Extracting prog: 1h40m56.034442765s Minimizing prog: 2m10.340019314s Simplifying prog options: 0s Extracting C: 11.540444777s Simplifying C: 1m48.948210255s extracting reproducer from 83 programs testing a last program of every proc single: executing 33 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ptmx-socket$inet_udp-ioctl$TIOCSETD-fcntl$dupfd-ioctl$TCFLSH-ioctl$TIOCSETD-ioctl$TIOCSTI-ioctl$TIOCSTI-ioctl$TIOCSTI-syz_emit_ethernet-seccomp$SECCOMP_SET_MODE_FILTER-openat$tun-ioctl$TUNATTACHFILTER-socket$inet6_tcp-bind$inet6-connect$inet6-fcntl$dupfd-shutdown-socket$inet6_icmp_raw-setsockopt$IP6T_SO_SET_REPLACE-prctl$PR_SET_PDEATHSIG-prctl$PR_SET_PDEATHSIG detailed listing: executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SET_TAGGED_ADDR_CTRL-openat$tun-syz_open_procfs$namespace-socket$netlink-sendmsg$netlink-pwritev2-signalfd4 detailed listing: executing program 0: prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2a0500, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x4, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0x3}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000004380)="0644a6ae6b", 0x5}, {&(0x7f0000000040)="2a23374a5fdc78503e394ddfc214e7c1d7863359f9", 0x15}], 0x2, 0x229, 0x1, 0x2) signalfd4(r0, &(0x7f0000000000)={[0x6]}, 0x8, 0x800) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SET_TAGGED_ADDR_CTRL-openat$tun-syz_open_procfs$namespace-socket$netlink-sendmsg$netlink-pwritev2-signalfd4 detailed listing: executing program 0: prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2a0500, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x4, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0x3}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000004380)="0644a6ae6b", 0x5}, {&(0x7f0000000040)="2a23374a5fdc78503e394ddfc214e7c1d7863359f9", 0x15}], 0x2, 0x229, 0x1, 0x2) signalfd4(r0, &(0x7f0000000000)={[0x6]}, 0x8, 0x800) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp detailed listing: executing program 0: socket$inet_udp(0x2, 0x2, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp detailed listing: executing program 0: socket$inet_udp(0x2, 0x2, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): signalfd4-fstat-flistxattr-flistxattr detailed listing: executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xa]}, 0x8, 0x0) fstat(r0, &(0x7f0000000040)) flistxattr(r0, 0x0, 0x0) (async) flistxattr(r0, 0x0, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): signalfd4-fstat-flistxattr-flistxattr detailed listing: executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xa]}, 0x8, 0x0) fstat(r0, &(0x7f0000000040)) flistxattr(r0, 0x0, 0x0) (async) flistxattr(r0, 0x0, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-ioctl$F2FS_IOC_SET_COMPRESS_OPTION-socket-getsockopt$IPT_SO_GET_REVISION_TARGET-syz_clone-rt_sigqueueinfo-socket$inet_icmp-ptrace$getsig-accept$inet-syz_open_procfs detailed listing: executing program 0: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001300)={0x6, 0x23, &(0x7f0000001400)=ANY=[@ANYBLOB="180000000200001333553cefd00011000080010000ff181100007c56e158fff771003af85c5f73c0c247cc8c42d7effefdde045d031459329df72567e1989d9161822583b31749f38c861ae06c37734f274c602de2a80794ddf58bc1f28f98fc", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000ffffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b7080000e00d00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000008520000005000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000200)=""/4096, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001200)={0x2, 0x2, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001240)=[0x1], &(0x7f0000001280)=[{0x1, 0x2, 0xa, 0x1}, {0x1, 0x5, 0x2, 0x8}, {0x2, 0x1, 0xe}, {0x1, 0x2, 0x6, 0x3}, {0x5, 0x5, 0x7, 0x2}, {0x2, 0x4, 0x6}, {0x2, 0x1, 0x3, 0x4}], 0x10, 0x81}, 0x94) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f00000013c0)={0x4c, 0x6}) (async) r1 = socket(0x2, 0x3, 0x11) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r2, 0x1d, &(0x7f0000000100)={0x8, 0x4, 0x4}) (async) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ptrace$getsig(0x4202, r2, 0x902d, &(0x7f0000000080)) (async) accept$inet(r3, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-ioctl$F2FS_IOC_SET_COMPRESS_OPTION-socket-getsockopt$IPT_SO_GET_REVISION_TARGET-syz_clone-rt_sigqueueinfo-socket$inet_icmp-ptrace$getsig-accept$inet-syz_open_procfs detailed listing: executing program 0: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001300)={0x6, 0x23, &(0x7f0000001400)=ANY=[@ANYBLOB="180000000200001333553cefd00011000080010000ff181100007c56e158fff771003af85c5f73c0c247cc8c42d7effefdde045d031459329df72567e1989d9161822583b31749f38c861ae06c37734f274c602de2a80794ddf58bc1f28f98fc", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000ffffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b7080000e00d00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000008520000005000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000200)=""/4096, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001200)={0x2, 0x2, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001240)=[0x1], &(0x7f0000001280)=[{0x1, 0x2, 0xa, 0x1}, {0x1, 0x5, 0x2, 0x8}, {0x2, 0x1, 0xe}, {0x1, 0x2, 0x6, 0x3}, {0x5, 0x5, 0x7, 0x2}, {0x2, 0x4, 0x6}, {0x2, 0x1, 0x3, 0x4}], 0x10, 0x81}, 0x94) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f00000013c0)={0x4c, 0x6}) (async) r1 = socket(0x2, 0x3, 0x11) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r2, 0x1d, &(0x7f0000000100)={0x8, 0x4, 0x4}) (async) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ptrace$getsig(0x4202, r2, 0x902d, &(0x7f0000000080)) (async) accept$inet(r3, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$netlink-syz_emit_ethernet-signalfd4-signalfd4-signalfd4-syz_open_procfs-prctl$PR_SET_MM_EXE_FILE-prctl$PR_SET_MM_EXE_FILE-syz_mount_image$fuse-symlinkat-symlinkat-mknodat detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000002e40)={0x14, 0x1a, 0x300, 0x70bd2d, 0x25dfdbff, "", [@nested={0x4, 0x6e}]}, 0x14}], 0x1}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="72b400000059", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000006e80)={[0x691]}, 0x8, 0x80800) (async) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000006e80)={[0x691]}, 0x8, 0x80800) signalfd4(0xffffffffffffffff, &(0x7f0000006e80)={[0x7fffffff]}, 0x8, 0x80800) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ipv6_route\x00') prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) (async) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file1\x00', r1, &(0x7f0000000300)='./file0\x00') (async) symlinkat(&(0x7f00000002c0)='./file1\x00', r1, &(0x7f0000000300)='./file0\x00') mknodat(r2, &(0x7f0000000000)='./file0\x00', 0x40, 0x4) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$netlink-syz_emit_ethernet-signalfd4-signalfd4-signalfd4-syz_open_procfs-prctl$PR_SET_MM_EXE_FILE-prctl$PR_SET_MM_EXE_FILE-syz_mount_image$fuse-symlinkat-symlinkat-mknodat detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000002e40)={0x14, 0x1a, 0x300, 0x70bd2d, 0x25dfdbff, "", [@nested={0x4, 0x6e}]}, 0x14}], 0x1}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="72b400000059", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000006e80)={[0x691]}, 0x8, 0x80800) (async) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000006e80)={[0x691]}, 0x8, 0x80800) signalfd4(0xffffffffffffffff, &(0x7f0000006e80)={[0x7fffffff]}, 0x8, 0x80800) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ipv6_route\x00') prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) (async) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file1\x00', r1, &(0x7f0000000300)='./file0\x00') (async) symlinkat(&(0x7f00000002c0)='./file1\x00', r1, &(0x7f0000000300)='./file0\x00') mknodat(r2, &(0x7f0000000000)='./file0\x00', 0x40, 0x4) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-socket$netlink-writev-setxattr$security_capability-syz_open_procfs-preadv-getdents64-membarrier-syz_clone-tkill detailed listing: executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)="390000001100090468fe070300afb800001c0000020000000000480100767500000019022b000a000300050000000000001e739cf400050000", 0x39}], 0x1) setxattr$security_capability(&(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000300), &(0x7f0000000140)=@v3={0x3000000, [{0x7fff, 0x5}, {0x9, 0x2901}]}, 0x18, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='comm\x00') preadv(r2, 0x0, 0x0, 0xa3, 0xd) getdents64(r0, &(0x7f00000001c0)=""/193, 0xc1) membarrier(0x8, 0x0) r3 = syz_clone(0xcac4400, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x34) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-socket$netlink-writev-setxattr$security_capability-syz_open_procfs-preadv-getdents64-membarrier-syz_clone-tkill detailed listing: executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)="390000001100090468fe070300afb800001c0000020000000000480100767500000019022b000a000300050000000000001e739cf400050000", 0x39}], 0x1) setxattr$security_capability(&(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000300), &(0x7f0000000140)=@v3={0x3000000, [{0x7fff, 0x5}, {0x9, 0x2901}]}, 0x18, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='comm\x00') preadv(r2, 0x0, 0x0, 0xa3, 0xd) getdents64(r0, &(0x7f00000001c0)=""/193, 0xc1) membarrier(0x8, 0x0) r3 = syz_clone(0xcac4400, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x34) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-getdents64-timer_create-mount$overlay-socket-setsockopt$inet6_int-syz_clone-rt_tgsigqueueinfo-setpriority-timerfd_create-timerfd_gettime-timer_settime detailed listing: executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r0, &(0x7f00000001c0)=""/193, 0xc1) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)=0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10001, 0x0) r2 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000000)=0x5cb, 0x4) r3 = syz_clone(0x8100, 0x0, 0xfffffffffffffdb0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r3, r3, 0x103a, &(0x7f0000000100)={0x28, 0x6}) setpriority(0x0, 0x0, 0x3) r4 = timerfd_create(0x0, 0x80000) timerfd_gettime(r4, &(0x7f00000004c0)) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}}, &(0x7f00000000c0)) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-getdents64-timer_create-mount$overlay-socket-setsockopt$inet6_int-syz_clone-rt_tgsigqueueinfo-setpriority-timerfd_create-timerfd_gettime-timer_settime detailed listing: executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r0, &(0x7f00000001c0)=""/193, 0xc1) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)=0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10001, 0x0) r2 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000000)=0x5cb, 0x4) r3 = syz_clone(0x8100, 0x0, 