00k0m7f/lWTn07zY8ndSn+Y/czAifvT9iJ8mO+M2Vlbnp6rVymKeHl2qLYw2VlYvzhXynInJ8cmxq5euTHRYk/49rzhd+93z783d/PEffv+VZ39e+/bP02KVfnE8O7e1HvupVfVilLaV9OZBBOuS/vzfzzso7ndZeDtpa/tcRJzN2v9w9HXQjgCAj1uzORzN4a1pAOCoS5//S5EUyvlcQCkKhXK5NYd3KoYK1Xpj6cJwffn+TGRzWCNRLNybq1bG8rnCkSgmaXo8O95MT2xLX4qIkxHxy4FPsnR5ul6d6eaNDwD0sE+3jf//HWiN/wDAETfY7QIAAIfO+A8Avcf4DwC95y3Gf58OBIAjwvM/APQe4z8A9J49x//Hh1MOAOBQ/PDWrXRrrufffz3zYGX5O6UHF2cqjflybXm6PF1fXCjP1uuz1Up5utnc6+dV6/WF8csbycbK6p1affn+0p252tRs5U7FFz4DQPedPP30r0lErF37JNtiy1oOxmo42grdLgDQNX3dLgDQNT7PA72rg2d80wBwxO2yRO9r2v6K0JN3X/wV6K7zXzT/D73K/D/0rneb///uvpcDOHzm/6F3NZuJNf8BoMeY4wfe6///AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEeVsi0plLO1wNfSPwvlcsTxiBiJYnJvrloZi4gTEfGXgeJAmh7vdqEBgPdU+EeSr/91fvhcafvZY8n/BrJ9RPzs17d/9XBqaWlxPM3/90b+0pM8f+JYNyoAAGx1fWdWa5zO91se5F++eDT9ajvMIj6/0VpcNI27nm+tM/3Rn+0HoxgRQ/9J8nRLer/Stw/x1x5HxBc26/9wS4TSYMRIvvLp9vhp7OMHEH/z9U+yuZnN+IXX4heyc+m+mL0Wn9+HskCveXqj1U/mbS9tYnn7K8SZbL97+x/Meqj396r/W9/R/xU2+r++HfGTrM2f2Ui/uSTPL//xBzsym8Otc48jvtS/W/xkI37Spv8912Ed//blr55td675m4jzsXv8llrWzY4u1RZGGyurF+dqU7OV2cr9iYnJ8cmxq5euTIwORLUyNprNVP9ptxj/vHbhRLv4af2H2sQf3KP+3+iw/r/9/92ffO0N8b/19d3f/1NviJ+Oid/sMP7U0PU2y3e3Vv+faVP/vd7/Cx3Gf/b31ZkOLwUADkFjZXV+qlqtLO5xkN5r7nWNg4/zINYiPoBi9OhBeg/+ARRjx0G3eybgoG02+m6XBAAAAAAAAAAAAAAAaKexsjo/EAf7caJu1xEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICj67MAAAD//y2oyxU=") r5 = socket$kcm(0xa, 0x922000000003, 0x11) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xa, &(0x7f00000008c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r6, @ANYBLOB="00000000000000000f080000040000001800000000000000000000000900000095000000000000009500000000000000"], &(0x7f0000000940)='GPL\x00', 0x4}, 0x94) sendmsg$kcm(r5, &(0x7f0000000180)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000680)="f4001100032b3b25fe8007000000007a2c08000000090000ff110000000000000000fffffff50000", 0x28}], 0x1}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x4) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) lseek(r4, 0xa8, 0x1) socket(0x1, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x1000000, 0x8010, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f00000005c0)={0xa690b000, &(0x7f0000000640), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x0) 19.013453179s ago: executing program 7 (id=176): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) semop(0x0, &(0x7f0000000000)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(0x0, &(0x7f0000000040)=[{0x1, 0xbbdb, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x6, 0x7fff]) r1 = dup(r0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000a40)=@raw=[@map_idx={0x18, 0xa}], &(0x7f0000000a80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xa594, 0xffffffffffffffff, 0x2, &(0x7f0000000ac0), &(0x7f0000000b00)=[{0x5, 0x4, 0xa, 0x8}, {0x4, 0x1, 0xd, 0x9}], 0x10, 0xfdd}, 0x94) syz_emit_ethernet(0x66, 0x0, 0x0) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x1, 0x401d031, r1, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000bc0)=0x1002, 0x4) sendto$inet(r2, 0x0, 0x0, 0x6000, &(0x7f0000000c00)={0x2, 0x4622, @remote}, 0x10) recvfrom(r2, 0x0, 0x0, 0x80002161, 0x0, 0xffffffffffffff89) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x40080c0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in6=@initdev, @in=@empty}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000e00)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000e40)) capset(&(0x7f0000000e80)={0x20080522}, &(0x7f0000000ec0)={0x200002, 0x1fffff, 0x801, 0x4, 0x7, 0x3}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) io_setup(0x10, &(0x7f0000000f00)=0x0) io_getevents(r3, 0x1, 0x1, &(0x7f0000000f40)=[{}], &(0x7f0000000f80)={0x0, 0x3938700}) 18.795712001s ago: executing program 3 (id=178): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000002380)={0xf667617, 0x80, 0x0, 'queue0\x00', 0x1}) 18.60686177s ago: executing program 7 (id=179): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000001c0)={0x1, &(0x7f0000000380)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x40000000000007, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x2, @perf_bp={0x0, 0x1}, 0x9679149b910765de, 0x8f2, 0xfffffffd, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) getrusage(0x0, &(0x7f0000000500)) r1 = fsopen(&(0x7f0000000080)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) setns(0xc9, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000740)='cmdline\x00') preadv(r4, 0x0, 0x0, 0x9, 0x6a76) fchdir(r2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r6], 0x4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000700)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f00000008c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000127bd7000fedbdf250300000005002d000100000008002c000c00000008000600", @ANYRES32=r8, @ANYBLOB="2f62405dd9b9a111890cd175cd77a095f259568be6441174a023c5675a60a759b515633290ec05cb0fc59d18043a5a1924def2fc053d20e91abfbaf15b1597b8ce8bd526aa5363781ab5afaf92420b3529348afc8660cace3efc1eb9c669e47ea778468b083a1af3ab1ecb599556ad1aab17c6a3fed477c5f5925326b76c572cdb2d23bca9406c38758c8fb35582bf9c0a9373c154f42e1554f5c563e9e5a7e891230abf460a8a2a641ff5548617b33644df7f471646f8b73334b8a9b9f3cfb29d8479df0f82fb81b9b6b88ee82ae3e27d10048d58ca4fcaf656065514cb9886c7b8f87dedf1eeb7489f591c89a4cf2b1e288b"], 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x20000800) syz_open_procfs(0x0, &(0x7f0000000800)='net/rpc\x00') ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) write(0xffffffffffffffff, &(0x7f0000000880)='8 2000000000 0\n', 0xf) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000003c0)) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00e126bd7000ffdbdf253f0000000c009900030000000d00000014005e80880002000900000008000300291e00000c005e8008000600080000002c005e00080005001d00000008000700f1060000080003000200000008000900010400000800030001000000dab1435cc61781e3bacaa5ca896daa83b374a4bfde082ca46139df771a2e0ed8cbbf39a9c5e44b7e787e8ca5e8b0c9fe44a294487e2cde96"], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r9 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r9, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) sigaltstack(&(0x7f0000000a00)={0xffffffffffffffff, 0x0, 0xfffffffffffffeab}, 0x0) sigaltstack(&(0x7f0000000a40)={0x0, 0x80000002}, 0x0) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r9, 0x24, &(0x7f0000000400)={0x0, 0x3}, 0x0) 18.238676287s ago: executing program 7 (id=181): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) io_setup(0x3ff, &(0x7f0000000080)) read$msr(r0, &(0x7f00000000c0)=""/231, 0xe7) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000440)={0x6, 0x1, 0x0, 0x7ff, @vifc_lcl_addr=@broadcast, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) io_submit(0x0, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x1, r0, 0x0, 0x0, 0xffff}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r2, &(0x7f0000000400)='m', 0x1, 0x0, 0x0, 0x2}]) r3 = openat$cgroup_ro(r0, &(0x7f0000000040)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = mq_open(&(0x7f0000000280)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) mq_timedsend(r4, &(0x7f0000001d40)="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", 0x3ca, 0x6, 0x0) 18.163148095s ago: executing program 3 (id=182): socket$nl_route(0x10, 0x3, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x2, &(0x7f0000000400)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xc2, r1, 0x0, 0x0, 0x36, 0x0, 0x0, r1}, &(0x7f0000000880)={0x0, 0x0, 0xfe, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) setns(0xc9, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x0, 0x9}, {0xfff1, 0x2}, {0x3, 0x1}}}, 0x24}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="b40000000000000779119c00000000001801000020646c2500000000002020207b18f8ff0000000079a100000000000007010000f8ffffffb702000008000000b703000007000000850000002f0000009500740000000000ef5f6082e4a0a52b72bde925efe35e0c28542f1716572a77c3939e085958131eb5d6ab7a69e1a83a4c8354fce7a66fe529cf5d06f6010e13c72fe2174e984706fbb446efe6271a62fc1c495beb391ce3ca6f852a3a36ecf9c5"], &(0x7f0000000700)='GPL\x00', 0x2, 0xc, &(0x7f0000000740)=""/195, 0x0, 0x2e, '\x00', 0x0, @fallback=0xd}, 0x59) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x7fff, @empty}, 0x1c) sendto$inet6(r7, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c, 0x0, 0x0, 0xee}, 0x28) 18.10942452s ago: executing program 37 (id=182): socket$nl_route(0x10, 0x3, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x2, &(0x7f0000000400)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xc2, r1, 0x0, 0x0, 0x36, 0x0, 0x0, r1}, &(0x7f0000000880)={0x0, 0x0, 0xfe, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) setns(0xc9, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x0, 0x9}, {0xfff1, 0x2}, {0x3, 0x1}}}, 0x24}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="b40000000000000779119c00000000001801000020646c2500000000002020207b18f8ff0000000079a100000000000007010000f8ffffffb702000008000000b703000007000000850000002f0000009500740000000000ef5f6082e4a0a52b72bde925efe35e0c28542f1716572a77c3939e085958131eb5d6ab7a69e1a83a4c8354fce7a66fe529cf5d06f6010e13c72fe2174e984706fbb446efe6271a62fc1c495beb391ce3ca6f852a3a36ecf9c5"], &(0x7f0000000700)='GPL\x00', 0x2, 0xc, &(0x7f0000000740)=""/195, 0x0, 0x2e, '\x00', 0x0, @fallback=0xd}, 0x59) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x7fff, @empty}, 0x1c) sendto$inet6(r7, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c, 0x0, 0x0, 0xee}, 0x28) 17.286742134s ago: executing program 7 (id=186): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000880)={0x2, 0x80, 0x2e, 0x1, 0xb7, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={&(0x7f0000000900), 0x8}, 0x0, 0x1224, 0x10, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x200000a4, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x10c100, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000a00), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0xde9e98a5d576d4ee, 0x8010, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./sys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./sys/devices/system/cpu/smt/control\x00', 0x84201, 0x0) write(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x1e, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000711215000000000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c00)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca40f}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040040}, 0x44040) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000000000)={0x9, 0x1}) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x21081e, &(0x7f00000000c0)={[{@block_validity}, {@usrquota}, {@nobh}]}, 0x1, 0x526, &(0x7f0000000100)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x183042, 0x15) pwrite64(r6, &(0x7f0000000680)='2', 0xfdef, 0xe7c) fallocate(r6, 0x10, 0x37ec, 0x683) mkdirat(0xffffffffffffff9c, &(0x7f0000000dc0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000e00)='./proc\x00', &(0x7f0000001040)='proc\x00', 0x4000, 0x0) socket$igmp6(0xa, 0x3, 0x2) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r7) 16.532278721s ago: executing program 7 (id=187): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073c17a5f74756e000000000000000000180003800800040000810000000002002000000004000100"], 0x44}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x101, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x841e, &(0x7f00000001c0)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x8, 0xffffffffffffffff, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) select(0x40, &(0x7f0000000580)={0xf, 0x6, 0x6, 0x8, 0x3ff, 0x1, 0xfff, 0xac}, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x42202) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000f40)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtaction={0x4c, 0x30, 0x1, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40) write$sndseq(r3, &(0x7f00000005c0)=[{0x84, 0x77, 0x1, 0x0, @tick=0xffffff3f, {0x0, 0xfd}, {}, @raw32={[0x0, 0xfffffffd]}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000600)={0x197, @tick, 0x0, {0x81}, 0x9a}) 16.001084435s ago: executing program 7 (id=188): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000004a80)="05031c00d1fd140000", 0x9, 0x4, &(0x7f0000004ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) perf_event_open(&(0x7f0000004b00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x40000004, 0x0) lsm_list_modules(0x0, &(0x7f0000004b80), 0x0) sendmsg$nl_route(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004c00)={&(0x7f0000004c40)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e00"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004cc0)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004d40)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064000000140001800800010064000000080002"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004d80)={0x0, 0x0, &(0x7f0000004dc0)={&(0x7f0000004e00)=ANY=[@ANYBLOB="200000001100010003000000000000000000000064"], 0x20}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e40)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000004ec0)={0x0, 0x0, 0x0}, 0x24004045) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000004640)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x1d0, 0xc8, 0x8, 0x1d0, 0x5803, 0x2e0, 0x2e8, 0x2e8, 0x2e0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x168, 0x1d0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x1, {0x80000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x7ffffffe, 'snmp\x00', 'syz0\x00', {0x8}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) connect$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0x0, @hyper}, 0x10) pipe(&(0x7f00000006c0)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000005100)=0xffffffffffffffff, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40084c1) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005180)={&(0x7f00000051c0)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b0000feff00"], 0x30}}, 0x4) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x8, 0x5a103) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x1, &(0x7f0000000080)={0x4, 0x14, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x4, 0x48000000, 0x6, 0x1, 0x0}) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f00000000c0)=""/18, 0x10000, 0x800, 0x0, 0x3}, 0x20) syz_usb_connect(0x0, 0x36, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000005200)={0x0, 0x0, &(0x7f0000005240)=[{&(0x7f0000005280)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a0010000000", 0x28}, {&(0x7f00000052c0)="11c9064268e9", 0x6}], 0x2}, 0x8040050) 15.964920058s ago: executing program 38 (id=188): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000004a80)="05031c00d1fd140000", 0x9, 0x4, &(0x7f0000004ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) perf_event_open(&(0x7f0000004b00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x40000004, 0x0) lsm_list_modules(0x0, &(0x7f0000004b80), 0x0) sendmsg$nl_route(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004c00)={&(0x7f0000004c40)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e00"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004cc0)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004d40)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064000000140001800800010064000000080002"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004d80)={0x0, 0x0, &(0x7f0000004dc0)={&(0x7f0000004e00)=ANY=[@ANYBLOB="200000001100010003000000000000000000000064"], 0x20}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e40)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000004ec0)={0x0, 0x0, 0x0}, 0x24004045) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000004640)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x1d0, 0xc8, 0x8, 0x1d0, 0x5803, 0x2e0, 0x2e8, 0x2e8, 0x2e0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x168, 0x1d0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x1, {0x80000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x7ffffffe, 'snmp\x00', 'syz0\x00', {0x8}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) connect$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0x0, @hyper}, 0x10) pipe(&(0x7f00000006c0)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000005100)=0xffffffffffffffff, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40084c1) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005180)={&(0x7f00000051c0)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b0000feff00"], 0x30}}, 0x4) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x8, 0x5a103) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x1, &(0x7f0000000080)={0x4, 0x14, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x4, 0x48000000, 0x6, 0x1, 0x0}) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f00000000c0)=""/18, 0x10000, 0x800, 0x0, 0x3}, 0x20) syz_usb_connect(0x0, 0x36, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000005200)={0x0, 0x0, &(0x7f0000005240)=[{&(0x7f0000005280)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a0010000000", 0x28}, {&(0x7f00000052c0)="11c9064268e9", 0x6}], 0x2}, 0x8040050) 13.205980639s ago: executing program 1 (id=210): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x477, 0xb527, 0xb5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x120, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, 0x0, 0x400d4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./bus\x00', 0x1218048, &(0x7f0000000380)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x150, &(0x7f0000000440)="$eJzs27+KE1EUB+CTP2rUJrVYDNhYBfUJFIkgDihKCq0Uok0iAdOMVnkUX8c38CUWllTp7rI7S7KbTYotJrObfF8zB34MnFPMHO7AfH38czScTH9MPsyj02hE+2VksWhEN5rRitIsAIB9skgpjlNK6d4s7v+NlFLdHQEAVbP/AeDw2P8AcHiu7P9m3R0BAFX79PnLu1d53v+YZZ2Io1kxKAbltczfvM37z7Iz3dVd86IYtJb58zLPLud34sF5/mJjfjeePinz0+z1+3wtfxjD6scHAACAg9DLljae73u9bXlZXfg+sHZ+b8ej9s7GAACuYfr7z+jbePz9l0Jxi4r//yJuQBt7XNT9ZgKqtnro6+4EAAAAAAAAAAAAAADYZhe/E9U9IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKw7CQAA//+ueFEp") r2 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000100), &(0x7f0000000240)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000600), 0x208e24b) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], &(0x7f00000002c0)=""/152, 0x86, 0x98, 0x0, 0x1}, 0x28) 10.73693246s ago: executing program 1 (id=224): r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7b95b611, 0x802) writev(r0, &(0x7f0000000740)=[{&(0x7f00000000c0)="ab06500000f33b346f4c1fc1dd256d9b65b9bfad2b69749ab5fc1e81bc5fe53a1343dc20e7522f08143e5de16acf9fcbb4e07b9c97f1eb69b4c20363babfe45a5cfbaf496e45e85a0f899352f8294df406e34d9efc43a88748959224c4375bd17b298cc7d5201e5b4d556358d9014e1d850c68b69544be79b09e64dfb69d4a0d17d0768a894d50f1c7376a740ccac2fb9e89530ba38db46c1600812534a9c3", 0x9f}, {&(0x7f0000000180)}, {&(0x7f00000001c0)="e4", 0x1}, {&(0x7f0000000500)="1b9241d347c685b428ea4d4f1f6ebedd4dbda1caeaa850bb51d817e3faeb9ef09cca0afa2574c39fa26df330c678bd5545ed552e51e8b04af60cce1c7653edeb7928f7ae1fb9", 0x46}, {&(0x7f0000000680)="3c7abbc42ffe79393f9dfc75c03f1c480b20a2649a458a6e2942886c5e975cd994f56b9839dae0f6869531fc41d511034b9b80bb9d532d6c0d9defc04b2764a1915b4a440c6aca075a46fd9abfa9c83589cffcdb089d1b367c6041383e0ab3647a04226e5cfa0ad45221f593e6624eca5e3c827169fbce5b45f1c877f55a43855913eec0dd286b42367adbcc", 0x8c}], 0x5) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0xb8e9, 0x0, 0x1, 0x0, 0x64c, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x40020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x1}, 0x4, 0x0, 0xffffffff, 0x0, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x20001, 0x19}}, './file0\x00'}) fcntl$lock(r2, 0x24, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20000000) r3 = socket$inet(0x2, 0x2, 0x0) ioctl(r3, 0x8915, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000003c0), 0x12) mq_open(&(0x7f0000000400)='eth0\x00', 0x42, 0x0, 0x0) r4 = io_uring_setup(0x4c22, &(0x7f0000000580)={0x0, 0x0, 0x400, 0x10003, 0xf8}) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./dev\x00', 0x147) mount(0x0, &(0x7f0000000800)='./dev\x00', &(0x7f0000000840)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./dev/console\x00', 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x545c, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f00000008c0)=[{{&(0x7f0000000940)={0xa, 0x4e1f, 0x1, @private0, 0x1}, 0x1c, &(0x7f0000000980)=[{&(0x7f00000009c0)="a4", 0x1}], 0x1}}, {{&(0x7f0000000a00)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000a80)="4dfc", 0x2}], 0x1}}], 0x2, 0x40001) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000000ac0), &(0x7f0000000b00)=0x8) close_range(r4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c00)=""/247, 0xf7}], 0x1, &(0x7f0000000d00)=[{&(0x7f0000000d40)=""/231, 0xffffff4e}], 0x23a, 0x0) mq_notify(r0, &(0x7f0000000440)={0x0, 0x34, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 10.372390597s ago: executing program 1 (id=229): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xec083, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x41) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, &(0x7f0000000780)) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x4000002, 0x232, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0xa1, &(0x7f0000000880)=[{&(0x7f00000008c0)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) syz_mount_image$ext4(&(0x7f0000000940)='ext4\x00', &(0x7f0000000980)='./mnt\x00', 0x2000c10, &(0x7f00000009c0), 0xff, 0x23f, &(0x7f0000000a00)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x13, 0x4, &(0x7f0000000ec0)=ANY=[@ANYBLOB="7b06f8ff00000000850000004b00000079a1f8ff0000000095"], &(0x7f0000000f00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setxattr$system_posix_acl(&(0x7f0000000c40)='.