last executing test programs: 14m9.795562115s ago: executing program 32 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 14m3.367769466s ago: executing program 33 (id=94): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) 13m32.785957409s ago: executing program 34 (id=337): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) (async) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x1d1500, 0x0) connect$unix(r2, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e23}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) (async) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0xc3, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0xfffffffffffffd19}}], 0x7, 0x0, 0x0) 13m9.342135694s ago: executing program 35 (id=801): socket$packet(0x11, 0x2, 0x300) r0 = syz_open_procfs(0x0, &(0x7f0000001640)='attr/keycreate\x00') read(r0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) 12m23.40348599s ago: executing program 36 (id=1337): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0x3cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000100007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = semget$private(0x0, 0x7, 0x180) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x3348, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x34, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x48}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x3052}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x4}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x1b}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8050}, 0x24000084) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="580000000206010800000000000001000500000005000100070000000900020073797a30000000000c00078008001240fffffffe050004000000000012000300686173683a6e65742c706f7274000000050005000a"], 0x58}, 0x1, 0x0, 0x0, 0x40280d5}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) semtimedop(r0, 0x0, 0x0, 0x0) semctl$SETVAL(r0, 0x0, 0x10, &(0x7f0000000040)) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', 0x0, 0x1000000, &(0x7f0000000300)=ANY=[@ANYBLOB="6e6f737761702c005b2be681876c6b5b8d5999e9cb84df890d020000008160267e160af0befb94a42865190ffd81f1c2a7a2d66e703df93078000000b463465aeb59ec01"]) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') pread64(r5, 0x0, 0x0, 0x4eb) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r6, 0x1, 0x10000000000009, &(0x7f0000000100), 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x4, &(0x7f0000000040)=0x401, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 12m22.001873835s ago: executing program 37 (id=1351): r0 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0xcb9}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x46ed}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40d0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x70bd25, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x3}, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x80, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1d}, {0x0, 0xfffffffffffffffa, 0x0, 0xc722}, 0x0, 0x6e6bc0}, [@tmpl={0x104, 0x5, [{{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x2}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3, 0x0, 0x7ff}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in=@loopback, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}]}, 0x1bc}}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) (async) listen(0xffffffffffffffff, 0x0) (async) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000000a0a010300000000000000000700000708000a4000000001080004aa7e4e642443c94000000003"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4020044) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32=r7], 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_REG(r9, &(0x7f000000e2c0)={0x0, 0x0, &(0x7f000000e280)={&(0x7f000000e180)={0x14, r8, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x8000) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r10) r12 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') openat$cgroup_ro(r12, &(0x7f00000009c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002ebd700000d600000000000905003500020000000a0001007770616e300000000500360001000000050033000500000030cd39a473bcb882196b15026b3c0d24fa61d152135e19dbe470eae5d4cddb7bad349786fb843eefacae4c3a78936a5e0eda73cc77b9760c0f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r11, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async) syz_clone3(&(0x7f0000000a00)={0x80, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600), {0xa}, &(0x7f0000000740)=""/251, 0xfb, &(0x7f0000000840)=""/162, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x9, {r12}}, 0x58) 11m11.747798908s ago: executing program 38 (id=2058): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140013001000010000000000000000000700000a28000000000a010300000000000000000100000008000240000000030900010073797a310000000054000000030a01020000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000040000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000014000480080004"], 0xe4}}, 0x0) 10m55.529603413s ago: executing program 39 (id=2448): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x70bd28, 0x25dfdbfe, {0x2, 0x20, 0x7b, 0xcb}, [@IFA_LOCAL={0x8, 0x2, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0x10000}, @IFA_FLAGS={0x8, 0x8, 0x8}, @IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0x105}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 10m44.931909547s ago: executing program 40 (id=2377): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x38) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) dup(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x21) clock_gettime(0x0, &(0x7f0000002980)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/119, 0x77}, {&(0x7f0000000340)=""/241, 0xf1}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/250, 0xfa}, {&(0x7f0000001940)=""/114, 0x72}, {&(0x7f00000019c0)=""/2, 0x2}], 0x7, &(0x7f0000001a80)=""/255, 0xff}, 0x5}, {{&(0x7f0000001b80)=@pppol2tpin6, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001c00)=""/52, 0x34}], 0x1, &(0x7f0000001c80)=""/139, 0x8b}, 0x69}, {{&(0x7f0000001d40)=@caif=@dgm, 0x80, &(0x7f0000002440)=[{&(0x7f0000001dc0)=""/111, 0x6f}, {&(0x7f0000001e40)=""/83, 0x53}, {&(0x7f0000001ec0)=""/236, 0xec}, {&(0x7f0000001fc0)=""/20, 0x14}, {&(0x7f0000002000)=""/35, 0x23}, {&(0x7f0000002040)=""/83, 0x53}, {&(0x7f00000020c0)=""/253, 0xfd}, {&(0x7f0000002240)=""/94, 0x5e}, {&(0x7f00000022c0)=""/147, 0x93}, {&(0x7f0000002380)=""/191, 0xbf}], 0xa, &(0x7f0000002500)=""/249, 0xf9}, 0x4}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002600)=""/13, 0xd}, {&(0x7f0000002640)=""/55, 0x37}, {&(0x7f0000002680)=""/40, 0x28}, {&(0x7f00000026c0)=""/118, 0x76}, {&(0x7f0000002740)=""/20, 0x14}, {&(0x7f0000002780)=""/30, 0x1e}, {&(0x7f00000027c0)=""/5, 0x5}], 0x7}, 0x8e3}], 0x4, 0x40000000, &(0x7f00000029c0)={r2, r3+60000000}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) splice(r4, 0x0, r0, 0x0, 0xffff, 0x2) write(0xffffffffffffffff, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a00", 0x57) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="700000000c06010100000000000000000700000305"], 0x70}, 0x1, 0x0, 0x0, 0x20004080}, 0x24000844) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x3884cd, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0]) 10m41.545499032s ago: executing program 41 (id=2569): socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0xfffffffa, 0x0, 0x20000, 0x1}) r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x10b880, 0x1e8) lseek(r2, 0x1ba2, 0x0) getdents64(r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_SETMODE(r3, 0x5602, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x37, 0x1, @tid=r4}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000061400003400128009000100697069700000000024000280080003007f000001060010000002000048000100", @ANYRES32=r7, @ANYBLOB="05000400090000000400140008000d003b6d0000"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) r9 = socket$l2tp(0x2, 0x2, 0x73) sendfile(r9, r5, 0x0, 0x20000023896) 10m33.874592973s ago: executing program 42 (id=2665): r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x75, 0x903f01) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0xffffffff) setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) ioctl$USBDEVFS_CONNECTINFO(r0, 0x8108551b, &(0x7f0000002a40)) 10m32.917308947s ago: executing program 43 (id=2670): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, 0x0, 0xb) 10m31.776403545s ago: executing program 44 (id=2682): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20007, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x60}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x2000cc0, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r1}, 0x38) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x5420) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@remote, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000030000000014000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000600034000040000080007400000040018000680140004"], 0xb4}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x138, 0x16, 0x633, 0x70bd27, 0x80000000, {{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x33}, {@in=@remote, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0x5, 0x0, 0x5}, {0x4}, 0x2, 0x2, 0x8, 0x4, 0x18}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x10, [{}, {0x0, 0x100000000000a00}]}, 0x60) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x278, 0xffffff7a, 0xffffffff, 0x278, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@empty, @multicast1, 0xff000000, 0xffffff00, 'pimreg\x00', 'ip6gretap0\x00', {}, {}, 0x4, 0x1, 0x10}, 0x6, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x2, 0x7, [0x2036, 0x3d, 0x1c, 0x22, 0x31, 0x1d, 0x37, 0x2c, 0x14, 0x7, 0x7, 0x34, 0x13, 0x1a, 0x15, 0xa], 0x0, 0x7fff, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x53c1, &(0x7f00000002c0)={0x0, 0x4359, 0x4, 0xa, 0x20082fb}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x3, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x1) 9m24.693380589s ago: executing program 45 (id=3422): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r1 = semget$private(0x0, 0x6, 0x431) semtimedop(r1, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f00000001c0)=""/117) semctl$IPC_RMID(r1, 0x0, 0x0) 9m16.277644639s ago: executing program 46 (id=3505): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bd1480bb58", 0x6}], 0x2, &(0x7f0000000500)=[@ip_tos_u8={{0x11, 0x0, 0x34}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x38}, 0x40010) 8m12.629594097s ago: executing program 47 (id=4260): set_mempolicy(0x1, 0x0, 0x5) r0 = socket(0x2, 0xa, 0x300) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x2}}, 0x2e) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000080)={@random="a70b49c5294f", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @empty, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "00000000ffff"}}}}}}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040051) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0x279}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000780)={{r0}, "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"}) io_uring_enter(r3, 0x2217, 0x7721, 0x16, 0x0, 0x0) syz_clone3(&(0x7f0000000540)={0x146100180, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) set_mempolicy(0x1, 0x0, 0x5) (async) socket(0x2, 0xa, 0x300) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x2}}, 0x2e) (async) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async) syz_emit_ethernet(0x4c, &(0x7f0000000080)={@random="a70b49c5294f", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @empty, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "00000000ffff"}}}}}}}, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040051) (async) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0x279}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000780)={{r0}, "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"}) (async) io_uring_enter(r3, 0x2217, 0x7721, 0x16, 0x0, 0x0) (async) syz_clone3(&(0x7f0000000540)={0x146100180, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) 7m56.559857138s ago: executing program 48 (id=4385): setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x6, @random="5a4817713811"}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}, 'veth0\x00'}) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x400261f3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000080f1000000000000063000000000000009500050000000000d1449c003b097606b153e6dc6de837ae96a815df705fef53cf0ff5e7bdc3bd95cfc0d4"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x94) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) capset(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='\\x01020304 2000-00000 0 0 0 krb5 \\x00000000ffffff7f0000000000000000120000000102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f10', 0x8b) 6m47.068604402s ago: executing program 49 (id=5132): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0xff01, &(0x7f00000002c0), 0x1, 0x222, &(0x7f0000000300)="$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") 5m57.45620348s ago: executing program 2 (id=5740): socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x2) fchdir(r3) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') unshare(0x20040600) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r4, &(0x7f0000000000)={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x5) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee1768810003308030300ecff3f000000030000980000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0x11a) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1600) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000140)=0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x8, 0xd}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1000]}}}}]}, 0x88}}, 0x20000000) 5m57.354155083s ago: executing program 2 (id=5743): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x188b9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) setresgid(0x0, 0xee01, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) close(0x3) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000003340)=[{{&(0x7f00000003c0)={0xa, 0x4e22, 0x7fff, @loopback, 0x5}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001a80)='g', 0x1}], 0x1}}, {{&(0x7f0000001bc0)={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000001c00)="1b", 0x1}], 0x1}}], 0x2, 0x40) sendto$inet6(r5, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r5, 0x1) writev(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x400, @loopback={0xff00000000000000}, 0x105}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000380)="a0002e7577d4017a", 0x8}], 0x1, &(0x7f0000000e80)=ANY=[], 0xd}}], 0x1, 0x4000880) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setgroups(0x0, 0x0) setuid(0xee01) 5m55.107933489s ago: executing program 2 (id=5769): accept$packet(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setns(0xc9, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006d80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @mcast1, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@flowinfo={{0x11, 0x29, 0x37, 0x8}}], 0x18}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r1, 0xc138fd11, &(0x7f0000000000)="0400000000000000000000006e01") 5m54.715264548s ago: executing program 2 (id=5772): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x2}, 0x400, 0x0, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) pread64(r2, 0x0, 0x0, 0x215bc38) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendto$packet(r3, &(0x7f0000000340), 0x0, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, 0x0) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x71, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa00810000"], 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) syz_open_dev$sg(0x0, 0x0, 0x401) gettid() epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a80)="2e00000011008188040f46ecdb4cb9cca7480ef413000000e3bd6efb440009000e000a400d000000ba80000054eb20d78ee079025a165439c3807988a195c5e9da978992601d9a95ee2d46e69f5fa6d85020", 0x52}], 0x1}, 0x94) 5m53.834558091s ago: executing program 2 (id=5776): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x40, r1, 0x1, 0x0, 0xf000000, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x85}, 0x2008840) 5m53.579317497s ago: executing program 9 (id=5779): bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9902000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f408000300040100000800000000000000", 0x5c}, {&(0x7f00000000c0)="d557fc16674b56c0a96a733c232d6790c63ca969a688b06e3da58f3c4568bf0a77bdff6f41d7890e18defe94ef1a392dc00dea94a1bfe64982de7cf1c91e1103cc1840210cbb57222bc2bfa30369992a6bc5156c00aeadd359a7991ad1de01feec401dba6d7694a14785839d3c2d67188cd07827c934897de4676743c192c4a4b24f7f8747141a1325d29da89694574c32eba56e5bbc8f80376f3325dd89937e990089294183a4829e21849004c538378d41066cb7de399450b3544067", 0xbd}, {&(0x7f0000000280)="5e191aea3468a5eab1c3d6024b43dece099475c81c53aa9244d866f68b8e31e93b41b432fb0454234620a25706bfb6f01ce01093b7ff634785d8b345ef8f7a928034820bbd37467d1049ac7a724c153c358d6f7efd919bb918734e846598b03733a6f4bbce06471d3a440e14dae67170cbfea76bc33481c28ec2cfad1f3d83ddece3006d5bb30dc4288dd40bd476cc7f94d143c56e54ed4d84b9c1ecc87fc035c7c992767edcfe2218bc6542a6a3a9b879e8aa6d652d277ee640cc15d2e9efe30584ed57ab208ca4db6cf63381804a5ee5950020", 0xd4}, {&(0x7f0000000380)="fd7617adb877574c4a4489fcaccde0c97bdb2d9d89dba8ab9fc9ebbdcedc770661e1971989a787890de32eebe4008ac8bfafa034add91f6ea4acc741521abecc6cbb4fcfeb61d7d08a8911e59550055d17897194afc1ffd04c18c2506d41bec374a6e5b1ed5fd07db55483fef2dc9ad8ae7c6044b08a303f256ff7e7dd720c72fc0d513110468d44e31a8fc9833d521b95c3b04378ca1c67b4faca350009045628c7f7196510f14ebdc68ba7", 0xac}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x0) 5m53.469133569s ago: executing program 9 (id=5780): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x107042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000007, 0x12, r1, 0xffffc000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) 5m53.429553061s ago: executing program 9 (id=5781): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setns(0xc9, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000006d80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @mcast1, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@flowinfo={{0x11, 0x29, 0x37, 0x8}}], 0x18}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r2, 0xc138fd11, &(0x7f0000000000)="0400000000000000000000006e01") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wg2\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000002c0)=[{0x8, 0xd2, 0x6, 0x6}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0xc, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x80) 5m53.307155884s ago: executing program 9 (id=5784): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200400, &(0x7f0000000140)={[{@dioread_nolock}, {@jqfmt_vfsv0}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2, 0x1}, 0x10) write(r0, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e40)=@newqdisc={0x54, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x5}, {0xb, 0x1}, {0x0, 0xa}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0xc1}}}, @qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x7}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x200040c0}, 0x50) syz_emit_ethernet(0x34, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x88be, 0x12, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "0a0286870000"}}}}}}, 0x0) mremap(&(0x7f0000e1b000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000f2b000/0x4000)=nil) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc118, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000740)='dns_resolver\x00', &(0x7f0000000780)={'syz', 0x1}, 0x0, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/vulnerabilities/spec_rstack_overflow\x00', 0x0, 0x0) read(r1, 0x0, 0x0) socket(0x2c, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@minixdf}]}, 0x1, 0x52d, &(0x7f0000000c40)="$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") perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket(0x1d, 0x80000, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x22, 0xfffffffffffffffd, &(0x7f0000000280)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@local, @in6=@dev}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000ac0)=0xe8) 5m53.261576054s ago: executing program 2 (id=5785): mmap(&(0x7f0000865000/0x1000)=nil, 0x1000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) syz_read_part_table(0x637, &(0x7f0000000000)="$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") r0 = open(&(0x7f0000000080)='./file1\x00', 0x146142, 0x90) pwritev2(r0, &(0x7f00000006c0)=[{&(0x7f0000000000)="85", 0x1}, {&(0x7f0000000680)="b388f344c9dd03843ff29724fb98a80dd44145853a78e99e4fae0fbcb14961e2497c3d8c19a52b7a7c3576cc223efd6f4db2069e365a", 0x36}], 0x2, 0x7000, 0x0, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0x0) writev(r2, &(0x7f0000001940)=[{&(0x7f0000000640)='H', 0x1}], 0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="44000000100001002dbd7080fddbdf25000000001ca8d815c2cd883a1c8935a1f80ecafbc1d56a7be5a4d14ec88d7a50ce8f79d495914fcba21cf7abd96410bcc4b305a300f44ed6f785d9c82ad1918b6ee64c174362a214f5d00cec1f40a5333ecc803d567c5e8c9f7560dabc7cd5ed8ee069381334d15cc997f918b7651b600a4038662dbdd1153124c509723cf8cfc4d50d4a1b8eaa0f0ca3b7e395e4f25afe001e995c8416b3c13d5adef158e1", @ANYRES32=0x0, @ANYBLOB="1843010000000000140003007866726d30000000000000000000000010001a800c000a80050008009c000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0x428) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2000, 0x100) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0xff, 0xa, 0x46, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x1, 0x7, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000480)={'ip6tnl0\x00', r6, 0x29, 0x6, 0x4e, 0x2, 0x3, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x28e05515a43b614b, 0x1, 0x88}}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r7, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x1, 0x3, 0x3e, 0x2ef4, 0x3d6, 0x40, 0x0, 0x0, 0xb87d, 0x38, 0x1, 0xfffe, 0x12, 0xc}, [{0x3, 0x1, 0x8, 0xd, 0x1, 0xe5, 0x10000000001, 0x450c}]}, 0x78) close(r7) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f0000000500)={'sit0\x00', 0x0, 0x8000, 0x1, 0x7ff, 0x200, {{0x5, 0x4, 0x1, 0xb, 0x14, 0x65, 0x0, 0xf, 0x0, 0x0, @loopback, @loopback}}}}) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000014000180060001000200"/34], 0x28}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5m53.258015625s ago: executing program 50 (id=5785): mmap(&(0x7f0000865000/0x1000)=nil, 0x1000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) syz_read_part_table(0x637, &(0x7f0000000000)="$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") r0 = open(&(0x7f0000000080)='./file1\x00', 0x146142, 0x90) pwritev2(r0, &(0x7f00000006c0)=[{&(0x7f0000000000)="85", 0x1}, {&(0x7f0000000680)="b388f344c9dd03843ff29724fb98a80dd44145853a78e99e4fae0fbcb14961e2497c3d8c19a52b7a7c3576cc223efd6f4db2069e365a", 0x36}], 0x2, 0x7000, 0x0, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0x0) writev(r2, &(0x7f0000001940)=[{&(0x7f0000000640)='H', 0x1}], 0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="44000000100001002dbd7080fddbdf25000000001ca8d815c2cd883a1c8935a1f80ecafbc1d56a7be5a4d14ec88d7a50ce8f79d495914fcba21cf7abd96410bcc4b305a300f44ed6f785d9c82ad1918b6ee64c174362a214f5d00cec1f40a5333ecc803d567c5e8c9f7560dabc7cd5ed8ee069381334d15cc997f918b7651b600a4038662dbdd1153124c509723cf8cfc4d50d4a1b8eaa0f0ca3b7e395e4f25afe001e995c8416b3c13d5adef158e1", @ANYRES32=0x0, @ANYBLOB="1843010000000000140003007866726d30000000000000000000000010001a800c000a80050008009c000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0x428) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x2000, 