\x00', &(0x7f0000000c80)='system.posix_acl_default\x00', &(0x7f0000000d80)=ANY=[@ANYBLOB="020000000100000000000000040000002d84775f5b5750f4ad00ffff10000000000000002000000000000000770de14cf8e15093a378babf1b875e3db85651dfaa14c2bd0195b6ffb1a617babbc98b95509e65b73c1292334768aeca"], 0x24, 0x7) r3 = open(&(0x7f0000000d00)='./bus\x00', 0x143943, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./nfs_mnt\x00', 0x1ff) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x20800) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r3, 0x84, 0x7a, &(0x7f0000000040)={0x1, 0xffffffffffffffff, 0x80800}, &(0x7f0000000f40)=0xc) getsockopt$inet_sctp6_SCTP_REMOTE_UDP_ENCAPS_PORT(r1, 0x84, 0x84, &(0x7f0000000f80)={r4, @in={{0x2, 0x4e24, @broadcast}}, 0x4e20}, &(0x7f0000001040)=0x90) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000cc0)={r5, 0xffffffffffffffff, 0x100c00}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000500)={0x1, @in6={{0xa, 0x4e23, 0x6, @private1, 0x3}}, 0xd, 0xf623}, &(0x7f00000005c0)=0x90) sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000180)=@in6={0xa, 0x4e24, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0xd}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000001c0)="a5eae8b04bd7964e22f13547d22fff2d3f647a3ab7e570a36b89bbf51fe47a146d09bd51cc0630158ea1fda6957cca5f3496b89a98c4880dc3fc45ebc18950e48cda77033fbd5da33da68d7a8e4ade66540c1579550ae9bb1c707a8b4b651790e47a90eb098a30538679ead08182aed9e88c966767200066e4370dd373f8b02cd3cfa2225e4f224389154349d66a5ef543c6c7c628f0cbf574a907321e7bc4ff024db804ecb9b5ea382d66f7fc2156ee0258d985889f8c50f94811ef86e0cbf03a19910cc27a5a57faa7712db737d1eed4e33d71d7521ef70b58fbe4b11e00e90e02686ce645baa3127bfe7b99a7cc7d27e456eb3488", 0xf6}, {&(0x7f00000002c0)="ac0f062a9b42cc503538f50e597b4ca5550252db365df684dc2060547048839f388d3e45ed3783307c22263d47c9a772210a455336fd053538d4a490fbc73caf38b7712cd8887d25d1fc50b6e863d2d7c801e472785309713afed2b87879fb8d3ff5c703508979a3c5d91bc5c15d01e6d33dc7bf8580d177aa916564b77bf2e9d509c0e3a6b677f77703e214b9b0e16e8ab3b3", 0x93}, {&(0x7f0000000380)="85f3fb9d1a867997266883b6e2a7a78c318a7cb223abaeaeb776f141e4f16db6d91e0747c21c16af1748af30590d76091ff063f466ae5734cf95021a4b698f36a23dd57ed7204f1140bb5b7ae9c014e300cf4e444eaa34ba4e3b6092b1ae98280e1349c0d1afd02adf035fb88c3e03e8a60336b6c774666af216c11c7f4f5b5dfa27e99165051efc0002f03f6e6dbe51678dbb6f8ebd28c0045486a8835c27c731f3f09fa52e9eb6fc43f033c0916a72e6bf05b57ffceaf6d68b266d7c6ffb47", 0xc0}, {&(0x7f0000000440)="030406996db74be9a1b1ad1d6ef8f45aeb4aaa4fc69bedc286c7f7037ec8dd1dff90013665c88ba1c95cab3a99eddb34fc5e6c94cc0a93e67c9f3dae05eb0db0119ba69dc774ddb375753d06054c5f6affdd", 0x52}], 0x4, &(0x7f0000000600)=[@dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, '\x00', 0x24}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x8, 0x800f, 0xff, 0x7, 0x8000, 0x8, 0xb, r7}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x6}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x1}}, @authinfo={0x18, 0x84, 0x6, {0x8}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x100}}, @init={0x18, 0x84, 0x0, {0x346, 0x5, 0x10, 0xdb}}, @init={0x18, 0x84, 0x0, {0x3, 0x8f17, 0x1, 0x1}}], 0x100, 0xc800}, 0x400c004) 10.010314994s ago: executing program 1 (id=232): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="200000001400030500008000fbdbdf25021f56ff96", @ANYRES32=r2, @ANYBLOB="08000100ac1414aa"], 0x20}, 0x1, 0x0, 0x0, 0xc094}, 0x48006) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x4000854}, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000014c0)=@newtaction={0x1c, 0x76, 0x1, 0x6, 0x0, {0x0, 0x0, 0x300}, [{0x4}, {0x4}]}, 0x1c}}, 0x40000) ioctl$RNDCLEARPOOL(r3, 0x5206, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) r4 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x500, &(0x7f0000000a40)="$eJzs3c9vVF0ZAOD3Tju0X7+BFmWhRgURRUOY/gAaggthozGExEhcuYDaDk3TGabptEgri7J0byKJK/0T3LkwYeXCnTvducGFCSrRUBMX8+XeubSl7dAB2g50nie53HvOvfQ9Z4Zzzr2HzpwAetaZiFiLiGMRcTcihvP8JN/iemtLr3v54tH0+otH00k0m7f/lWTn07zY8ndSn+Y/czAifvT9iJ8mO+M2Vlbnp6rVymKeHl2qLYw2VlYvzhXynInJ8cmxq5euTHRYk/49rzhd+93z783d/PEffv+VZ39e+/bP02KVfnE8O7e1HvupVfVilLaV9OZBBOuS/vzfzzso7ndZeDtpa/tcRJzN2v9w9HXQjgCAj1uzORzN4a1pAOCoS5//S5EUyvlcQCkKhXK5NYd3KoYK1Xpj6cJwffn+TGRzWCNRLNybq1bG8rnCkSgmaXo8O95MT2xLX4qIkxHxy4FPsnR5ul6d6eaNDwD0sE+3jf//HWiN/wDAETfY7QIAAIfO+A8Avcf4DwC95y3Gf58OBIAjwvM/APQe4z8A9J49x//Hh1MOAOBQ/PDWrXRrrufffz3zYGX5O6UHF2cqjflybXm6PF1fXCjP1uuz1Up5utnc6+dV6/WF8csbycbK6p1affn+0p252tRs5U7FFz4DQPedPP30r0lErF37JNtiy1oOxmo42grdLgDQNX3dLgDQNT7PA72rg2d80wBwxO2yRO9r2v6K0JN3X/wV6K7zXzT/D73K/D/0rneb///uvpcDOHzm/6F3NZuJNf8BoMeY4wfe6///AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEeVsi0plLO1wNfSPwvlcsTxiBiJYnJvrloZi4gTEfGXgeJAmh7vdqEBgPdU+EeSr/91fvhcafvZY8n/BrJ9RPzs17d/9XBqaWlxPM3/90b+0pM8f+JYNyoAAGx1fWdWa5zO91se5F++eDT9ajvMIj6/0VpcNI27nm+tM/3Rn+0HoxgRQ/9J8nRLer/Stw/x1x5HxBc26/9wS4TSYMRIvvLp9vhp7OMHEH/z9U+yuZnN+IXX4heyc+m+mL0Wn9+HskCveXqj1U/mbS9tYnn7K8SZbL97+x/Meqj396r/W9/R/xU2+r++HfGTrM2f2Ui/uSTPL//xBzsym8Otc48jvtS/W/xkI37Spv8912Ed//blr55td675m4jzsXv8llrWzY4u1RZGGyurF+dqU7OV2cr9iYnJ8cmxq5euTIwORLUyNprNVP9ptxj/vHbhRLv4af2H2sQf3KP+3+iw/r/9/92ffO0N8b/19d3f/1NviJ+Oid/sMP7U0PU2y3e3Vv+faVP/vd7/Cx3Gf/b31ZkOLwUADkFjZXV+qlqtLO5xkN5r7nWNg4/zINYiPoBi9OhBeg/+ARRjx0G3eybgoG02+m6XBAAAAAAAAAAAAAAAaKexsjo/EAf7caJu1xEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICj67MAAAD//y2oyxU=") r5 = socket$kcm(0xa, 0x922000000003, 0x11) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xa, &(0x7f00000008c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r6, @ANYBLOB="00000000000000000f080000040000001800000000000000000000000900000095000000000000009500000000000000"], &(0x7f0000000940)='GPL\x00', 0x4}, 0x94) sendmsg$kcm(r5, &(0x7f0000000180)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000680)="f4001100032b3b25fe8007000000007a2c08000000090000ff110000000000000000fffffff50000", 0x28}], 0x1}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x4) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) lseek(r4, 0xa8, 0x1) socket(0x1, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x1000000, 0x8010, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f00000005c0)={0xa690b000, &(0x7f0000000640), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x0) 8.826026364s ago: executing program 1 (id=241): unshare(0x1a060680) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f0000000240)) 8.446202742s ago: executing program 1 (id=246): prctl$PR_SET_SECUREBITS(0x1c, 0x24) socket$netlink(0x10, 0x3, 0x10) (async) r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0x80, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x807, 0x1}, 0x8c9d73cc0755ea0d, 0x400, 0xc40, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, 0x0, 0x8080) setresuid(0x0, 0xee00, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) unshare(0x4020600) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x101001, 0x0) open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r3, 0x6, 0xb, 0x0, 0x0) (async) getsockopt$inet_tcp_buf(r3, 0x6, 0xb, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80003, 0xff) r5 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000400), 0x4) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000440), 0x4) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000480)=0xfffffffe, 0x4) (async) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000480)=0xfffffffe, 0x4) setsockopt$inet_int(r3, 0x0, 0x13, 0x0, 0x0) (async) setsockopt$inet_int(r3, 0x0, 0x13, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r2, &(0x7f0000000040)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) (async) sendmmsg(r2, &(0x7f0000000040)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) unshare(0x6020400) 8.441628863s ago: executing program 39 (id=246): prctl$PR_SET_SECUREBITS(0x1c, 0x24) socket$netlink(0x10, 0x3, 0x10) (async) r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0x80, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x807, 0x1}, 0x8c9d73cc0755ea0d, 0x400, 0xc40, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, 0x0, 0x8080) setresuid(0x0, 0xee00, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) unshare(0x4020600) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x101001, 0x0) open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r3, 0x6, 0xb, 0x0, 0x0) (async) getsockopt$inet_tcp_buf(r3, 0x6, 0xb, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80003, 0xff) r5 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000400), 0x4) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000440), 0x4) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000480)=0xfffffffe, 0x4) (async) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000480)=0xfffffffe, 0x4) setsockopt$inet_int(r3, 0x0, 0x13, 0x0, 0x0) (async) setsockopt$inet_int(r3, 0x0, 0x13, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r2, &(0x7f0000000040)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) (async) sendmmsg(r2, &(0x7f0000000040)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) unshare(0x6020400) 7.043644195s ago: executing program 0 (id=257): syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x40942, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfea7) r1 = mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x20ec, 0x3, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x73, 0x0, 0x1, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000440), 0x5}, 0xa, 0x0, 0x7, 0x9, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRESDEC=r1, @ANYRESDEC=r0], 0x50) r2 = syz_usb_connect$rtl8150(0x0, 0xffffffffffffff2d, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000380)=""/132, 0x84}], 0x2}, 0x4}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x200000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000340)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000f00)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000f80), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000fc0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001040)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000001100)={0x0, 0x9cf0, 0xc002, 0x8, 0x2bb}) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000001180)={0xfffffffffffffff9, 0x7, 0x0, 0xd, 0x7bffffff, 0xfffffffffffffffe, 0x7, 0x200000000000000, 0x80000bd, 0x6, 0xfff, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x5988, 0x8100000000005a, 0x3, 0x4}) syz_emit_ethernet(0x86, &(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r2], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) open(&(0x7f0000000700)='./file0\x00', 0x604c00, 0xf1ef434029757bf7) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r6) 6.016667619s ago: executing program 2 (id=262): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000001980)='task\x00') lseek(r2, 0x1, 0x1) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001840)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000021000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x404c080}, 0x4008840) r3 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x28394, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x3, 0x9}, 0x5207, 0x8, 0x11000, 0x5, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000100)={r3, &(0x7f0000000000)='veth0_to_team\x00', 0x200001, &(0x7f0000000040)={@_ha_fsid={[0x4, 0x4]}, {0x2, 0x5, 0x6, 0x4}}, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x3}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000001c0)) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001900)="1400000017000b63d25a80648c2594f952a3c92b", 0x14}], 0x1}, 0x0) r7 = open(&(0x7f0000000200)='./bus\x00', 0x145142, 0x0) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000001940)={0x6, @empty, 0x15, 0xffffffff, 'lblc\x00'}, 0x2c) preadv2(r7, 0x0, 0x0, 0x800, 0x5, 0x4) recvmsg$can_j1939(r5, &(0x7f0000001800)={&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/7, 0x7}, {&(0x7f0000001480)=""/90, 0x5a}, {&(0x7f0000000240)=""/81, 0x51}, {&(0x7f0000001580)=""/11, 0xb}, {&(0x7f00000015c0)=""/4, 0x4}, {&(0x7f0000001600)=""/169, 0xa9}], 0x7, &(0x7f0000001740)=""/160, 0xa0}, 0x12002) connect$inet(r4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000003c0)={'veth0_to_team\x00', &(0x7f0000000400)=@ethtool_cmd={0x2c, 0x6, 0x40001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3, 0xfc, 0x6, 0x0, [0xfffffffd]}}) r9 = fsmount(r5, 0x1, 0x8b) sendfile(r9, r5, 0x0, 0x5) 5.923926488s ago: executing program 2 (id=264): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000600)=ANY=[], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./proc\x00', &(0x7f00000007c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000840)='3', 0x4e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x5, 0xe, 0x0, &(0x7f0000000900)="75e0be22b7b8febbe672ecdf74af", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') pread64(r3, &(0x7f00000000c0)=""/31, 0x1f, 0x6676) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000100), &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xab, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, @perf_bp={0x0, 0x9}, 0x6000, 0x10428f, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000400)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x7fffffff}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r4, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000004) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@mpls_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x2000}}, 0x1c}, 0x1, 0x14, 0x0, 0x24040000}, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x2a000600) syz_usb_disconnect(r0) setns(0xc9, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000700)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x10f) 4.836925149s ago: executing program 2 (id=272): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000280)=0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = memfd_create(0x0, 0x0) pwrite64(r0, &(0x7f0000000440)="2f5ec41eecf8bf61395a42f18962dacbdf54a80513ea6d35ab75c71b258b1c8dd1e351ff0760afe1a4ecf17628312172aafb286cede05c96cb131ad06e725c52d3e4eabacaae6fc6c735edb84ed7534392a1508b13b71dc773e0add2c906f358786b", 0x62, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, 0xffffffffffffffff, &(0x7f00000004c0), 0x7fa) symlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) perf_event_open(&(0x7f00000005c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x781, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) write(r1, &(0x7f00000006c0)='0', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/memory.force_empty\x00', 0x880cc2, 0x20) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x2200002, &(0x7f0000000000)={[{@discard}, {}, {@grpquota}, {@norecovery}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0x1, 0x582, &(0x7f0000001840)="$eJzs3V9rW+UfAPDvSdP9//3WwRjqhRR24WQu3Vr/TBA2L0WHA72foc3KaLqMJh1rHWy7cCDeyBBEHIgvwHsvhy9AX8VAB0NG0QtvIic92bKmafonWzLz+cBpn+c8J3nOk+c8T74n54QEMLTG0z+5iJcj4usk4mBLWT6ywvHV7VYeXZ9OlyTq9U/+TCLJ1jW3T7L/+7PMSxHxyxcRx3Pt9VaXlueK5XJpIctP1OavTFSXlk9cmi/OlmZLlyenpk6/NTX57jtvb7ot+S7lr5//+7uP731w+qujK9/+9ODQnSTOxoGsrLUdO3CzNTMe49lrMhpn12x4qgeVDZKk3zvAtoxk42Y00jngYIx0HUXAf8WNiKgDQyox/mFINeOA5rl9j86DXxgP3189AWpvf371s5HY0zg32reSPHVmlJ7vjvWg/rSOn/+4eyddosvnEDd6UB9A081bEXEyn2+f/5Js/tu+k40Pjze2to5he/+BfrqXxj9vrBf/5B7HP7FO/LN/nbG7Hd3Hf+5BD6rpKI3/3ls3/n08dY2NZLn/NWK+0eTipXLpZET8PyKOxejuNL/R9ZzTK/frncpa4790SetvxoLZfjzI7376MTPFWnEnbW718FbEK0/i3yTa5v89jVh3bf+nr8f5NPHrl13rOFK6+2qnsu7tb9X7CLj+Y8Rr6/b/kytaycbXJycax8NE86ho99ftI791qn9r7e+9tP/3bdz+saT1em1163X8sOefUqey7R7/u5JPG+ld2bprxVpt4VTEruSj9vWTTx7bzDe3T9t/7OjG8996x//eiPhsk+2/ffh2x00Hof9nttT/W0/c//Dz7zvVv7n+f7OROpat2cz8t9kd3MlrBwAAAAAAAIMmFxEHIskVHqdzuUJh9f6Ow7EvV65Ua8cvVhYvz0Tju7JjMZprXuk+uHqZNWne/zDWcn/E5Jr8VEQciohvRvY28oXpSnmm340HAAAAAAAAAAAAAAAAAACAAbG/w/f/U7+P9HvvgGfOT37D8Oo6/nvxS0/AQPL+D8PL+IfhZfzD8Gof/2N92Q/g+fP+D8PL+IfhZfzD8DL+AQAAAAAAAAAAAAAAAAAAAAAAAAAAoKfOnzuXLvWVR9en0/zM1aXFucrVEzOl6lxhfnG6MF1ZuFKYrVRmy6XCdGW+2/OVK5UrpyZj8dpErVStTVSXli/MVxYv1y5cmi/Oli6URp9LqwAAAAAAAAAAAAAAAAAAAODFUl1aniuWy6WF4UrUt7LxmRiIfd52IunWy2eyg2FLzxxZIt//Bko8g0SfJyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaPFvAAAA//8hDDVW") socket$inet6_sctp(0xa, 0x0, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000e00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000e80), 0xc}, 0x18, 0x9, 0x0, 0x5, 0x800000, 0x43, 0x4e7, 0x0, 0x3, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044000}, 0x1) syz_mount_image$ext4(&(0x7f0000000f00)='ext4\x00', &(0x7f0000000f40)='./file1\x00', 0x3000000, &(0x7f0000000f80)={[{@noquota}]}, 0x4, 0x521, &(0x7f0000000fc0)="$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") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0x58}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x4084) bind$unix(0xffffffffffffffff, &(0x7f0000001680)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001700)='/proc/keys\x00', 0x1800, 0x0) preadv2(r3, &(0x7f0000001740)=[{&(0x7f0000001780)=""/134, 0x86}], 0x1, 0xfffffffd, 0x558, 0x12) 4.797626213s ago: executing program 8 (id=273): r0 = socket$packet(0x11, 0xa, 0x300) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xd, 0x10, &(0x7f0000000400)=ANY=[@ANYRESHEX=r1, @ANYRES8=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x94) timer_create(0x1, &(0x7f0000000040)={0x0, 0x32, 0x2}, &(0x7f00000001c0)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2141, 0x59) pwrite64(r3, 0x0, 0x0, 0x8000c61) timer_settime(r2, 0x0, &(0x7f0000000280)={{}, {0x77359400}}, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x10, &(0x7f0000000380)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x44, 0xfffffffe}]}, 0x10) syz_emit_ethernet(0x30, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @esp={{0x5, 0x4, 0x0, 0x0, 0x22, 0x0, 0x0, 0x40, 0x32, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {0x4d2, 0xffff}}}}}, 0x0) 4.643216208s ago: executing program 8 (id=274): perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000001580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x7, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r2}, 0xc) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000001680)={0x0, 0x0, 0x9, 0x10008001, 0x3, 0x81}) 4.481224835s ago: executing program 8 (id=275): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000300)=0x2000008) getrlimit(0x0, &(0x7f0000000180)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sync_file_range(0xffffffffffffffff, 0x6, 0x9fd, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c4) r4 = syz_open_dev$usbfs(0x0, 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000140)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='loginuid\x00') read$eventfd(r5, 0x0, 0x0) unshare(0x40000000) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)="32d928e04e707327deac9a3b83c39b58e35e1c8e28ab480fbf80593df2a12d986f5446b7c315d7013794abed7d911bb08f70c3dbc4dd2c20500eef3e93f85e704d009273972b8f6e33187247614e1c06ed5ea0575ced33d34fcccb25dd", 0x5d) write$cgroup_int(r6, &(0x7f0000000280)=0x8, 0x12) 4.122243241s ago: executing program 9 (id=277): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xa4}, [@ldst={0x4, 0x0, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) 4.054426228s ago: executing program 9 (id=278): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x7, 0x0, 0x0, 0x0, 0x4, 0xf6, &(0x7f0000000100)=""/246, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80002}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f000009e000/0x4000)=nil, &(0x7f000030a000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00003db000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000347000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x108081, 0x400000, 0x100, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) link(0x0, &(0x7f0000000400)='./file0\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400a044}, 0x20004090) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r1, &(0x7f0000000580), 0x318, 0xfc0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004014, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='fdinfo/3\x00') socket$phonet(0x23, 0x2, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x24004084) r2 = io_uring_setup(0x895, &(0x7f0000000700)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000800)={0x1, &(0x7f0000000840)=[{0x6, 0x5, 0x8, 0x7ffc0001}]}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x20) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) 3.905785323s ago: executing program 0 (id=279): socket(0x10, 0x803, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00007c2000/0x4000)=nil, &(0x7f00009dc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000726000/0x13000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x800}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) semget(0x2, 0x1, 0x101) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000000a80)=""/102392, 0x18ff8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000019a80)='/proc/locks\x00', 0x0, 0x0) preadv(r2, &(0x7f0000019ac0)=[{&(0x7f0000019b00)=""/4107, 0x100b}], 0x1, 0x33, 0x0) r3 = open(&(0x7f000001ab40)='./file0\x00', 0x108843, 0x190) fcntl$setlease(r3, 0x400, 0x0) open(&(0x7f000001ab80)='./file0\x00', 0x60840, 0x1d2) r4 = syz_open_procfs(0x0, &(0x7f000001abc0)='smaps\x00') pread64(r4, &(0x7f000001ac00)=""/102400, 0x19000, 0xffffffff8) perf_event_open(&(0x7f0000033c00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x10c100, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_xfrm(0x10, 0x3, 0x6) sendto(0xffffffffffffffff, &(0x7f0000033c80)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000033cc0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000033d40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0xff}], 0x2, 0x2040000, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000033dc0), 0x42202) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1ef) 3.515760654s ago: executing program 2 (id=280): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x8, 0x20520, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x11e484, 0x3, 0x40, 0x8, 0x7ffffffd, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7ffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000019700)={0x0, 0x0, &(0x7f0000019780)={&(0x7f00000198c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000019940)={0x0, 0x0, &(0x7f0000019980)={&(0x7f00000199c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a8c000000060a010400000000000000000a0000010900010073797a3100000000600004805c0001800c0001007061796c6f6164004c00028008000440000000fe08000640000000010800054000000014080003400000002c080002400000000008000240000000020800054000000009080004400000001c080008400000000009000200"], 0xb4}, 0x1, 0x0, 0x0, 0x20004000}, 0x24004854) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000031401002abd7000fedbdf250900020073797a31000000000800410900c8f200000014003300626f6e643000aa7b0aa13b552864ff92da0000000000000100"], 0x38}, 0x1, 0x0, 0x0, 0x7d20bf348804b392}, 0x20000800) sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x143042, 0x0) mbind(&(0x7f0000595000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000240)=0xa, 0x4, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc92, 0x2, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x210, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000019700)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000019740)={0xffffffffffffffff, &(0x7f0000019780), &(0x7f0000000040)=""/5, 0x2}, 0x20) sendmsg$kcm(r5, &(0x7f0000019800)={0x0, 0x2000, &(0x7f0000019840)=[{&(0x7f0000019880)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000340)='\xa2}&', 0x406000, &(0x7f0000000480)={@align=0x6, {0x7, 0x4, 0x9b, 0x1430}}, 0x5, 0x0, 0x0}) sendmsg$nl_generic(r6, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000004c0)=ANY=[@ANYBLOB="856b1200ff00aaaaaaaaaaaa86dd60381f3400482f00fc000000000000000000000000000000ff028000000000000000000000000001042088a80000000000000800000086ddfffa0004080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) getsockopt(r3, 0x111, 0x271b, &(0x7f0000000540)=""/102393, &(0x7f0000019540)=0x18ff9) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000400)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000019a80)={r8, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000019b40)={r8, @in6={{0xa, 0x4e22, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x34, 0x1000, 0x4}, 0x9c) r9 = socket(0xa, 0x3, 0xff) bind$inet6(r9, &(0x7f0000019580)={0xa, 0x4c26, 0x6, @mcast1, 0x1}, 0x1c) 3.418510483s ago: executing program 0 (id=281): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000700), 0x8100, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x21220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x10ecc8, 0xc, 0x40, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x7ffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000080)="0000000000000002", 0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) fstatfs(r4, &(0x7f00000001c0)=""/162) dup2(r1, r4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYBLOB="02"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000180)={r3, 0x2}, 0x8) ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0) 3.417999453s ago: executing program 4 (id=256): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'veth0\x00', 0x0}) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x3000c041) socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x6, 0x4, 0x9, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x3, 0x4, &(0x7f00000014c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000001500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f00000011c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001280)="06fa03076844ba8cb89e14f088f7", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0xf0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x200]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x28, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6eb00000}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xa0}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xbc}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x58080, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x806, 0x4, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') pread64(r5, &(0x7f0000002000)=""/4125, 0x101d, 0x7) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000040)=0x0) fcntl$setownex(r6, 0xf, &(0x7f0000000080)={0x1, r7}) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r8, 0x541c, &(0x7f0000000440)) setsockopt$MRT_ASSERT(r5, 0x0, 0xcf, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000001540)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc092, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x200000000001, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000015c0)=@bpf_tracing={0x1a, 0x11, &(0x7f0000001680)=ANY=[@ANYBLOB="180000000900007333f75e000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000186b00000a0000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001740)='GPL\x00', 0x8, 0xc5, &(0x7f0000001780)=""/197, 0x41000, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000018c0)={0x5, 0x1, 0x3, 0x9}, 0x10, 0x4615, 0xffffffffffffffff, 0x1, &(0x7f0000001900)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001940)=[{0x2, 0x4, 0xb, 0x6}], 0x10, 0x9}, 0x94) syz_genetlink_get_family_id$fou(&(0x7f0000001980), 0xffffffffffffffff) perf_event_open(&(0x7f00000019c0)={0x2, 0x80, 0x2e, 0x3, 0x0, 0x0, 0x0, 0x7, 0x520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x10001, 0xf11}, 0x11648a, 0x1224, 0xffffffff, 0x0, 0x8, 0x22005, 0x2, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 3.410285074s ago: executing program 9 (id=282): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3a}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000880)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='blkio.bfq.dequeue\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x7f7f, 0x7}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000c00)='ns/mnt\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xb701, 0x0) perf_event_open(&(0x7f0000000c40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000d00)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000d40)='ns/net\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000e00), 0x1c1842, 0x0) perf_event_open(&(0x7f0000000e40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000ec0)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x42020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd831, 0x4, @perf_config_ext={0x10000, 0x3}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f40)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f80)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x1f, 0x15, &(0x7f00000010c0)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000001180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.24561371s ago: executing program 8 (id=283): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1005, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRES64=r0], 0x1, 0x39a, &(0x7f00000000c0)="$eJzs3T1vW+UXAPBTt4mT/P+JMyAkQIhH3VisJHyBRqiVEJFAoUalA+KWOMWKG0e2FeQKQQckVr4Be8XIhoT4AhlgZ2PLwtihqpHfUjt130iTS8XvJ1n3+D7n2M+15auzWOfw2ve3drZb5e2sHYVLKQoRUbgXsdyPBs4Nj4V+PBvj7sTbpWt/vPnRJ9ffX9/YuLyZ0pX1q++spZSW3vrly69+vPhr+38f/7T0czEOlj89/Gvtz4NXD147fHD1i1or1Vppt9FOWbrRaLSzG/Vq2qq1dsopfVivZq1qqu22qs2J9e16Y2+vk7LdrcWFvWa11UrZbiftVDup3UjtZidlN7PabiqXy2lxIXiayt3NzWx9EM89Ie/SWW2IU9Bsrme933DxkZXK3Vw2BADk6qT9/+wz9f/XC2P9/1w8rv8vRuj/X4iZZ0sb7///8YvwL9fr/2eHv99J+n8AAAAAAAAAAAAAAHgZ3Ot2S91utzQ6dkd/Eh4+z3l7nLJHvv9jj7z3x+ka++PeXET9u/3KfmVwHKyvb0ct6lGNlSjF/d5tYWQQX3lv4/JK6luOxVvf9Osv/hZROT9ZvxqlWJ5evzqoT0f10TvOxMJ4/Vp8Fq9Mr1+bWj8bKz+M1ZejFL9/Ho2ox1b/9vaw/uvVlN79YONYfbGfBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB/QzmNvBGDuff7lYj52B/O7y8/TFienI8/qD+ar78Spbg/fT7/ytT5/Bfi9Qv5XjsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjLQ6t3eyer3aPKtgNPO/f2Z2FDy+6twg/c6xpfmYTC4+7XVOGBSeq2p+eJFTlh50u91+cPPbF7Gx3rscnZk726/yJMFMRDwhpzv8AE/+Xv+PiPEz5ydzihFxqle61AsK+X/gzx3kcDMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAnB0N/e49OZf3bgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMhLq3N7J6vXq81TDPK+RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJfJ3wEAAP//2L8JSw==") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x10080, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x800, 0x1ff}, 0x400, 0x5, 0x7, 0x5, 0x6, 0x8000, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x9, 0x3) r1 = syz_clone(0xa802400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000d40)={0x2, 0x80, 0x4, 0x1, 0x0, 0x80, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xf, 0x8002}, 0x11ccc0, 0x1001225, 0xffffffff, 0x0, 0x8, 0x20005, 0xffff, 0x0, 0xffffffff, 0x0, 0x400000000000082}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000006c0)='./pipefs\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./pipefs/gssd/clntXX/gssd\x00', 0x0, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x24040884) socket$nl_netfilter(0x10, 0x3, 0xc) mount$nfs4(&(0x7f0000000a00)='127.0.0.1:/root\xf4', &(0x7f0000000a40)='./mnt\x00', &(0x7f0000000a80), 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="616464023d3132376e302e302e312c009428074c7cb09ff798f911c674beb2592adedf8da8ac7b7353bf68ff2945bacc3242b89b1588e6f8b418b1c8d081e191b3f7c45a58b1971ebac1a241279c8744cb80a9561bf02c0e66d615e143061a339705a179707c8f5eb85cd97019681f7271d2b700000000000000000000000024fe89d76701454d370b8f97f4d4569dd37719be18e2cd32a46aecc8bb37b5f288fc"]) r3 = open(&(0x7f0000000640)='./cgroup.net/cgroup.procs\x00', 0x16b442, 0xa9) write$binfmt_format(r3, &(0x7f0000000680)='-1\x00', 0x3) r4 = socket$inet6(0xa, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="010000000300000008000000003a4a5cb58414d0b032bdf400099b01000008000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1, 0xc, &(0x7f0000000e80)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af0ff0000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000004080000850000000200000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000f40)=r8, 0x4) sendmsg$unix(r6, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c054}, 0x0) connect$inet6(r4, &(0x7f0000000b00)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000b40), 0x2e9, 0xffe0) process_vm_writev(r1, &(0x7f0000000b80)=[{&(0x7f0000000bc0)=""/156, 0x9c}], 0x1, &(0x7f0000000c80)=[{&(0x7f0000000cc0)=""/116, 0x20001c34}], 0x1, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./dev\x00', 0x1ff) 320.133958ms ago: executing program 0 (id=284): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001e40)=ANY=[@ANYBLOB="6c0100001700010000000000000000007f000001000000000000000000000000000004d700000000fe8000000000000000000000000000bbfe880000000000000000000000000001ffffffff0000000000000000000000004e210000000080000000008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ac1414bb00000000000000000000000000000000000000000a0080205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000a000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000020200000000f9ffffff02000000000000000000000044000500ffffffff000000000000000000000000000004d233000000"], 0x16c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 319.124138ms ago: executing program 0 (id=285): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) setns(0xc9, 0x0) r2 = socket(0x400000010, 0x3, 0x0) write(r2, &(0x7f0000000100)="fc0000001400073eac093a00090007000aab0800080000000400e293210001c000000000060000000100000009000000fa2c1eff8656aaa79bffffffff0000002d00024000036c6c256f1a272fdf0d11512fd633d4400007f60eb8fa2e6b00000016fd368934d07302ade01720d7d5bbc91a3e2e80772c05f70c9ddef2fe082038f4f8b29d3ef3d92883170efdffffff3ae4f50504000000000040d815b2ccd243f295edbabc7c3f1a5f4e023dd16b176e83df150c3b8829a1ad0a4f41f0d48f6f0000080548deac270e37429f3694dec896592d69d381873cf1582740000000000000001ace36f071d0c22700"/252, 0xfc) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x6, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x9, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000600)={0x1, 0x5, 0x4}, &(0x7f0000000640)=0x8) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 292.06999ms ago: executing program 0 (id=286): listxattr(&(0x7f0000000000)='./dbg\x00', &(0x7f0000000040)=""/114, 0x72) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYBLOB="0e756ae02c8b41209e0e3a0b59f9397944d77072f565944f5227713955b4b5bbb44d89f444a9a9f51b088506be4cd6372c721e6505e6954a4514c0f17ba2ef8a56dd23416184b1c3675e0fdd0e6f4e426adcb7f88cb62f2123bd58c827ab8c9c821dad2bf93eebc0a1d2fb541e8a3aceb362c808eb3e9ac4e7ed9c3c125e411d5ace0322d664dd43", @ANYBLOB="1e34977fb940b621f1027adf57815383e481095721051406ca38cc662b86ba6a3218c1af2501108307056ac650593219beddc8e575ecc1ba409ba2e2ee38d0b4fc1535d143e80f8fac173535c39b4c13b1ea3d7217032f472201d57abc4dd43e31ec8b4a229a5e7dae5e74db003f3f35d89748bdd4c53d5df2e3889c34e80ababf474b4ac2b8e0d67208593f082a6b2007cef12279cc61c8f54c5ff5082c52ca6d64f54c81b11273c29611d9f8b33586a826d81aaae74455b7a924637f39b9169a7de41cfdfcc10305503807c374fc63bf1019604d984d165e029387389bde59d9de895bf11fe476fc0831", @ANYRESOCT], 0x4, 0x2cc, &(0x7f00000005c0)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./dbg\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000900)='timerslack_ns\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000980)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f00000019c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001a40), 0x0, 0x0) ioctl$TCSETS(r2, 0x545c, &(0x7f0000001a80)={0x20000000, 0x0, 0x1ffffe, 0x0, 0x7, "43e6323cce19dceaa867c4e745c80552a500"}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x8004745a, 0xffffffffffffffff) r4 = fsopen(&(0x7f0000001b00)='nfs\x00', 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c783, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0x2, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_ACK_FILTER={0x4}]}}]}, 0x44}}, 0x20080800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x15, 0x3, &(0x7f0000001c00)=ANY=[@ANYRES16=r1], &(0x7f0000001c40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000001c80)='vers\x00', &(0x7f0000001cc0)='3\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv(r8, &(0x7f0000000280)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1, 0x3, 0x7fffffef) lseek(r8, 0x11, 0x0) r9 = socket$inet6(0xa, 0x80003, 0x6) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001d80)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001e00)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r10, @ANYBLOB="0100000002"], 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0xd, 0xc, &(0x7f0000001f00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0001000000000000b7080000ff0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095002c0000000000"], &(0x7f0000001f80)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(r9, &(0x7f0000001fc0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000002000)=0x8001) 229.746057ms ago: executing program 4 (id=287): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0, 0x2}, 0xf08, 0x0, 0x7, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(0x0, r1, 0x3, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0x10, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000200000005000000000000000000000000000000000000006b773f031f5a2d166277377bde8c4a87436e180626052d05e1a62328d71dbac8eaeec9f181410bf906cf301b94e8c10f8036b777745029ac8005e43894755f233c04c9390070576eb9e97b4175f51f99db521d611b4674fc47b7a7dc863cab50093e184619446265dd98c928d49a12678754594e7b87fd7f0539e0835e7ce86c1bbd3747eb1c89149d9fedd1cfe96fd15f3649a70d8cf4bc396efdfc99a8256555004bb19ad63553a994da347eac0b9fdc0000000000"], 0x50) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x800, 0x0) write$selinux_access(r3, &(0x7f0000000300)={'system_u:object_r:lost_found_t:s0', 0x20, 'unconfined', 0x20, 0x9}, 0x42) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000fcfff1ff00000000000000008500000036000000850000005000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r4, r6, 0x25, 0x4, @void}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x8, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x5, 0x4}, {0xf, 0x3}]}, @type_tag={0x2, 0x0, 0x0, 0x12, 0x4}, @int={0x6, 0x0, 0x0, 0x1, 0x14, 0x44, 0x0, 0x0, 0x5}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x2}, @enum={0x5, 0x7, 0x0, 0x6, 0x4, [{0x4, 0x5}, {0xc, 0xffffff33}, {0xe, 0x3ff}, {0x3, 0xfffffffd}, {0x3, 0x9}, {0xf, 0xf5}, {0xd, 0x2}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x61, 0x2e, 0x5f, 0x5f, 0x2e, 0x5f]}}, &(0x7f0000000700)=""/188, 0xb4, 0xbc, 0x0, 0x544b, 0x10000}, 0x28) r8 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./debug/failslab/cache-filter\x00', 0x1, 0x0) writev(r8, &(0x7f00000008c0)=[{&(0x7f0000000900)='y', 0x1}], 0x1) write(r8, &(0x7f0000000940)="e639a9aaf2b4007842c337fe085786719f7b3961bb1423c843c7e98d4ddbfb3aced4d4bf69422f4bda6e0c205ccf1a900d77a0ef48c756acbd44de932b3b4ef55d5ef9808770e694fa0e63ce048ae60110916b042e7be134be7c86a5cd207bdae29684d7caa77c5db2131800b36b8abc5db5fead6a5569f50e6dc7ff081a5084f0950e91a27e65379b298b01e96031800849419f11d34764", 0x98) ioctl$TIOCGETD(r8, 0x5424, &(0x7f0000000a00)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}], &(0x7f0000000400)='GPL\x00', 0xf699, 0x0, &(0x7f0000000440), 0x40f00, 0x1, '\x00', r6, 0x19, r7, 0x8, &(0x7f0000000800)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0x1, 0x8, 0x5}, 0x10, 0x1f5bc, r8, 0x2, 0x0, &(0x7f0000000a40)=[{0x2, 0x2, 0xf, 0x4}, {0x4, 0x5, 0x1, 0x3}]}, 0x94) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000240)) 229.128307ms ago: executing program 9 (id=288): r0 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="29000000140005b7ff000051915f95eb01010003a606a40e07fff00900000000000000000040000000", 0x29) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000001200)=ANY=[@ANYBLOB="54000000100003f6ff0000000000000000003b0f2d030f6870f4db00ec", @ANYRES32=0x0, @ANYBLOB="1501000000000000340012800b000100627269646765000024000280050018000000000008001b00ffff000008001a00060000000500170000000000"], 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001280)=@newqdisc={0x274, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffe1, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x244, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x4, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x5}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1, 0xd, 0x8, 0x1e, 0xd, 0xd, 0x3}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x8}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x6}]}}]}, 0x274}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x200, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1d0, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x200}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000840)=0x2, 0x4) setsockopt$packet_rx_ring(r9, 0x107, 0x5, 0x0, 0x0) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r10, 0x891c, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xc, 0xe, 0x0, &(0x7f0000001540)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000015c0)={r11, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000001640)="7cf13307000000000008000081001a", 0x0, 0xffedfff0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000780)={'syzkaller0\x00', 0x1}) r12 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f00000007c0)='syzkaller0\x00', 0xb) sendto$inet(r12, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000010425bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="03170000000000000c000280060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4d088}, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r12, 0x84, 0x20, &(0x7f0000000a40)=0x6007, 0x4) 201.07777ms ago: executing program 2 (id=289): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000080)=0x7fffffffffffffff, 0x44, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4003, &(0x7f00000000c0)=0x2, 0x44, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000540)="$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") write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce22001b2f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x3, &(0x7f0000000f40)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f80)={0x6, 0x3, &(0x7f0000001040)=ANY=[], &(0x7f0000001080)='syzkaller\x00'}, 0x94) r2 = perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001140)={r1, 0x5, 0xb68, 0x0, &(0x7f00000011c0)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./mnt\x00', 0x1ff) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)=ANY=[], 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./dev\x00', 0x1ff) ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000940), 0xffffffffffffffff) r4 = socket(0x400000000010, 0x3, 0x0) perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000140)=0xf3f, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000d80)="3f0302e90302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000e00)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) dup2(r2, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./proc\x00', 0x1ff) syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000980)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000a00)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newtfilter={0x88, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f2, {0x0, 0x0, 0x0, r6, {0x1, 0x3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x50, 0x2, [@TCA_FLOWER_ACT={0x4c, 0x3, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x0, 0x1, 0x3, 0x403}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x22}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20005891}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYBLOB="0800050000000000060006004e240000"], 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x10000) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') readlinkat(r7, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/76, 0x4c) 134.957197ms ago: executing program 4 (id=290): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000280)=0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = memfd_create(0x0, 0x0) pwrite64(r0, &(0x7f0000000440)="2f5ec41eecf8bf61395a42f18962dacbdf54a80513ea6d35ab75c71b258b1c8dd1e351ff0760afe1a4ecf17628312172aafb286cede05c96cb131ad06e725c52d3e4eabacaae6fc6c735edb84ed7534392a1508b13b71dc773e0add2c906f358786b3520", 0x64, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, 0xffffffffffffffff, &(0x7f00000004c0), 0x7fa) symlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) perf_event_open(&(0x7f00000005c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x781, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) write(r1, &(0x7f00000006c0)='0', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/memory.force_empty\x00', 0x880cc2, 0x20) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x2200002, &(0x7f0000000000)={[{@discard}, {}, {@grpquota}, {@norecovery}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0x1, 0x582, &(0x7f0000001840)="$eJzs3V9rW+UfAPDvSdP9//3WwRjqhRR24WQu3Vr/TBA2L0WHA72foc3KaLqMJh1rHWy7cCDeyBBEHIgvwHsvhy9AX8VAB0NG0QtvIic92bKmafonWzLz+cBpn+c8J3nOk+c8T74n54QEMLTG0z+5iJcj4usk4mBLWT6ywvHV7VYeXZ9OlyTq9U/+TCLJ1jW3T7L/+7PMSxHxyxcRx3Pt9VaXlueK5XJpIctP1OavTFSXlk9cmi/OlmZLlyenpk6/NTX57jtvb7ot+S7lr5//+7uP731w+qujK9/+9ODQnSTOxoGsrLUdO3CzNTMe49lrMhpn12x4qgeVDZKk3zvAtoxk42Y00jngYIx0HUXAf8WNiKgDQyox/mFINeOA5rl9j86DXxgP3189AWpvf371s5HY0zg32reSPHVmlJ7vjvWg/rSOn/+4eyddosvnEDd6UB9A081bEXEyn2+f/5Js/tu+k40Pjze2to5he/+BfrqXxj9vrBf/5B7HP7FO/LN/nbG7Hd3Hf+5BD6rpKI3/3ls3/n08dY2NZLn/NWK+0eTipXLpZET8PyKOxejuNL/R9ZzTK/frncpa4790SetvxoLZfjzI7376MTPFWnEnbW718FbEK0/i3yTa5v89jVh3bf+nr8f5NPHrl13rOFK6+2qnsu7tb9X7CLj+Y8Rr6/b/kytaycbXJycax8NE86ho99ftI791qn9r7e+9tP/3bdz+saT1em1163X8sOefUqey7R7/u5JPG+ld2bprxVpt4VTEruSj9vWTTx7bzDe3T9t/7OjG8996x//eiPhsk+2/ffh2x00Hof9nttT/W0/c//Dz7zvVv7n+f7OROpat2cz8t9kd3MlrBwAAAAAAAIMmFxEHIskVHqdzuUJh9f6Ow7EvV65Ua8cvVhYvz0Tju7JjMZprXuk+uHqZNWne/zDWcn/E5Jr8VEQciohvRvY28oXpSnmm340HAAAAAAAAAAAAAAAAAACAAbG/w/f/U7+P9HvvgGfOT37D8Oo6/nvxS0/AQPL+D8PL+IfhZfzD8Gof/2N92Q/g+fP+D8PL+IfhZfzD8DL+AQAAAAAAAAAAAAAAAAAAAAAAAAAAoKfOnzuXLvWVR9en0/zM1aXFucrVEzOl6lxhfnG6MF1ZuFKYrVRmy6XCdGW+2/OVK5UrpyZj8dpErVStTVSXli/MVxYv1y5cmi/Oli6URp9LqwAAAAAAAAAAAAAAAAAAAODFUl1aniuWy6WF4UrUt7LxmRiIfd52IunWy2eyg2FLzxxZIt//Bko8g0SfJyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaPFvAAAA//8hDDVW") socket$inet6_sctp(0xa, 0x0, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000e00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000e80), 0xc}, 0x18, 0x9, 0x0, 0x5, 0x800000, 0x43, 0x4e7, 0x0, 0x3, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044000}, 0x1) syz_mount_image$ext4(&(0x7f0000000f00)='ext4\x00', &(0x7f0000000f40)='./file1\x00', 