0x100) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0xff, 0xa, 0x46, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x1, 0x7, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000480)={'ip6tnl0\x00', r6, 0x29, 0x6, 0x4e, 0x2, 0x3, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x28e05515a43b614b, 0x1, 0x88}}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r7, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x1, 0x3, 0x3e, 0x2ef4, 0x3d6, 0x40, 0x0, 0x0, 0xb87d, 0x38, 0x1, 0xfffe, 0x12, 0xc}, [{0x3, 0x1, 0x8, 0xd, 0x1, 0xe5, 0x10000000001, 0x450c}]}, 0x78) close(r7) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f0000000500)={'sit0\x00', 0x0, 0x8000, 0x1, 0x7ff, 0x200, {{0x5, 0x4, 0x1, 0xb, 0x14, 0x65, 0x0, 0xf, 0x0, 0x0, @loopback, @loopback}}}}) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000014000180060001000200"/34], 0x28}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5m52.778517357s ago: executing program 9 (id=5798): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x800) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4) bind$inet(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x20, 0x1224, 0x88, 0x5, 0x200008, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$devlink(0x0, r2) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, 0x0, 0x800) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fc00"/67], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 5m51.933762138s ago: executing program 9 (id=5800): r0 = socket(0xa, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e1b, @broadcast}}, 0xfff9, 0x4}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x1c, 0x20, 0x2d2c6d60ea1da725, 0x70bd2b, 0x25dfdbf9, {0xa, 0x0, 0x10, 0xcb, 0xff, 0x0, 0x0, 0x1, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x24008800}, 0x4000000) 5m51.85724397s ago: executing program 51 (id=5800): r0 = socket(0xa, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e1b, @broadcast}}, 0xfff9, 0x4}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x1c, 0x20, 0x2d2c6d60ea1da725, 0x70bd2b, 0x25dfdbf9, {0xa, 0x0, 0x10, 0xcb, 0xff, 0x0, 0x0, 0x1, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x24008800}, 0x4000000) 57.589151443s ago: executing program 1 (id=8522): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x56d}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b80000000001010400000000000000000a0000003c00017fa902b98014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000024000d8014000400200100000000000000000000000000020c000380060001004e220000"], 0xb8}}, 0x0) getuid() perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x20) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) waitid(0x2, 0x0, &(0x7f0000000240), 0x80000000, &(0x7f00000002c0)) 55.68764036s ago: executing program 1 (id=8535): openat$ptp0(0xffffffffffffff9c, 0x0, 0x400c02, 0x0) pselect6(0x0, 0x0, &(0x7f00000000c0)={0x1f, 0x0, 0x8, 0x4005, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x4000000000}, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x5d37, 0x1a57, 0x8, &(0x7f0000000100)={[0xfffffffffffffff7]}, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x102281, 0x2, 0xfffffffe, 0x0, 0x0, 0xf8c, 0x0, 0x0, 0x0, 0x0, 0x1000000000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="120000000600000004000000"], 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0xe2242, 0xfb) fremovexattr(r2, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x4, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) clock_settime(0x1, &(0x7f00000001c0)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, 0x0, 0x1) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000000c0)={0x0, 0x38}, 0x1, 0x7}, 0x0) socket$nl_route(0x10, 0x3, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8ffff) openat(0xffffffffffffffff, 0x0, 0x4080, 0x1d0) 54.397022762s ago: executing program 1 (id=8548): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="5c0000001000010426bd7000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="42d4010028000100280012800b00010065727370616e00001800028008001400ff01000004001200050016"], 0x5c}}, 0x810) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@abort}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x2, 0x4, 0xffffffffffffff7f, 0x7, 0x8000000000000001, 0x3, 0xfffffffffffffffa, 0x5166}) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4008, &(0x7f0000004500)=ANY=[@ANYBLOB="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"/300], 0x91, 0x307, &(0x7f0000000200)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='+ ', 0x2) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x301, 0x0) dup(r2) r3 = socket(0x2c, 0x80805, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x900, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x8a5a, 0x5}, 0x8) 54.133891109s ago: executing program 1 (id=8551): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = dup2(r0, r0) accept4$nfc_llcp(r1, 0x0, 0x0, 0xc00) r2 = socket(0x10, 0x3, 0x0) close(0x3) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000d9bffc), 0x25) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="54000000490000002bbd7000ffd2df250a008000", @ANYRES32=0x0, @ANYBLOB="00409d1814000100ff01000000000000000000000000000108000200060000001400010000000000000000000000ffffac14142a0800020002000000825ca3ecc4ee3620e768830cd01bcd2fc44637d7f4fe9b07b9669ff478b4dd9f318071181650cc0f4066bf575020632e5a85b27994c4eaec7a242048b72c460734dc199daa4f8212dbec2d2adf98087bf01bb6af6741540a3567dc49aebf700fda0f6aac47a65732e0ebf394256ed8a9199c6c32a230469468a3c96544aeea67"], 0x54}, 0x1, 0x0, 0x0, 0x844}, 0x0) r4 = add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000180)="0000000000000002ff69000000000001000000c000000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e07000000000000002c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) getgroups(0x5, &(0x7f0000000100)=[0xffffffffffffffff, 0x0, 0xee01, 0xffffffffffffffff, 0xee00]) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a4014640000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000003800038034000080040001800c000540000000000000004914000b8010007fff0b0001006f626a72656600000c000400"/179], 0xd0}, 0x1, 0x0, 0x0, 0x40008d6}, 0x40) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e22, @private=0xa010141}}, 0xb20, 0x61}, &(0x7f0000000700)=0x90) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000600)=@sack_info={r8, 0x4, 0x1}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00') keyctl$chown(0x4, r4, 0xee01, r6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="18080000feffff3f00000000020000008510000006200000851000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020086b2438aeb106e0000000000850000008600000018000000000000800000000000000000950000000000000095000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mlock(&(0x7f0000520000/0x1000)=nil, 0x1000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {0x7, 0x10000}}, './file0\x00'}) fsetxattr$trusted_overlay_redirect(r9, &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x1) 53.312522679s ago: executing program 1 (id=8558): openat$ptp0(0xffffffffffffff9c, 0x0, 0x400c02, 0x0) pselect6(0x0, 0x0, &(0x7f00000000c0)={0x1f, 0x0, 0x8, 0x4005, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x4000000000}, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x5d37, 0x1a57, 0x8, &(0x7f0000000100)={[0xfffffffffffffff7]}, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x102281, 0x2, 0xfffffffe, 0x0, 0x0, 0xf8c, 0x0, 0x0, 0x0, 0x0, 0x1000000000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="120000000600000004000000"], 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0xe2242, 0xfb) fremovexattr(r2, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x4, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) clock_settime(0x1, &(0x7f00000001c0)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, 0x0, 0x1) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000000c0)={0x0, 0x38}, 0x1, 0x7}, 0x0) socket$nl_route(0x10, 0x3, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8ffff) openat(0xffffffffffffffff, 0x0, 0x4080, 0x1d0) 52.949943808s ago: executing program 1 (id=8562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x56d}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b80000000001010400000000000000000a0000003c00017fa902b98014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000024000d8014000400200100000000000000000000000000020c000380060001004e220000"], 0xb8}}, 0x0) getuid() perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x20) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) waitid(0x2, 0x0, &(0x7f0000000240), 0x80000000, &(0x7f00000002c0)) 52.933891828s ago: executing program 52 (id=8562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x56d}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b80000000001010400000000000000000a0000003c00017fa902b98014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000024000d8014000400200100000000000000000000000000020c000380060001004e220000"], 0xb8}}, 0x0) getuid() perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x20) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) waitid(0x2, 0x0, &(0x7f0000000240), 0x80000000, &(0x7f00000002c0)) 34.073921269s ago: executing program 8 (id=8781): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="59cffeffabff010000000800000014000180060001"], 0x28}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000940), &(0x7f00000001c0), 0x401}, 0x38) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8e, 0x1}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x200000000000bf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/57, 0x39}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5a4d20e32979ce3e, 0xe, &(0x7f0000000f40)=ANY=[@ANYRES64=0x0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}, @fastopen={0x22, 0x2}]}}}}}}}}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x18, 0x0, 0x0) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000000)=0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1, &(0x7f0000000340)=""/1, 0x41100, 0x13}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./bus\x00', 0x1000000, &(0x7f0000000180)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xffaf) 33.782779886s ago: executing program 8 (id=8788): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x2) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x0, r1, 0x1, 0xffffffff}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) 33.347780428s ago: executing program 8 (id=8798): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x1c, 0x1e, 0x21, 0x0, 0x0, {0x7}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44810) 33.277871869s ago: executing program 8 (id=8800): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) set_mempolicy(0x3, &(0x7f0000000380)=0x3, 0x9) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4607fc3c40010001000000000002003e000700000094020000000000004000000000000000dd0100000000000013000000000038000102"], 0x178) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xf, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0xc840) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x48042, 0x135) fallocate(r4, 0x11, 0x3, 0x6) ioctl$SNAPSHOT_UNFREEZE(r4, 0x3302) chroot(&(0x7f0000000100)='./file0\x00') r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x40, 0x7e}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x2400c000) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xfffffffc, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 33.175889682s ago: executing program 8 (id=8801): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2417, 0x26121}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x12000000, 0x0, 0x20004000}, 0x14) 32.889615219s ago: executing program 8 (id=8807): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)={0x30, 0x2d, 0x1, 0x2, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @binary="6724e26d224310998afbf5e023deab7c"}]}]}, 0x30}], 0x1}, 0x0) 32.889509759s ago: executing program 53 (id=8807): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)={0x30, 0x2d, 0x1, 0x2, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @binary="6724e26d224310998afbf5e023deab7c"}]}]}, 0x30}], 0x1}, 0x0) 18.069617669s ago: executing program 0 (id=8922): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20004090) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) 18.036577799s ago: executing program 0 (id=8923): r0 = fsopen(&(0x7f00000001c0)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = gettid() r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x82) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000100)=""/246) sendmsg(r1, &(0x7f0000001880)={&(0x7f0000000040)=@l2={0x1f, 0x307, @any, 0x7, 0x2}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000240)="4223824ebb4187ac08bd61e26ebaaba1288582badb09d9230d4217344363208ec6d45fb65dec83a268c9a60c6fc53642b259a1622bf1849feabbf080680af03e53617fd17e2cfb13669222d04e8fdd4c6710831b477c4487744a6feefd4a5d1eb678da46579760b312163a89d8a8f9261085278125d8a0ccf8a09a48783aec0423817a896174f46d81b94f623a472687594318ff7436d5cdd9d826a6807bb7838e532737af6acfd74a877a305efae992f314780842b42b4887a302d4d67e03ead6d27eebe8690e06e9ba72e6593d4d8557a49bfd689d755b8ed699bc89b9179b25031f3a48c771e6379a705dd5e8bd549b706c03188e0840", 0xf8}, {&(0x7f0000000840)="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", 0x1000}], 0x2}, 0x200040c0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {0x0, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xfffffffe}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x0, 0x0}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="379a5fa79426541cf443dd8d4805968471fa620c0bbeb6f771fe7a37358e5647e44b3e0f77b96826993669680d3f3c0f834af0daa501b072326c3ebc4d47691300269b73c80b7d0c42a44c55c9ca61c5c6d09b"], 0x37) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000058000800000000000000df250008000200", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4000001) 17.581600411s ago: executing program 0 (id=8927): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) writev(r5, &(0x7f0000000440)=[{0x0}], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x1f, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 16.662711084s ago: executing program 0 (id=8932): r0 = io_uring_setup(0x7a82, &(0x7f0000000000)={0x0, 0xe649, 0x200, 0x0, 0x2b2}) (async) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x45, 0x126062) (async, rerun: 64) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_test', 0x82843, 0x0) (rerun: 64) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000040)={r2, 0xe00, {0x0, 0x0, 0x0, 0x1, 0x4000080000001001, 0x0, 0x1, 0xa, 0x14, "faf98317e5a1149989958dbe53ea6accb396a2503dc3eb3fe37d58128bbad0099cebdc35f50160c9e6d6e3ab8588070000000000120000000000000000002200", "32d8cc26f7061a74df2cfc72c89f3d9e234b30c5099f02bcf409ff2176ff7bfe55cd4a5d83cd4a5249d3ffe70c7f3f800b2f1caffba80e83c212ce330000a79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xa10, 0x200006]}}) (async) io_uring_enter(r0, 0x1b76, 0x559d, 0x20, &(0x7f00000001c0)={[0x9]}, 0x8) (async) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x79e, &(0x7f00000007c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x120100, &(0x7f0000000200)="8e326fe6c6674bfa39994bfc2a533938b8a33fb51670cf3a5f9af150e100acb43c90d86ebe6a11aeb5667a68bdc0f5ba1018a60f864a424311e2acc7c759683688be8c93d9b2ac7c91f93ab6c60dcb9efeb92ed47f741bfa97df07f3bb0f2298309a2b9fdb1af1ff8721a88d79ce5c7f66ea055d8eaf2d220218c4ad5cea4a2aa6fcb7", 0x83, &(0x7f00000002c0), &(0x7f0000000380), &(0x7f00000003c0)="fc28f2c142ca345105755d9732f6aa6f4fd890306d3a8893d139fdbf5935770729bb7214ab7db21665ceef170aa6953b64615469467681251f62242beab65f5df3cd1cc1ecfb581849e848e21859db1120642e56b08fe5d3a0b8e04ae9e623534d95dc73a8fb03c655c1972a13855a767d5d9683ceaa39779952ddddd2fab7a1") (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (rerun: 64) 14.546813437s ago: executing program 0 (id=8940): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x2, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x3, 0x490, &(0x7f0000000580)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0xe) clock_gettime(0x0, &(0x7f0000005ec0)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) recvmmsg$unix(r1, &(0x7f0000005cc0)=[{{&(0x7f0000000100), 0x6e, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/107, 0x6b}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000001f80)=""/249, 0xf9}, {&(0x7f0000002080)=""/249, 0xf9}, {&(0x7f0000002180)=""/63, 0x3f}, {&(0x7f00000021c0)}, {&(0x7f0000002200)=""/96, 0x60}, {&(0x7f0000002280)=""/60, 0x3c}, {&(0x7f00000022c0)=""/113, 0x71}], 0x9, &(0x7f0000002400)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000002500)=@abs, 0x6e, &(0x7f0000002580), 0x0, &(0x7f00000025c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0}}, {{&(0x7f00000026c0)=@abs, 0x6e, &(0x7f0000002e80)=[{&(0x7f0000002740)=""/140, 0x8c}, {&(0x7f0000002800)=""/113, 0x71}, {&(0x7f0000002880)=""/96, 0x60}, {&(0x7f0000002900)=""/159, 0x9f}, {&(0x7f00000029c0)=""/247, 0xf7}, {&(0x7f0000002ac0)=""/222, 0xde}, {&(0x7f0000002bc0)=""/174, 0xae}, {&(0x7f0000002c80)=""/224, 0xe0}, {&(0x7f0000002d80)=""/253, 0xfd}], 0x9, &(0x7f0000002f40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000003080), 0x6e, &(0x7f00000034c0)=[{&(0x7f0000003200)=""/134, 0x86}, {&(0x7f00000032c0)=""/27, 0x1b}, {&(0x7f0000003300)=""/160, 0xa0}, {&(0x7f00000033c0)=""/249, 0xf9}], 0x4, &(0x7f0000003540)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003a00)=[{&(0x7f0000003640)=""/217, 0xd9}, {&(0x7f0000003840)=""/154, 0x9a}, {&(0x7f0000003900)=""/78, 0x4e}, {&(0x7f0000003980)=""/55, 0x37}, {&(0x7f00000039c0)=""/14, 0xe}], 0x5, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000003b40)=@abs, 0x6e, &(0x7f0000005100), 0x0, &(0x7f00000051c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000005200)=@abs, 0x6e, &(0x7f00000055c0)=[{&(0x7f0000005280)}, {&(0x7f00000052c0)=""/246, 0xf6}, {&(0x7f00000053c0)=""/218, 0xda}, {&(0x7f00000054c0)=""/2, 0x2}, {0x0}], 0x5, &(0x7f0000005640)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000005740), 0x6e, &(0x7f0000005b00)=[{&(0x7f00000057c0)=""/133, 0x85}, {&(0x7f0000005880)=""/54, 0x36}, {&(0x7f00000058c0)=""/219, 0xdb}, {0x0}, {&(0x7f0000005a00)=""/152, 0x98}, {&(0x7f0000005ac0)=""/14, 0xe}], 0x6, &(0x7f0000005b80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x118}}], 0x8, 0x40000120, &(0x7f0000005f00)={r3, r4+10000000}) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f0000000440)={&(0x7f00000002c0)='fdinfo/3\x00', &(0x7f0000000400)='quota', 0x80000001}) pwrite64(r1, &(0x7f0000000180)="95", 0xffaf, 0x10001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x1, 0x3, 0x20, 0x1000000000001}) unshare(0x22060600) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf4, 0x1, 0x0, 0x0, 0x0, 0x800000004, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext={0x8005, 0x37}, 0x912a, 0x2, 0x0, 0x3, 0x2, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1400000004000000040000000400000000000000", @ANYRES32, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000f40)={0x0, 0x10, &(0x7f00000004c0)=[@in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f0000000f00)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000000)={r7, 0x4, 0x3}, &(0x7f0000000080)=0x8) 13.481719993s ago: executing program 0 (id=8950): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) sendmsg$tipc(r0, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0xd0010100, 0x4}}, 0x10, 0x0}, 0x10) 13.481350513s ago: executing program 54 (id=8950): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) sendmsg$tipc(r0, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0xd0010100, 0x4}}, 0x10, 0x0}, 0x10) 5.841478503s ago: executing program 6 (id=9005): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0xa7, 0x0, 0x0, 0x0, 0x1, 0x5, 0x4, 0xfffffffffffffff9}, {0x6, 0x0, 0x0, 0xfffffffffffffffd}, 0x3, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x32}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) close(r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000140)="0f", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000580)="91", 0x1}], 0xef, &(0x7f0000000980)=[@ip_tos_u8={{0x11}}], 0x18}}], 0x2, 0x4008440) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x1) mmap(&(0x7f00000e1000/0x1000)=nil, 0x1000, 0x5000006, 0x11, r4, 0xec779000) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x4, 0x2, 0xf5ff}, 0x10) r5 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r5) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r6, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xe9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80000001}, @SEG6_ATTR_ALGID={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x8044}, 0x10) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r7 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r7, &(0x7f0000000400)={&(0x7f0000000140)={0xa, 0xa, 0x8000, @local}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)="9ee2ff0200000023a7dfe52c1f51218200000000000a0000b57311c6bc4fb05b287fdde98e2587", 0x27}, {&(0x7f0000001080)='g', 0x1}], 0x2}, 0x20008b88) flock(r5, 0x1) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r8, 0x2) socket$inet6(0xa, 0x2, 0x3a) 5.780326505s ago: executing program 7 (id=9007): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prlimit64(r0, 0x5, &(0x7f0000000100)={0x2, 0xfffffffffffffff7}, &(0x7f0000000140)) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x3800, 0x4, 0xffffffff, 0x44}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x7) 5.706293987s ago: executing program 5 (id=9008): bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) (rerun: 64) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=[0x8], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$P9_RSTATu(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="ba"], 0x5e6) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) (async) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, &(0x7f0000000580)=[{&(0x7f0000000100)="07f749", 0x3}], 0x1, 0x18, 0x0) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0xc, 0x6, "bc3090", 0x10, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], @ni={0x193, 0x0, 0x0, 0x7, 0x1000, 0x1000000000000a}}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8405, 0x8000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x32, 0x1}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c800}, 0x40) (async, rerun: 64) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4) (rerun: 64) 5.57248153s ago: executing program 7 (id=9010): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x908aa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x6, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x800) 5.437622204s ago: executing program 7 (id=9011): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[], 0x20}}, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x13}, 0xc108, 0x1, 0xc, 0x6, 0x7, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xc000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) preadv(r1, &(0x7f0000000cc0)=[{&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000000b40)=""/151, 0x97}, {&(0x7f0000000c80)=""/56, 0x38}], 0x3, 0x8001, 0x9) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x20400049, &(0x7f00000003c0)={[{@grpjquota}, {@abort}, {@nomblk_io_submit}, {@grpid}, {@nolazytime}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@jqfmt_vfsold}]}, 0x84, 