0x3000000, &(0x7f0000000f80)={[{@noquota}]}, 0x4, 0x521, &(0x7f0000000fc0)="$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") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0x58}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x4084) bind$unix(0xffffffffffffffff, &(0x7f0000001680)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001700)='/proc/keys\x00', 0x1800, 0x0) preadv2(r3, &(0x7f0000001740)=[{&(0x7f0000001780)=""/134, 0x86}], 0x1, 0xfffffffd, 0x558, 0x12) 129.265167ms ago: executing program 8 (id=291): unshare(0x22020400) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) unshare(0x100000) syz_clone(0x34021100, 0x0, 0x17, 0x0, 0x0, 0x0) 46.682316ms ago: executing program 9 (id=292): setns(0xc9, 0x0) r0 = gettid() r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x4c, 0x1a, 0x180, 0x73, 0x328, 0x258, 0x258, 0x328, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x23, 0x3, 0x2, 0x3, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x2e, 0x8, 0xfb, 0x87, 0x3, @remote, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xffffff00], [0x8982e4c132e3b466, 0xffffffff, 0xffffff00, 0xff000000], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 0x3420, 0x108}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x458) r2 = syz_open_procfs(r0, &(0x7f0000000040)='net/route\x00') lseek(r2, 0xfffd, 0x0) 45.997046ms ago: executing program 2 (id=293): r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff35a}, 0x0, 0x80000000, 0x0, 0x9, 0x800001, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000240)='./bus\x00', 0xb00400, &(0x7f0000000000)={[], [{@dont_hash}]}, 0x1, 0x50f, &(0x7f00000014c0)="$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") r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4}, {0xa, 0x4e24, 0xed, @dev={0xfe, 0x80, '\x00', 0x41}, 0x10001}, 0x0, {[0xfffffff7, 0x0, 0x1, 0x9, 0x3ff, 0x1, 0x6, 0x3]}}, 0x5c) set_mempolicy(0x6005, &(0x7f0000000200)=0xfffffffffffffffd, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x5, 0x8, 0x23, @dev={0xfe, 0x80, '\x00', 0x34}, @loopback, 0x7, 0x40, 0x7, 0x101}}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000004400128009000100697069700000000034000280060012004e20000006001000ffff000008000200e000000108000100", @ANYRES32=r3, @ANYBLOB="050081000000000008000300ac141416"], 0x64}}, 0x40) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7800000066f6a67af4bb5764e7028df1f1539ffd05f682b04d2582d9278cadb769ba65e322a033f1abd93a0a032e9ab2436f8963a0d8f4bbc3e1722cb7c14148ba5079a3aa605d1522f12f10448a02a03d9669f04fccab8535ff332fb295a8b9545bc02076ed76108e", @ANYRES16=r1, @ANYBLOB="08002abd7000ffdbdf254a000000080001001a00000004007580040075801c007580040007000400010004000700040007000400070004000600240075800400020004000800040007000400060004000100040008000400080004000e8008007580040003000c0075800400060004001280"], 0x78}, 0x1, 0x0, 0x0, 0x44000}, 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2600f9ff34", @ANYRES64=0x0], 0x20) perf_event_open(&(0x7f0000000b80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000c00), 0x1}, 0x9696a46c4adce67c, 0x2, 0x78f, 0x0, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) msgget$private(0x0, 0x437) socket$packet(0x11, 0x2, 0x300) r4 = socket(0x2a, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)=[{0x0}], 0x1}, 0x8010) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000cc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x4000840}, 0xc1) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000dc0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000e00)=@filename='./dev/sda1\x00', &(0x7f0000000e40)='./mnt\x00', &(0x7f0000000e80)='ext4\x00', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=ANY=[@ANYBLOB="ec0600000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000c0060380180000800c00018006000100ffd700000800034000000001"], 0x6ec}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) 2.3543ms ago: executing program 9 (id=294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x70bd2f, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0xfc}}]}, 0x30}}, 0x20000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f00000001c0)={0x1, 0x5fb0}) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@bridge_dellink={0x2c, 0x13, 0x1, 0x70bd25, 0x0, {0x7, 0x0, 0x0, r7}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0xa}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008010}, 0x20000040) truncate(0x0, 0x8003) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42042, 0x139) unshare(0x2040400) fallocate(r10, 0x15, 0x10c01, 0x8000) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x14, r11, 0x421, 0x70bd2f, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x20014001) 0s ago: executing program 8 (id=295): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timerfd_create(0x0, 0x0) kernel console output (not intermixed with test programs): =1400 audit(1793579752.225:1036): avc: denied { write } for pid=3982 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.329456][ T3930] netlink: 'syz.4.93': attribute type 3 has an invalid length. [ 44.330064][ T29] audit: type=1400 audit(1793579752.225:1037): avc: denied { write } for pid=3929 comm="syz.4.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 44.347218][ T3983] EXT4-fs: quotafile must be on filesystem root [ 44.385650][ T3949] rxe_eth0 speed is unknown, defaulting to 1000 [ 44.472749][ T367] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.497980][ T3983] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 44.522548][ T3983] EXT4-fs (loop0): 1 orphan inode deleted [ 44.523013][ T3983] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.526201][ T3983] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.530014][ T29] audit: type=1400 audit(1793579752.415:1038): avc: denied { create } for pid=3975 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 44.542497][ T29] audit: type=1400 audit(1793579752.425:1039): avc: denied { write } for pid=3975 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 44.574643][ T3446] EXT4-fs error (device loop0): ext4_release_dquot:7156: comm kworker/u8:7: Failed to release dquot type 1 [ 44.739731][ T367] bridge_slave_1: left allmulticast mode [ 44.739762][ T367] bridge_slave_1: left promiscuous mode [ 44.739882][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.742230][ T367] bridge_slave_0: left allmulticast mode [ 44.742249][ T367] bridge_slave_0: left promiscuous mode [ 44.742422][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.823056][ T367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.824411][ T367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.825401][ T367] bond0 (unregistering): Released all slaves [ 44.860376][ T3876] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 44.862468][ T3876] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 44.862995][ T3876] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 44.883428][ T3876] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 44.886551][ T3017] 8021q: adding VLAN 0 to HW filter on device eth4 [ 44.892624][ T3876] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 44.911596][ T3876] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 44.943175][ T3876] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 44.958674][ T3876] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 45.019746][ T4019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.101'. [ 45.034625][ T367] hsr_slave_0: left promiscuous mode [ 45.037062][ T367] hsr_slave_1: left promiscuous mode [ 45.037556][ T367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.037570][ T367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.067040][ T367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.067059][ T367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.084640][ T367] veth1_macvtap: left promiscuous mode [ 45.084705][ T367] veth0_macvtap: left promiscuous mode [ 45.084750][ T367] veth1_vlan: left promiscuous mode [ 45.084879][ T367] veth0_vlan: left promiscuous mode [ 45.116157][ T4019] set_capacity_and_notify: 6 callbacks suppressed [ 45.116174][ T4019] loop4: detected capacity change from 0 to 512 [ 45.161102][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.180540][ T4019] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.180610][ T4019] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.247564][ T3301] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 45.247924][ T3301] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 45.248327][ T3301] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 45.248586][ T3301] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 45.248900][ T3301] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 45.249247][ T3301] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 45.249597][ T3301] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 45.249925][ T3301] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 45.250123][ T3301] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 45.250444][ T3301] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 45.253089][ T367] team0 (unregistering): Port device team_slave_1 removed [ 45.256672][ T367] team0 (unregistering): Port device team_slave_0 removed [ 45.421882][ T3949] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.421918][ T3949] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.422016][ T3949] bridge_slave_0: entered allmulticast mode [ 45.422590][ T3949] bridge_slave_0: entered promiscuous mode [ 45.423939][ T3949] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.423968][ T3949] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.424055][ T3949] bridge_slave_1: entered allmulticast mode [ 45.424442][ T3949] bridge_slave_1: entered promiscuous mode [ 45.466668][ T3017] 8021q: adding VLAN 0 to HW filter on device eth1 [ 45.483495][ T3949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.498323][ T3949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.548281][ T3949] team0: Port device team_slave_0 added [ 45.553839][ T3949] team0: Port device team_slave_1 added [ 45.569915][ T3949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.569931][ T3949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.569961][ T3949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.570708][ T3949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.570720][ T3949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.570744][ T3949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.634362][ T3876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.636996][ T3949] hsr_slave_0: entered promiscuous mode [ 45.637371][ T3949] hsr_slave_1: entered promiscuous mode [ 45.637657][ T3949] debugfs: 'hsr0' already exists in 'hsr' [ 45.637669][ T3949] Cannot create hsr debugfs directory [ 45.677556][ T3876] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.708991][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.717090][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.717126][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.737264][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.737302][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.793706][ T367] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.844217][ T3017] 8021q: adding VLAN 0 to HW filter on device eth5 [ 45.858298][ T367] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.900737][ T367] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.950494][ T367] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.025471][ T3949] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 46.030705][ T3949] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 46.035078][ T3949] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 46.067811][ T3949] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 46.078314][ T3949] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 46.086814][ T3949] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 46.095135][ T3949] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 46.102999][ T3949] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 46.112242][ T367] bridge_slave_1: left allmulticast mode [ 46.112268][ T367] bridge_slave_1: left promiscuous mode [ 46.112456][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.115034][ T367] bridge_slave_0: left allmulticast mode [ 46.115064][ T367] bridge_slave_0: left promiscuous mode [ 46.115155][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.213193][ T367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.214447][ T367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.215285][ T367] bond0 (unregistering): Released all slaves [ 46.251317][ T3017] 8021q: adding VLAN 0 to HW filter on device eth6 [ 46.273374][ T3876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.324438][ T3949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.338400][ T3949] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.339639][ T4083] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.342785][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.342816][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.380354][ T367] hsr_slave_0: left promiscuous mode [ 46.381418][ T367] hsr_slave_1: left promiscuous mode [ 46.381900][ T367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.381915][ T367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.382740][ T367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.382755][ T367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.429616][ T367] veth1_macvtap: left promiscuous mode [ 46.429721][ T367] veth0_macvtap: left promiscuous mode [ 46.429785][ T367] veth1_vlan: left promiscuous mode [ 46.429870][ T367] veth0_vlan: left promiscuous mode [ 46.514579][ T367] team0 (unregistering): Port device team_slave_1 removed [ 46.527552][ T367] team0 (unregistering): Port device team_slave_0 removed [ 46.561939][ T367] team0 (unregistering): Port device dummy0 removed [ 46.575417][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.575452][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.592225][ T3017] 8021q: adding VLAN 0 to HW filter on device eth7 [ 46.633960][ T4146] netlink: 128 bytes leftover after parsing attributes in process `syz.0.113'. [ 46.659154][ T4146] loop0: detected capacity change from 0 to 1024 [ 46.661179][ T4146] ext4: Bad value for 'barrier' [ 46.769213][ T4144] netlink: 'syz.3.112': attribute type 10 has an invalid length. [ 46.834874][ T4144] team0: Port device dummy0 added [ 46.913911][ T4083] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.913948][ T4083] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.914025][ T4083] bridge_slave_0: entered allmulticast mode [ 46.914631][ T4083] bridge_slave_0: entered promiscuous mode [ 46.949504][ T3876] veth0_vlan: entered promiscuous mode [ 46.951226][ T4083] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.951271][ T4083] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.951333][ T4083] bridge_slave_1: entered allmulticast mode [ 46.951914][ T4083] bridge_slave_1: entered promiscuous mode [ 46.960198][ T3876] veth1_vlan: entered promiscuous mode [ 46.975096][ T4083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.981877][ T4083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.000658][ T3876] veth0_macvtap: entered promiscuous mode [ 47.008086][ T3876] veth1_macvtap: entered promiscuous mode [ 47.028555][ T3876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.031836][ T4083] team0: Port device team_slave_0 added [ 47.033117][ T4083] team0: Port device team_slave_1 added [ 47.045008][ T3876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.064546][ T4083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.064563][ T4083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.064589][ T4083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.065191][ T3017] 8021q: adding VLAN 0 to HW filter on device eth8 [ 47.072666][ T4083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.072680][ T4083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.072779][ T4083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.165282][ T81] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.166206][ T81] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.166271][ T81] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.166359][ T81] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.172889][ T4083] hsr_slave_0: entered promiscuous mode [ 47.173271][ T4083] hsr_slave_1: entered promiscuous mode [ 47.176118][ T4083] debugfs: 'hsr0' already exists in 'hsr' [ 47.176131][ T4083] Cannot create hsr debugfs directory [ 47.280265][ T3949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.339659][ T4083] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 47.343108][ T4083] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.346018][ T4083] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 47.373939][ T4083] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.376564][ T4083] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 47.387262][ T4083] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.391382][ T4083] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 47.402042][ T4083] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.436765][ T4083] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.436802][ T4083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.436879][ T4083] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.436932][ T4083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.496559][ T4208] loop5: detected capacity change from 0 to 1024 [ 47.517454][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.517973][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.541317][ T4208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.541435][ T4208] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.578019][ T3017] 8021q: adding VLAN 0 to HW filter on device eth9 [ 47.614100][ T4214] loop0: detected capacity change from 0 to 512 [ 47.624932][ T4214] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 47.656672][ T4083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.680604][ T4083] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.681341][ T3876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 47.707652][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.707688][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.730013][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.730051][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.754111][ T3949] veth0_vlan: entered promiscuous mode [ 47.754395][ T4214] EXT4-fs (loop0): 1 orphan inode deleted [ 47.755832][ T4214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.768246][ T4247] loop5: detected capacity change from 0 to 256 [ 47.770140][ T81] EXT4-fs error (device loop0): ext4_release_dquot:7156: comm kworker/u8:5: Failed to release dquot type 1 [ 47.770209][ T81] loop0: lost filesystem error report for type 5 error -117 [ 47.776979][ T3949] veth1_vlan: entered promiscuous mode [ 47.785972][ T4247] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 47.823712][ T4214] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.839959][ T3949] veth0_macvtap: entered promiscuous mode [ 47.849489][ T3949] veth1_macvtap: entered promiscuous mode [ 47.877291][ T3949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.880548][ T4251] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264) [ 47.880573][ T4251] FAT-fs (loop5): Filesystem has been set read-only [ 47.880650][ T4251] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 47.880699][ T4251] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 47.889029][ T3949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.937514][ T367] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.937665][ T367] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.937714][ T367] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.937740][ T367] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.059127][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.129396][ T3017] 8021q: adding VLAN 0 to HW filter on device eth10 [ 48.150499][ T4251] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 48.185268][ T4083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.225466][ T4282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.123'. [ 48.330523][ T3017] 8021q: adding VLAN 0 to HW filter on device eth11 [ 48.602750][ T4316] loop5: detected capacity change from 0 to 8192 [ 48.605300][ T4316] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.641278][ T4083] veth0_vlan: entered promiscuous mode [ 48.650056][ T4083] veth1_vlan: entered promiscuous mode [ 48.723524][ T4083] veth0_macvtap: entered promiscuous mode [ 48.737609][ T4083] veth1_macvtap: entered promiscuous mode [ 48.783106][ T4083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.792910][ T4083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.833229][ T4342] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 48.849902][ T3017] 8021q: adding VLAN 0 to HW filter on device eth12 [ 48.854663][ T53] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.854699][ T53] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.854741][ T53] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.854770][ T53] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.858346][ T4344] FAULT_INJECTION: forcing a failure. [ 48.858346][ T4344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.858445][ T4344] CPU: 1 UID: 0 PID: 4344 Comm: syz.6.130 Not tainted syzkaller #0 PREEMPT(lazy) [ 48.858470][ T4344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 48.858482][ T4344] Call Trace: [ 48.858489][ T4344] [ 48.858521][ T4344] __dump_stack+0x1d/0x30 [ 48.858559][ T4344] dump_stack_lvl+0x95/0xd0 [ 48.858583][ T4344] dump_stack+0x15/0x1b [ 48.858623][ T4344] should_fail_ex+0x259/0x270 [ 48.858654][ T4344] should_fail+0xb/0x20 [ 48.858679][ T4344] should_fail_usercopy+0x1a/0x20 [ 48.858774][ T4344] _copy_to_user+0x20/0xa0 [ 48.858803][ T4344] simple_read_from_buffer+0xb5/0x130 [ 48.858827][ T4344] proc_fail_nth_read+0x10e/0x150 [ 48.858867][ T4344] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 48.858892][ T4344] vfs_read+0x18e/0x7c0 [ 48.858919][ T4344] ? __rcu_read_unlock+0x4e/0x70 [ 48.858966][ T4344] ? __fget_files+0x184/0x1c0 [ 48.858990][ T4344] ? mutex_lock+0x52/0x90 [ 48.859030][ T4344] ksys_read+0xdc/0x1a0 [ 48.859078][ T4344] __x64_sys_read+0x40/0x50 [ 48.859107][ T4344] x64_sys_call+0x2135/0x2550 [ 48.859140][ T4344] do_syscall_64+0x112/0x360 [ 48.859221][ T4344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.859241][ T4344] RIP: 0033:0x7fe1bd15fd8e [ 48.859256][ T4344] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 48.859373][ T4344] RSP: 002b:00007fe1bbbeefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 48.859393][ T4344] RAX: ffffffffffffffda RBX: 00007fe1bbbef6c0 RCX: 00007fe1bd15fd8e [ 48.859407][ T4344] RDX: 000000000000000f RSI: 00007fe1bbbef0a0 RDI: 0000000000000006 [ 48.859420][ T4344] RBP: 00007fe1bbbef090 R08: 0000000000000000 R09: 0000000000000000 [ 48.859433][ T4344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.859446][ T4344] R13: 00007fe1bd426038 R14: 00007fe1bd425fa0 R15: 00007ffe8f8cc4d8 [ 48.859465][ T4344] [ 49.015044][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 49.015097][ T29] audit: type=1400 audit(1793579756.907:1212): avc: denied { write } for pid=4346 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.034328][ T29] audit: type=1400 audit(1793579756.927:1213): avc: denied { lock } for pid=4352 comm="syz.6.133" path="socket:[7064]" dev="sockfs" ino=7064 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 49.038490][ T29] audit: type=1400 audit(1793579756.937:1214): avc: denied { write } for pid=4362 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.067255][ T29] audit: type=1400 audit(1793579756.967:1215): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 49.101448][ T4366] futex_wake_op: syz.5.132 tries to shift op by 144; fix this program [ 49.101617][ T4366] futex_wake_op: syz.5.132 tries to shift op by 144; fix this program [ 49.249227][ T4373] loop3: detected capacity change from 0 to 512 [ 49.279152][ T4373] EXT4-fs error (device loop3): __ext4_iget:6490: inode #11: block 1: comm syz.3.135: invalid block [ 49.279179][ T4373] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 49.281464][ T4373] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.135: couldn't read orphan inode 11 (err -117) [ 49.281568][ T4373] loop3: lost filesystem error report for type 5 error -117 [ 49.282289][ T4373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.351820][ T29] audit: type=1400 audit(1793579757.247:1216): avc: denied { create } for pid=4372 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 49.393273][ T29] audit: type=1400 audit(1793579757.287:1217): avc: denied { connect } for pid=4372 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.393825][ T29] audit: type=1400 audit(1793579757.287:1218): avc: denied { ioctl } for pid=4372 comm="syz.3.135" path="socket:[7125]" dev="sockfs" ino=7125 ioctlcmd=0x80487436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.462419][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.464962][ T4371] loop0: detected capacity change from 0 to 1024 [ 49.476444][ T29] audit: type=1400 audit(1793579757.378:1219): avc: denied { read } for pid=4375 comm="syz.6.136" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 49.476471][ T29] audit: type=1400 audit(1793579757.378:1220): avc: denied { open } for pid=4375 comm="syz.6.136" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 49.512587][ T4366] loop5: detected capacity change from 0 to 1024 [ 49.542139][ T4371] EXT4-fs: Ignoring removed i_version option [ 49.548646][ T4366] EXT4-fs: quotafile must be on filesystem root [ 49.560160][ T4371] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 49.561328][ T4371] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 49.579630][ T4371] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 49.583219][ T4371] EXT4-fs (loop0): orphan cleanup on readonly fs [ 49.588859][ T4371] EXT4-fs error (device loop0): ext4_free_blocks:6717: comm syz.0.134: Freeing blocks not in datazone - block = 0, count = 4096 [ 49.589010][ T4371] loop0: lost filesystem error report for type 5 error -117 [ 49.593990][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 49.594008][ C1] EXT4-fs (loop0): initial error at time 1793579757: ext4_free_blocks:6717 [ 49.594031][ C1] EXT4-fs (loop0): last error at time 1793579757: ext4_free_blocks:6717 [ 49.594579][ T4371] EXT4-fs (loop0): Remounting filesystem read-only [ 49.595259][ T4371] EXT4-fs (loop0): 1 orphan inode deleted [ 49.603899][ T29] audit: type=1400 audit(1793579757.498:1221): avc: denied { ioctl } for pid=4374 comm="syz.7.108" path="socket:[7148]" dev="sockfs" ino=7148 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.676883][ T4371] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.683807][ T4381] loop5: detected capacity change from 0 to 512 [ 49.698158][ T4381] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 49.723547][ T4381] EXT4-fs (loop5): 1 orphan inode deleted [ 49.724171][ T4381] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.728525][ T4381] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.744723][ T53] EXT4-fs error (device loop5): ext4_release_dquot:7156: comm kworker/u8:3: Failed to release dquot type 1 [ 49.833377][ T4421] capability: warning: `syz.3.140' uses 32-bit capabilities (legacy support in use) [ 49.839820][ T3876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.865114][ T4418] netlink: 8 bytes leftover after parsing attributes in process `syz.6.139'. [ 50.159915][ T4418] loop6: detected capacity change from 0 to 512 [ 50.204114][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.239771][ T4418] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.240300][ T4418] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.274131][ T4446] tap0: tun_chr_ioctl cmd 2147767520 [ 50.287721][ T4446] netlink: 12 bytes leftover after parsing attributes in process `syz.5.146'. [ 50.397571][ T4456] device-mapper: table: 252:1: linear: Device lookup failed (-ENOENT) [ 50.397594][ T4456] device-mapper: ioctl: error adding target to table [ 50.404161][ T4451] loop7: detected capacity change from 0 to 8192 [ 50.465655][ T4451] sctp: [Deprecated]: syz.7.147 (pid 4451) Use of int in maxseg socket option. [ 50.465655][ T4451] Use struct sctp_assoc_value instead [ 50.469899][ T3949] EXT4-fs error (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 50.470357][ T3949] EXT4-fs error (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 50.473797][ T3949] EXT4-fs error (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 50.477085][ T3949] EXT4-fs error (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 50.478674][ T3949] EXT4-fs error (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 50.478984][ T3949] EXT4-fs error (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 50.479383][ T3949] EXT4-fs error (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 50.479753][ T3949] EXT4-fs error (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 50.482958][ T3949] EXT4-fs error (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 50.483278][ T3949] EXT4-fs error (device loop6): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 50.550552][ T4466] FAULT_INJECTION: forcing a failure. [ 50.550552][ T4466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.550585][ T4466] CPU: 1 UID: 0 PID: 4466 Comm: syz.5.151 Not tainted syzkaller #0 PREEMPT(lazy) [ 50.550632][ T4466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 50.550645][ T4466] Call Trace: [ 50.550651][ T4466] [ 50.550658][ T4466] __dump_stack+0x1d/0x30 [ 50.550722][ T4466] dump_stack_lvl+0x95/0xd0 [ 50.550744][ T4466] dump_stack+0x15/0x1b [ 50.550765][ T4466] should_fail_ex+0x259/0x270 [ 50.550822][ T4466] should_fail+0xb/0x20 [ 50.550849][ T4466] should_fail_usercopy+0x1a/0x20 [ 50.550876][ T4466] _copy_from_user+0x1c/0xb0 [ 50.550909][ T4466] do_sock_getsockopt+0x122/0x350 [ 50.550980][ T4466] __x64_sys_getsockopt+0x11d/0x1a0 [ 50.551016][ T4466] x64_sys_call+0x1032/0x2550 [ 50.551042][ T4466] do_syscall_64+0x112/0x360 [ 50.551147][ T4466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.551169][ T4466] RIP: 0033:0x7f0e7c5ef559 [ 50.551185][ T4466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.551205][ T4466] RSP: 002b:00007f0e7b03f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 50.551225][ T4466] RAX: ffffffffffffffda RBX: 00007f0e7c875fa0 RCX: 00007f0e7c5ef559 [ 50.551240][ T4466] RDX: 0000000000000024 RSI: 00000000000000ff RDI: 0000000000000003 [ 50.551253][ T4466] RBP: 00007f0e7b03f090 R08: 0000000000000000 R09: 0000000000000000 [ 50.551266][ T4466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.551279][ T4466] R13: 00007f0e7c876038 R14: 00007f0e7c875fa0 R15: 00007fff2bf45bb8 [ 50.551375][ T4466] [ 50.706083][ T4453] netlink: 40 bytes leftover after parsing attributes in process `syz.0.148'. [ 50.744720][ T4470] ip_tables: iptables: counters copy to user failed while replacing table [ 50.836415][ T4461] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.873767][ T53] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.950092][ T4485] netlink: 'syz.0.158': attribute type 11 has an invalid length. [ 50.954685][ T53] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.022468][ T4493] netlink: 8 bytes leftover after parsing attributes in process `syz.5.160'. [ 51.075921][ T4479] geneve2: entered promiscuous mode [ 51.076001][ T4479] geneve2: entered allmulticast mode [ 51.175590][ T53] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.235606][ T53] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.239661][ T4479] syz.3.155 (4479) used greatest stack depth: 9288 bytes left [ 51.265997][ T4493] loop5: detected capacity change from 0 to 512 [ 51.365713][ T4493] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.378671][ T4493] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.400902][ T4492] rxe_eth0 speed is unknown, defaulting to 1000 [ 51.430926][ T53] bridge_slave_1: left allmulticast mode [ 51.430955][ T53] bridge_slave_1: left promiscuous mode [ 51.431085][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.431839][ T53] bridge_slave_0: left allmulticast mode [ 51.431856][ T53] bridge_slave_0: left promiscuous mode [ 51.432081][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.581085][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.592507][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.603320][ T53] bond0 (unregistering): Released all slaves [ 51.639835][ T3876] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 51.640169][ T3876] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 51.640534][ T3876] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 51.640797][ T3876] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 51.646184][ T3876] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 51.646435][ T3876] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 51.646702][ T3876] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 51.647001][ T3876] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 51.647270][ T3876] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 51.647512][ T3876] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 51.806879][ T4518] loop3: detected capacity change from 0 to 128 [ 51.821596][ T3017] 8021q: adding VLAN 0 to HW filter on device eth13 [ 51.822384][ T4518] msdos: Bad value for 'gid' [ 51.822412][ T4518] msdos: Bad value for 'gid' [ 51.848907][ T53] hsr_slave_0: left promiscuous mode [ 51.861563][ T53] hsr_slave_1: left promiscuous mode [ 51.862070][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.862084][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.881922][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.881939][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.902056][ T53] veth1_macvtap: left promiscuous mode [ 51.902084][ T53] veth0_macvtap: left promiscuous mode [ 51.902133][ T53] veth1_vlan: left promiscuous mode [ 51.902162][ T53] veth0_vlan: left promiscuous mode [ 51.936607][ T4527] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.152547][ T53] team0 (unregistering): Port device team_slave_1 removed [ 52.161724][ T53] team0 (unregistering): Port device team_slave_0 removed [ 52.343792][ T4492] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.343824][ T4492] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.343896][ T4492] bridge_slave_0: entered allmulticast mode [ 52.344469][ T4492] bridge_slave_0: entered promiscuous mode [ 52.354304][ T4541] loop0: detected capacity change from 0 to 512 [ 52.378056][ T4492] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.378089][ T4492] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.378186][ T4492] bridge_slave_1: entered allmulticast mode [ 52.378741][ T4492] bridge_slave_1: entered promiscuous mode [ 52.421177][ T4492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.422330][ T4492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.444690][ T4541] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.165: iget: bad extended attribute block 134217728 [ 52.444750][ T4541] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 52.446753][ T4541] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.165: couldn't read orphan inode 15 (err -117) [ 52.446897][ T4541] loop0: lost filesystem error report for type 5 error -117 [ 52.452558][ C1] EXT4-fs (loop0): error count since last fsck: 2 [ 52.452578][ C1] EXT4-fs (loop0): initial error at time 1793579760: ext4_orphan_get:1404: inode 15 [ 52.452607][ C1] EXT4-fs (loop0): last error at time 1793579760: ext4_orphan_get:1409 [ 52.458870][ T4546] rxe_eth0 speed is unknown, defaulting to 1000 [ 52.495160][ T4541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.537705][ T4541] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.554974][ T4492] team0: Port device team_slave_0 added [ 52.557489][ T4492] team0: Port device team_slave_1 added [ 52.627513][ T4492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.627528][ T4492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.627559][ T4492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.634477][ T4492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.634491][ T4492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.634543][ T4492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.683990][ T4492] hsr_slave_0: entered promiscuous mode [ 52.684423][ T4492] hsr_slave_1: entered promiscuous mode [ 52.684996][ T4492] debugfs: 'hsr0' already exists in 'hsr' [ 52.685008][ T4492] Cannot create hsr debugfs directory [ 52.757065][ T4568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.168'. [ 52.790947][ T53] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.813904][ T3017] 8021q: adding VLAN 0 to HW filter on device eth14 [ 52.927093][ T4582] ip_tables: iptables: counters copy to user failed while replacing table [ 52.975401][ T53] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.996199][ T4546] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.996228][ T4546] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.999643][ T4546] bridge_slave_0: entered allmulticast mode [ 53.000234][ T4546] bridge_slave_0: entered promiscuous mode [ 53.026647][ T4546] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.026679][ T4546] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.026766][ T4546] bridge_slave_1: entered allmulticast mode [ 53.027301][ T4546] bridge_slave_1: entered promiscuous mode [ 53.037175][ T4492] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 53.040318][ T4492] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 53.060851][ T53] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.061983][ T4492] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 53.070172][ T4492] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 53.086066][ T4546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.086188][ T4492] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 53.093455][ T4492] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 53.094591][ T4546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.119361][ T4492] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 53.128545][ T4492] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 53.139238][ T4611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.171'. [ 53.171070][ T53] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.184739][ T4546] team0: Port device team_slave_0 added [ 53.188115][ T4546] team0: Port device team_slave_1 added [ 53.194351][ T4616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.173'. [ 53.195424][ T3017] 8021q: adding VLAN 0 to HW filter on device eth15 [ 53.247027][ T4546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.247043][ T4546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.247074][ T4546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.255793][ T4546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.255807][ T4546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.255956][ T4546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.327650][ T4546] hsr_slave_0: entered promiscuous mode [ 53.328069][ T4546] hsr_slave_1: entered promiscuous mode [ 53.334855][ T4546] debugfs: 'hsr0' already exists in 'hsr' [ 53.334874][ T4546] Cannot create hsr debugfs directory [ 53.381759][ T53] bridge_slave_1: left allmulticast mode [ 53.381780][ T53] bridge_slave_1: left promiscuous mode [ 53.381981][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.401746][ T53] bridge_slave_0: left allmulticast mode [ 53.401786][ T53] bridge_slave_0: left promiscuous mode [ 53.401979][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.405242][ T4624] netlink: 8 bytes leftover after parsing attributes in process `syz.7.174'. [ 53.405392][ T4624] netlink: 44 bytes leftover after parsing attributes in process `syz.7.174'. [ 53.517959][ T4637] loop7: detected capacity change from 0 to 128 [ 53.531334][ T4637] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.534810][ T4637] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.583387][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.588514][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.590388][ T53] bond0 (unregistering): Released all slaves [ 53.603272][ T4616] loop3: detected capacity change from 0 to 512 [ 53.670991][ T3017] 8021q: adding VLAN 0 to HW filter on device eth16 [ 53.690408][ T4083] FAT-fs (loop7): error, invalid access to FAT (entry 0xffff0000) [ 53.690429][ T4083] FAT-fs (loop7): Filesystem has been set read-only [ 53.712705][ T4616] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.713262][ T4616] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.720778][ T4083] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.791333][ T4658] loop0: detected capacity change from 0 to 128 [ 53.793876][ T53] hsr_slave_0: left promiscuous mode [ 53.805161][ T53] hsr_slave_1: left promiscuous mode [ 53.805749][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.805763][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.807180][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.807195][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.814508][ T53] veth1_macvtap: left promiscuous mode [ 53.814536][ T53] veth0_macvtap: left promiscuous mode [ 53.814607][ T53] veth0_vlan: left promiscuous mode [ 53.954667][ T3299] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 53.954913][ T3299] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 53.955142][ T3299] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 53.955436][ T3299] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 53.955659][ T3299] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 53.955858][ T3299] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 53.956139][ T3299] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 53.956503][ T3299] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 53.956731][ T3299] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 53.956991][ T3299] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 54.151138][ T29] kauditd_printk_skb: 673 callbacks suppressed [ 54.151153][ T29] audit: type=1326 audit(1793579762.050:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="syz.7.179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7529bf559 code=0x7ffc0000 [ 54.151165][ T53] team0 (unregistering): Port device team_slave_1 removed [ 54.155369][ T29] audit: type=1326 audit(1793579762.060:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="syz.7.179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7529bf559 code=0x7ffc0000 [ 54.155398][ T29] audit: type=1326 audit(1793579762.060:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="syz.7.179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7529bf559 code=0x7ffc0000 [ 54.155465][ T29] audit: type=1326 audit(1793579762.060:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="syz.7.179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7529bf559 code=0x7ffc0000 [ 54.155491][ T29] audit: type=1326 audit(1793579762.060:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="syz.7.179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa7529bf559 code=0x7ffc0000 [ 54.183940][ T53] team0 (unregistering): Port device team_slave_0 removed [ 54.206484][ T29] audit: type=1326 audit(1793579762.090:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="syz.7.179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7529bf559 code=0x7ffc0000 [ 54.206516][ T29] audit: type=1326 audit(1793579762.090:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="syz.7.179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7529bf559 code=0x7ffc0000 [ 54.206579][ T29] audit: type=1326 audit(1793579762.090:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="syz.7.179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7529bf559 code=0x7ffc0000 [ 54.206653][ T29] audit: type=1326 audit(1793579762.090:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="syz.7.179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7529bf559 code=0x7ffc0000 [ 54.206680][ T29] audit: type=1326 audit(1793579762.090:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="syz.7.179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7529bf559 code=0x7ffc0000 [ 54.233909][ T4671] ip_tables: iptables: counters copy to user failed while replacing table [ 54.455221][ T4492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.499560][ T4492] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.508548][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.508588][ T367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.522032][ T3446] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.522066][ T3446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.529813][ T4546] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 54.541137][ T4546] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.544051][ T4546] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 54.555396][ T4667] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.557892][ T4546] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.565497][ T4546] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 54.581343][ T4546] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.596917][ T4546] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 54.603587][ T4546] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.618227][ T4681] dvmrp6: entered allmulticast mode [ 54.750480][ T4546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.769856][ T4546] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.775789][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.775825][ T367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.794971][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.806248][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.806282][ T367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.843735][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.881484][ T3017] 8021q: adding VLAN 0 to HW filter on device eth17 [ 54.903368][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.941842][ T4492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.968796][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.034815][ T4696] rxe_eth0 speed is unknown, defaulting to 1000 [ 55.177554][ T53] bridge_slave_1: left allmulticast mode [ 55.177577][ T53] bridge_slave_1: left promiscuous mode [ 55.177794][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.189526][ T53] bridge_slave_0: left allmulticast mode [ 55.189555][ T53] bridge_slave_0: left promiscuous mode [ 55.189705][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.300174][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.310066][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.310993][ T53] bond0 (unregistering): Released all slaves [ 55.338361][ T3017] 8021q: adding VLAN 0 to HW filter on device eth18 [ 55.389523][ T4756] FAULT_INJECTION: forcing a failure. [ 55.389523][ T4756] name failslab, interval 1, probability 0, space 0, times 0 [ 55.389568][ T4756] CPU: 0 UID: 0 PID: 4756 Comm: syz.0.184 Not tainted syzkaller #0 PREEMPT(lazy) [ 55.389590][ T4756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 55.389616][ T4756] Call Trace: [ 55.389623][ T4756] [ 55.389630][ T4756] __dump_stack+0x1d/0x30 [ 55.389661][ T4756] dump_stack_lvl+0x95/0xd0 [ 55.389684][ T4756] dump_stack+0x15/0x1b [ 55.389778][ T4756] should_fail_ex+0x259/0x270 [ 55.389809][ T4756] ? __vmalloc_node_range_noprof+0x442/0x10e0 [ 55.389891][ T4756] should_failslab+0x8c/0xb0 [ 55.389918][ T4756] __kmalloc_node_noprof+0xb8/0x4d0 [ 55.389946][ T4756] ? __get_vm_area_node+0x1bc/0x1f0 [ 55.389977][ T4756] ? __vmalloc_node_range_noprof+0x442/0x10e0 [ 55.390160][ T4756] __vmalloc_node_range_noprof+0x442/0x10e0 [ 55.390276][ T4756] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 55.390341][ T4756] __vmalloc_noprof+0xa4/0xf0 [ 55.390412][ T4756] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 55.390448][ T4756] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 55.390483][ T4756] ? bpf_prog_alloc+0x2a/0x150 [ 55.390589][ T4756] bpf_prog_alloc+0x3c/0x150 [ 55.390623][ T4756] bpf_prog_load+0x54a/0x10b0 [ 55.390654][ T4756] ? send_sig_perf+0x50/0x110 [ 55.390674][ T4756] __sys_bpf+0xbce/0xc50 [ 55.390698][ T4756] ? send_sig_perf+0x50/0x110 [ 55.390782][ T4756] ? send_sig_perf+0x50/0x110 [ 55.390806][ T4756] __x64_sys_bpf+0x69/0x80 [ 55.390822][ T4756] x64_sys_call+0xf26/0x2550 [ 55.390846][ T4756] do_syscall_64+0x112/0x360 [ 55.390953][ T4756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.391046][ T4756] RIP: 0033:0x7f320642f559 [ 55.391065][ T4756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.391081][ T4756] RSP: 002b:00007f3204e87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 55.391173][ T4756] RAX: ffffffffffffffda RBX: 00007f32066b5fa0 RCX: 00007f320642f559 [ 55.391188][ T4756] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 55.391202][ T4756] RBP: 00007f3204e87090 R08: 0000000000000000 R09: 0000000000000000 [ 55.391278][ T4756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.391291][ T4756] R13: 00007f32066b6038 R14: 00007f32066b5fa0 R15: 00007fff5264bec8 [ 55.391312][ T4756] [ 55.402210][ T4756] syz.0.184: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 55.402444][ T4756] CPU: 0 UID: 0 PID: 4756 Comm: syz.0.184 Not tainted syzkaller #0 PREEMPT(lazy) [ 55.402469][ T4756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 55.402481][ T4756] Call Trace: [ 55.402525][ T4756] [ 55.402532][ T4756] __dump_stack+0x1d/0x30 [ 55.402613][ T4756] dump_stack_lvl+0x95/0xd0 [ 55.402635][ T4756] dump_stack+0x15/0x1b [ 55.402656][ T4756] warn_alloc+0x146/0x1c0 [ 55.402713][ T4756] ? __kmalloc_node_noprof+0xba/0x4d0 [ 55.402793][ T4756] ? __kmalloc_node_noprof+0xb8/0x4d0 [ 55.402827][ T4756] __vmalloc_node_range_noprof+0x771/0x10e0 [ 55.402925][ T4756] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 55.402959][ T4756] __vmalloc_noprof+0xa4/0xf0 [ 55.402988][ T4756] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 55.403031][ T4756] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 55.403063][ T4756] ? bpf_prog_alloc+0x2a/0x150 [ 55.403120][ T4756] bpf_prog_alloc+0x3c/0x150 [ 55.403152][ T4756] bpf_prog_load+0x54a/0x10b0 [ 55.403308][ T4756] ? send_sig_perf+0x50/0x110 [ 55.403369][ T4756] __sys_bpf+0xbce/0xc50 [ 55.403390][ T4756] ? send_sig_perf+0x50/0x110 [ 55.403409][ T4756] ? send_sig_perf+0x50/0x110 [ 55.403432][ T4756] __x64_sys_bpf+0x69/0x80 [ 55.403481][ T4756] x64_sys_call+0xf26/0x2550 [ 55.403580][ T4756] do_syscall_64+0x112/0x360 [ 55.403678][ T4756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.403707][ T4756] RIP: 0033:0x7f320642f559 [ 55.403723][ T4756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.403741][ T4756] RSP: 002b:00007f3204e87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 55.403761][ T4756] RAX: ffffffffffffffda RBX: 00007f32066b5fa0 RCX: 00007f320642f559 [ 55.403821][ T4756] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 55.403840][ T4756] RBP: 00007f3204e87090 R08: 0000000000000000 R09: 0000000000000000 [ 55.403853][ T4756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.403866][ T4756] R13: 00007f32066b6038 R14: 00007f32066b5fa0 R15: 00007fff5264bec8 [ 55.403921][ T4756] [ 55.407242][ T4756] Mem-Info: [ 55.407260][ T4756] active_anon:8174 inactive_anon:0 isolated_anon:0 [ 55.407260][ T4756] active_file:0 inactive_file:17390 isolated_file:0 [ 55.407260][ T4756] unevictable:0 dirty:372 writeback:0 [ 55.407260][ T4756] slab_reclaimable:3563 slab_unreclaimable:17551 [ 55.407260][ T4756] mapped:29749 shmem:209 pagetables:1319 [ 55.407260][ T4756] sec_pagetables:0 bounce:0 [ 55.407260][ T4756] kernel_misc_reclaimable:0 [ 55.407260][ T4756] free:1881911 free_pcp:10133 free_cma:0 [ 55.407376][ T4756] Node 0 active_anon:32696kB inactive_anon:0kB active_file:0kB inactive_file:69560kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118996kB dirty:1488kB writeback:0kB shmem:836kB kernel_stack:3616kB pagetables:5276kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 55.407443][ T4756] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 55.407552][ T4756] lowmem_reserve[]: 0 2877 7856 7856 [ 55.407653][ T4756] Node 0 DMA32 free:2942976kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2946500kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 55.407818][ T4756] lowmem_reserve[]: 0 0 4978 4978 [ 55.407960][ T4756] Node 0 Normal free:4569308kB boost:0kB min:7192kB low:12288kB high:17384kB reserved_highatomic:0kB free_highatomic:0kB active_anon:32696kB inactive_anon:0kB active_file:0kB inactive_file:69560kB unevictable:0kB writepending:1488kB zspages:0kB present:5242880kB managed:5098212kB mlocked:0kB bounce:0kB free_pcp:37008kB local_pcp:14756kB free_cma:0kB [ 55.408173][ T4756] lowmem_reserve[]: 0 0 0 0 [ 55.408297][ T4756] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB [ 55.414325][ T4546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.427131][ T4756] (M) 3*4096kB (M) = 15360kB [ 55.427229][ T4756] Node 0 DMA32: 4*4kB (M) 0*8kB 3*16kB (M) 4*32kB (M) 1*64kB (M) 2*128kB (M) 4*256kB (M) 3*512kB (M) 1*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2942976kB [ 55.427770][ T4756] Node 0 Normal: 5339*4kB (UM) 936*8kB (UM) 547*16kB (UM) 399*32kB (UM) 317*64kB (UME) 216*128kB (UM) 109*256kB (UME) 46*512kB (UM) 26*1024kB (M) 9*2048kB (UME) 1068*4096kB (UM) = 4569340kB [ 55.428440][ T4756] Node 0 hugepages_total=6 hugepages_free=5 hugepages_surp=2 hugepages_size=2048kB [ 55.435948][ T4756] 17595 total pagecache pages [ 55.435985][ T4756] 0 pages in swap cache [ 55.436005][ T4756] Free swap = 124996kB [ 55.436069][ T4756] Total swap = 124996kB [ 55.436098][ T4756] 2097051 pages RAM [ 55.436115][ T4756] 0 pages HighMem/MovableOnly [ 55.436131][ T4756] 82033 pages reserved [ 55.527499][ T53] hsr_slave_0: left promiscuous mode [ 55.534919][ T53] hsr_slave_1: left promiscuous mode [ 55.535419][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.535433][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.539870][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.539886][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.553560][ T53] veth1_macvtap: left promiscuous mode [ 55.553586][ T53] veth0_macvtap: left promiscuous mode [ 55.553691][ T53] veth1_vlan: left promiscuous mode [ 55.553781][ T53] veth0_vlan: left promiscuous mode [ 55.763039][ T53] team0 (unregistering): Port device team_slave_1 removed [ 55.768011][ T53] team0 (unregistering): Port device team_slave_0 removed [ 55.793007][ T53] team0 (unregistering): Port device dummy0 removed [ 55.802187][ T4782] loop7: detected capacity change from 0 to 512 [ 55.804488][ T4782] EXT4-fs: Ignoring removed nobh option [ 55.841860][ T4782] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.841999][ T4782] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.977273][ T4769] rxe_eth0 speed is unknown, defaulting to 1000 [ 56.048759][ T4492] veth0_vlan: entered promiscuous mode [ 56.067004][ T4492] veth1_vlan: entered promiscuous mode [ 56.136931][ T4763] EXT4-fs error (device loop7): ext4_find_dest_de:2052: inode #2: block 3: comm syz.7.186: bad entry in directory: directory entry overrun - offset=76, inode=16, rec_len=65296, size=2048 fake=0 [ 56.189941][ T4492] veth0_macvtap: entered promiscuous mode [ 56.192107][ T4492] veth1_macvtap: entered promiscuous mode [ 56.213114][ T4083] EXT4-fs error (device loop7): ext4_readdir:280: inode #2: block 3: comm syz-executor: path /12/file1: bad entry in directory: directory entry overrun - offset=76, inode=16, rec_len=65296, size=2048 fake=0 [ 56.215398][ T4083] EXT4-fs error (device loop7): ext4_readdir:280: inode #11: block 10: comm syz-executor: path /12/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=14592, size=2048 fake=0 [ 56.216231][ T4083] EXT4-fs error (device loop7): ext4_empty_dir:3127: inode #11: block 10: comm syz-executor: bad entry in directory: directory entry overrun - offset=12288, inode=0, rec_len=14592, size=2048 fake=0 [ 56.217188][ T4083] EXT4-fs error (device loop7): ext4_readdir:280: inode #11: block 10: comm syz-executor: path /12/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=14592, size=2048 fake=0 [ 56.218444][ T4083] EXT4-fs error (device loop7): ext4_empty_dir:3127: inode #11: block 10: comm syz-executor: bad entry in directory: directory entry overrun - offset=12288, inode=0, rec_len=14592, size=2048 fake=0 [ 56.219009][ T4083] EXT4-fs error (device loop7): ext4_readdir:280: inode #11: block 10: comm syz-executor: path /12/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=14592, size=2048 fake=0 [ 56.219302][ T4083] EXT4-fs error (device loop7): ext4_empty_dir:3127: inode #11: block 10: comm syz-executor: bad entry in directory: directory entry overrun - offset=12288, inode=0, rec_len=14592, size=2048 fake=0 [ 56.219623][ T4083] EXT4-fs error (device loop7): ext4_readdir:280: inode #11: block 10: comm syz-executor: path /12/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=14592, size=2048 fake=0 [ 56.219880][ T4083] EXT4-fs error (device loop7): ext4_empty_dir:3127: inode #11: block 10: comm syz-executor: bad entry in directory: directory entry overrun - offset=12288, inode=0, rec_len=14592, size=2048 fake=0 [ 56.297200][ T4696] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.297234][ T4696] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.297352][ T4696] bridge_slave_0: entered allmulticast mode [ 56.297735][ T4696] bridge_slave_0: entered promiscuous mode [ 56.302413][ T4492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.309854][ T4696] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.309888][ T4696] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.310052][ T4696] bridge_slave_1: entered allmulticast mode [ 56.310593][ T4696] bridge_slave_1: entered promiscuous mode [ 56.314405][ T4492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.416401][ T4696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.424065][ T4696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.431734][ T41] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.432100][ T41] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.432578][ T41] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.432689][ T41] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.557218][ T4696] team0: Port device team_slave_0 added [ 56.559687][ T4696] team0: Port device team_slave_1 added [ 56.647065][ T4696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.647080][ T4696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.647111][ T4696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.649885][ T4696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.649900][ T4696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.649929][ T4696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.650447][ T4546] veth0_vlan: entered promiscuous mode [ 56.657230][ T3017] 8021q: adding VLAN 0 to HW filter on device eth19 [ 56.687247][ T4083] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.764135][ T4546] veth1_vlan: entered promiscuous mode [ 56.769282][ T81] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.793694][ T4696] hsr_slave_0: entered promiscuous mode [ 56.794013][ T4696] hsr_slave_1: entered promiscuous mode [ 56.825257][ T81] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.828736][ T4546] veth0_macvtap: entered promiscuous mode [ 56.836471][ T4546] veth1_macvtap: entered promiscuous mode [ 56.899453][ T4546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.912848][ T81] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.918428][ T4546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.982643][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.982760][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.982789][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.982825][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.989890][ T81] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.993702][ T4850] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 57.077181][ T4850] tipc: Started in network mode [ 57.077221][ T4850] tipc: Node identity 1ac67efe9fa6, cluster identity 4711 [ 57.077284][ T4850] tipc: Enabled bearer , priority 10 [ 57.103356][ T4846] tipc: Disabling bearer [ 57.155247][ T3017] 8021q: adding VLAN 0 to HW filter on device eth20 [ 57.155378][ T4831] rxe_eth0 speed is unknown, defaulting to 1000 [ 57.213929][ T81] bridge_slave_1: left allmulticast mode [ 57.213949][ T81] bridge_slave_1: left promiscuous mode [ 57.214184][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.218753][ T81] bridge_slave_0: left allmulticast mode [ 57.218776][ T81] bridge_slave_0: left promiscuous mode [ 57.218934][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.225750][ T81] dvmrp6: left allmulticast mode [ 57.246202][ T4869] loop9: detected capacity change from 0 to 512 [ 57.276211][ T4869] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.276310][ T4869] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.316124][ T4546] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.390683][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.398713][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.399570][ T81] bond0 (unregistering): Released all slaves [ 57.524282][ T81] hsr_slave_0: left promiscuous mode [ 57.526779][ T81] hsr_slave_1: left promiscuous mode [ 57.527260][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.527275][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.528725][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.528740][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.578500][ T81] veth1_macvtap: left promiscuous mode [ 57.578529][ T81] veth0_macvtap: left promiscuous mode [ 57.578588][ T81] veth1_vlan: left promiscuous mode [ 57.578699][ T81] veth0_vlan: left promiscuous mode [ 57.691409][ T81] team0 (unregistering): Port device team_slave_1 removed [ 57.694444][ T81] team0 (unregistering): Port device team_slave_0 removed [ 57.854527][ T4831] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.854567][ T4831] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.854650][ T4831] bridge_slave_0: entered allmulticast mode [ 57.855206][ T4831] bridge_slave_0: entered promiscuous mode [ 57.884751][ T4831] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.884787][ T4831] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.884883][ T4831] bridge_slave_1: entered allmulticast mode [ 57.885478][ T4831] bridge_slave_1: entered promiscuous mode [ 57.929530][ T4831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.931267][ T4831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.941352][ T4831] team0: Port device team_slave_0 added [ 57.942218][ T4831] team0: Port device team_slave_1 added [ 57.952000][ T4831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.952015][ T4831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.952087][ T4831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.952832][ T4831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.952844][ T4831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.952871][ T4831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.989015][ T4831] hsr_slave_0: entered promiscuous mode [ 57.989416][ T4831] hsr_slave_1: entered promiscuous mode [ 57.994231][ T4831] debugfs: 'hsr0' already exists in 'hsr' [ 57.994243][ T4831] Cannot create hsr debugfs directory [ 58.257424][ T4952] netlink: 52 bytes leftover after parsing attributes in process `syz.9.200'. [ 58.260447][ T4952] FAULT_INJECTION: forcing a failure. [ 58.260447][ T4952] name failslab, interval 1, probability 0, space 0, times 0 [ 58.260496][ T4952] CPU: 1 UID: 0 PID: 4952 Comm: syz.9.200 Not tainted syzkaller #0 PREEMPT(lazy) [ 58.260534][ T4952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 58.260560][ T4952] Call Trace: [ 58.260566][ T4952] [ 58.260575][ T4952] __dump_stack+0x1d/0x30 [ 58.260724][ T4952] dump_stack_lvl+0x95/0xd0 [ 58.260750][ T4952] dump_stack+0x15/0x1b [ 58.260832][ T4952] should_fail_ex+0x259/0x270 [ 58.260862][ T4952] ? switchdev_deferred_enqueue+0x2d/0x1c0 [ 58.260885][ T4952] should_failslab+0x8c/0xb0 [ 58.260935][ T4952] __kmalloc_noprof+0xb6/0x4b0 [ 58.261037][ T4952] ? switchdev_deferred_enqueue+0x2d/0x1c0 [ 58.261059][ T4952] ? __pfx_switchdev_port_attr_set_deferred+0x10/0x10 [ 58.261164][ T4952] switchdev_deferred_enqueue+0x2d/0x1c0 [ 58.261189][ T4952] switchdev_port_attr_set+0x7a/0xb0 [ 58.261210][ T4952] br_set_state+0x227/0x390 [ 58.261284][ T4952] ? vxlan_netdevice_event+0xcd/0x3c0 [ 58.261308][ T4952] br_stp_disable_port+0x5d/0x150 [ 58.261357][ T4952] br_stp_disable_bridge+0x5e/0xf0 [ 58.261389][ T4952] ? __pfx_br_dev_stop+0x10/0x10 [ 58.261417][ T4952] br_dev_stop+0x21/0xe0 [ 58.261486][ T4952] ? __pfx_br_dev_stop+0x10/0x10 [ 58.261556][ T4952] __dev_close_many+0x248/0x460 [ 58.261593][ T4952] __dev_change_flags+0x3fa/0x490 [ 58.261651][ T4952] netif_change_flags+0x53/0xc0 [ 58.261681][ T4952] do_setlink+0x8fc/0x2930 [ 58.261752][ T4952] ? preempt_schedule_common+0x12/0x40 [ 58.261824][ T4952] ? preempt_schedule_thunk+0x16/0x40 [ 58.261859][ T4952] ? _raw_spin_unlock_bh+0x17/0x20 [ 58.261880][ T4952] ? br_multicast_set_querier+0x151/0x170 [ 58.261968][ T4952] ? br_changelink+0xe3d/0xe80 [ 58.262001][ T4952] ? __dev_get_by_index+0x38/0xc0 [ 58.262025][ T4952] rtnl_newlink+0x115a/0x1510 [ 58.262080][ T4952] ? tick_program_event+0x79/0xc0 [ 58.262115][ T4952] ? _raw_spin_unlock+0x9/0x30 [ 58.262184][ T4952] ? __hrtimer_rearm_deferred+0x571/0x650 [ 58.262218][ T4952] ? tick_program_event+0x79/0xc0 [ 58.262252][ T4952] ? _raw_spin_unlock+0x9/0x30 [ 58.262271][ T4952] ? __hrtimer_rearm_deferred+0x571/0x650 [ 58.262415][ T4952] ? irqentry_exit+0x58f/0x610 [ 58.262444][ T4952] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 58.262473][ T4952] ? ns_capable+0x57/0xb0 [ 58.262497][ T4952] ? __sanitizer_cov_trace_const_cmp4+0x8/0xb0 [ 58.262577][ T4952] ? ns_capable+0x80/0xb0 [ 58.262600][ T4952] ? __pfx_rtnl_newlink+0x10/0x10 [ 58.262708][ T4952] rtnetlink_rcv_msg+0x64b/0x720 [ 58.262739][ T4952] ? __copy_skb_header+0x22f/0x2b0 [ 58.262826][ T4952] netlink_rcv_skb+0x11e/0x220 [ 58.262847][ T4952] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 58.262983][ T4952] rtnetlink_rcv+0x1c/0x30 [ 58.263009][ T4952] netlink_unicast+0x665/0x740 [ 58.263041][ T4952] netlink_sendmsg+0x5ef/0x740 [ 58.263119][ T4952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.263140][ T4952] ____sys_sendmsg+0x54a/0x590 [ 58.263163][ T4952] ___sys_sendmsg+0x195/0x1e0 [ 58.263217][ T4952] __x64_sys_sendmsg+0xd4/0x160 [ 58.263240][ T4952] x64_sys_call+0x22ab/0x2550 [ 58.263267][ T4952] do_syscall_64+0x112/0x360 [ 58.263299][ T4952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.263358][ T4952] RIP: 0033:0x7f87424cf559 [ 58.263376][ T4952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.263395][ T4952] RSP: 002b:00007f8740f27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.263415][ T4952] RAX: ffffffffffffffda RBX: 00007f8742755fa0 RCX: 00007f87424cf559 [ 58.263430][ T4952] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a [ 58.263457][ T4952] RBP: 00007f8740f27090 R08: 0000000000000000 R09: 0000000000000000 [ 58.263470][ T4952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.263488][ T4952] R13: 00007f8742756038 R14: 00007f8742755fa0 R15: 00007ffe9fddf3d8 [ 58.263573][ T4952] [ 58.263687][ T4952] bridge0: error setting offload STP state on port 2(bridge_slave_1) [ 58.265876][ T4952] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.483057][ T4966] netlink: 12 bytes leftover after parsing attributes in process `syz.8.201'. [ 58.668700][ T4696] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.713441][ T4696] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 58.757824][ T4696] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.765499][ T4696] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 