0x4b2, &(0x7f0000000580)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x301080, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888) fcntl$getflags(r4, 0x404) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) timer_create(0x0, 0x0, 0x0) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x6, &(0x7f0000000040)=[{0xfffffffffffffffc, 0x4000000}, {0x1000, 0x0, 0x4}], 0x2, 0x37, 0x0, 0x2, 0x0, 0x2}) 4.902750007s ago: executing program 6 (id=9013): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x22, 0x0, 0x0, 0x0, 0xf8, 0x0, 0xfc, 0xfe, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0xff, 0xff, 0x45, [0x0, 0x200089ff]}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb08004500001c10007d1c168f97dfb600008002907800000000e000030008"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x2400c0c4}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x100001, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff3, 0x0, @perf_config_ext={0x85, 0xffffffffffffffff}, 0x3212, 0x7, 0x2, 0x2, 0xc, 0x3, 0x2, 0x0, 0x0, 0x0, 0x800000000e48}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0xa4}}, 0x0) 4.40974516s ago: executing program 5 (id=9015): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x4, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e22, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0x20d9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x0, 0x1, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x4734}}, 0x10) 3.622879559s ago: executing program 5 (id=9016): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000006800010000000000000000000000000000000000060003000000000008000100000000001c000200010081ffffff"], 0x44}}, 0x0) 3.414290214s ago: executing program 5 (id=9017): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x2000000, 0x0, 0x24008000}, 0xc000) 2.149428586s ago: executing program 5 (id=9019): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="59cffeffabff010000000800000014000180060001"], 0x28}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a00000004000000060000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000940), &(0x7f00000001c0), 0x401, r3}, 0x38) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8e, 0x1}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x200000000000bf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/57, 0x39}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5a4d20e32979ce3e, 0xe, &(0x7f0000000f40)=ANY=[@ANYRES64=0x0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xf, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8956, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x9, &(0x7f0000000240)=""/9, 0x41000, 0x11, '\x00', 0x0, @cgroup_device=0x6, r0, 0x8, &(0x7f00000003c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x7, 0x1, 0x7}, 0x10, r5, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[r3, r3], 0x0, 0x10, 0x43fc}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0x402) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}, @fastopen={0x22, 0x2}]}}}}}}}}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x18, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1, &(0x7f0000000340)=""/1, 0x41100, 0x13}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./bus\x00', 0x1000000, &(0x7f0000000180)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffaf) 2.038403519s ago: executing program 6 (id=9020): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x88}, 0x1, 0x7}, 0x0) 2.00188842s ago: executing program 7 (id=9021): getpgid(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x3, 0x7ffcfffc}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) write$binfmt_aout(r0, &(0x7f0000001140)=ANY=[@ANYRES16], 0x20) r1 = syz_clone(0x40000, &(0x7f00000003c0)="b0d2b2c54e043ea5e82283766c8808b465ed1578483da14665db64c32a143b371cfa1649c3f1cb6b033886ff4ce019b0682787a3fafd3bedd3a8fc860cf7bdb4c43ef925d54c2148ad7807585b86444a949521d206e582513655c63c34fe79b0b6e4493c27ca357a14d72f6a7146d2e9b6eb8a2b704f9c7b548919ba2ee01841564aafa3e0ac9adad89e45784dda3d32a0e1c2816b34357f2ff154e7fc1891604b2ee58f18", 0xa5, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="f98eafe4cbb89c35285f75b5f8c5ee76d15ff3e9971174f953ca130cc85bf1b1a95d54860940c99e4eca7a2b1ac2357825ee6ecacfcdbe1a1fe6b43e32eb151fa394fd42a2f2cce458") perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0xb, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xe}, 0x8080, 0x13f8, 0x14001, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x3}, r1, 0x1, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000140), 0x1, 0xbe0, &(0x7f0000001000)="$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") r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f00000002c0)={0x0, 0x0, "be9a1cc179e46b5cd49984b6b42c3520"}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0xe8, 0x1f0, 0xe8, 0x2d8, 0x2d8, 0x1f0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffd, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x10100, 0x0) write$vga_arbiter(r6, &(0x7f0000000840)=@target={'target ', {'PCI:', '0', ':', '10', ':', '2', '.', '5'}}, 0x14) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x8400, &(0x7f0000000840)={[{@uid}, {@session={'session', 0x3d, 0x5f}}, {@block={'block', 0x3d, 0x400}}, {@hide}, {@overriderock}, {@nocompress}, {@mode={'mode', 0x3d, 0x10011}}, {@session={'session', 0x3d, 0x35}}, {@map_normal}, {@gid}]}, 0x0, 0x691, &(0x7f0000000f00)="$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") openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r7, &(0x7f0000000340)=@id, &(0x7f0000000380)=0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1, 0x300, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xadd2b}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x44}}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r3, 0x45, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8008000, 0x0, 0x0, 0xfd98, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x0}}, 0x10) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r9, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 1.893633662s ago: executing program 6 (id=9022): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="757466383d302c696f636861727365743d69736f383835392d312c666d61736b3d30303030303030303030303030303030303030303036362c756e695f786c6174653d312c756e695f786c6174653d302c726f6469722c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c757466383d302c757466383d312c73686f72746e616d653d77696e39352c726f6469722c6e66733d6e6f7374616c655f726f2c726f6469722c757466383d312c73686f72746e616d653d77696e6e742c636865636b3d72656c617865642c00c63b831754d4eeec4cf38c28cf1e3409b9950bbab09abe8d407d1c7c935e034461a37ac3113829124efad15a202673b20ad011cb0f0cedb0cef9f6ec5e2634db26ef8581fd506844d0133ac021c0172b4b36a109949512e8dc6a8c7d603e3ef3cd57451eaee1b0e4804b9ea88fcad7afb59594dcfeaf8d34935fa0e54a36c57d964429e7ec869287810e5d97759017ace0c3f5"], 0x6, 0x2c3, &(0x7f0000000900)="$eJzs3T+LHGUcB/Df7M3OrlrsFlYiOKCFVciltdlDEhCvMmyhFnqYC8jtItzBgX9wTWVrY2HhKxAEX4iN70CwFeyMEHhkZmeyu5dlcxuyJyafT5MnzzzfeX7Ps8PdXHHPffzq9OROGXfvffV79PtZdEYxivtZDKMTrW9ixei7AAD+z+6nFH+luW1yWUT0d1cWALBDl/v+ny+av1xJWQDADt1+/4N3Dw4Pb75Xlv24Nf32fFz9ZF/9O79+cDc+jUkcx/UYxIOI+kWhG/XbQtW8lVKa5WVlGG9MZ+fjKjn96Nfm/gd/RtT5/RjEsO56+LZR5985vLlfzi3lZ1UdLzbzj6r8jRjEyw/DK/kba/IxLuLN15fqvxaD+O2T+CwmcacuYpH/er8s307f//3lh1V5VT6bnY979biFtHfFHw0AAAAAAAAAAAAAAAAAAAAAAM+wa83ZOb2oz++puprzd/YeVP/pRtkarp7PM89n7Y2WzwdKKc1S/Nier3O9LMvUDFzk83glXz5YEAAAAAAAAAAAAAAAAAAAAJ5fZ59/cXI0mRyfPpVGexpAHhH/3I540vuMlnpei82De82cR5NJp2mujsmXe2KvHZNFbCyjWsST7kYeW639hUdqbho//bzt7P3Hj+mun+tpNtqn6+QoW7+HvWh7+s1G/VBELMYUccm5ios9aTC/T9rqIyjWXhpsvfbipbox2zAmsk2FvfXHfOeanuziKop6V9fGu01jKX7h2bjU8xz9efzRrxWZ0zoAAAAAAAAAAAAAAAAAAGCnFr/9u+bivY3RTurtrCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuFKLv/+/RWPWhI9Pz/LHDC7i9Ow/XiIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPgX8DAAD//x0KWZ8=") openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x8000, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x600) r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0xa, @dev={0xfe, 0x80, '\x00', 0xa7}, 0x20000002}, 0x1c) getsockopt$sock_buf(r1, 0x1, 0x19, 0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000004001f"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0xfee3, 0x800004, 0x0, 0x2, 0x2, 0x0, 0x0, 0x4, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) move_pages(r0, 0x6, &(0x7f00000001c0)=[&(0x7f0000920000/0x2000)=nil, &(0x7f00005de000/0x2000)=nil, &(0x7f00000cd000/0xc000)=nil, &(0x7f0000585000/0x2000)=nil, &(0x7f0000380000/0x4000)=nil, &(0x7f0000955000/0x1000)=nil], &(0x7f0000000280)=[0x6, 0x4, 0xee02, 0xff, 0xfffffff7, 0x1fffc000], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0xa) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[], 0x9) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) 1.597595289s ago: executing program 3 (id=9026): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000940), &(0x7f00000001c0), 0x401}, 0x38) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8e, 0x1}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x200000000000bf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/57, 0x39}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5a4d20e32979ce3e, 0xe, &(0x7f0000000f40)=ANY=[@ANYRES64=0x0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}, @fastopen={0x22, 0x2}]}}}}}}}}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x18, 0x0, 0x0) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000000)=0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1, &(0x7f0000000340)=""/1, 0x41100, 0x13}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./bus\x00', 0x1000000, &(0x7f0000000180)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffaf) 1.346251956s ago: executing program 5 (id=9027): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r2, 0x0, 0x80, 0x6) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000c40)={0x3, 0x0, 0x1a, 0x1, 0x124, &(0x7f0000000840)}) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ff) sendmsg(r3, &(0x7f0000000dc0)={&(0x7f0000000200)=@l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x1}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)="e457f4a3bfb6229a5736db8fe1196cc3bbb89207525a0d70dcdef384f5050f4e5dbe11b4dd70814cb64eb340ef253dd0a525df4d0f9a43659e18d04298ef5ec84b1aaa29734495d0d91157e5daccb2af533a0b8a137bf5aeb63b5e4cc72759cfa245f6b5c70281c731fe7d150c660969caf8effebff32cafbd8cc494f63b0af90920c05a5110fe6bdad4eb8c50", 0x8d}, {&(0x7f0000000740)="df6c9b8f604ec102f3f65d2789b09444ddeab3ec57b7288eec37b68e9af3cb2bdde1d49d1da0c14657ba3d221c8aa8ae9ee2", 0x32}, {&(0x7f0000000780)="d87687a0fbfe9e8adeca0cd4a459be00bc51760457da65b37e526f9a2ebc6c7627edbac044e8a3159253935362e8b34ea65db5f04b3ac214fd781e61bc414d1d8f5832d9928c568321bd07da6d60f0bb992efc8a7e88ba0a1d7859", 0x5b}], 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/1648], 0x670}, 0x40000) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) write(r5, &(0x7f0000000640)='3\n', 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) times(&(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) brk(0x200004ffc000) 1.159068361s ago: executing program 3 (id=9028): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) socket$rds(0x15, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x6a, 0x1, 0x0, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000000d1465aa26bd7000fbdbdf25080001000000000008000300"], 0x38}, 0x1, 0x0, 0x0, 0x4000045}, 0xc010) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/ping_group_range\x00', 0x2, 0x0) read(r3, 0x0, 0x0) ioctl$SNAPSHOT_UNFREEZE(r3, 0x3302) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000980)={0x800}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042000102"], 0x14}}, 0x0) getsockopt$inet_buf(r0, 0x118, 0x25, 0x0, &(0x7f00000003c0)) 1.015992234s ago: executing program 3 (id=9029): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, @perf_config_ext={0x1, 0x400}, 0x100200, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540), 0x30002, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000580)=0x1, 0x4) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x4, 0xfc, 0x85, 0x0, 0x0, 0x8, 0x1010, 0x6, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp={&(0x7f0000000480), 0x4}, 0x430, 0xe430, 0x40, 0x5, 0x9, 0x8, 0x8, 0x0, 0x6, 0x0, 0x96d}, 0x0, 0xf, r0, 0x1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000003c0)={0x1, &(0x7f0000000080)=[{0x28, 0x48, 0x0, 0xfffff031}]}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="080a00000000000061108c0000000000620000000c00000d9500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000010000000000000000000005000000000000002e5f"], 0x0, 0x5e, 0x0, 0x5}, 0x28) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x9, 0x6}, 0x83d2, 0x0, 0x800000, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = io_uring_setup(0x6d59, &(0x7f0000000300)={0x0, 0xeb21, 0x48, 0x8001002, 0x3d7}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xfff5}}], 0xf00, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040)) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000030525bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a091030032980000280012800b0001006d61637365630000180002800c0004000300000100c28000080005000700000008000500", @ANYRES32=r8], 0x50}, 0x1, 0x0, 0x0, 0x240488d4}, 0x8020) 1.015469874s ago: executing program 7 (id=9030): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)}, 0x4c810) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30000000480001022abd7000fddbdf250a003b00112198e2ebd1594ea7781f7665f9b074c536a34b46265643d0ccacce36114e", @ANYRES32=0x0, @ANYBLOB="0200000014000100fe8000000000000000000000000000aa"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x6, 0x1c0d}, 0x2480, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) r3 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x2c}, 0x48, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a4, 0x2, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0x1, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000000400), 0x0, 0x4c42bb4f92, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x804b, 0x8}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) shutdown(r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) write$char_usb(r6, &(0x7f00000001c0), 0x0) ioctl$KDGKBDIACR(r6, 0x4b4a, &(0x7f0000000140)=""/104) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) 804.72282ms ago: executing program 6 (id=9031): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x9, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2615, &(0x7f0000000180)={0x0, 0xb4ae, 0x80000, 0x1, 0x1d6}, &(0x7f0000000300), &(0x7f0000000340)=0x0, &(0x7f0000000380)) munmap$IORING_OFF_CQ_RING(r3, 0x2) syz_ublk_setup_io_uring(0x6534, &(0x7f0000000540)={0x0, 0xcc31, 0x2, 0x1, 0x284}, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) syz_clone(0x2300, 0x0, 0x0, 0x0, 0x0, 0x0) 620.979254ms ago: executing program 4 (id=9033): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x2, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x3, 0x490, &(0x7f0000000580)="$eJzs3UFrXNUeAPD/nSR9aZu+pO+9RV/BWmwlLdqZpLFtcFEriK4Kat3HmExCyCQTMpO2CUVS/ACCiAquXLkR/ACC9COIUNC9iCiirS5cqCMzudPWOJMETHNx5veD03vOPTPzP6eTOXPPPZe5AXSt4xFxKSJ6IuJ0RAym+3NpivWNVH/c3Ts3puopiVrtyg9JJOm+5msl6fZg+rT+iHj5hYjXkr/GrayuzU+WSsXltFyoLiwVKqtrZ+YWJmeLs8XFsbHR8+MXxs+Nj+xaXy8+9807b374/MVPn7z21cR3p16vN2sgrXuwH7tpo+t9jf+Lpt6IWH4YwTLQk/anL+uGAACwI/Vj/P9ExGON4//B6GkczQEAAACdpPbMQPyaRNQAAACAjpVrXAOb5PLptQADkcvl8xvX8P4vDuRK5Ur1iZnyyuL0xrWyQ9GXm5krFUfSa4WHoi+pl0cb+fvls5vKYxFxOCLeHtzfKOenyqXprE9+AAAAQJc4uGn+//PgxvwfAAAA6DBDWTcAAAAAeOjM/wEAAKDzmf8DAABAR3vx8uV6qjXvfz19dXVlvnz1zHSxMp9fWJnKT5WXl/Kz5fJs4zf7FrZ7vVK5vPRULK5cL1SLlWqhsro2sVBeWaxONO7rPVF0n2gAAADYe4cfvfVlEhHrT+9vpLp9aZ25OnS2XNYNADLTk3UDgMz0Zt0AIDPm+ECyTX1/u4rPdr8tAADAwzH8f+v/0K2s/0P3sv4P3cv6P3Qvc3zA+j8AAHS+gUZKcvl0LXAgcrl8PuJQ47YAfcnMXKk4EhH/jogvBvv+VS+PZt1oAAAAAAAAAAAAAAAAAAAAAAAAAPiHqdWSqAEAAAAdLSL3bZLe/2t48OTA5vMD+5JfBhvbiLj2/pV3r09Wq8uj9f0/3ttffS/dfzaLMxgAAADAZs15enMeDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC76e6dG1PNtJdxv382IoZaxe+N/sa2P/oi4sBPSfQ+8LwkInp2If76zYg40ip+Um9WDKWt2Bw/FxH7M45/cBfiQze7VR9/LrX6/OXieGPb+vPXm6a/q/34l7s3/vW0Gf8O7TDG0dsfF9rGvxlxtLf1+NOMn7SJf2KH8V99ZW2tXV3tg4jhlt8/yZ9iFaoLS4XK6tqZuYXJ2eJscXFsbPT8+IXxc+MjhZm5UjH9t2WMtx755Pet+n+gTfyhbfp/cof9/+329Tv/3SL+qROt3/8jW8Sv/008nn4P1OuHm/n1jfyDjn30+bGt+j/dpv/bvf+ndtj/0y+98fUOHwoA7IHK6tr8ZKlUXJaRkZG5l8l6ZAIAAHbb/YP+rFsCAAAAAAAAAAAAAAAAAAAA3Wsvfk4s6z4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzEHwEAAP//0wfUAw==") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0xe) clock_gettime(0x0, &(0x7f0000005ec0)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) recvmmsg$unix(r1, &(0x7f0000005cc0)=[{{&(0x7f0000000100), 0x6e, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/107, 0x6b}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000001f80)=""/249, 0xf9}, {&(0x7f0000002080)=""/249, 0xf9}, {&(0x7f0000002180)=""/63, 0x3f}, {&(0x7f00000021c0)}, {&(0x7f0000002200)=""/96, 0x60}, {&(0x7f0000002280)=""/60, 0x3c}, {&(0x7f00000022c0)=""/113, 0x71}], 0x9, &(0x7f0000002400)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000002500)=@abs, 0x6e, &(0x7f0000002580), 0x0, &(0x7f00000025c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0}}, {{&(0x7f00000026c0)=@abs, 0x6e, &(0x7f0000002e80)=[{&(0x7f0000002740)=""/140, 0x8c}, {&(0x7f0000002800)=""/113, 0x71}, {&(0x7f0000002880)=""/96, 0x60}, {&(0x7f0000002900)=""/159, 0x9f}, {&(0x7f00000029c0)=""/247, 0xf7}, {&(0x7f0000002ac0)=""/222, 0xde}, {&(0x7f0000002bc0)=""/174, 0xae}, {&(0x7f0000002c80)=""/224, 0xe0}, {&(0x7f0000002d80)=""/253, 0xfd}], 0x9, &(0x7f0000002f40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000003080), 0x6e, &(0x7f00000034c0)=[{0x0}, {&(0x7f0000003200)=""/134, 0x86}, {&(0x7f00000032c0)=""/27, 0x1b}, {&(0x7f0000003300)=""/160, 0xa0}, {&(0x7f00000033c0)=""/249, 0xf9}], 0x5, &(0x7f0000003540)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003a00)=[{&(0x7f0000003640)=""/217, 0xd9}, {&(0x7f0000003840)=""/154, 0x9a}, {&(0x7f0000003900)=""/78, 0x4e}, {&(0x7f0000003980)=""/55, 0x37}, {&(0x7f00000039c0)=""/14, 0xe}], 0x5, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000003b40)=@abs, 0x6e, &(0x7f0000005100), 0x0, &(0x7f00000051c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000005200)=@abs, 0x6e, &(0x7f00000055c0)=[{&(0x7f0000005280)}, {&(0x7f00000052c0)=""/246, 0xf6}, {&(0x7f00000053c0)=""/218, 0xda}, {&(0x7f00000054c0)=""/2, 0x2}, {0x0}], 0x5, &(0x7f0000005640)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000005740), 0x6e, &(0x7f0000005b00)=[{&(0x7f00000057c0)=""/133, 0x85}, {&(0x7f0000005880)=""/54, 0x36}, {&(0x7f00000058c0)=""/219, 0xdb}, {0x0}, {&(0x7f0000005a00)=""/152, 0x98}, {&(0x7f0000005ac0)=""/14, 0xe}], 0x6, &(0x7f0000005b80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x118}}], 0x8, 0x40000120, &(0x7f0000005f00)={r3, r4+10000000}) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f0000000440)={&(0x7f00000002c0)='fdinfo/3\x00', &(0x7f0000000400)='quota', 0x80000001}) pwrite64(r1, &(0x7f0000000180)="95", 0xffaf, 0x10001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x1, 0x3, 0x20, 0x1000000000001}) unshare(0x22060600) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf4, 0x1, 0x0, 0x0, 0x0, 0x800000004, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext={0x8005, 0x37}, 0x912a, 0x2, 0x0, 0x3, 0x2, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1400000004000000040000000400000000000000", @ANYRES32, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000f40)={0x0, 0x10, &(0x7f00000004c0)=[@in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f0000000f00)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000000)={r7, 0x4, 0x3}, &(0x7f0000000080)=0x8) 602.226455ms ago: executing program 3 (id=9034): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x2000000, 0x0, 0x24008000}, 0xc000) 559.091326ms ago: executing program 6 (id=9035): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001900), 0x0, 0x4044805) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_usb_connect$uac2(0x0, 0xd1, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x3, 0x1, 0xed, 0x10, 0x7, {0x8, 0xb, 0x2, 0x1, 0x1, 0x6, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x200, 0x8, 0x2a, 0xd}, [@input_terminal={0x10, 0x24, 0x2, 0x6, 0x206, 0x2, 0xfd, 0x8, 0x19, 0x10, 0xa, 0x2}, @feature_unit={0x11, 0x24, 0x6, 0x2, 0x3, [0x5, 0x2, 0xa, 0x3, 0x3, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x35d6, 0x9, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xd, 0x45, 0x7, {0x8, 0x25, 0x1, 0x80, 0x0, 0x54, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x1, 0x7, 0x2, 0x4, 0x9, 0x6, 0xec}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x40, 0x9, 0x1, 0xb0, 0x8}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x8, 0x3, 0x3}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x74, 0xff, 0x8, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x80, 0xff, {0x8, 0x25, 0x1, 0x3, 0x30, 0x6, 0xfffd}}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x200, 0x1, 0xd1, 0x40, 0x20, 0x2}, 0x10, &(0x7f0000000380)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0xd9, 0x5, 0xfffa, 0x4a}]}, 0x1, [{0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="ec7a"]}]}) mount(0x0, 0x0, 0x0, 0x10, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r0 = socket(0x10, 0x3, 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) mkdir(&(0x7f0000000100)='./sys\x00', 0x195) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0xfffffffe, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x48}}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x4, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x14, 0x0, 0xff, 0x1, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x5c1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r6, &(0x7f0000000500)='01:3:abcd', 0x9) 497.476267ms ago: executing program 3 (id=9036): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="59cffeffabff010000000800000014000180060001"], 0x28}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a00000004000000060000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000940), &(0x7f00000001c0), 0x401, r3}, 0x38) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8e, 0x1}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x200000000000bf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/57, 0x39}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5a4d20e32979ce3e, 0xe, &(0x7f0000000f40)=ANY=[@ANYRES64=0x0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xf, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8956, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x9, &(0x7f0000000240)=""/9, 0x41000, 0x11, '\x00', 0x0, @cgroup_device=0x6, r0, 0x8, &(0x7f00000003c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x7, 0x1, 0x7}, 0x10, r6, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[r3, r3], 0x0, 0x10, 0x43fc}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0x402) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}, @fastopen={0x22, 0x2}]}}}}}}}}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x18, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1, &(0x7f0000000340)=""/1, 0x41100, 0x13}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./bus\x00', 0x1000000, &(0x7f0000000180)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffaf) 378.07652ms ago: executing program 4 (id=9037): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001800ef0100000000000000000a00c4"], 0x1c}, 0x1, 0x11}, 0x0) 355.160541ms ago: executing program 4 (id=9038): r0 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000400)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, r1, 0xfdffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x2a, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800fffdfd820000000000000008000079a0000000000000c300c0fffd00000095000000000000009291"], &(0x7f00000003c0)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fdatasync(0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)) capset(&(0x7f0000000040)={0x19980330}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800c000}, 0x20000000) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) 277.722482ms ago: executing program 4 (id=9039): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) setuid(0xee01) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000340)={0x53, 0xfffffffffffffffe, 0x6c, 0x37, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000680)="ea988146f58033c9da19a445a20ce4dba335c71360b4865e7a5434df5cfd84345a331846c12f8bd52117a5bb1a45e0d59e6a2e273a80156f770e386350bf00175cae0d9dbc4eeae1aeefcabb75382cd3fb47162f50ad419b441a39fed598344e1c396699c1d3f97d22854c51", 0x0, 0xfffffffd, 0x12, 0x1, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000005894c11dd91e5ff0207f39ea0000000500000a28000000000a030000000000000000ef0a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40811}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r2, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x2, 0x3, @mcast2}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000040)="670ff04cdb6f2c95f1c922adb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d3c242893", 0x2c}], 0x1}, 0x30008b08) 277.548322ms ago: executing program 4 (id=9040): r0 = socket$key(0xf, 0x3, 0x2) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0xa80006, &(0x7f0000000980)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="0005000000ef004638bae6a636dd56d0c68b841180b600a2963c95e37192e4c7fc4efc45aee7ded6c7ba542fa9308d6aea3300511ab4e75b20410773491305003a2708a159bb171bc852f877c2d009d1be77eb81b383911a10db727e4b73ff21bbbd6d63620000000000000005c7c13d1879e634cfde1da0a2bb55fd5c37fc8c78219a6f995ffec280ba4bdeba129a6c96659d5267731e778ce3434c79dd14be3059c669a226643221b113f68bcc4994c4be0aa5a46892a14bb52a2dcf1d9f20ead5916e4ca85cfd37907c208ba1be2c1238a2b9089fd7ac62616692163dfa26502d0eba5d3df77f5e432c5ebf00534783c1fd5e2446004dab09ef08ab06bb56d6107c5eabf37b8702ac151aa5db0989150375c954a18b455b484a7314f05dbc07633c463e815708ef69e1f7b5128e7579825006e351930332f8e0627d95d2653e8f4f118c2ad5e7d8081eb268d00e15b1c18154e492fc052768624bda5b20373bb767389d697a43993ef5cdd7a4571c94ce3478280084f9ba3d517708d9d3b5e666872a7e730a8b41c652c1790bca9f5f8ce9064b8432b1f62ecba22b9e397fa563ab3c2ea5345c25cfabff0f65a5b81c12f649c91550a900581641130ecea09c7b7d1e39488c06669def57d35c68a8aa357ef0f941277a01ed9a30c0a257fbc303c0ab630062d88dbdd835bf02f0cf402a9c7caf902a", @ANYRESHEX=r0, @ANYBLOB=',version=9p2000.u,access=client,euid>', @ANYRESDEC=0x0, @ANYBLOB=',silent,uid>', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060300000000000000000000000000140007800800114000f50000050015000c00000005000100060000000500050002000000050004000000000011000300686173683a69702c706f727400000000090002"], 0x60}}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000180)={0x80, 0x8, 0x2, 0x40000000, 0x23, 0x7}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="b4bbbbbbbb3bc46140f4b77469bbaaaaaaaaaabb86dd60122d9200103afffe8000000000000000000000000000bbff020000000000000000000000655b35ae00000186009078ff000000"], 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r7, 0x106, 0x17, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r9, 0x1, 0x0) r10 = dup(r6) signalfd(0xffffffffffffffff, &(0x7f0000000380)={[0x353]}, 0x8) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r5, &(0x7f0000000640)=[{&(0x7f0000000340)="2e1221b23bb601c494d3df173e75feff86dd9d90491c0024", 0x18}, {&(0x7f0000000080)="040000410002e877da000003467b5dc42d", 0x11}], 0x2) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4804}, 0x14) sendmsg$key(r0, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="25b58873f0a9dffc0000000000000000"], 0x10}, 0x1, 0x7}, 0x0) 188.926255ms ago: executing program 7 (id=9041): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f00000002c0)=0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='0\n\x00', 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x1, @perf_bp={0x0, 0xc}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB="7f000000", @ANYRES16=r3, @ANYBLOB="0100000000000003000008000000180001801400020073797a5f74756e00000000000000000018000280140003800c0001800800010000000000040001"], 0x44}}, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@other={'decodes', ' ', 'none'}, 0xd) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xc) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000740)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb4eefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000", @ANYRES16, @ANYRESDEC, @ANYRES8, @ANYRES32], 0x1, 0x343, &(0x7f0000000bc0)="$eJzs3cGLG1UcB/BfY+22tdvsQQQF8aEXvYTd9R8wSAvigrJ2pXoQpu6shkyTJRMqKWJ7E2/+HcWjN0EEz3vx7s3bXjz2UIwk2d1u4u7BQna25POB5L3My5d5k/DC7zJ5+7d/vNveKRs7WT9q76W4EhG1xxErUYtDFw7a2rh/KY57GO/Ub//5+iefff5hc2PjxmZKN5u33l1PKV1/49dvvv3pzd/6L3368/VflmJv5Yv9v9f/2ntl79X9f2593SpTq0ydbj9l6U6328/uFHnabpXtRkofF3lW5qnVKfPe1PhO0d3dHaSss718dbeXl2XKOoPUzgep30393iBlX2WtTmo0Gmn5aiyWZ7nerUebm1lzDpPhDP0we+DK9Mter5mN1vDSf5Jbj+Y6MQDgXJqt/2txeXy8ovr/sET5//X/hUWv/5+F+n8RjOr/Swfrd5r6HwAAAAAAAAAAAAAAngePh8P6cDisH7azj6rnx3z5/hfbsRv3LkcU39/burc1aSfjzZ1oRRF5rEY9nkQMj8T4TsGbH2zcWE1jK7F898EkP2pfmM6vRT1WpvOj51F+LaU0fJDSdP7F8T9aHOXXox4vn5xfn5x/Jn8p3n7rWL4R9fjjy+hGEdsxyj7Nf7eW0vsfbczkl8bvAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAxNNKRE/fvbzROG5/kj/bXX416PDl5f/7VE/fnvxivXaz22gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgUDm4386KIu+dfedhnDI0PFDVxM6+EzG3U/x+LU77nHXOV+fawZo8H/Op+IcJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKvB00++qZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECVysH9dlYUeW+OnaqvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HnybwAAAP//V3Yinw==") gettid() r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0xff7b) syz_emit_ethernet(0x5e, &(0x7f0000000100)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x40}, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private0, @private1}}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x7c, 0x10, 0x200, 0x4002, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1d188, 0x51}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x38, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_bridge\x00'}]}, 0x7c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000845000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000507000/0x2000)=nil, &(0x7f000000e000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_read_part_table(0x5c6, &(0x7f0000000bc0)="$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") r6 = io_uring_setup(0x1632, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000340)='map_files\x00') lseek(r8, 0x1000801, 0x0) getdents64(r8, 0xffffffffffffffff, 0x43) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r7, r8, 0x36, 0x0, @void}, 0x10) 182.131175ms ago: executing program 4 (id=9042): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x8000, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x600) r2 = socket(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e21, 0xa, @dev={0xfe, 0x80, '\x00', 0xa7}, 0x20000002}, 0x1c) read$hidraw(r0, &(0x7f0000000180)=""/28, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000004001f"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0xfee3, 0x800004, 0x0, 0x2, 0x2, 0x0, 0x0, 0x4, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) move_pages(r1, 0x6, &(0x7f00000001c0)=[&(0x7f0000920000/0x2000)=nil, &(0x7f00005de000/0x2000)=nil, &(0x7f00000cd000/0xc000)=nil, &(0x7f0000585000/0x2000)=nil, &(0x7f0000380000/0x4000)=nil, &(0x7f0000955000/0x1000)=nil], &(0x7f0000000280)=[0x6, 0x4, 0xee02, 0xff, 0xfffffff7, 0x1fffc000], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0xa) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[], 0x9) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) 0s ago: executing program 3 (id=9043): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x42}, 0x28) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{0x0, 0x3000000000, 0x7fffffffffffffff, 0xd, 0xcff8, 0x9, 0x2, 0x400, 0x4, 0x10000, 0x8, 0xa4e, 0x800, 0x800000000, 0x3}}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000240)={{r1, 0xa, 0x7fffffff, 0x8001, 0xf, 0x1, 0x3ff, 0x5, 0x2, 0x2, 0x1, 0x100000001, 0x7, 0x68, 0x8000}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) fcntl$lock(0xffffffffffffffff, 0x3, &(0x7f0000001340)={0x0, 0x3, 0x7, 0x9, r2}) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x500, 0xe, 0x5c}, 0x18) r4 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r4}, 0x8) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) r5 = socket(0x400000000010, 0x3, 0x0) listxattr(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="43e51f1bce2ede7abb6a4b66c403f7e047ecee20f0c2fcb0e9a0fa457ecafec104711845155c12d3083c", 0x2a}], 0x1, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) r7 = epoll_create1(0x0) dup(r7) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r9, &(0x7f0000000100)={0x2, 0x4d2, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x20004804) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000001240)=""/207, 0xcf) unshare(0x20000400) kernel console output (not intermixed with test programs): c0000 [ 810.363772][T21312] loop7: detected capacity change from 0 to 512 [ 810.456394][T21327] netlink: 'syz.3.8351': attribute type 1 has an invalid length. [ 810.473834][T21327] 8021q: adding VLAN 0 to HW filter on device bond9 [ 810.672775][T21367] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8353'. [ 810.683189][T21366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8352'. [ 810.807188][T21367] loop5: detected capacity change from 0 to 128 [ 810.843372][T21366] SELinux: invalid class [ 810.848615][T21366] SELinux: failed to load policy [ 810.876290][T21367] SELinux: invalid class [ 810.881602][T21367] SELinux: failed to load policy [ 811.018197][T21379] zero sized request [ 811.023353][T21378] loop6: detected capacity change from 0 to 512 [ 811.055738][T21378] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 811.064037][T21378] EXT4-fs error (device loop6): ext4_get_branch:178: inode #13: block 1024: comm syz.6.8356: invalid block [ 811.075506][T21378] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 811.079769][T21378] EXT4-fs (loop6): Remounting filesystem read-only [ 811.095773][T21378] EXT4-fs (loop6): 1 truncate cleaned up [ 811.102052][T21378] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 811.168008][T21375] netlink: 'syz.5.8355': attribute type 1 has an invalid length. [ 811.177488][T21375] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8355'. [ 811.262685][T21406] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8359'. [ 811.293028][T21408] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8360'. [ 811.328842][T21398] netlink: 'syz.3.8357': attribute type 31 has an invalid length. [ 811.377195][T21398] siw: device registration error -23 [ 811.521801][T21434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8364'. [ 811.567168][T21431] netlink: 'syz.1.8363': attribute type 1 has an invalid length. [ 811.682830][T21431] 8021q: adding VLAN 0 to HW filter on device bond3 [ 811.774526][T21434] SELinux: invalid class [ 811.783487][T21434] SELinux: failed to load policy [ 812.149509][ T6055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.231644][T21510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8367'. [ 812.356450][T21510] SELinux: invalid class [ 812.362020][T21510] SELinux: failed to load policy [ 812.384426][T21521] loop6: detected capacity change from 0 to 512 [ 812.461240][T21521] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 812.476184][T21521] ext4 filesystem being mounted at /496/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 813.659586][T21534] netlink: 'syz.1.8371': attribute type 31 has an invalid length. [ 813.686996][T21537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8372'. [ 814.005173][T21557] zero sized request [ 814.200350][ T6055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.293178][T21588] netlink: 'syz.6.8377': attribute type 1 has an invalid length. [ 814.316685][T21589] loop7: detected capacity change from 0 to 512 [ 814.333962][T21588] 8021q: adding VLAN 0 to HW filter on device bond12 [ 815.668715][T21664] SELinux: invalid class [ 815.917894][T21664] SELinux: failed to load policy [ 815.976919][T21701] loop7: detected capacity change from 0 to 1024 [ 816.109347][T21700] loop7: detected capacity change from 0 to 1024 [ 816.257556][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 816.257571][ T28] audit: type=1326 audit(2000000041.770:67538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21719 comm="syz.1.8388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61e0be0d9 code=0x7ffc0000 [ 816.291456][T21720] __nla_validate_parse: 1 callbacks suppressed [ 816.291472][T21720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8388'. [ 816.339377][T21718] loop7: detected capacity change from 0 to 512 [ 816.407732][ T28] audit: type=1326 audit(2000000041.810:67539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21719 comm="syz.1.8388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc61e0be0d9 code=0x7ffc0000 [ 816.558543][ T28] audit: type=1326 audit(2000000041.810:67540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21719 comm="syz.1.8388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61e0be0d9 code=0x7ffc0000 [ 816.608322][ T28] audit: type=1326 audit(2000000041.810:67541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21719 comm="syz.1.8388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc61e0be0d9 code=0x7ffc0000 [ 816.667513][ T28] audit: type=1326 audit(2000000041.810:67542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21719 comm="syz.1.8388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61e0be0d9 code=0x7ffc0000 [ 817.858859][T21761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8396'. [ 817.881295][ T28] audit: type=1326 audit(2000000041.810:67543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21719 comm="syz.1.8388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc61e0be0d9 code=0x7ffc0000 [ 818.203232][T21767] loop6: detected capacity change from 0 to 512 [ 818.238214][ T28] audit: type=1326 audit(2000000041.860:67544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21719 comm="syz.1.8388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61e0be0d9 code=0x7ffc0000 [ 818.270650][ T28] audit: type=1326 audit(2000000041.860:67545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21719 comm="syz.1.8388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61e0be0d9 code=0x7ffc0000 [ 818.296254][ T28] audit: type=1326 audit(2000000041.860:67546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21719 comm="syz.1.8388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc61e0be0d9 code=0x7ffc0000 [ 818.359540][T21767] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 818.422698][ T28] audit: type=1326 audit(2000000041.860:67547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21719 comm="syz.1.8388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61e0be0d9 code=0x7ffc0000 [ 818.459504][T21767] EXT4-fs error (device loop6): ext4_get_branch:178: inode #13: block 1024: comm syz.6.8398: invalid block [ 818.490889][T21786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8401'. [ 818.522648][T21767] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 818.526094][T21767] EXT4-fs (loop6): Remounting filesystem read-only [ 818.536809][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 818.536961][ C0] EXT4-fs (loop6): initial error at time 2000000044: ext4_get_branch:178: inode 13: block 1024 [ 818.537109][ C0] EXT4-fs (loop6): last error at time 2000000044: ext4_get_branch:178: inode 13: block 1024 [ 818.701390][T21767] EXT4-fs (loop6): 1 truncate cleaned up [ 818.714702][T21767] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 818.859046][T21797] EXT4-fs (loop6): shut down requested (2) [ 819.091948][ T6055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.174845][T21813] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8406'. [ 819.309142][T21820] zero sized request [ 819.415691][T21813] SELinux: invalid class [ 819.436170][T21813] SELinux: failed to load policy [ 819.518682][T21834] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8410'. [ 819.622450][T21836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8411'. [ 819.708138][T21851] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8413'. [ 819.748636][T21859] loop7: detected capacity change from 0 to 512 [ 819.764765][T21834] loop5: detected capacity change from 0 to 128 [ 819.773915][T21866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8415'. [ 819.873584][T21880] loop7: detected capacity change from 0 to 512 [ 819.918334][T21834] SELinux: invalid class [ 819.923962][T21834] SELinux: failed to load policy [ 820.303369][T21946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8424'. [ 820.430369][T21944] netlink: 'syz.1.8421': attribute type 31 has an invalid length. [ 820.574536][T21956] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8426'. [ 820.935080][T21946] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 820.984187][T21946] SELinux: failed to load policy [ 821.320307][T21970] loop5: detected capacity change from 0 to 128 [ 821.373103][T21983] zero sized request [ 821.552421][T21967] SELinux: invalid class [ 821.558100][T21967] SELinux: failed to load policy [ 821.564927][T21976] loop7: detected capacity change from 0 to 128 [ 821.572356][T21980] __nla_validate_parse: 4 callbacks suppressed [ 821.572374][T21980] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8435'. [ 821.637583][T21976] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 821.647213][T21976] SELinux: failed to load policy [ 821.988790][T21991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8435'. [ 823.447854][T22036] loop5: detected capacity change from 0 to 512 [ 823.487724][T22036] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 823.496120][T22036] EXT4-fs (loop5): 1 truncate cleaned up [ 823.502220][T22036] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 823.564425][T22036] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8441'. [ 823.691736][T22068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8443'. [ 824.315454][ T6196] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.393393][T22147] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8446'. [ 824.409378][T22150] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8448'. [ 824.529937][T22146] netlink: 'syz.3.8445': attribute type 31 has an invalid length. [ 824.580112][T22145] hub 7-0:1.0: USB hub found [ 824.586086][T22145] hub 7-0:1.0: 8 ports detected [ 824.586446][T22155] loop5: detected capacity change from 0 to 128 [ 824.600653][T22146] siw: device registration error -23 [ 824.635996][T22150] loop7: detected capacity change from 0 to 128 [ 825.168827][T22150] SELinux: invalid class [ 825.183741][T22150] SELinux: failed to load policy [ 825.200487][T22155] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 825.219569][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 825.219582][ T28] audit: type=1326 audit(2000000050.735:67580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22180 comm="syz.3.8453" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb088c0e0d9 code=0x7ffc0000 [ 825.251772][ T28] audit: type=1326 audit(2000000050.735:67581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22180 comm="syz.3.8453" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb088c0e0d9 code=0x7ffc0000 [ 825.280831][T22181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8453'. [ 825.339682][T22155] SELinux: failed to load policy [ 825.407524][ T28] audit: type=1326 audit(2000000050.805:67582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22180 comm="syz.3.8453" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb088c0e0d9 code=0x7ffc0000 [ 825.497445][ T28] audit: type=1326 audit(2000000050.805:67583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22180 comm="syz.3.8453" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb088c0e0d9 code=0x7ffc0000 [ 825.590656][ T28] audit: type=1326 audit(2000000050.805:67584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22180 comm="syz.3.8453" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb088c0e0d9 code=0x7ffc0000 [ 825.699822][ T28] audit: type=1326 audit(2000000050.805:67585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22180 comm="syz.3.8453" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb088c0e0d9 code=0x7ffc0000 [ 825.781545][T22195] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.8457'. [ 825.805110][T22189] zero sized request [ 825.836854][T22195] netlink: zone id is out of range [ 825.846196][ T28] audit: type=1326 audit(2000000050.805:67586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22180 comm="syz.3.8453" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb088c0e0d9 code=0x7ffc0000 [ 825.885026][T22195] netlink: zone id is out of range [ 825.895940][T22195] netlink: zone id is out of range [ 825.897864][T22202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8458'. [ 825.919025][T22195] netlink: zone id is out of range [ 825.924170][T22195] netlink: zone id is out of range [ 825.929300][T22195] netlink: zone id is out of range [ 825.934535][T22195] netlink: zone id is out of range [ 825.939687][T22195] netlink: zone id is out of range [ 825.944831][T22195] netlink: zone id is out of range [ 825.949956][T22195] netlink: zone id is out of range [ 825.957303][T22186] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8455'. [ 825.966395][ T28] audit: type=1326 audit(2000000050.805:67587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22180 comm="syz.3.8453" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb088c0e0d9 code=0x7ffc0000 [ 825.991958][ T28] audit: type=1326 audit(2000000050.805:67588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22180 comm="syz.3.8453" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb088c0e0d9 code=0x7ffc0000 [ 826.138014][ T28] audit: type=1326 audit(2000000050.875:67589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22180 comm="syz.3.8453" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb088c0e0d9 code=0x7ffc0000 [ 826.255938][T22204] SELinux: invalid class [ 826.261520][T22204] SELinux: failed to load policy [ 826.586027][T22270] loop6: detected capacity change from 0 to 256 [ 826.662614][T22271] SELinux: invalid class [ 826.668285][T22271] SELinux: failed to load policy [ 826.802786][T22270] netlink: 'syz.6.8467': attribute type 31 has an invalid length. [ 826.822167][T22284] loop5: detected capacity change from 0 to 512 [ 826.839068][T22284] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 826.852041][T22284] EXT4-fs (loop5): 1 truncate cleaned up [ 826.858527][T22284] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 826.881327][T22284] __nla_validate_parse: 2 callbacks suppressed [ 826.881342][T22284] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8469'. [ 826.897234][T22280] siw: device registration error -23 [ 826.915233][ T6196] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.040625][T22292] netlink: 'syz.3.8470': attribute type 31 has an invalid length. [ 827.051221][T22295] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8471'. [ 827.171716][T22293] siw: device registration error -23 [ 827.198721][T22306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8474'. [ 