58.767529][ T4696] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.778269][ T4696] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 58.790798][ T4696] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.801446][ T4696] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 58.833229][ T4979] loop0: detected capacity change from 0 to 128 [ 58.847840][ T4979] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 58.849066][ T4979] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.861520][ T4973] netlink: 52 bytes leftover after parsing attributes in process `syz.8.203'. [ 58.874311][ T4973] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.875891][ T4973] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.906289][ T3017] 8021q: adding VLAN 0 to HW filter on device eth21 [ 58.942495][ T4696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.943468][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.976992][ T4696] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.984179][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.984215][ T367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.992705][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.992738][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.018731][ T4988] FAULT_INJECTION: forcing a failure. [ 59.018731][ T4988] name failslab, interval 1, probability 0, space 0, times 0 [ 59.018816][ T4988] CPU: 1 UID: 0 PID: 4988 Comm: syz.9.207 Not tainted syzkaller #0 PREEMPT(lazy) [ 59.018842][ T4988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 59.018855][ T4988] Call Trace: [ 59.018862][ T4988] [ 59.018869][ T4988] __dump_stack+0x1d/0x30 [ 59.018905][ T4988] dump_stack_lvl+0x95/0xd0 [ 59.018928][ T4988] dump_stack+0x15/0x1b [ 59.018950][ T4988] should_fail_ex+0x259/0x270 [ 59.018981][ T4988] should_failslab+0x8c/0xb0 [ 59.019057][ T4988] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 59.019105][ T4988] ? __hrtimer_rearm_deferred+0x571/0x650 [ 59.019140][ T4988] ? sock_alloc_inode+0x36/0xf0 [ 59.019167][ T4988] ? sock_alloc_inode+0x36/0xf0 [ 59.019214][ T4988] ? selinux_socket_create+0x86/0x180 [ 59.019286][ T4988] ? __pfx_sock_alloc_inode+0x10/0x10 [ 59.019311][ T4988] sock_alloc_inode+0x36/0xf0 [ 59.019337][ T4988] alloc_inode+0x40/0x170 [ 59.019409][ T4988] __sock_create+0x121/0x580 [ 59.019437][ T4988] ? sock_create_kern+0x1f/0x50 [ 59.019466][ T4988] sock_create_kern+0x38/0x50 [ 59.019571][ T4988] mptcp_subflow_create_socket+0x81/0x500 [ 59.019704][ T4988] __mptcp_nmpc_sk+0xb5/0x3d0 [ 59.019735][ T4988] mptcp_connect+0x5a/0x990 [ 59.019759][ T4988] __inet_stream_connect+0x166/0x840 [ 59.019827][ T4988] ? lock_sock_nested+0x7f/0x110 [ 59.019852][ T4988] inet_stream_connect+0x44/0x70 [ 59.019882][ T4988] __sys_connect+0x1ef/0x2a0 [ 59.019975][ T4988] __x64_sys_connect+0x3f/0x50 [ 59.020007][ T4988] x64_sys_call+0x1c0b/0x2550 [ 59.020055][ T4988] do_syscall_64+0x112/0x360 [ 59.020086][ T4988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.020110][ T4988] RIP: 0033:0x7f87424cf559 [ 59.020155][ T4988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.020173][ T4988] RSP: 002b:00007f8740f27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 59.020195][ T4988] RAX: ffffffffffffffda RBX: 00007f8742755fa0 RCX: 00007f87424cf559 [ 59.020264][ T4988] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000004 [ 59.020278][ T4988] RBP: 00007f8740f27090 R08: 0000000000000000 R09: 0000000000000000 [ 59.020292][ T4988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.020341][ T4988] R13: 00007f8742756038 R14: 00007f8742755fa0 R15: 00007ffe9fddf3d8 [ 59.020362][ T4988] [ 59.049839][ T4988] socket: no more sockets [ 59.263100][ T4696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.308399][ T29] kauditd_printk_skb: 368 callbacks suppressed [ 59.308416][ T29] audit: type=1400 audit(1793579767.202:2272): avc: denied { write } for pid=4998 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.357923][ T4696] veth0_vlan: entered promiscuous mode [ 59.362213][ T4696] veth1_vlan: entered promiscuous mode [ 59.373582][ T4696] veth0_macvtap: entered promiscuous mode [ 59.375525][ T4696] veth1_macvtap: entered promiscuous mode [ 59.382426][ T4696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.386445][ T4696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.394949][ T29] audit: type=1400 audit(1793579767.292:2273): avc: denied { write } for pid=5031 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.429555][ T41] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.431148][ T41] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.431185][ T41] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.431331][ T41] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.434332][ T3017] 8021q: adding VLAN 0 to HW filter on device eth22 [ 59.511600][ T29] audit: type=1400 audit(1793579767.413:2274): avc: denied { mounton } for pid=5025 comm="syz.8.209" path="/5/proc/15/task/16/fail-nth" dev="proc" ino=11207 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 59.511669][ T5027] FAULT_INJECTION: forcing a failure. [ 59.511669][ T5027] name failslab, interval 1, probability 0, space 0, times 0 [ 59.511728][ T5027] CPU: 1 UID: 0 PID: 5027 Comm: syz.8.209 Not tainted syzkaller #0 PREEMPT(lazy) [ 59.511751][ T5027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 59.511804][ T5027] Call Trace: [ 59.511811][ T5027] [ 59.511820][ T5027] __dump_stack+0x1d/0x30 [ 59.511848][ T5027] dump_stack_lvl+0x95/0xd0 [ 59.511938][ T5027] dump_stack+0x15/0x1b [ 59.511961][ T5027] should_fail_ex+0x259/0x270 [ 59.511993][ T5027] ? vfs_parse_monolithic_sep+0x16a/0x270 [ 59.512027][ T5027] should_failslab+0x8c/0xb0 [ 59.512072][ T5027] __kmalloc_node_track_caller_noprof+0xb6/0x4d0 [ 59.512155][ T5027] ? vfs_parse_monolithic_sep+0x16a/0x270 [ 59.512185][ T5027] kmemdup_nul+0x36/0xc0 [ 59.512203][ T5027] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 59.512230][ T5027] vfs_parse_monolithic_sep+0x16a/0x270 [ 59.512294][ T5027] generic_parse_monolithic+0x24/0x30 [ 59.512338][ T5027] parse_monolithic_mount_data+0x46/0x60 [ 59.512423][ T5027] do_new_mount+0x24e/0x730 [ 59.512452][ T5027] ? ns_capable+0x80/0xb0 [ 59.512476][ T5027] path_mount+0x4ad/0xba0 [ 59.512496][ T5027] __se_sys_mount+0x28c/0x2e0 [ 59.512517][ T5027] __x64_sys_mount+0x67/0x80 [ 59.512566][ T5027] x64_sys_call+0xc3b/0x2550 [ 59.512593][ T5027] do_syscall_64+0x112/0x360 [ 59.512628][ T5027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.512670][ T5027] RIP: 0033:0x7f16f213f559 [ 59.512685][ T5027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.512701][ T5027] RSP: 002b:00007f16f0b97028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 59.512720][ T5027] RAX: ffffffffffffffda RBX: 00007f16f23c5fa0 RCX: 00007f16f213f559 [ 59.512735][ T5027] RDX: 0000200000000500 RSI: 00002000000004c0 RDI: 0000200000000480 [ 59.512769][ T5027] RBP: 00007f16f21d6b50 R08: 0000200000000580 R09: 0000000000000000 [ 59.512785][ T5027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.512816][ T5027] R13: 00007f16f23c6038 R14: 00007f16f23c5fa0 R15: 00007ffed89924d8 [ 59.512833][ T5027] [ 59.525171][ T5027] TC_ACT_REPEAT abuse ? [ 59.668371][ T5045] loop1: detected capacity change from 0 to 128 [ 59.885823][ T5052] loop8: detected capacity change from 0 to 512 [ 59.894075][ T5052] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 59.894106][ T5052] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 59.894116][ T5052] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.214: Corrupt directory, running e2fsck is recommended [ 59.894773][ T5052] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 59.894805][ T5052] EXT4-fs error (device loop8): ext4_iget_extra_inode:6027: inode #15: comm syz.8.214: corrupted in-inode xattr: e_name out of bounds [ 59.894893][ T5052] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 59.895036][ T5052] EXT4-fs error (device loop8): ext4_orphan_get:1409: comm syz.8.214: couldn't read orphan inode 15 (err -117) [ 59.895062][ T5052] loop8: lost filesystem error report for type 5 error -117 [ 59.895604][ T5052] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.897396][ T5052] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 59.897439][ T5052] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 59.897456][ T5052] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.214: Corrupt directory, running e2fsck is recommended [ 59.897509][ T5052] EXT4-fs error (device loop8): ext4_readdir:280: inode #2: block 3: comm syz.8.214: path /9/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 59.898014][ T5052] EXT4-fs error (device loop8): ext4_readdir:280: inode #2: block 8: comm syz.8.214: path /9/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 59.934566][ T4492] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.000667][ T29] audit: type=1326 audit(1793579767.903:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5056 comm="syz.9.216" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87424cf559 code=0x7ffc0000 [ 60.003371][ T29] audit: type=1326 audit(1793579767.903:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5056 comm="syz.9.216" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87424cf559 code=0x7ffc0000 [ 60.006219][ T29] audit: type=1326 audit(1793579767.903:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5056 comm="syz.9.216" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87424cf559 code=0x7ffc0000 [ 60.007691][ T29] audit: type=1326 audit(1793579767.903:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5056 comm="syz.9.216" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f87424cf559 code=0x7ffc0000 [ 60.007902][ T29] audit: type=1326 audit(1793579767.903:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5056 comm="syz.9.216" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87424cf559 code=0x7ffc0000 [ 60.064434][ T29] audit: type=1326 audit(1793579767.963:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5056 comm="syz.9.216" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87424cf559 code=0x7ffc0000 [ 60.064579][ T29] audit: type=1326 audit(1793579767.963:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5056 comm="syz.9.216" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f87424cf2c2 code=0x7ffc0000 [ 60.086826][ T5059] ip_tables: iptables: counters copy to user failed while replacing table [ 60.261169][ T5055] bond1: Unable to set up delay as MII monitoring is disabled [ 60.265098][ T5055] bond1 (unregistering): Released all slaves [ 60.831180][ T5068] selinux_netlink_send: 89 callbacks suppressed [ 60.831192][ T5068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5068 comm=syz.8.218 [ 60.831338][ T5068] netlink: 4 bytes leftover after parsing attributes in process `syz.8.218'. [ 60.838099][ T5068] loop8: detected capacity change from 0 to 512 [ 60.844363][ T5068] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 60.855049][ T5073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5073 comm=syz.8.218 [ 60.855871][ T5074] netlink: 4 bytes leftover after parsing attributes in process `syz.8.218'. [ 60.876414][ T5068] loop8: detected capacity change from 0 to 512 [ 60.877990][ T5068] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 61.822064][ T5083] loop8: detected capacity change from 0 to 1024 [ 61.833545][ T5083] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 61.834303][ T5083] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 61.834542][ T5083] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 61.840124][ T5083] EXT4-fs error (device loop8): __ext4_iget:6490: inode #8: block 1803188595: comm syz.8.220: invalid block [ 61.840213][ T5083] loop8: lost file I/O error report for ino 8 type 5 pos 0x0 len 0x0 error -117 [ 61.840917][ T5083] EXT4-fs (loop8): no journal found [ 61.841037][ T5083] EXT4-fs (loop8): can't get journal size [ 61.847676][ T5083] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 61.863429][ T5083] EXT4-fs (loop8): ext4_remount: Checksum for group 0 failed (7780!=20869) [ 61.879221][ T5083] usb usb5: usbfs: interface 0 claimed by hub while 'syz.8.220' sets config #0 [ 61.879787][ T5083] usb usb5: usbfs: interface 0 claimed by hub while 'syz.8.220' sets config #1 [ 61.935437][ T4492] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.988731][ T4993] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 61.990072][ T4831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.010951][ T4831] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.011404][ T4831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.032945][ T4831] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.035089][ T4831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.053539][ T4831] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.056767][ T4831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.074001][ T4831] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.076543][ T5095] loop9: detected capacity change from 0 to 128 [ 62.098524][ T5095] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 62.139118][ T5095] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 62.143228][ T5095] ext2 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.146923][ T5097] loop8: detected capacity change from 0 to 8192 [ 62.221731][ T4831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.244963][ T4831] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.260630][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.260661][ T367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.261748][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.261782][ T367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.302517][ T4546] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 62.317467][ T4831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.489115][ T5121] loop1: detected capacity change from 0 to 128 [ 62.556670][ T5121] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 62.559677][ T5121] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 62.600682][ T5142] FAULT_INJECTION: forcing a failure. [ 62.600682][ T5142] name failslab, interval 1, probability 0, space 0, times 0 [ 62.600711][ T5142] CPU: 0 UID: 0 PID: 5142 Comm: syz.9.230 Not tainted syzkaller #0 PREEMPT(lazy) [ 62.600775][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 62.600786][ T5142] Call Trace: [ 62.600794][ T5142] [ 62.600802][ T5142] __dump_stack+0x1d/0x30 [ 62.600827][ T5142] dump_stack_lvl+0x95/0xd0 [ 62.600850][ T5142] dump_stack+0x15/0x1b [ 62.600872][ T5142] should_fail_ex+0x259/0x270 [ 62.600975][ T5142] should_failslab+0x8c/0xb0 [ 62.601037][ T5142] __kvmalloc_node_noprof+0x14f/0x5b0 [ 62.601073][ T5142] ? page_pool_create_percpu+0x213/0x680 [ 62.601105][ T5142] ? page_pool_create_percpu+0x213/0x680 [ 62.601126][ T5142] page_pool_create_percpu+0x213/0x680 [ 62.601226][ T5142] page_pool_create+0x1a/0x30 [ 62.601246][ T5142] __veth_napi_enable_range+0x109/0x4f0 [ 62.601342][ T5142] ? netif_napi_add_weight_locked+0x33c/0x570 [ 62.601371][ T5142] ? __kfree_skb+0x109/0x150 [ 62.601480][ T5142] veth_napi_enable_range+0xdc/0x1a0 [ 62.601573][ T5142] veth_set_features+0xfe/0x180 [ 62.601622][ T5142] __netdev_update_features+0x5f9/0x1580 [ 62.601660][ T5142] ? selinux_capable+0x31/0x40 [ 62.601755][ T5142] ? should_fail_ex+0xdb/0x270 [ 62.601785][ T5142] dev_ethtool+0x20d2/0x2120 [ 62.601820][ T5142] dev_ioctl+0x2e0/0x960 [ 62.601911][ T5142] sock_do_ioctl+0x1aa/0x230 [ 62.601940][ T5142] sock_ioctl+0x439/0x610 [ 62.601962][ T5142] ? mutex_lock+0x52/0x90 [ 62.602059][ T5142] ? __pfx_sock_ioctl+0x10/0x10 [ 62.602130][ T5142] __se_sys_ioctl+0xce/0x140 [ 62.602164][ T5142] __x64_sys_ioctl+0x43/0x50 [ 62.602233][ T5142] x64_sys_call+0x239d/0x2550 [ 62.602257][ T5142] do_syscall_64+0x112/0x360 [ 62.602289][ T5142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.602330][ T5142] RIP: 0033:0x7f87424cf559 [ 62.602345][ T5142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.602363][ T5142] RSP: 002b:00007f8740f27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.602409][ T5142] RAX: ffffffffffffffda RBX: 00007f8742755fa0 RCX: 00007f87424cf559 [ 62.602421][ T5142] RDX: 00002000000003c0 RSI: 0000000000008946 RDI: 0000000000000006 [ 62.602433][ T5142] RBP: 00007f8740f27090 R08: 0000000000000000 R09: 0000000000000000 [ 62.602447][ T5142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 62.602458][ T5142] R13: 00007f8742756038 R14: 00007f8742755fa0 R15: 00007ffe9fddf3d8 [ 62.602477][ T5142] [ 62.607003][ T5142] page_pool_create_percpu() gave up with errno -12 [ 62.620205][ T5142] veth0_to_team: set_features() failed (-12); wanted 0x0000612e4fdd49e9, left 0x0000612e4fdd09e9 [ 62.625640][ T4831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.739267][ T4696] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 62.748288][ T5151] ip_tables: iptables: counters copy to user failed while replacing table [ 62.772386][ T5151] netlink: 12 bytes leftover after parsing attributes in process `syz.9.231'. [ 62.826455][ T5151] netlink: 'syz.9.231': attribute type 10 has an invalid length. [ 62.866412][ T5155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.232'. [ 62.914435][ T4831] veth0_vlan: entered promiscuous mode [ 62.928816][ T4831] veth1_vlan: entered promiscuous mode [ 62.974161][ T4831] veth0_macvtap: entered promiscuous mode [ 62.980898][ T4831] veth1_macvtap: entered promiscuous mode [ 63.009726][ T4831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.013379][ T4831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.039841][ T5166] loop9: detected capacity change from 0 to 512 [ 63.087375][ T72] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.088253][ T72] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.088320][ T72] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.088346][ T72] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.186688][ T5172] raw_sendmsg: syz.9.234 forgot to set AF_INET. Fix it! [ 63.276967][ T5155] loop1: detected capacity change from 0 to 512 [ 63.291240][ T5182] futex_wake_op: syz.2.189 tries to shift op by 144; fix this program [ 63.291308][ T5182] futex_wake_op: syz.2.189 tries to shift op by 144; fix this program [ 63.385271][ T5189] loop2: detected capacity change from 0 to 1024 [ 63.385665][ T5189] EXT4-fs: quotafile must be on filesystem root [ 63.413925][ T5155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.414355][ T5155] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.479885][ T5199] loop2: detected capacity change from 0 to 512 [ 63.500111][ T5199] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 63.511609][ T5199] EXT4-fs (loop2): 1 orphan inode deleted [ 63.511956][ T5199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.514402][ T5199] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.540091][ T72] EXT4-fs error (device loop2): ext4_release_dquot:7156: comm kworker/u8:4: Failed to release dquot type 1 [ 63.562731][ T5204] FAULT_INJECTION: forcing a failure. [ 63.562731][ T5204] name failslab, interval 1, probability 0, space 0, times 0 [ 63.562762][ T5204] CPU: 0 UID: 0 PID: 5204 Comm: syz.8.238 Not tainted syzkaller #0 PREEMPT(lazy) [ 63.562866][ T5204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 63.562880][ T5204] Call Trace: [ 63.562888][ T5204] [ 63.562897][ T5204] __dump_stack+0x1d/0x30 [ 63.562971][ T5204] dump_stack_lvl+0x95/0xd0 [ 63.562995][ T5204] dump_stack+0x15/0x1b [ 63.563104][ T5204] should_fail_ex+0x259/0x270 [ 63.563266][ T5204] ? sk_prot_alloc+0xa8/0x180 [ 63.563300][ T5204] should_failslab+0x8c/0xb0 [ 63.563332][ T5204] __kmalloc_noprof+0xb6/0x4b0 [ 63.563382][ T5204] ? sk_prot_alloc+0xa8/0x180 [ 63.563414][ T5204] sk_prot_alloc+0xa8/0x180 [ 63.563457][ T5204] sk_alloc+0x34/0x3e0 [ 63.563568][ T5204] netlink_create+0x331/0x460 [ 63.563593][ T5204] __sock_create+0x2e5/0x580 [ 63.563665][ T5204] __sys_socket+0xaf/0x180 [ 63.563711][ T5204] __x64_sys_socket+0x3f/0x50 [ 63.563740][ T5204] x64_sys_call+0x246e/0x2550 [ 63.563777][ T5204] do_syscall_64+0x112/0x360 [ 63.563884][ T5204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.563908][ T5204] RIP: 0033:0x7f16f213f559 [ 63.563926][ T5204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.563945][ T5204] RSP: 002b:00007f16f0b97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 63.564010][ T5204] RAX: ffffffffffffffda RBX: 00007f16f23c5fa0 RCX: 00007f16f213f559 [ 63.564024][ T5204] RDX: 0000000000000006 RSI: 0000000000000003 RDI: 0000000000000010 [ 63.564038][ T5204] RBP: 00007f16f21d6b50 R08: 0000000000000000 R09: 0000000000000000 [ 63.564054][ T5204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.564198][ T5204] R13: 00007f16f23c6038 R14: 00007f16f23c5fa0 R15: 00007ffed89924d8 [ 63.564215][ T5204] [ 63.764663][ T5216] netlink: 12 bytes leftover after parsing attributes in process `syz.9.239'. [ 63.775299][ T5216] netlink: 24 bytes leftover after parsing attributes in process `syz.9.239'. [ 63.784333][ T5186] EXT4-fs: quotafile must be on filesystem root [ 63.887789][ T4696] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 63.893979][ T4696] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 63.895680][ T4696] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 63.898824][ T4696] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 63.899238][ T4696] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 63.899512][ T4696] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 63.899990][ T4696] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 63.902159][ T4696] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 63.902416][ T4696] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 63.902661][ T4696] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 64.015040][ T5231] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 64.015134][ T5231] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 64.017639][ T5231] EXT4-fs (loop9): 1 truncate cleaned up [ 64.018089][ T5231] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.166144][ T5220] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.282097][ T4831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.308678][ T72] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.332621][ T29] kauditd_printk_skb: 953 callbacks suppressed [ 64.332674][ T29] audit: type=1400 audit(1793579772.235:3234): avc: denied { sys_module } for pid=5238 comm="syz.0.244" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 64.372367][ T29] audit: type=1400 audit(1793579772.275:3235): avc: denied { read } for pid=5259 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.372397][ T29] audit: type=1400 audit(1793579772.275:3236): avc: denied { read open } for pid=5259 