827.267782][T22314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8476'. [ 827.331352][T22319] netlink: 'syz.6.8475': attribute type 1 has an invalid length. [ 827.378120][T22319] 8021q: adding VLAN 0 to HW filter on device bond13 [ 827.435435][T22358] loop5: detected capacity change from 0 to 1024 [ 827.445895][T22358] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 827.461281][T22314] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 827.474092][T22314] SELinux: failed to load policy [ 827.480175][T22358] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 2: comm syz.5.8479: lblock 2 mapped to illegal pblock 2 (length 1) [ 827.494640][T22358] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 827.497329][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 827.512827][ C0] EXT4-fs (loop5): initial error at time 2000000053: ext4_map_blocks:791: inode 3: block 2 [ 827.522864][ C0] EXT4-fs (loop5): last error at time 2000000053: ext4_map_blocks:791: inode 3: block 2 [ 827.623699][T22358] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 48: comm syz.5.8479: lblock 0 mapped to illegal pblock 48 (length 1) [ 827.715151][T22358] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 827.715660][T22358] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.8479: Failed to acquire dquot type 0 [ 827.736021][T22358] loop5: lost filesystem error report for type 5 error -117 [ 827.736319][T22358] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 827.771130][T22358] loop5: lost filesystem error report for type 5 error -117 [ 827.771382][T22358] EXT4-fs error (device loop5): ext4_evict_inode:267: inode #11: comm syz.5.8479: mark_inode_dirty error [ 827.947880][T22358] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 827.948946][T22358] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 828.091951][T22380] loop6: detected capacity change from 0 to 256 [ 828.114874][T22358] EXT4-fs (loop5): 1 orphan inode deleted [ 828.187272][T19729] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 828.325532][T22380] netlink: 'syz.6.8485': attribute type 31 has an invalid length. [ 828.342022][T22358] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 828.377680][T22380] siw: device registration error -23 [ 828.466687][T19729] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 828.466911][T19729] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:15: Failed to release dquot type 0 [ 828.501664][T22392] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8487'. [ 828.847515][T22405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8489'. [ 829.245317][ T6196] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.254708][ T6196] EXT4-fs error (device loop5): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 829.267584][ T6196] loop5: lost filesystem error report for type 5 error -117 [ 829.267775][ T6196] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 829.284691][ T6196] loop5: lost filesystem error report for type 5 error -117 [ 829.284776][ T6196] EXT4-fs error (device loop5): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 829.303848][ T6196] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 829.366354][T22418] netlink: 'syz.6.8493': attribute type 1 has an invalid length. [ 829.398879][T22440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8494'. [ 829.419432][T22418] 8021q: adding VLAN 0 to HW filter on device bond14 [ 829.519870][T22466] zero sized request [ 829.554439][T22470] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.8499'. [ 829.694095][T22459] loop7: detected capacity change from 0 to 1024 [ 829.750348][T22459] EXT4-fs: inline encryption not supported [ 829.756247][T22459] EXT4-fs: Ignoring removed bh option [ 829.761696][T22459] EXT4-fs: inline encryption not supported [ 829.768573][T22485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8501'. [ 829.808982][T22440] SELinux: invalid class [ 829.815213][T22440] SELinux: failed to load policy [ 829.820233][T22487] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8502'. [ 830.071234][T22459] sctp: [Deprecated]: syz.7.8496 (pid 22459) Use of int in maxseg socket option. [ 830.071234][T22459] Use struct sctp_assoc_value instead [ 830.900213][T22552] netlink: 'syz.5.8510': attribute type 1 has an invalid length. [ 830.939345][T22552] 8021q: adding VLAN 0 to HW filter on device bond10 [ 831.032319][T22597] loop7: detected capacity change from 0 to 128 [ 831.123765][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 831.123783][ T28] audit: type=1400 audit(2000000056.628:67594): avc: denied { write } for pid=22587 comm="syz.1.8512" name="functions" dev="configfs" ino=8983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 831.192185][ T28] audit: type=1400 audit(2000000056.698:67595): avc: denied { listen } for pid=22587 comm="syz.1.8512" path=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 831.275954][T22597] SELinux: invalid class [ 831.282062][T22597] SELinux: failed to load policy [ 831.288773][T22606] loop5: detected capacity change from 0 to 256 [ 831.448249][T22606] netlink: 'syz.5.8515': attribute type 31 has an invalid length. [ 831.507205][T22606] siw: device registration error -23 [ 831.705125][T22621] erspan0: left allmulticast mode [ 831.710915][T22621] erspan0: left promiscuous mode [ 831.716251][T22621] bridge1: port 1(erspan0) entered disabled state [ 831.731300][T22619] loop6: detected capacity change from 0 to 128 [ 831.762463][T22621] bridge_slave_0: left allmulticast mode [ 831.769819][T22621] bridge_slave_0: left promiscuous mode [ 831.776397][T22621] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.790620][T22621] bridge_slave_1: left allmulticast mode [ 831.797218][T22621] bridge_slave_1: left promiscuous mode [ 831.802903][T22621] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.830725][T22619] SELinux: invalid class [ 831.837071][T22619] SELinux: failed to load policy [ 831.863456][T22621] bond0: (slave bond_slave_0): Releasing backup interface [ 831.877407][T22621] bond0: (slave bond_slave_1): Releasing backup interface [ 831.890077][T22621] team0: Port device team_slave_0 removed [ 831.899277][T22621] team0: Port device team_slave_1 removed [ 831.909727][T22621] net_ratelimit: 22 callbacks suppressed [ 831.909740][T22621] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 831.977384][T22650] loop7: detected capacity change from 0 to 256 [ 831.991520][T22647] netlink: 'syz.5.8525': attribute type 1 has an invalid length. [ 832.133993][T22647] 8021q: adding VLAN 0 to HW filter on device bond11 [ 832.165303][T22650] netlink: 'syz.7.8526': attribute type 31 has an invalid length. [ 833.767468][T22721] loop6: detected capacity change from 0 to 164 [ 833.937691][T22743] __nla_validate_parse: 2 callbacks suppressed [ 833.937710][T22743] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8540'. [ 834.106009][T22754] bridge_slave_0: default FDB implementation only supports local addresses [ 835.156882][T22772] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8548'. [ 835.345034][T22784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8551'. [ 835.657478][T22796] loop7: detected capacity change from 0 to 512 [ 836.305856][T22819] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8557'. [ 836.421170][T22822] loop7: detected capacity change from 0 to 2048 [ 836.529961][ T7735] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.698719][ T7735] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.763583][T22833] lo speed is unknown, defaulting to 1000 [ 836.924199][ T7735] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.959842][T22833] xfrm0 speed is unknown, defaulting to 1000 [ 837.935368][ T7735] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.009753][T22833] syzkaller0 speed is unknown, defaulting to 1000 [ 839.828479][ T7735] bridge_slave_1: left allmulticast mode [ 839.869443][ T7735] bridge_slave_1: left promiscuous mode [ 839.899439][ T7735] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.948463][T22946] loop6: detected capacity change from 0 to 256 [ 839.968002][T22948] loop5: detected capacity change from 0 to 512 [ 839.971200][ T7735] bridge_slave_0: left allmulticast mode [ 840.116696][T22946] netlink: 'syz.6.8582': attribute type 31 has an invalid length. [ 840.139731][T22948] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 840.201928][ T7735] bridge_slave_0: left promiscuous mode [ 840.207677][ T7735] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.230403][T22948] EXT4-fs (loop5): shut down requested (1) [ 840.238759][ T28] audit: type=1400 audit(2000000065.712:67596): avc: denied { write } for pid=22947 comm="syz.5.8581" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 840.260773][ T28] audit: type=1400 audit(2000000065.712:67597): avc: denied { create } for pid=22947 comm="syz.5.8581" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 840.304408][T22962] siw: device registration error -23 [ 840.366902][ T7735] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 840.394313][ T7735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 840.429539][ T6196] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 840.441771][ T28] audit: type=1400 audit(2000000065.952:67598): avc: denied { write } for pid=22932 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 840.479524][ T7735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 840.498162][ T7735] bond0 (unregistering): Released all slaves [ 840.510370][ T28] audit: type=1400 audit(2000000066.033:67599): avc: denied { write } for pid=22965 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 840.543912][ T7735] bond1 (unregistering): Released all slaves [ 840.558803][ T7735] bond2 (unregistering): Released all slaves [ 840.584170][ T7735] bond3 (unregistering): Released all slaves [ 840.612788][T22970] loop7: detected capacity change from 0 to 512 [ 840.629104][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 841.171068][T22833] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.232388][T22833] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.316997][T22833] bridge_slave_0: entered allmulticast mode [ 841.380107][T22833] bridge_slave_0: entered promiscuous mode [ 841.413982][ T7735] hsr_slave_0: left promiscuous mode [ 841.420575][ T7735] hsr_slave_1: left promiscuous mode [ 841.432599][ T7735] veth1_macvtap: left promiscuous mode [ 841.438232][ T7735] veth0_macvtap: left promiscuous mode [ 841.448759][ T7735] veth1_vlan: left promiscuous mode [ 841.468772][ T7735] veth0_vlan: left promiscuous mode [ 841.586106][T23102] netlink: 'syz.3.8594': attribute type 31 has an invalid length. [ 841.592662][ T28] audit: type=1400 audit(2000000067.113:67600): avc: denied { write } for pid=23027 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 841.719403][ T28] audit: type=1400 audit(2000000067.233:67601): avc: denied { write } for pid=23118 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 841.788689][ T7735] team0 (unregistering): Port device team_slave_1 removed [ 841.798790][ T7735] team0 (unregistering): Port device team_slave_0 removed [ 841.807105][T23110] siw: device registration error -23 [ 841.856464][T22833] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.864146][T22833] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.872372][T22833] bridge_slave_1: entered allmulticast mode [ 841.940132][T22833] bridge_slave_1: entered promiscuous mode [ 841.998693][T22833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 842.010571][T22833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 842.091869][T22833] team0: Port device team_slave_0 added [ 842.126474][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 842.252100][T23126] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8598'. [ 842.400518][T23161] netlink: 'syz.3.8599': attribute type 31 has an invalid length. [ 842.463081][T23162] siw: device registration error -23 [ 842.691890][T23177] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8604'. [ 842.728423][T22833] team0: Port device team_slave_1 added [ 842.746253][T22833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 842.753248][T22833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.779241][T22833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 842.944771][T22833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 842.952103][T22833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.978308][T22833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 843.696204][ T7735] IPVS: stop unused estimator thread 0... [ 843.805500][T22833] hsr_slave_0: entered promiscuous mode [ 843.812921][T22833] hsr_slave_1: entered promiscuous mode [ 843.823808][T22833] debugfs: 'hsr0' already exists in 'hsr' [ 843.829759][T22833] Cannot create hsr debugfs directory [ 843.877285][T23220] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8608'. [ 843.886985][ T28] audit: type=1326 audit(2000000069.304:67602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23214 comm="syz.7.8608" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d77ae0d9 code=0x7ffc0000 [ 843.966706][ T28] audit: type=1326 audit(2000000069.304:67603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23214 comm="syz.7.8608" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d77ae0d9 code=0x7ffc0000 [ 843.993062][ T28] audit: type=1326 audit(2000000069.404:67604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23214 comm="syz.7.8608" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f99d77ae0d9 code=0x7ffc0000 [ 844.037952][ T28] audit: type=1326 audit(2000000069.404:67605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23214 comm="syz.7.8608" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d77ae0d9 code=0x7ffc0000 [ 844.083922][ T7735] erspan0: left allmulticast mode [ 844.089646][ T7735] erspan0: left promiscuous mode [ 844.094865][ T7735] bridge0: port 3(erspan0) entered disabled state [ 844.102893][ T7735] bridge_slave_1: left allmulticast mode [ 844.109815][ T7735] bridge_slave_1: left promiscuous mode [ 844.121641][ T7735] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.144437][ T7735] bridge_slave_0: left allmulticast mode [ 844.150519][ T7735] bridge_slave_0: left promiscuous mode [ 844.156543][ T7735] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.165451][ T7735] dummy0: left allmulticast mode [ 844.170841][ T7735] dummy0: left promiscuous mode [ 844.177501][ T7735] bridge1: port 1(dummy0) entered disabled state [ 844.299796][ T7735] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 844.310004][ T7735] bridge0 (unregistering): left allmulticast mode [ 844.317745][T23325] netlink: 'syz.5.8614': attribute type 2 has an invalid length. [ 844.335078][ T7735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 844.344409][ T7735] bond_slave_0: left allmulticast mode [ 844.350807][ T7735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 844.360186][ T7735] bond_slave_1: left allmulticast mode [ 844.366432][ T7735] bond0 (unregistering): Released all slaves [ 844.375189][ T7735] bond1 (unregistering): Released all slaves [ 844.385113][ T7735] bond2 (unregistering): Released all slaves [ 844.393329][T23325] loop5: detected capacity change from 0 to 8192 [ 844.396669][ T7735] bond3 (unregistering): Released all slaves [ 844.413269][ T7735] bond4 (unregistering): Released all slaves [ 844.422928][ T7735] bond5 (unregistering): Released all slaves [ 844.432628][ T7735] bond6 (unregistering): Released all slaves [ 844.442838][ T7735] bond7 (unregistering): Released all slaves [ 844.452989][ T7735] bond8 (unregistering): Released all slaves [ 844.462564][ T7735] bond9 (unregistering): Released all slaves [ 844.473147][ T7735] bond10 (unregistering): Released all slaves [ 844.483374][ T7735] bond11 (unregistering): Released all slaves [ 844.493389][ T7735] bond12 (unregistering): Released all slaves [ 844.503725][ T7735] bond13 (unregistering): Released all slaves [ 844.514351][ T7735] bond14 (unregistering): Released all slaves [ 844.524171][ T7735] bond15 (unregistering): Released all slaves [ 844.547816][ T7735] bond16 (unregistering): Released all slaves [ 844.559911][ T7735] bond17 (unregistering): Released all slaves [ 844.573405][ T7735] bond18 (unregistering): Released all slaves [ 844.585675][T23334] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8615'. [ 844.596761][ T7735] bond19 (unregistering): Released all slaves [ 844.615143][ T7735] bond20 (unregistering): Released all slaves [ 844.637704][ T7735] bond21 (unregistering): Released all slaves [ 844.652802][ T7735] bond22 (unregistering): Released all slaves [ 844.669016][T23334] loop6: detected capacity change from 0 to 128 [ 844.679676][T23301] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8610'. [ 844.744594][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 844.798250][T23347] loop7: detected capacity change from 0 to 256 [ 844.816922][ T7735] tipc: Disabling bearer [ 844.823274][ T7735] tipc: Left network mode [ 844.839840][T23334] SELinux: invalid class [ 844.908939][T23334] SELinux: failed to load policy [ 844.976643][T23347] netlink: 'syz.7.8617': attribute type 31 has an invalid length. [ 844.996073][ T7735] hsr_slave_0: left promiscuous mode [ 845.001980][ T7735] hsr_slave_1: left promiscuous mode [ 845.045209][ T7735] veth1_macvtap: left promiscuous mode [ 845.065478][ T7735] veth0_macvtap: left promiscuous mode [ 845.078333][ T7735] veth1_vlan: left promiscuous mode [ 845.091805][ T7735] veth0_vlan: left promiscuous mode [ 845.181461][ T7735] team0 (unregistering): Port device team_slave_1 removed [ 845.201027][ T7735] team0 (unregistering): Port device team_slave_0 removed [ 845.247311][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 845.264783][T15107] infiniband syz1: ib_query_port failed (-19) [ 845.313633][T22833] netdevsim netdevsim8 netdevsim2 (unregistering): left promiscuous mode [ 845.336512][T22833] netdevsim netdevsim8 netdevsim2 (unregistering): left allmulticast mode [ 845.347140][T22833] team0: Port device netdevsim2 removed [ 845.387494][T23411] loop7: detected capacity change from 0 to 1024 [ 845.403124][T23411] EXT4-fs: Ignoring removed orlov option [ 845.409591][T23417] loop6: detected capacity change from 0 to 512 [ 845.447836][T23424] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8626'. [ 845.485386][T23424] loop7: detected capacity change from 0 to 128 [ 845.530224][T23417] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 845.558560][T23417] ext4 filesystem being mounted at /548/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 845.569854][T23424] SELinux: invalid class [ 845.574843][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 845.574858][ T28] audit: type=1400 audit(2000000071.065:67618): avc: denied { write } for pid=23416 comm="syz.6.8625" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 845.576913][T23424] SELinux: failed to load policy [ 845.586001][ T28] audit: type=1400 audit(2000000071.065:67619): avc: denied { write } for pid=23416 comm="syz.6.8625" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 845.746994][ T6055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 845.774097][T23456] netlink: 'syz.3.8630': attribute type 2 has an invalid length. [ 845.863799][T22833] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 845.880911][T22833] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 845.893826][ T7735] IPVS: stop unused estimator thread 0... [ 845.901792][T23478] loop7: detected capacity change from 0 to 256 [ 845.915595][T22833] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 845.973314][T22833] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 846.001498][T22833] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 846.038770][T22833] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 846.047792][T22833] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 846.059814][T23478] netlink: 'syz.7.8633': attribute type 31 has an invalid length. [ 846.070022][T23494] FAULT_INJECTION: forcing a failure. [ 846.070022][T23494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 846.074191][T22833] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 846.086046][T23494] CPU: 1 UID: 0 PID: 23494 Comm: syz.5.8635 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 846.086154][T23494] Tainted: [W]=WARN [ 846.086176][T23494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 846.086234][T23494] Call Trace: [ 846.086254][T23494] [ 846.086282][T23494] __dump_stack+0x1d/0x30 [ 846.086354][T23494] dump_stack_lvl+0x95/0xd0 [ 846.086428][T23494] dump_stack+0x15/0x1b [ 846.086542][T23494] should_fail_ex+0x25e/0x270 [ 846.086640][T23494] should_fail+0xb/0x20 [ 846.086722][T23494] should_fail_usercopy+0x1a/0x20 [ 846.086834][T23494] _copy_to_user+0x20/0xa0 [ 846.086975][T23494] simple_read_from_buffer+0xb5/0x130 [ 846.087066][T23494] proc_fail_nth_read+0x10e/0x150 [ 846.087213][T23494] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 846.087290][T23494] vfs_read+0x18e/0x7c0 [ 846.087367][T23494] ? __rcu_read_unlock+0x4e/0x70 [ 846.087402][T23494] ? __fget_files+0x184/0x1c0 [ 846.087428][T23494] ? mutex_lock+0x57/0x90 [ 846.087497][T23494] ksys_read+0xdc/0x1a0 [ 846.087562][T23494] __x64_sys_read+0x40/0x50 [ 846.087624][T23494] x64_sys_call+0x2886/0x3020 [ 846.087703][T23494] do_syscall_64+0x136/0x3c0 [ 846.087862][T23494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.087933][T23494] RIP: 0033:0x7fca1d4ce90e [ 846.088032][T23494] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 846.088093][T23494] RSP: 002b:00007fca1bf66fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 846.088162][T23494] RAX: ffffffffffffffda RBX: 00007fca1bf676c0 RCX: 00007fca1d4ce90e [ 846.088234][T23494] RDX: 000000000000000f RSI: 00007fca1bf670a0 RDI: 0000000000000004 [ 846.088287][T23494] RBP: 00007fca1bf67090 R08: 0000000000000000 R09: 0000000000000000 [ 846.088400][T23494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.088439][T23494] R13: 00007fca1d796038 R14: 00007fca1d795fa0 R15: 00007ffc5fad1928 [ 846.088506][T23494] [ 846.143245][T23499] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8636'. [ 846.456585][T23518] loop7: detected capacity change from 0 to 512 [ 846.464229][T23496] loop6: detected capacity change from 0 to 128 [ 846.474501][T23520] netlink: 2 bytes leftover after parsing attributes in process `syz.5.8640'. [ 846.586353][T22833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.601071][T22833] 8021q: adding VLAN 0 to HW filter on device team0 [ 846.619402][T19733] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.626510][T19733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 846.645733][T19748] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.652877][T19748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 846.677425][T22833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 846.689502][T22833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 846.730819][T23547] syzkaller0: entered promiscuous mode [ 846.742459][T23547] syzkaller0: entered allmulticast mode [ 846.946272][T23576] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8650'. [ 847.039781][T22833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 847.055567][T23574] netlink: 'syz.3.8649': attribute type 31 has an invalid length. [ 847.171188][T23574] siw: device registration error -23 [ 847.278789][T23584] loop7: detected capacity change from 0 to 128 [ 847.333623][T23607] loop6: detected capacity change from 0 to 256 [ 847.403274][T23617] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 847.443978][T23619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23619 comm=syz.3.8656 [ 847.524118][T23607] netlink: 'syz.6.8654': attribute type 31 has an invalid length. [ 847.540243][T23607] siw: device registration error -23 [ 847.543332][T23576] SELinux: invalid class [ 847.560576][T23576] SELinux: failed to load policy [ 847.639993][T22833] veth0_vlan: entered promiscuous mode [ 847.657844][T22833] veth1_vlan: entered promiscuous mode [ 847.664804][T23632] ip6t_srh: unknown srh invflags 4000 [ 847.685956][T23635] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8660'. [ 847.696083][T22833] veth0_macvtap: entered promiscuous mode [ 847.707756][T22833] veth1_macvtap: entered promiscuous mode [ 847.743634][T22833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 847.774320][T22833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 847.850248][T19733] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.881286][T19733] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.907436][T19748] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.932364][T19748] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.444959][T23667] loop6: detected capacity change from 0 to 128 [ 848.538158][T23681] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 848.548407][T23681] SELinux: failed to load policy [ 848.691780][T23675] SELinux: invalid class [ 848.697813][T23675] SELinux: failed to load policy [ 849.024903][T23685] loop5: detected capacity change from 0 to 2048 [ 849.060484][T23685] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 849.116620][T23685] netlink: 'syz.5.8672': attribute type 9 has an invalid length. [ 849.219543][T23704] netlink: 'syz.6.8676': attribute type 31 has an invalid length. [ 849.276175][T23704] siw: device registration error -23 [ 849.500860][T23707] netlink: 'syz.3.8677': attribute type 31 has an invalid length. [ 849.569695][T23707] siw: device registration error -23 [ 849.651899][ T6196] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.843737][T23730] netlink: 'syz.7.8683': attribute type 1 has an invalid length. [ 849.900665][T23737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8686'. [ 849.924840][T23730] 8021q: adding VLAN 0 to HW filter on device bond9 [ 849.989811][T23779] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8688'. [ 850.050524][ T28] audit: type=1326 audit(2000000075.577:67620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23780 comm="syz.6.8689" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac5d1e0d9 code=0x7ffc0000 [ 850.114154][ T28] audit: type=1326 audit(2000000075.587:67621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23780 comm="syz.6.8689" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac5d1e0d9 code=0x7ffc0000 [ 850.139932][ T28] audit: type=1326 audit(2000000075.587:67622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23780 comm="syz.6.8689" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac5d1e0d9 code=0x7ffc0000 [ 850.165486][ T28] audit: type=1326 audit(2000000075.587:67623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23780 comm="syz.6.8689" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f7ac5d1e0d9 code=0x7ffc0000 [ 850.169250][T23737] SELinux: invalid class [ 850.191028][ T28] audit: type=1326 audit(2000000075.587:67624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23780 comm="syz.6.8689" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac5d1e0d9 code=0x7ffc0000 [ 850.198821][T23737] SELinux: failed to load policy [ 850.224116][ T28] audit: type=1326 audit(2000000075.587:67625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23780 comm="syz.6.8689" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac5d1e0d9 code=0x7ffc0000 [ 850.239290][T23781] netlink: 'syz.6.8689': attribute type 10 has an invalid length. [ 850.259938][T23781] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.262830][ T28] audit: type=1326 audit(2000000075.587:67626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23780 comm="syz.6.8689" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac5d1e0d9 code=0x7ffc0000 [ 850.267476][T23781] bridge0: port 2(bridge_slave_1) entered listening state [ 850.299842][T23781] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.306918][T23781] bridge0: port 1(bridge_slave_0) entered listening state [ 850.324241][ T28] audit: type=1326 audit(2000000075.587:67627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23780 comm="syz.6.8689" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7ac5d1e0d9 code=0x7ffc0000 [ 850.366478][T23781] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 850.387573][T23785] tipc: Started in network mode [ 850.392482][T23785] tipc: Node identity 72ff758f75b3, cluster identity 4711 [ 850.418706][T23785] tipc: Enabled bearer , priority 0 [ 850.514437][T23824] set_capacity_and_notify: 1 callbacks suppressed [ 850.514452][T23824] loop5: detected capacity change from 0 to 256 [ 850.536328][T23829] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8699'. [ 850.587414][T23835] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8701'. [ 850.710348][T23832] netlink: 'syz.3.8700': attribute type 31 has an invalid length. [ 850.729416][T23832] siw: device registration error -23 [ 850.799978][T23824] siw: device registration error -23 [ 850.843419][T23835] loop7: detected capacity change from 0 to 128 [ 850.916248][T23835] SELinux: invalid class [ 850.922516][T23835] SELinux: failed to load policy [ 851.063367][T23872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8710'. [ 851.087509][T23876] tc_dump_action: action bad kind [ 851.099057][T23865] tipc: Started in network mode [ 851.103984][T23865] tipc: Node identity a6483924502, cluster identity 4711 [ 851.111087][T23865] tipc: Enabled bearer , priority 0 [ 851.136241][T23863] tipc: Disabling bearer [ 851.143433][T23886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8723'. [ 851.169032][T23872] loop5: detected capacity change from 0 to 128 [ 851.291429][T23872] SELinux: invalid class [ 851.295948][T23887] loop6: detected capacity change from 0 to 128 [ 851.298724][T23872] SELinux: failed to load policy [ 851.344202][T23886] SELinux: invalid class [ 851.373054][T23897] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8714'. [ 851.399312][T23901] loop8: detected capacity change from 0 to 256 [ 851.402352][T23886] SELinux: failed to load policy [ 851.453424][T23887] SELinux: invalid class [ 851.460289][T23887] SELinux: failed to load policy [ 851.564212][ T3383] tipc: Node number set to 122451343 [ 851.577930][T23901] validate_nla: 1 callbacks suppressed [ 851.577947][T23901] netlink: 'syz.8.8715': attribute type 31 has an invalid length. [ 851.626827][T23901] siw: device registration error -23 [ 851.645291][T23911] loop7: detected capacity change from 0 to 128 [ 851.664154][T23927] sctp: [Deprecated]: syz.6.8720 (pid 23927) Use of int in maxseg socket option. [ 851.664154][T23927] Use struct sctp_assoc_value instead [ 851.722952][T23938] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 851.732718][T23938] SELinux: failed to load policy [ 851.877441][T23943] netlink: 'syz.6.8721': attribute type 1 has an invalid length. [ 851.889473][T23943] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8721'. [ 851.957590][T23957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8727'. [ 852.199504][T23960] loop8: detected capacity change from 0 to 128 [ 852.206194][T23981] loop5: detected capacity change from 0 to 128 [ 852.246459][T23980] siw: device registration error -23 [ 852.248495][T23972] netlink: 'syz.6.8733': attribute type 1 has an invalid length. [ 852.342034][T23972] 8021q: adding VLAN 0 to HW filter on device bond15 [ 852.463552][T23976] SELinux: invalid class [ 852.469923][T23976] SELinux: failed to load policy [ 852.482133][T24044] loop6: detected capacity change from 0 to 1024 [ 852.490901][T24044] EXT4-fs: inline encryption not supported [ 852.497259][T24044] EXT4-fs: Ignoring removed bh option [ 852.502946][T24044] EXT4-fs: Ignoring removed mblk_io_submit option [ 852.526535][T24044] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 852.571515][T24044] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 852.631581][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 852.631600][ T28] audit: type=1400 audit(2000000078.159:67654): avc: denied { execute_no_trans } for pid=24042 comm="syz.6.8742" path="/578/file1/file2" dev="loop6" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 852.638028][T24051] loop8: detected capacity change from 0 to 128 [ 852.668640][T24044] IPVS: dh: FWM 3 0x00000003 - no destination available [ 852.675678][ C0] IPVS: dh: FWM 3 0x00000003 - no destination available [ 852.683323][T24044] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=94 sclass=netlink_tcpdiag_socket pid=24044 comm=syz.6.8742 [ 852.708999][T24044] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pid=24044 comm=syz.6.8742 [ 852.750997][T24051] SELinux: invalid class [ 852.756992][T24051] SELinux: failed to load policy [ 852.924060][T24067] SELinux: invalid class [ 852.945643][T24067] SELinux: failed to load policy [ 852.966949][ T6055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 853.000065][T24083] netlink: 'syz.6.8752': attribute type 1 has an invalid length. [ 853.024093][T24069] SELinux: invalid class [ 853.033215][T24069] SELinux: failed to load policy [ 853.058995][T24083] 8021q: adding VLAN 0 to HW filter on device bond16 [ 853.553612][T24130] __nla_validate_parse: 10 callbacks suppressed [ 853.553667][T24130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8755'. [ 854.233038][T24164] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8765'. [ 854.442660][T24167] netlink: 'syz.5.8766': attribute type 31 has an invalid length. [ 854.510982][T24167] siw: device registration error -23 [ 854.670546][T24153] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 854.773094][ T28] audit: type=1400 audit(2000000080.300:67655): avc: denied { write } for pid=24169 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 854.841957][ T28] audit: type=1400 audit(2000000080.370:67656): avc: denied { write } for pid=24184 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 855.116649][T24218] netlink: 'syz.5.8773': attribute type 1 has an invalid length. [ 855.145191][T24218] 8021q: adding VLAN 0 to HW filter on device bond12 [ 855.343850][T24203] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 855.353454][T24203] SELinux: failed to load policy [ 855.413829][T24283] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8781'. [ 855.423295][T24284] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8783'. [ 855.448317][T24276] syzkaller0: entered promiscuous mode [ 855.454114][T24276] syzkaller0: entered allmulticast mode [ 855.501640][T24276] syzkaller0: Caught tx_queue_len zero misconfig [ 855.608877][ T28] audit: type=1400 audit(2000000081.140:67657): avc: denied { write } for pid=24293 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 855.672759][ T28] audit: type=1400 audit(2000000081.200:67658): avc: denied { write } for pid=24321 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 855.756501][T24319] siw: device registration error -23 [ 855.764801][T24335] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8790'. [ 855.839802][T24342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8792'. [ 855.867158][T24348] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8793'. [ 855.876044][T24348] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8793'. [ 855.891681][T24348] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8793'. [ 855.947793][T24354] set_capacity_and_notify: 6 callbacks suppressed [ 855.947812][T24354] loop6: detected capacity change from 0 to 128 [ 855.994563][T24362] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8795'. [ 856.085844][T24342] SELinux: invalid class [ 856.092188][T24342] SELinux: failed to load policy [ 856.134835][T24335] SELinux: invalid class [ 856.141174][T24335] SELinux: failed to load policy [ 856.319081][T24383] loop6: detected capacity change from 0 to 256 [ 856.442705][T24387] lo speed is unknown, defaulting to 1000 [ 856.499246][ T7735] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.561897][T24387] xfrm0 speed is unknown, defaulting to 1000 [ 856.662745][T24387] syzkaller0 speed is unknown, defaulting to 1000 [ 856.669895][T24383] siw: device registration error -23 [ 856.734638][ T28] audit: type=1400 audit(2000000082.271:67659): avc: denied { write } for pid=24402 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 856.796901][ T28] audit: type=1400 audit(2000000082.331:67660): avc: denied { write } for pid=24456 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 856.826561][ T7735] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.827546][T24401] netlink: 'syz.5.8806': attribute type 1 has an invalid length. [ 856.887308][T24405] lo speed is unknown, defaulting to 1000 [ 856.944596][T24462] loop6: detected capacity change from 0 to 128 [ 857.032786][T24467] loop7: detected capacity change from 0 to 128 [ 857.049577][T24405] xfrm0 speed is unknown, defaulting to 1000 [ 857.070410][ T7735] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.118755][T24462] SELinux: invalid class [ 857.124711][T24462] SELinux: failed to load policy [ 857.157297][T24405] syzkaller0 speed is unknown, defaulting to 1000 [ 857.207834][ T7735] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.252142][ T28] audit: type=1400 audit(2000000082.781:67661): avc: denied { write } for pid=24474 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 857.367119][ T28] audit: type=1400 audit(2000000082.881:67662): avc: denied { write } for pid=24525 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 857.393580][ T7735] bridge_slave_1: left allmulticast mode [ 857.399303][ T7735] bridge_slave_1: left promiscuous mode [ 857.405077][ T7735] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.427381][ T7735] bridge_slave_0: left allmulticast mode [ 857.433060][ T7735] bridge_slave_0: left promiscuous mode [ 857.438695][ T7735] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.459938][T24467] SELinux: invalid class [ 857.474949][T24467] SELinux: failed to load policy [ 857.540400][ T7735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 857.558565][ T7735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 857.580245][ T7735] bond0 (unregistering): Released all slaves [ 857.660043][ T7735] tipc: Left network mode [ 857.667593][T24565] loop6: detected capacity change from 0 to 512 [ 857.816213][T24565] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 857.831388][T24580] SELinux: invalid class [ 857.837435][T24580] SELinux: failed to load policy [ 857.847401][ T7735] hsr_slave_0: left promiscuous mode [ 857.853377][T24565] EXT4-fs (loop6): 1 truncate cleaned up [ 857.859528][T24565] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 857.874472][ T7735] hsr_slave_1: left promiscuous mode [ 857.880119][ T7735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 857.887511][ T7735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 857.899299][ T28] audit: type=1400 audit(2000000083.341:67663): avc: denied { write } for pid=24606 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 857.929688][T24667] loop7: detected capacity change from 0 to 256 [ 857.938134][ T7735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 857.945735][ T7735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 857.974335][ T28] audit: type=1400 audit(2000000083.511:67664): avc: denied { write } for pid=24672 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 858.019492][T24565] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 13: comm syz.6.8826: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 858.039530][ T28] audit: type=1400 audit(2000000083.551:67665): avc: denied { write } for pid=24564 comm="syz.6.8826" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 858.061624][T24565] EXT4-fs (loop6): Remounting filesystem read-only [ 858.069372][ T7735] veth1_macvtap: left promiscuous mode [ 858.074894][ T7735] veth0_macvtap: left promiscuous mode [ 858.080463][ T7735] veth1_vlan: left promiscuous mode [ 858.085818][ T7735] veth0_vlan: left promiscuous mode [ 858.116946][T24667] netlink: 'syz.7.8831': attribute type 31 has an invalid length. [ 858.173563][T24678] EXT4-fs (loop6): shut down requested (2) [ 858.180119][ T28] audit: type=1400 audit(2000000083.711:67666): avc: denied { write } for pid=24564 comm="syz.6.8826" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 858.218096][T24685] loop5: detected capacity change from 0 to 256 [ 858.269251][ T7735] team0 (unregistering): Port device team_slave_1 removed [ 858.298281][ T7735] team0 (unregistering): Port device team_slave_0 removed [ 858.369794][T24405] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.377181][T24405] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.386737][T24405] bridge_slave_0: entered allmulticast mode [ 858.393664][T24405] bridge_slave_0: entered promiscuous mode [ 858.400793][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 858.444292][T24685] siw: device registration error -23 [ 858.471164][T24405] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.478879][T24405] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.486099][T24405] bridge_slave_1: entered allmulticast mode [ 858.492747][T24405] bridge_slave_1: entered promiscuous mode [ 858.510544][T24405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 858.528410][T24405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.590574][ T6055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 858.696803][T24734] loop6: detected capacity change from 0 to 512 syzkaller syzkaller login: [ 858.719616][T24405] team0: Port device team_slave_0 added [ 858.743921][T24405] team0: Port device team_slave_1 added [ 858.767112][T24734] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 858.814154][T24405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 858.826780][T24734] ext4 filesystem being mounted at /596/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 858.856512][T24405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.906150][ T28] audit: type=1400 audit(2000000084.432:67667): avc: denied { write } for pid=24733 comm="syz.6.8839" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 858.935162][T24405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 858.946363][ T28] audit: type=1400 audit(2000000084.432:67668): avc: denied { write } for pid=24733 comm="syz.6.8839" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 858.975287][T24405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 858.995956][T24405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.026027][T24405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.070511][ T6055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 859.081608][T24788] bond10: invalid ARP target 0.0.0.0 specified for addition [ 859.096085][T24788] bond10: option arp_ip_target: invalid value (0) [ 859.103677][T24788] bond10 (unregistering): Released all slaves [ 859.159924][ T28] audit: type=1400 audit(2000000084.692:67669): avc: denied { write } for pid=24769 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 859.220582][T24894] __nla_validate_parse: 9 callbacks suppressed [ 859.220672][T24894] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8846'. [ 859.231913][T24405] hsr_slave_0: entered promiscuous mode [ 859.250208][ T28] audit: type=1400 audit(2000000084.782:67670): avc: denied { write } for pid=24899 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 859.276026][T24405] hsr_slave_1: entered promiscuous mode [ 859.284765][T24405] debugfs: 'hsr0' already exists in 'hsr' [ 859.290557][T24405] Cannot create hsr debugfs directory [ 859.378148][T24894] loop6: detected capacity change from 0 to 128 [ 859.399079][T24902] netlink: 'syz.3.8847': attribute type 31 has an invalid length. [ 859.458500][T24902] siw: device registration error -23 [ 859.465244][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 859.618587][T24980] netlink: 'syz.6.8848': attribute type 1 has an invalid length. [ 859.678964][T25022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8852'. [ 859.693292][T24980] 8021q: adding VLAN 0 to HW filter on device bond17 [ 859.815057][ T28] audit: type=1400 audit(2000000085.342:67671): avc: denied { write } for pid=24988 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 859.890605][ T28] audit: type=1400 audit(2000000085.422:67672): avc: denied { write } for pid=25043 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 859.973654][ T3021] 8021q: adding VLAN 0 to HW filter on device eth26 [ 860.000405][T25052] loop6: detected capacity change from 0 to 512 [ 860.109550][T25052] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 860.126680][T25052] ext4 filesystem being mounted at /601/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 861.134681][T25098] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 861.269932][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8 [ 861.293911][ T6055] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.313430][T24405] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 861.355868][T24405] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 861.382634][T25112] netlink: 'syz.6.8858': attribute type 4 has an invalid length. [ 861.391908][T24405] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 861.427069][T24405] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 861.465086][T24405] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 861.495661][T24405] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 861.531791][T24405] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 861.578457][T24405] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 861.771258][T24405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 861.847186][T24405] 8021q: adding VLAN 0 to HW filter on device team0 [ 861.957352][T25146] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8863'. [ 861.966395][T25146] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8863'. [ 861.975382][T25146] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8863'. [ 861.996158][T24405] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 862.006537][T24405] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 862.025450][T19735] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.032561][T19735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 862.041284][T19735] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.048372][T19735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 862.237110][T25166] netlink: 'syz.3.8864': attribute type 1 has an invalid length. [ 862.307176][T25166] 8021q: adding VLAN 0 to HW filter on device bond10 [ 862.349008][T25169] loop5: detected capacity change from 0 to 128 [ 862.391524][T24405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 862.442901][T25218] sctp: [Deprecated]: syz.3.8866 (pid 25218) Use of struct sctp_assoc_value in delayed_ack socket option. [ 862.442901][T25218] Use struct sctp_sack_info instead [ 862.480947][T25169] SELinux: invalid class [ 862.486963][T25169] SELinux: failed to load policy [ 862.584047][T24405] veth0_vlan: entered promiscuous mode [ 862.596479][T24405] veth1_vlan: entered promiscuous mode [ 862.645221][T24405] veth0_macvtap: entered promiscuous mode [ 862.682397][T24405] veth1_macvtap: entered promiscuous mode [ 862.700449][T25242] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8870'. [ 862.722060][T24405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 862.735653][T24405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 