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.375018][ T72] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.432899][ T29] audit: type=1400 audit(1793579772.335:3237): avc: denied { read } for pid=5261 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.432994][ T29] audit: type=1400 audit(1793579772.335:3238): avc: denied { open } for pid=5261 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.456008][ T29] audit: type=1400 audit(1793579772.365:3239): avc: denied { mounton } for pid=5261 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 64.464455][ T29] audit: type=1400 audit(1793579772.365:3240): avc: denied { ioctl } for pid=5258 comm="syz.2.247" path="mnt:[4026532563]" dev="nsfs" ino=4026532563 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.559446][ T29] audit: type=1400 audit(1793579772.465:3241): avc: denied { write } for pid=5263 comm="syz.0.249" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.559560][ T29] audit: type=1400 audit(1793579772.465:3242): avc: denied { mounton } for pid=5263 comm="syz.0.249" path="/49/file0" dev="tmpfs" ino=299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 64.600226][ T29] audit: type=1400 audit(1793579772.495:3243): avc: denied { mount } for pid=5263 comm="syz.0.249" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 64.602732][ T72] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.663822][ T5273] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 64.663864][ T5273] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 64.663961][ T5273] vhci_hcd vhci_hcd.0: Device attached [ 64.667519][ T5273] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(6) [ 64.667544][ T5273] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 64.667571][ T5273] vhci_hcd vhci_hcd.0: Device attached [ 64.707463][ T72] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.753383][ T5265] netlink: 'syz.0.249': attribute type 16 has an invalid length. [ 64.753418][ T5265] netlink: 'syz.0.249': attribute type 17 has an invalid length. [ 64.917488][ T3394] usb 19-1: new high-speed USB device number 2 using vhci_hcd [ 64.969375][ T5293] netlink: 72 bytes leftover after parsing attributes in process `syz.2.251'. [ 64.970254][ T5293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.251'. [ 65.136717][ T5302] netlink: 'syz.2.252': attribute type 1 has an invalid length. [ 65.187865][ T5284] vhci_hcd: connection closed [ 65.188339][ T5280] vhci_hcd: connection reset by peer [ 65.189236][ T81] vhci_hcd vhci_hcd.9: stop threads [ 65.189256][ T81] vhci_hcd vhci_hcd.9: release socket [ 65.189295][ T81] vhci_hcd vhci_hcd.9: disconnect device [ 65.189510][ T81] vhci_hcd vhci_hcd.9: stop threads [ 65.189593][ T81] vhci_hcd vhci_hcd.9: release socket [ 65.189612][ T81] vhci_hcd vhci_hcd.9: disconnect device [ 65.540471][ T5261] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.621351][ T72] bridge_slave_1: left allmulticast mode [ 65.621375][ T72] bridge_slave_1: left promiscuous mode [ 65.621559][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.645216][ T72] bridge_slave_0: left allmulticast mode [ 65.645237][ T72] bridge_slave_0: left promiscuous mode [ 65.645387][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.721051][ T5332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.721135][ T5332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.745626][ T5336] futex_wake_op: syz.9.258 tries to shift op by 144; fix this program [ 65.745744][ T5336] futex_wake_op: syz.9.258 tries to shift op by 144; fix this program [ 65.842417][ T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.844834][ T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.847661][ T72] bond0 (unregistering): Released all slaves [ 66.074680][ T5340] set_capacity_and_notify: 4 callbacks suppressed [ 66.074697][ T5340] loop9: detected capacity change from 0 to 1024 [ 66.099804][ T5340] EXT4-fs: quotafile must be on filesystem root [ 66.264343][ T5347] loop9: detected capacity change from 0 to 512 [ 66.276094][ T5347] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 66.305474][ T72] hsr_slave_0: left promiscuous mode [ 66.318826][ T72] hsr_slave_1: left promiscuous mode [ 66.319241][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.319333][ T72] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.324327][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.324364][ T72] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.356420][ T5347] EXT4-fs (loop9): 1 orphan inode deleted [ 66.364375][ T5347] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.379215][ T367] EXT4-fs error (device loop9): ext4_release_dquot:7156: comm kworker/u8:6: Failed to release dquot type 1 [ 66.379947][ T72] veth1_macvtap: left promiscuous mode [ 66.379973][ T72] veth0_macvtap: left promiscuous mode [ 66.380042][ T72] veth1_vlan: left promiscuous mode [ 66.380077][ T72] veth0_vlan: left promiscuous mode [ 66.581666][ T72] team0 (unregistering): Port device team_slave_1 removed [ 66.595105][ T72] team0 (unregistering): Port device team_slave_0 removed [ 66.714469][ T5374] netlink: 44 bytes leftover after parsing attributes in process `syz.2.262'. [ 66.714494][ T5374] netlink: 43 bytes leftover after parsing attributes in process `syz.2.262'. [ 66.714512][ T5374] netlink: 'syz.2.262': attribute type 5 has an invalid length. [ 66.714524][ T5374] netlink: 43 bytes leftover after parsing attributes in process `syz.2.262'. [ 66.770256][ T12] IPVS: starting estimator thread 0... [ 66.855192][ T5388] FAULT_INJECTION: forcing a failure. [ 66.855192][ T5388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.855221][ T5388] CPU: 1 UID: 0 PID: 5388 Comm: syz.2.264 Not tainted syzkaller #0 PREEMPT(lazy) [ 66.855249][ T5388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 66.855264][ T5388] Call Trace: [ 66.855271][ T5388] [ 66.855286][ T5388] __dump_stack+0x1d/0x30 [ 66.855316][ T5388] dump_stack_lvl+0x95/0xd0 [ 66.855342][ T5388] dump_stack+0x15/0x1b [ 66.855412][ T5388] should_fail_ex+0x259/0x270 [ 66.855562][ T5388] should_fail+0xb/0x20 [ 66.855595][ T5388] should_fail_usercopy+0x1a/0x20 [ 66.855654][ T5388] _copy_from_user+0x1c/0xb0 [ 66.855686][ T5388] __sys_bpf+0x1e2/0xc50 [ 66.855712][ T5388] ? do_futex+0x380/0x460 [ 66.855821][ T5388] __x64_sys_bpf+0x69/0x80 [ 66.855842][ T5388] x64_sys_call+0xf26/0x2550 [ 66.855957][ T5388] do_syscall_64+0x112/0x360 [ 66.855989][ T5388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.856009][ T5388] RIP: 0033:0x7ff2888df559 [ 66.856074][ T5388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.856128][ T5388] RSP: 002b:00007ff287337028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 66.856152][ T5388] RAX: ffffffffffffffda RBX: 00007ff288b65fa0 RCX: 00007ff2888df559 [ 66.856168][ T5388] RDX: 0000000000000050 RSI: 0000200000000880 RDI: 000000000000000a [ 66.856183][ T5388] RBP: 00007ff288976b50 R08: 0000000000000000 R09: 0000000000000000 [ 66.856199][ T5388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.856213][ T5388] R13: 00007ff288b66038 R14: 00007ff288b65fa0 R15: 00007ffce487e768 [ 66.856254][ T5388] [ 66.856546][ T5378] IPVS: using max 2304 ests per chain, 115200 per kthread [ 66.911406][ T5380] syzkaller0: entered promiscuous mode [ 66.912891][ T5380] syzkaller0: entered allmulticast mode [ 66.955208][ T5261] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.955241][ T5261] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.955291][ T5261] bridge_slave_0: entered allmulticast mode [ 66.955832][ T5261] bridge_slave_0: entered promiscuous mode [ 66.962964][ T5261] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.962997][ T5261] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.963109][ T5261] bridge_slave_1: entered allmulticast mode [ 66.967630][ T5261] bridge_slave_1: entered promiscuous mode [ 67.020377][ T5261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.028473][ T5261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.073751][ T5261] team0: Port device team_slave_0 added [ 67.080508][ T5261] team0: Port device team_slave_1 added [ 67.115096][ T5261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.115112][ T5261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.115169][ T5261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.124360][ T5261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.124378][ T5261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.124407][ T5261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.233706][ T5261] hsr_slave_0: entered promiscuous mode [ 67.234084][ T5261] hsr_slave_1: entered promiscuous mode [ 67.357407][ T5416] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=50 sclass=netlink_xfrm_socket pid=5416 comm=syz.9.265 [ 67.514252][ T3017] 8021q: adding VLAN 0 to HW filter on device eth23 [ 67.604581][ T5448] loop9: detected capacity change from 0 to 1024 [ 67.621285][ T5448] EXT4-fs: Ignoring removed i_version option [ 67.643846][ T5448] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 67.645213][ T5448] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 67.674600][ T5448] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 67.675270][ T5448] EXT4-fs (loop9): orphan cleanup on readonly fs [ 67.692736][ T5448] EXT4-fs error (device loop9): ext4_free_blocks:6717: comm syz.9.269: Freeing blocks not in datazone - block = 0, count = 4096 [ 67.692796][ T5448] loop9: lost filesystem error report for type 5 error -117 [ 67.709472][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 67.709492][ C0] EXT4-fs (loop9): initial error at time 1793579781: ext4_free_blocks:6717 [ 67.709512][ C0] EXT4-fs (loop9): last error at time 1793579781: ext4_free_blocks:6717 [ 67.746151][ T5448] EXT4-fs (loop9): Remounting filesystem read-only [ 67.746380][ T5448] EXT4-fs (loop9): 1 orphan inode deleted [ 67.752751][ T5448] EXT4-fs mount: 3 callbacks suppressed [ 67.752869][ T5448] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.778071][ T5261] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.791124][ T5261] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.792657][ T5261] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.797271][ T5261] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.797566][ T5261] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.802404][ T5261] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.802855][ T5261] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.810330][ T5261] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.919781][ T5471] futex_wake_op: syz.2.272 tries to shift op by 144; fix this program [ 67.919971][ T5471] futex_wake_op: syz.2.272 tries to shift op by 144; fix this program [ 67.939706][ T5261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.962612][ T5261] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.968924][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.968957][ T367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.974335][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.974376][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.013597][ T5477] loop2: detected capacity change from 0 to 1024 [ 68.014392][ T5477] EXT4-fs: quotafile must be on filesystem root [ 68.120668][ T5488] loop2: detected capacity change from 0 to 512 [ 68.138761][ T5488] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 68.149683][ T5488] EXT4-fs (loop2): 1 orphan inode deleted [ 68.150099][ T5488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.150300][ T5488] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.187324][ T12] EXT4-fs error (device loop2): ext4_release_dquot:7156: comm kworker/u8:0: Failed to release dquot type 1 [ 68.305029][ T5261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.438553][ T4546] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.537261][ T5261] veth0_vlan: entered promiscuous mode [ 68.541455][ T3017] 8021q: adding VLAN 0 to HW filter on device eth24 [ 68.543748][ T5261] veth1_vlan: entered promiscuous mode [ 68.574511][ T5261] veth0_macvtap: entered promiscuous mode [ 68.582080][ T5261] veth1_macvtap: entered promiscuous mode [ 68.603283][ T5261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.611187][ T5261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.636419][ T367] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.636511][ T367] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.636555][ T367] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.636621][ T367] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.733191][ T5558] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.824510][ T5557] netlink: 8 bytes leftover after parsing attributes in process `syz.9.278'. [ 68.841272][ T5557] netlink: 8 bytes leftover after parsing attributes in process `syz.9.278'. [ 69.015012][ T5557] netlink: 8 bytes leftover after parsing attributes in process `syz.9.278'. [ 69.089987][ T5557] netlink: 8 bytes leftover after parsing attributes in process `syz.9.278'. [ 69.234476][ T4831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.348021][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 69.348097][ T29] audit: type=1400 audit(1793579783.231:3345): avc: denied { write } for pid=5569 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.375515][ T29] audit: type=1400 audit(1793579783.271:3346): avc: denied { setopt } for pid=5570 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.384234][ T29] audit: type=1400 audit(1793579783.281:3347): avc: denied { getopt } for pid=5570 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.562326][ T29] audit: type=1400 audit(1793579783.461:3348): avc: denied { write } for pid=5577 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.603470][ T29] audit: type=1400 audit(1793579783.501:3349): avc: denied { ioctl } for pid=5574 comm="syz.4.256" path="socket:[14119]" dev="sockfs" ino=14119 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.611978][ T29] audit: type=1400 audit(1793579783.511:3350): avc: denied { write } for pid=5592 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.722264][ T29] audit: type=1400 audit(1793579783.621:3351): avc: denied { create } for pid=5594 comm="syz.2.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 69.896893][ T29] audit: type=1400 audit(1793579783.781:3352): avc: denied { write } for pid=5594 comm="syz.2.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 69.935418][ T5608] netlink: 'syz.2.280': attribute type 39 has an invalid length. [ 69.939553][ T29] audit: type=1400 audit(1793579783.831:3353): avc: denied { write } for pid=5596 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.947794][ T29] audit: type=1400 audit(1793579783.861:3354): avc: denied { write } for pid=5611 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.065894][ T3394] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 72.375589][ T5642] loop8: detected capacity change from 0 to 512 [ 72.410344][ T3017] 8021q: adding VLAN 0 to HW filter on device eth25 [ 72.446106][ T5648] netlink: 140 bytes leftover after parsing attributes in process `syz.0.285'. [ 72.464164][ T5651] nfs4: Unknown parameter 'add' [ 72.482379][ T5653] loop0: detected capacity change from 0 to 128 [ 72.485952][ T5653] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.486116][ T5653] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 72.538350][ T5661] netlink: 52 bytes leftover after parsing attributes in process `syz.9.288'. [ 72.567029][ T5661] netlink: 144 bytes leftover after parsing attributes in process `syz.9.288'. [ 72.578268][ T5661] netlink: 16 bytes leftover after parsing attributes in process `syz.9.288'. [ 72.578503][ T5666] loop2: detected capacity change from 0 to 256 [ 72.630725][ T5671] netlink: 'syz.0.286': attribute type 16 has an invalid length. [ 72.652294][ T5672] futex_wake_op: syz.4.290 tries to shift op by 144; fix this program [ 72.652342][ T5672] futex_wake_op: syz.4.290 tries to shift op by 144; fix this program [ 72.697539][ T3017] 8021q: adding VLAN 0 to HW filter on device eth26 [ 72.698841][ T3446] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 72.749145][ T5679] loop4: detected capacity change from 0 to 1024 [ 72.749530][ T5679] EXT4-fs: quotafile must be on filesystem root [ 72.900046][ T5698] loop4: detected capacity change from 0 to 512 [ 72.903628][ T5698] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 72.935999][ T5698] EXT4-fs (loop4): 1 orphan inode deleted [ 72.936355][ T5698] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.938179][ T5698] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.964617][ T3446] EXT4-fs error (device loop4): ext4_release_dquot:7156: comm kworker/u8:7: Failed to release dquot type 1 [ 73.019385][ T5683] loop2: detected capacity change from 0 to 512 [ 73.043333][ T5707] ================================================================== [ 73.043365][ T5707] BUG: KCSAN: data-race in copy_mm / percpu_counter_destroy_many [ 73.043396][ T5707] [ 73.043401][ T5707] write to 0xffff88812652f148 of 8 bytes by task 5683 on cpu 1: [ 73.043417][ T5707] percpu_counter_destroy_many+0xbd/0x320 [ 73.043449][ T5707] __mmdrop+0x1c9/0x340 [ 73.043468][ T5707] finish_task_switch+0x296/0x340 [ 73.043493][ T5707] __schedule+0x7a9/0xd40 [ 73.043510][ T5707] preempt_schedule_irq+0x2c/0x50 [ 73.043528][ T5707] irqentry_exit_to_kernel_mode_preempt+0x63/0x80 [ 73.043559][ T5707] irqentry_exit+0x7d/0x610 [ 73.043585][ T5707] sysvec_apic_timer_interrupt+0x44/0x80 [ 73.043612][ T5707] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 73.043636][ T5707] find_lock_entries+0x467/0x6b0 [ 73.043658][ T5707] shmem_undo_range+0x1d9/0xcc0 [ 73.043684][ T5707] shmem_evict_inode+0x12d/0x4b0 [ 73.043714][ T5707] evict+0x2a5/0x510 [ 73.043742][ T5707] iput+0x42b/0x5a0 [ 73.043761][ T5707] dentry_unlink_inode+0x27f/0x290 [ 73.043792][ T5707] dentry_kill+0x184/0x540 [ 73.043830][ T5707] finish_dput+0x16/0x1d0 [ 73.043853][ T5707] dput+0x43/0x50 [ 73.043874][ T5707] __fput+0x423/0x610 [ 73.043897][ T5707] ____fput+0x1c/0x30 [ 73.043920][ T5707] task_work_run+0x133/0x190 [ 73.043950][ T5707] exit_to_user_mode_loop+0x1e4/0x8c0 [ 73.043976][ T5707] do_syscall_64+0x212/0x360 [ 73.044007][ T5707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.044029][ T5707] [ 73.044035][ T5707] read to 0xffff88812652ec00 of 1664 bytes by task 5707 on cpu 0: [ 73.044053][ T5707] copy_mm+0xd1/0x340 [ 73.044078][ T5707] copy_process+0x10e9/0x2400 [ 73.044102][ T5707] kernel_clone+0x1c0/0x5f0 [ 73.044126][ T5707] __x64_sys_clone+0x143/0x180 [ 73.044155][ T5707] x64_sys_call+0x2479/0x2550 [ 73.044183][ T5707] do_syscall_64+0x112/0x360 [ 73.044214][ T5707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.044236][ T5707] [ 73.044240][ T5707] Reported by Kernel Concurrency Sanitizer on: [ 73.044253][ T5707] CPU: 0 UID: 0 PID: 5707 Comm: dhcpcd-run-hook Not tainted syzkaller #0 PREEMPT(lazy) [ 73.044280][ T5707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 73.044292][ T5707] ================================================================== [ 73.287661][ T5683] ipip0: entered promiscuous mode [ 73.287829][ T5683] ipip0: entered allmulticast mode [ 73.419016][ T5683] ./dev/sda1: Can't lookup blockdev [ 73.568143][ T5261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.681152][ T3017] 8021q: adding VLAN 0 to HW filter on device eth4 [ 74.039695][ T3017] 8021q: adding VLAN 0 to HW filter on device eth3 [ 74.352641][ T3017] 8021q: adding VLAN 0 to HW filter on device eth1 [ 74.413269][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 74.413285][ T29] audit: type=1400 audit(1793579788.311:3390): avc: denied { write } for pid=5807 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.450479][ T29] audit: type=1400 audit(1793579788.351:3391): avc: denied { write } for pid=5818 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.480050][ T3017] 8021q: adding VLAN 0 to HW filter on device eth2 [ 74.526859][ T29] audit: type=1400 audit(1793579788.431:3392): avc: denied { write } for pid=5820 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.542276][ T29] audit: type=1400 audit(1793579788.441:3393): avc: denied { write } for pid=5831 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.629276][ T29] audit: type=1400 audit(1793579788.531:3394): avc: denied { write } for pid=5833 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.664261][ T29] audit: type=1400 audit(1793579788.571:3395): avc: denied { write } for pid=5844 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.741348][ T29] audit: type=1400 audit(1793579788.641:3396): avc: denied { write } for pid=5847 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.774221][ T29] audit: type=1400 audit(1793579788.681:3397): avc: denied { write } for pid=5858 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.807325][ T3017] 8021q: adding VLAN 0 to HW filter on device eth5 [ 74.869208][ T29] audit: type=1400 audit(1793579788.771:3398): avc: denied { write } for pid=5861 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.904353][ T29] audit: type=1400 audit(1793579788.811:3399): avc: denied { write } for pid=5872 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.937708][ T3017] 8021q: adding VLAN 0 to HW filter on device eth6 [ 82.234976][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 82.234992][ T29] audit: type=1400 audit(1793579796.131:3412): avc: denied { write } for pid=5993 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.270689][ T29] audit: type=1400 audit(1793579796.171:3413): avc: denied { write } for pid=6004 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.368876][ T29] audit: type=1400 audit(1793579796.271:3414): avc: denied { write } for pid=6007 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.405499][ T29] audit: type=1400 audit(1793579796.301:3415): avc: denied { write } for pid=6018 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.477675][ T29] audit: type=1400 audit(1793579796.381:3416): avc: denied { write } for pid=6022 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.494949][ T29] audit: type=1400 audit(1793579796.391:3417): avc: denied { write } for pid=6033 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.612737][ T29] audit: type=1400 audit(1793579796.511:3418): avc: denied { write } for pid=6036 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.646355][ T29] audit: type=1400 audit(1793579796.551:3419): avc: denied { write } for pid=6047 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.729535][ T29] audit: type=1400 audit(1793579796.631:3420): avc: denied { write } for pid=6050 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.765018][ T29] audit: type=1400 audit(1793579796.671:3421): avc: denied { write } for pid=6061 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1