862.794088][T19750] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.812804][T19750] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.870279][T19733] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.907990][T19733] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.019572][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 863.019590][ T28] audit: type=1400 audit(2000000088.554:67684): avc: denied { write } for pid=25247 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 863.056827][T25286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8878'. [ 863.149665][ T28] audit: type=1400 audit(2000000088.684:67685): avc: denied { write } for pid=25292 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 863.372484][T25300] loop5: detected capacity change from 0 to 128 [ 863.380026][T25286] loop0: detected capacity change from 0 to 128 [ 863.450622][T25316] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 863.461519][T25316] SELinux: failed to load policy [ 863.466564][T25317] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 863.478499][T25317] SELinux: failed to load policy [ 863.513390][T25287] lo speed is unknown, defaulting to 1000 [ 863.551845][ T28] audit: type=1400 audit(2000000089.094:67686): avc: denied { write } for pid=25299 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 863.590217][T25287] xfrm0 speed is unknown, defaulting to 1000 [ 863.627075][T25287] syzkaller0 speed is unknown, defaulting to 1000 [ 863.662965][ T28] audit: type=1400 audit(2000000089.204:67687): avc: denied { write } for pid=25326 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 864.121944][T25401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8883'. [ 864.279664][ T28] audit: type=1400 audit(2000000089.824:67688): avc: denied { write } for pid=25348 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 864.425097][ T28] audit: type=1400 audit(2000000089.964:67689): avc: denied { write } for pid=25408 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 865.132747][T25287] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.810143][T25287] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.851984][T25287] bridge_slave_0: entered allmulticast mode [ 865.940491][T25287] bridge_slave_0: entered promiscuous mode [ 865.958934][T25485] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8888'. [ 866.111772][T25287] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.132620][T25287] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.163208][ T28] audit: type=1400 audit(2000000091.705:67690): avc: denied { write } for pid=25427 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 866.187380][T25287] bridge_slave_1: entered allmulticast mode [ 866.213415][T25287] bridge_slave_1: entered promiscuous mode [ 866.306083][ T28] audit: type=1400 audit(2000000091.845:67691): avc: denied { write } for pid=25494 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 866.349443][T25287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.472480][T25287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 866.488795][T25489] loop5: detected capacity change from 0 to 128 [ 866.539605][T25287] team0: Port device team_slave_0 added [ 866.573257][T25287] team0: Port device team_slave_1 added [ 866.657939][T25485] SELinux: invalid class [ 866.664034][T25485] SELinux: failed to load policy [ 866.693596][T25287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 866.700576][T25287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.784337][T25287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 866.840208][T25287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.885669][T25287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.979272][ T28] audit: type=1400 audit(2000000092.526:67692): avc: denied { write } for pid=25519 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 867.013130][T25567] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8892'. [ 867.136875][T25287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 867.157167][ T28] audit: type=1400 audit(2000000092.576:67693): avc: denied { write } for pid=25568 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 867.250423][T25287] hsr_slave_0: entered promiscuous mode [ 867.257378][T25287] hsr_slave_1: entered promiscuous mode [ 867.278413][T25287] debugfs: 'hsr0' already exists in 'hsr' [ 867.301799][T25287] Cannot create hsr debugfs directory [ 867.349430][T25535] SELinux: invalid class [ 867.355679][T25535] SELinux: failed to load policy [ 867.463660][T25606] netlink: 'syz.0.8893': attribute type 1 has an invalid length. [ 867.471541][T25570] loop5: detected capacity change from 0 to 128 [ 867.496114][T25606] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 867.504588][ T3384] team_slave_0: entered promiscuous mode [ 867.510247][ T3384] team_slave_1: entered promiscuous mode [ 867.582653][T25657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8894'. [ 867.716143][T25287] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.791322][T25287] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.795716][T25680] loop0: detected capacity change from 0 to 512 [ 867.867514][T25567] SELinux: invalid class [ 867.873796][T25567] SELinux: failed to load policy [ 867.956522][T25287] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.968899][T25680] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 868.011693][T25680] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 868.039619][T25287] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.055844][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 868.055858][ T28] audit: type=1400 audit(2000000093.596:67696): avc: denied { write } for pid=25679 comm="syz.0.8896" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 868.140944][ T28] audit: type=1400 audit(2000000093.636:67697): avc: denied { write } for pid=25679 comm="syz.0.8896" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 868.269744][T24405] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 868.280991][T25730] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 868.297188][T25287] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 868.306454][T25287] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 868.314673][T25287] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 868.323447][T25287] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 868.331301][T25287] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 868.340030][T25287] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 868.348062][T25287] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 868.367451][T25287] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 868.408588][ T28] audit: type=1400 audit(2000000093.946:67698): avc: denied { write } for pid=25696 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 868.495435][ T28] audit: type=1400 audit(2000000094.006:67699): avc: denied { write } for pid=25755 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 868.555815][T25739] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8902'. [ 868.580550][T25287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.603809][T25287] 8021q: adding VLAN 0 to HW filter on device team0 [ 868.615717][ T7735] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.622846][ T7735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 868.636194][T19733] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.643321][T19733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 868.726663][T25781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8905'. [ 868.767481][ T28] audit: type=1400 audit(2000000094.307:67700): avc: denied { write } for pid=25757 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 868.852355][ T28] audit: type=1400 audit(2000000094.357:67701): avc: denied { write } for pid=25786 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 868.981605][T25287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 869.074412][T25781] loop0: detected capacity change from 0 to 128 [ 869.144242][ T28] audit: type=1400 audit(2000000094.667:67702): avc: denied { write } for pid=25795 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 869.702569][ T28] audit: type=1400 audit(2000000095.237:67703): avc: denied { write } for pid=25829 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 869.870186][T25287] veth0_vlan: entered promiscuous mode [ 869.879316][T25287] veth1_vlan: entered promiscuous mode [ 869.897348][T25287] veth0_macvtap: entered promiscuous mode [ 869.904729][T25287] veth1_macvtap: entered promiscuous mode [ 869.952606][T25287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 869.980842][T25287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 870.026842][T19752] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.037424][T19752] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.068277][T19731] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.085817][T19731] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.180302][T25850] FAULT_INJECTION: forcing a failure. [ 870.180302][T25850] name failslab, interval 1, probability 0, space 0, times 0 [ 870.212143][T25850] CPU: 1 UID: 0 PID: 25850 Comm: syz.7.8912 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 870.212186][T25850] Tainted: [W]=WARN [ 870.212238][T25850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 870.212256][T25850] Call Trace: [ 870.212264][T25850] [ 870.212272][T25850] __dump_stack+0x1d/0x30 [ 870.212416][T25850] dump_stack_lvl+0x95/0xd0 [ 870.212438][T25850] dump_stack+0x15/0x1b [ 870.212473][T25850] should_fail_ex+0x25e/0x270 [ 870.212531][T25850] ? __pfx_sock_alloc_inode+0x10/0x10 [ 870.212648][T25850] should_failslab+0x8c/0xb0 [ 870.212702][T25850] kmem_cache_alloc_lru_noprof+0x81/0x3d0 [ 870.212803][T25850] ? sock_alloc_inode+0x36/0xf0 [ 870.212829][T25850] ? sock_alloc_inode+0x36/0xf0 [ 870.212861][T25850] ? selinux_socket_create+0xfd/0x180 [ 870.212905][T25850] ? __pfx_sock_alloc_inode+0x10/0x10 [ 870.212983][T25850] sock_alloc_inode+0x36/0xf0 [ 870.213045][T25850] alloc_inode+0x40/0x170 [ 870.213191][T25850] __sock_create+0x121/0x580 [ 870.213241][T25850] ? perf_trace_sys_enter+0x263/0x2a0 [ 870.213330][T25850] __sys_socket+0xaf/0x180 [ 870.213385][T25850] __x64_sys_socket+0x3f/0x50 [ 870.213421][T25850] x64_sys_call+0x11fc/0x3020 [ 870.213446][T25850] do_syscall_64+0x136/0x3c0 [ 870.213591][T25850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.213627][T25850] RIP: 0033:0x7f99d77ae0d9 [ 870.213647][T25850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 870.213673][T25850] RSP: 002b:00007f99d6207028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 870.213700][T25850] RAX: ffffffffffffffda RBX: 00007f99d7a35fa0 RCX: 00007f99d77ae0d9 [ 870.213717][T25850] RDX: 0000000000000005 RSI: 0000000000000002 RDI: 000000000000002a [ 870.213730][T25850] RBP: 00007f99d6207090 R08: 0000000000000000 R09: 0000000000000000 [ 870.213812][T25850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 870.213829][T25850] R13: 00007f99d7a36038 R14: 00007f99d7a35fa0 R15: 00007ffd7a65e648 [ 870.213852][T25850] [ 870.213928][T25850] socket: no more sockets [ 870.488972][T25857] netlink: 'syz.3.8914': attribute type 32 has an invalid length. [ 870.552238][T25865] loop6: detected capacity change from 0 to 512 [ 870.619449][T25865] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 870.633013][T25865] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 870.649636][ T28] audit: type=1400 audit(2000000096.188:67704): avc: denied { write } for pid=25864 comm="syz.6.8915" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 870.732968][T25879] x_tables: duplicate underflow at hook 2 [ 870.820787][T25287] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 871.132244][T25897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8918'. [ 871.183365][T25895] loop7: detected capacity change from 0 to 512 [ 871.425283][T20676] syz_tun (unregistering): left allmulticast mode [ 871.492688][T25923] syzkaller0: entered promiscuous mode [ 871.504755][T25923] syzkaller0: entered allmulticast mode [ 871.515447][T25897] SELinux: invalid class [ 871.521824][T25897] SELinux: failed to load policy [ 871.543303][T25935] loop6: detected capacity change from 0 to 512 [ 871.547587][T25906] lo speed is unknown, defaulting to 1000 [ 871.569199][T25941] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8925'. [ 871.624414][T25935] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 871.637816][T25935] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 871.650990][ T28] audit: type=1400 audit(2000000097.168:67705): avc: denied { write } for pid=25934 comm="syz.6.8924" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 871.654639][T25906] xfrm0 speed is unknown, defaulting to 1000 [ 871.711700][T25906] syzkaller0 speed is unknown, defaulting to 1000 [ 871.732561][T25941] loop7: detected capacity change from 0 to 128 [ 871.794213][T26004] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 871.823920][T26006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8926'. [ 871.824419][T26004] SELinux: failed to load policy [ 871.852493][T19731] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.983265][T25906] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.996690][T25906] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.006596][T25906] bridge_slave_0: entered allmulticast mode [ 872.013277][T25906] bridge_slave_0: entered promiscuous mode [ 872.020682][T25906] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.027758][T25906] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.034955][T25906] bridge_slave_1: entered allmulticast mode [ 872.041514][T25906] bridge_slave_1: entered promiscuous mode [ 872.107156][T26077] xt_CT: You must specify a L4 protocol and not use inversions on it [ 872.168408][T25287] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 872.231717][T19731] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.364343][T25906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 872.395464][T26086] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8930'. [ 872.417289][T25906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 872.446637][T19731] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.563246][T19731] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.624158][T26086] loop7: detected capacity change from 0 to 128 [ 872.669579][T26086] SELinux: invalid class [ 872.675954][T26086] SELinux: failed to load policy [ 872.770637][T25906] team0: Port device team_slave_0 added [ 872.784184][T25906] team0: Port device team_slave_1 added [ 872.818369][T26118] loop0: detected capacity change from 0 to 2048 [ 872.834051][T25906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 872.841343][T25906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 873.065449][T26118] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 873.084338][T25906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 873.097719][T25906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 873.104689][T25906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 873.139831][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 873.139844][ T28] audit: type=1400 audit(2000000098.679:67707): avc: denied { write } for pid=26117 comm="syz.0.8932" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 873.172786][T26118] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 873.188491][T25906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 873.292531][ T28] audit: type=1400 audit(2000000098.789:67708): avc: denied { write } for pid=26147 comm="syz.0.8932" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 873.389115][T25906] hsr_slave_0: entered promiscuous mode [ 873.415593][T25906] hsr_slave_1: entered promiscuous mode [ 873.427584][ T28] audit: type=1400 audit(2000000098.809:67709): avc: denied { write } for pid=26148 comm="syz.0.8932" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 873.460284][T25906] debugfs: 'hsr0' already exists in 'hsr' [ 873.526970][T25906] Cannot create hsr debugfs directory [ 873.596280][ T28] audit: type=1400 audit(2000000098.809:67710): avc: denied { write } for pid=26148 comm="syz.0.8932" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 873.729458][ T28] audit: type=1400 audit(2000000098.899:67711): avc: denied { write } for pid=26165 comm="syz.0.8932" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 873.891043][T26225] FAULT_INJECTION: forcing a failure. [ 873.891043][T26225] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 873.927963][ T28] audit: type=1400 audit(2000000098.929:67712): avc: denied { write } for pid=26165 comm="syz.0.8932" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 873.973803][T26225] CPU: 0 UID: 0 PID: 26225 Comm: syz.7.8935 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 873.973835][T26225] Tainted: [W]=WARN [ 873.973842][T26225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 873.973857][T26225] Call Trace: [ 873.973863][T26225] [ 873.973871][T26225] __dump_stack+0x1d/0x30 [ 873.973920][T26225] dump_stack_lvl+0x95/0xd0 [ 873.973948][T26225] dump_stack+0x15/0x1b [ 873.973973][T26225] should_fail_ex+0x25e/0x270 [ 873.974029][T26225] should_fail_alloc_page+0xf2/0x100 [ 873.974064][T26225] __alloc_frozen_pages_noprof+0x108/0x350 [ 873.974106][T26225] alloc_pages_mpol+0xa9/0x1d0 [ 873.974188][T26225] alloc_pages_noprof+0x8f/0x140 [ 873.974227][T26225] pte_alloc_one+0x1c/0xc0 [ 873.974298][T26225] __pte_alloc+0x32/0x2a0 [ 873.974335][T26225] handle_mm_fault+0x22f6/0x2da0 [ 873.974444][T26225] ? lock_mm_and_find_vma+0x8b/0x3d0 [ 873.974525][T26225] do_user_addr_fault+0x402/0x1060 [ 873.974681][T26225] exc_page_fault+0x62/0xa0 [ 873.974707][T26225] asm_exc_page_fault+0x26/0x30 [ 873.974733][T26225] RIP: 0010:rep_movs_alternative+0xf/0xa0 [ 873.974763][T26225] Code: c4 10 e9 84 20 02 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 20 02 00 66 2e [ 873.974855][T26225] RSP: 0018:ffffc90002afbd88 EFLAGS: 00050202 [ 873.974878][T26225] RAX: ffff888101e12db0 RBX: 0000000000000004 RCX: 0000000000000004 [ 873.974895][T26225] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90002afbe40 [ 873.974908][T26225] RBP: 0000000000000029 R08: 0000000000000abf R09: 0000000000000000 [ 873.974921][T26225] R10: 0001c90002afbe40 R11: 0001c90002afbe43 R12: 0000000000000000 [ 873.974936][T26225] R13: ffffc90002afbe88 R14: ffffc90002afbe40 R15: 0000000000000000 [ 873.974975][T26225] _copy_from_user+0x6f/0xb0 [ 873.975032][T26225] do_sock_getsockopt+0x122/0x570 [ 873.975095][T26225] ? vfs_write+0x848/0x990 [ 873.975164][T26225] __x64_sys_getsockopt+0x11d/0x1a0 [ 873.975186][T26225] x64_sys_call+0x2dcf/0x3020 [ 873.975208][T26225] do_syscall_64+0x136/0x3c0 [ 873.975252][T26225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.975321][T26225] RIP: 0033:0x7f99d77ae0d9 [ 873.975340][T26225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 873.975412][T26225] RSP: 002b:00007f99d6207028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 873.975431][T26225] RAX: ffffffffffffffda RBX: 00007f99d7a35fa0 RCX: 00007f99d77ae0d9 [ 873.975447][T26225] RDX: 0000000000000024 RSI: 0000000000000029 RDI: 0000000000000003 [ 873.975458][T26225] RBP: 00007f99d6207090 R08: 0000000000000000 R09: 0000000000000000 [ 873.975496][T26225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 873.975511][T26225] R13: 00007f99d7a36038 R14: 00007f99d7a35fa0 R15: 00007ffd7a65e648 [ 873.975536][T26225] [ 874.261131][ T28] audit: type=1400 audit(2000000098.959:67713): avc: denied { write } for pid=26174 comm="syz.0.8932" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 874.306733][ T28] audit: type=1400 audit(2000000098.999:67714): avc: denied { write } for pid=26174 comm="syz.0.8932" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 874.541912][ T28] audit: type=1400 audit(2000000099.129:67715): avc: denied { write } for pid=26184 comm="syz.0.8932" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 874.584265][T26258] netlink: 'syz.3.8937': attribute type 31 has an invalid length. [ 874.716667][T26264] siw: device registration error -23 [ 874.761560][T26269] loop7: detected capacity change from 0 to 256 [ 874.775783][ T28] audit: type=1400 audit(2000000099.129:67716): avc: denied { write } for pid=26184 comm="syz.0.8932" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 874.967579][T19731] bridge_slave_1: left allmulticast mode [ 874.989861][T19731] bridge_slave_1: left promiscuous mode [ 875.011771][T26279] netlink: 'syz.7.8938': attribute type 31 has an invalid length. [ 875.014886][T19731] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.044674][T19731] bridge_slave_0: left allmulticast mode [ 875.051461][T19731] bridge_slave_0: left promiscuous mode [ 875.127397][T19731] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.165576][T26165] EXT4-fs (loop0): Delayed block allocation failed for inode 21 at logical offset 0 with max blocks 3 with error 28 [ 875.182496][T26165] EXT4-fs (loop0): This should not happen!! Data will be lost [ 875.182496][T26165] [ 875.193138][T26165] EXT4-fs (loop0): Total free blocks count 0 [ 875.202594][T26174] EXT4-fs (loop0): Delayed block allocation failed for inode 22 at logical offset 0 with max blocks 3 with error 28 [ 875.215683][T26165] EXT4-fs (loop0): Free/Dirty block details [ 875.221654][T26174] EXT4-fs (loop0): This should not happen!! Data will be lost [ 875.221654][T26174] [ 875.231662][T26165] EXT4-fs (loop0): free_blocks=2415919504 [ 875.237644][T26165] EXT4-fs (loop0): dirty_blocks=9232 [ 875.242997][T26174] EXT4-fs (loop0): Total free blocks count 0 [ 875.319744][ T7735] smc: removing ib device syz0 [ 875.350021][T19731] bond1 (unregistering): (slave gretap1): Releasing active interface [ 875.385915][T19731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 875.397013][T19731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 875.406813][T19731] bond0 (unregistering): Released all slaves [ 875.416403][T19731] bond1 (unregistering): Released all slaves [ 875.427915][T19731] bond2 (unregistering): Released all slaves [ 875.439792][T19731] bond3 (unregistering): Released all slaves [ 875.451429][T19731] bond4 (unregistering): Released all slaves [ 875.463739][T19731] bond5 (unregistering): Released all slaves [ 875.477693][T19731] bond6 (unregistering): Released all slaves [ 875.492936][T19731] bond7 (unregistering): Released all slaves [ 875.506914][T19731] bond8 (unregistering): Released all slaves [ 875.520149][T19731] bond9 (unregistering): Released all slaves [ 875.532024][T19731] bond10 (unregistering): Released all slaves [ 875.544368][T19731] bond11 (unregistering): Released all slaves [ 875.557215][T19731] bond12 (unregistering): Released all slaves [ 875.579351][T15104] xfrm0 speed is unknown, defaulting to 1000 [ 875.638368][T15104] syz0: Port: 1 Link DOWN [ 875.672091][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 875.793679][T26329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8947'. [ 876.071213][T26329] SELinux: invalid class [ 876.077410][T26329] SELinux: failed to load policy [ 877.126755][T19731] tipc: Disabling bearer [ 877.133442][T19731] tipc: Left network mode [ 877.137830][T26354] lo speed is unknown, defaulting to 1000 [ 877.176387][T25906] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 877.206294][T25906] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 877.236072][T25906] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 877.252182][T26424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8954'. [ 877.265286][T25906] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 877.273431][T26354] syzkaller0 speed is unknown, defaulting to 1000 [ 877.379171][T19731] hsr_slave_0: left promiscuous mode [ 877.387810][T19731] hsr_slave_1: left promiscuous mode [ 877.410888][T19731] veth0_macvtap: left promiscuous mode [ 877.416432][T19731] veth1_vlan: left promiscuous mode [ 877.421770][T19731] veth0_vlan: left promiscuous mode [ 877.579277][T19731] team0 (unregistering): Port device team_slave_1 removed [ 877.589861][T19731] team0 (unregistering): Port device team_slave_0 removed [ 877.661487][T25906] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 877.692651][T25906] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 877.708235][T26446] FAULT_INJECTION: forcing a failure. [ 877.708235][T26446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 877.727267][T25906] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 877.749904][T26446] CPU: 0 UID: 0 PID: 26446 Comm: syz.7.8955 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 877.749933][T26446] Tainted: [W]=WARN [ 877.749940][T26446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 877.750020][T26446] Call Trace: [ 877.750026][T26446] [ 877.750033][T26446] __dump_stack+0x1d/0x30 [ 877.750057][T26446] dump_stack_lvl+0x95/0xd0 [ 877.750083][T26446] dump_stack+0x15/0x1b [ 877.750106][T26446] should_fail_ex+0x25e/0x270 [ 877.750188][T26446] should_fail+0xb/0x20 [ 877.750212][T26446] should_fail_usercopy+0x1a/0x20 [ 877.750260][T26446] _copy_from_user+0x1c/0xb0 [ 877.750279][T26446] do_sock_getsockopt+0x122/0x570 [ 877.750329][T26446] ? vfs_write+0x848/0x990 [ 877.750353][T26446] __x64_sys_getsockopt+0x11d/0x1a0 [ 877.750375][T26446] x64_sys_call+0x2dcf/0x3020 [ 877.750457][T26446] do_syscall_64+0x136/0x3c0 [ 877.750487][T26446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.750508][T26446] RIP: 0033:0x7f99d77ae0d9 [ 877.750525][T26446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 877.750548][T26446] RSP: 002b:00007f99d6207028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 877.750580][T26446] RAX: ffffffffffffffda RBX: 00007f99d7a35fa0 RCX: 00007f99d77ae0d9 [ 877.750593][T26446] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000007 [ 877.750605][T26446] RBP: 00007f99d6207090 R08: 0000200000001040 R09: 0000000000000000 [ 877.750617][T26446] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 877.750629][T26446] R13: 00007f99d7a36038 R14: 00007f99d7a35fa0 R15: 00007ffd7a65e648 [ 877.750650][T26446] [ 877.751197][T25906] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 878.007542][T26481] loop6: detected capacity change from 0 to 512 [ 878.034634][T25906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 878.052474][T25906] 8021q: adding VLAN 0 to HW filter on device team0 [ 878.059254][T26496] loop7: detected capacity change from 0 to 512 [ 878.067322][T28846] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.074441][T28846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 878.114897][ T7735] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.122008][ T7735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 878.131029][T26481] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 878.154535][T26481] EXT4-fs (loop6): 1 truncate cleaned up [ 878.160758][T26481] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 878.190962][T26481] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 13: comm syz.6.8957: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 878.195868][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 878.195915][ T28] audit: type=1400 audit(2000000103.731:67781): avc: denied { write } for pid=26478 comm="syz.6.8957" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 878.212035][T26481] EXT4-fs (loop6): Remounting filesystem read-only [ 878.242297][T25906] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 878.256671][T25906] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 878.282438][T26354] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.289517][T26354] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.296775][T26354] bridge_slave_0: entered allmulticast mode [ 878.303286][T26354] bridge_slave_0: entered promiscuous mode [ 878.312052][T26354] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.319124][T26354] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.326295][T26354] bridge_slave_1: entered allmulticast mode [ 878.332790][T26354] bridge_slave_1: entered promiscuous mode [ 878.352845][T26354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 878.363713][T26354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 878.389391][T26354] team0: Port device team_slave_0 added [ 878.397103][T26354] team0: Port device team_slave_1 added [ 878.423393][T19731] IPVS: stop unused estimator thread 0... [ 878.429746][T26354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 878.443326][T26354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 878.447534][T26543] EXT4-fs (loop6): shut down requested (2) [ 878.477971][ T28] audit: type=1400 audit(2000000104.021:67782): avc: denied { write } for pid=26478 comm="syz.6.8957" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 878.501358][T26354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 878.533498][T26354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 878.542577][T26354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 878.570503][T26354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 878.615547][T26354] hsr_slave_0: entered promiscuous mode [ 878.622005][T26354] hsr_slave_1: entered promiscuous mode [ 878.627996][T26354] debugfs: 'hsr0' already exists in 'hsr' [ 878.637203][T26354] Cannot create hsr debugfs directory [ 878.659736][T25906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 878.723678][T19731] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.777505][T19731] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.831529][T25287] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 878.845824][T19731] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.861696][ T28] audit: type=1400 audit(2000000104.402:67783): avc: denied { write } for pid=26720 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 878.926713][T19731] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.956008][T25906] veth0_vlan: entered promiscuous mode [ 878.980662][T25906] veth1_vlan: entered promiscuous mode [ 878.999132][ T28] audit: type=1400 audit(2000000104.542:67784): avc: denied { write } for pid=26754 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 879.134881][T25906] veth0_macvtap: entered promiscuous mode [ 879.346431][T25906] veth1_macvtap: entered promiscuous mode [ 879.367580][T26784] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8964'. [ 879.453949][T26354] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 879.497133][T26354] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 879.528470][T25906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 879.558678][T26354] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 879.567897][T26354] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 879.575640][T26354] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 879.591221][T26784] loop7: detected capacity change from 0 to 128 [ 879.595850][T26354] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 879.621575][T19731] bridge_slave_1: left allmulticast mode [ 879.627347][T19731] bridge_slave_1: left promiscuous mode [ 879.633064][T19731] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.684887][T26784] SELinux: invalid class [ 879.691209][T26784] SELinux: failed to load policy [ 879.696243][ T28] audit: type=1400 audit(2000000105.222:67785): avc: denied { write } for pid=26792 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 879.719618][T19731] bridge_slave_0: left allmulticast mode [ 879.725331][T19731] bridge_slave_0: left promiscuous mode [ 879.758238][ T28] audit: type=1400 audit(2000000105.262:67786): avc: denied { write } for pid=26815 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 879.780742][T19731] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.882257][T19731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 879.893157][T19731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 879.903045][T19731] bond0 (unregistering): Released all slaves [ 879.903085][ T28] audit: type=1400 audit(2000000105.402:67787): avc: denied { write } for pid=26820 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 879.934078][T26354] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 879.942981][T26354] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 879.953027][ T28] audit: type=1400 audit(2000000105.482:67788): avc: denied { write } for pid=26838 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 879.978634][T19733] Bluetooth: hci0: Frame reassembly failed (-84) [ 880.010327][T25906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 880.032210][T26819] lo speed is unknown, defaulting to 1000 [ 880.041359][T28846] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.111840][T26819] syzkaller0 speed is unknown, defaulting to 1000 [ 880.112286][T19752] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.158106][T19752] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.197143][T26871] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8970'. [ 880.215721][ T28] audit: type=1400 audit(2000000105.762:67789): avc: denied { write } for pid=26853 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 880.293447][ T28] audit: type=1400 audit(2000000105.832:67790): avc: denied { write } for pid=26880 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 880.318788][T26871] loop6: detected capacity change from 0 to 128 [ 880.369811][T26871] SELinux: invalid class [ 880.375839][T26871] SELinux: failed to load policy [ 880.391453][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 880.398597][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 880.409640][T19731] hsr_slave_0: left promiscuous mode [ 880.415912][T19731] hsr_slave_1: left promiscuous mode [ 880.422428][T19731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 880.429940][T19731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 880.437817][T19731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 880.445401][T19731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 880.466583][T19731] veth1_macvtap: left promiscuous mode [ 880.472977][T19731] veth0_macvtap: left promiscuous mode [ 880.478708][T19731] veth1_vlan: left promiscuous mode [ 880.485416][T19731] veth0_vlan: left promiscuous mode [ 880.588041][T19731] team0 (unregistering): Port device team_slave_1 removed [ 880.599347][T19731] team0 (unregistering): Port device team_slave_0 removed [ 880.643697][T26885] netlink: 112 bytes leftover after parsing attributes in process `syz.5.8969'. [ 880.668122][T26354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 880.688354][T26354] 8021q: adding VLAN 0 to HW filter on device team0 [ 880.706224][T28846] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.713408][T28846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 880.734140][T19748] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.741260][T19748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 880.765408][T26354] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 880.783252][T26354] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 880.813189][T19752] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.723359][T26985] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8977'. [ 881.736952][T26354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 881.843529][T27005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8980'. [ 881.934900][T26354] veth0_vlan: entered promiscuous mode [ 881.953490][T26354] veth1_vlan: entered promiscuous mode [ 881.984905][T26354] veth0_macvtap: entered promiscuous mode [ 881.991319][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 881.997440][T26844] Bluetooth: hci0: command 0x1003 tx timeout [ 882.018234][T26354] veth1_macvtap: entered promiscuous mode [ 882.031161][T27026] loop5: detected capacity change from 0 to 128 [ 882.040047][T26354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 882.050883][T26354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 882.062441][T19752] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.072567][T19752] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.096025][T27005] SELinux: invalid class [ 882.102214][T27005] SELinux: failed to load policy [ 882.154705][T19752] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.166025][T27041] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 882.172617][T19752] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.184606][T27041] SELinux: failed to load policy [ 882.679034][T27117] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8991'. [ 882.726568][T27123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8990'. [ 882.795452][T27138] : renamed from bond_slave_0 [ 883.044342][T27173] loop5: detected capacity change from 0 to 512 [ 883.060816][T27180] bond0: entered promiscuous mode [ 883.080143][T27180] bond_slave_0: entered promiscuous mode [ 883.104643][T27180] bond_slave_1: entered promiscuous mode [ 883.124945][T27180] batadv_slave_0: entered promiscuous mode [ 883.181709][T27180] batadv_slave_0: left promiscuous mode [ 883.247039][T27180] bond0: left promiscuous mode [ 883.274581][T27173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 883.292739][T27180] bond_slave_0: left promiscuous mode [ 883.309585][T27204] netlink: 'syz.3.9000': attribute type 31 has an invalid length. [ 883.326413][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 883.326430][ T28] audit: type=1400 audit(2000000108.874:67814): avc: denied { write } for pid=27188 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 883.340414][T27173] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 883.367979][T27180] bond_slave_1: left promiscuous mode [ 883.411882][ T28] audit: type=1400 audit(2000000108.944:67815): avc: denied { write } for pid=27172 comm="syz.5.8998" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 883.435373][T27204] siw: device registration error -23 [ 883.471353][ T28] audit: type=1400 audit(2000000108.944:67816): avc: denied { write } for pid=27172 comm="syz.5.8998" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 883.520999][T27225] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9003'. [ 883.566810][ T28] audit: type=1400 audit(2000000108.994:67817): avc: denied { write } for pid=27216 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 883.666493][ T28] audit: type=1400 audit(2000000109.184:67818): avc: denied { map } for pid=27234 comm="syz.6.9005" path="socket:[122982]" dev="sockfs" ino=122982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 883.726687][T25906] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 883.755362][ T28] audit: type=1400 audit(2000000109.274:67819): avc: denied { write } for pid=27219 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 883.888841][ T28] audit: type=1400 audit(2000000109.354:67820): avc: denied { write } for pid=27257 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 884.366760][T27277] loop7: detected capacity change from 0 to 512 [ 884.410997][T27277] EXT4-fs: Ignoring removed nomblk_io_submit option [ 885.828789][T27277] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 885.848606][T27328] syz_tun: entered allmulticast mode [ 885.855162][T27328] netlink: 196 bytes leftover after parsing attributes in process `syz.6.9013'. [ 886.011072][T27277] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01c, mo2=0102] [ 886.035776][T27277] EXT4-fs (loop7): write access unavailable, skipping orphan cleanup [ 886.875279][T27277] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 886.948901][ T28] audit: type=1400 audit(2000000112.506:67821): avc: denied { write } for pid=27266 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 887.026419][T27348] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9013'. [ 887.221843][T27277] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.9011: dx entry: limit 65535 != root limit 120 [ 887.261090][ T28] audit: type=1400 audit(2000000112.796:67822): avc: denied { write } for pid=27345 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 887.286933][T27322] syz_tun: left allmulticast mode [ 887.320657][T27354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9019'. [ 887.334526][T27277] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.9011: Corrupt directory, running e2fsck is recommended [ 887.446470][ T9155] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 887.456614][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 887.541993][T27362] loop6: detected capacity change from 0 to 256 [ 887.650891][T27354] loop5: detected capacity change from 0 to 128 [ 887.696014][ T28] audit: type=1326 audit(2000000113.236:67823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27369 comm="syz.7.9021" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d77ae0d9 code=0x7ffc0000 [ 887.775305][T27371] netlink: 'syz.6.9022': attribute type 31 has an invalid length. [ 887.911053][T27371] siw: device registration error -23 [ 887.957398][T27354] SELinux: invalid class [ 887.963450][T27354] SELinux: failed to load policy [ 887.972635][T27385] loop7: detected capacity change from 0 to 4096 [ 888.054480][T27370] loop7: detected capacity change from 0 to 764 [ 888.064088][T27391] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 888.083644][T27391] SELinux: failed to load policy [ 888.119161][T27370] rock: directory entry would overflow storage [ 888.125356][T27370] rock: sig=0x5245, size=8, remaining=5 [ 888.153660][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 888.257618][T27418] usbip-vudc usbip-vudc.0: gadget not bound [ 888.325286][ T3021] 8021q: adding VLAN 0 to HW filter on device eth11 [ 888.331930][ T28] kauditd_printk_skb: 122 callbacks suppressed [ 888.331947][ T28] audit: type=1326 audit(2000000113.876:67946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27409 comm="syz.5.9027" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f269fe7e90e code=0x7ffc0000 [ 888.360578][T27428] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9028'. [ 888.384316][ T28] audit: type=1326 audit(2000000113.906:67947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27409 comm="syz.5.9027" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f269fe7e90e code=0x7ffc0000 [ 888.477088][ T28] audit: type=1326 audit(2000000113.906:67948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27409 comm="syz.5.9027" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f269fe7e90e code=0x7ffc0000 [ 888.525326][ T28] audit: type=1326 audit(2000000113.906:67949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27409 comm="syz.5.9027" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f269fe7e90e code=0x7ffc0000 [ 888.552664][T27449] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9030'. [ 888.566610][ T28] audit: type=1326 audit(2000000113.906:67950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27409 comm="syz.5.9027" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f269fe7e90e code=0x7ffc0000 [ 888.641479][ T28] audit: type=1326 audit(2000000113.906:67951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27409 comm="syz.5.9027" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f269fe7e90e code=0x7ffc0000 [ 888.667202][ T28] audit: type=1326 audit(2000000113.906:67952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27409 comm="syz.5.9027" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f269fe7e90e code=0x7ffc0000 [ 888.692803][ T28] audit: type=1326 audit(2000000113.906:67953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27409 comm="syz.5.9027" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f269fe7e90e code=0x7ffc0000 [ 888.721373][ T28] audit: type=1326 audit(2000000113.906:67954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27409 comm="syz.5.9027" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f269fe7e90e code=0x7ffc0000 [ 888.746972][ T28] audit: type=1326 audit(2000000113.906:67955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27409 comm="syz.5.9027" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f269fe7e90e code=0x7ffc0000 [ 888.793953][ T3021] 8021q: adding VLAN 0 to HW filter on device eth12 [ 888.883469][T27471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.891947][T27471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.936454][T27477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9036'. [ 889.216089][T27482] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 889.226266][T27482] SELinux: failed to load policy [ 889.363746][T27500] loop7: detected capacity change from 0 to 512 [ 889.445643][T27501] netlink: 'syz.4.9042': attribute type 31 has an invalid length. [ 889.579082][T27511] ip_tables: iptables: counters copy to user failed while replacing table [ 889.592023][T27501] siw: device registration error -23 [ 889.598595][T27509] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 889.632322][T27497] ================================================================== [ 889.640434][T27497] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 889.648248][T27497] [ 889.650567][T27497] write to 0xffffea0005655dd8 of 8 bytes by task 27380 on cpu 1: [ 889.658281][T27497] __filemap_remove_folio+0x201/0x2e0 [ 889.663670][T27497] filemap_remove_folio+0x6d/0x1d0 [ 889.668786][T27497] truncate_inode_folio+0x42/0x50 [ 889.673811][T27497] shmem_undo_range+0x27f/0xb60 [ 889.678658][T27497] shmem_evict_inode+0x132/0x520 [ 889.683597][T27497] evict+0x2a5/0x510 [ 889.687485][T27497] iput+0x430/0x5a0 [ 889.691287][T27497] dentry_unlink_inode+0x24a/0x260 [ 889.696397][T27497] dentry_kill+0x184/0x500 [ 889.700822][T27497] finish_dput+0x16/0x1d0 [ 889.705154][T27497] dput+0x48/0x50 [ 889.708784][T27497] __fput+0x43e/0x630 [ 889.712769][T27497] ____fput+0x1c/0x30 [ 889.716774][T27497] task_work_run+0x130/0x1a0 [ 889.721391][T27497] do_exit+0x4a4/0x1500 [ 889.725545][T27497] do_group_exit+0xfe/0x140 [ 889.730044][T27497] get_signal+0xe07/0xf10 [ 889.734376][T27497] arch_do_signal_or_restart+0x96/0x480 [ 889.739927][T27497] irqentry_exit+0x14d/0x610 [ 889.744519][T27497] asm_exc_page_fault+0x26/0x30 [ 889.749360][T27497] [ 889.751672][T27497] read to 0xffffea0005655dd8 of 8 bytes by task 27497 on cpu 0: [ 889.759293][T27497] folio_mapping+0xa1/0xe0 [ 889.763706][T27497] evict_folios+0xdc7/0x2d60 [ 889.768303][T27497] try_to_shrink_lruvec+0x74d/0x8b0 [ 889.773497][T27497] shrink_lruvec+0x25e/0x1b60 [ 889.778188][T27497] shrink_node+0x67c/0x1e30 [ 889.782681][T27497] do_try_to_free_pages+0x408/0xc90 [ 889.787879][T27497] try_to_free_mem_cgroup_pages+0x201/0x420 [ 889.793770][T27497] mem_cgroup_force_empty_write+0xa9/0xe0 [ 889.799493][T27497] cgroup_file_write+0x197/0x350 [ 889.804445][T27497] kernfs_fop_write_iter+0x1d2/0x2e0 [ 889.809780][T27497] vfs_write+0x57d/0x990 [ 889.814023][T27497] ksys_write+0xdc/0x1a0 [ 889.818253][T27497] __x64_sys_write+0x40/0x50 [ 889.822847][T27497] x64_sys_call+0x27e1/0x3020 [ 889.827527][T27497] do_syscall_64+0x136/0x3c0 [ 889.832127][T27497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.838015][T27497] [ 889.840328][T27497] value changed: 0xffff88811b8e3020 -> 0x0000000000000000 [ 889.847421][T27497] [ 889.849733][T27497] Reported by Kernel Concurrency Sanitizer on: [ 889.855885][T27497] CPU: 0 UID: 0 PID: 27497 Comm: syz.7.9041 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 889.866812][T27497] Tainted: [W]=WARN [ 889.870602][T27497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 889.880650][T27497] ================================================================== [ 889.918373][T27500] loop7: detected capacity change from 0 to 2048 [ 889.980386][T27500] loop7: p1 < > p4 [ 889.986632][T27500] loop7: p4 size 722688 extends beyond EOD, truncated