0xfffffffffffffdb0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r3, r3, 0x103a, &(0x7f0000000100)={0x28, 0x6}) setpriority(0x0, 0x0, 0x3) r4 = timerfd_create(0x0, 0x80000) timerfd_gettime(r4, &(0x7f00000004c0)) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}}, &(0x7f00000000c0)) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-mknodat$loop-setxattr$incfs_metadata-ioctl$OCFS2_IOC_GROUP_EXTEND detailed listing: executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x3) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-mknodat$loop-setxattr$incfs_metadata-ioctl$OCFS2_IOC_GROUP_EXTEND detailed listing: executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x3) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): umount2 detailed listing: executing program 0: umount2(0x0, 0x1) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): umount2 detailed listing: executing program 0: umount2(0x0, 0x1) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-pipe2-syz_open_procfs-socket-sendmmsg$inet-mkdirat detailed listing: executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') pipe2(&(0x7f0000000080), 0x800) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = socket(0x10, 0x803, 0x0) sendmmsg$inet(r1, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast2}}}], 0x20}}], 0x1, 0xc0) mkdirat(r0, &(0x7f0000001c80)='./file1\x00', 0x4a) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_udp-close detailed listing: executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setxattr$security_capability detailed listing: executing program 0: setxattr$security_capability(&(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000240), &(0x7f0000000140)=@v2={0x2000000, [{0x4, 0x1000}, {0x1, 0x7}]}, 0x14, 0x2) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ptmx-syz_open_pts-socket$inet_icmp_raw-socket$unix-getsockopt$sock_linger detailed listing: executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) syz_open_pts(r0, 0x725f81) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000340), &(0x7f0000000380)=0x8) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-close_range detailed listing: executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-socket-connect$unix-openat$fuse-ioctl$sock_SIOCOUTQ-ioctl$FS_IOC_GETFSMAP detailed listing: executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) connect$unix(r1, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) (async) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x7, 0x400, 0x1c8, 0x4d0, 0x4, 0x3}, {0x45, 0x5b, 0x6, 0x2, 0xfffffffffffff90f, 0xad3}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-syz_open_procfs-write$FUSE_CREATE_OPEN-fsconfig$FSCONFIG_SET_FD-sendto$packet detailed listing: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_procfs(0x0, &(0x7f00000007c0)='comm\x00') write$FUSE_CREATE_OPEN(r1, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000000)='+\x00', 0x0, r0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket$inet_tcp-bind$inet-listen-connect$inet-accept$inet-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_PROG_ATTACH-bpf$MAP_UPDATE_ELEM-sendto detailed listing: executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x8) connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x6, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r3}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r3, r4, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r3, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r2}, 0x20) sendto(r2, &(0x7f0000000700)='a', 0x1, 0x0, 0x0, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-listxattr detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/uprobe_events\x00', 0x201, 0x0) listxattr(&(0x7f0000000040)='./tracing/file0\x00', &(0x7f0000000100)=""/89, 0x59) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket$nl_route-sendmsg$nl_route detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1c0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266"], 0x48}}, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-bind$inet6-connect$inet6-fcntl$dupfd-write$binfmt_elf64 detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) write$binfmt_elf64(r1, 0x0, 0xfffffd0a) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-ioctl$TUNSETIFF-openat$tun-close-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-ioctl$SIOCSIFHWADDR-socket$packet-ioctl$sock_SIOCGIFINDEX-sendto$packet detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x1b, 0x18, 0x5, 0x402, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x3, 0x6, @remote}, 0x14) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-bind$inet-connect$inet-setsockopt$inet_tcp_TCP_REPAIR-sendmmsg detailed listing: executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="3c974588005661", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000a80)="1cd2d176b105e80c4c6948cb8e03208676a247beee2e8079c3acecf7d41348143bb77f00f255ec126072189baa9cd36ab46f33aefd759eeedd359d6072abc0828f39002d90784457b6becc1e09605bb23066e9aabd5ecbbeae8fdd48b32d7a20472fd30a02597bc3d32221ded5c29d99f39b4fee7dead10267deeef489460ff04fa592950003137338aa2dc0ed9de834fc5329543e775ee8db9c778f57c4594dcd2f3f129310dfb10bb7ed508abd950c99467f8bd93e7769c44aeb", 0xbb}], 0x1, &(0x7f0000000bc0)=[{0x78, 0x119, 0x8, "add2965dd14fe622eaebc15043b12b9fff620a77ecdc65593ba37049a44990ee603fa0585c80f97d88cf3753a1ea839098983c679fc3c5b42c1abb89b294ad36b3525d9c19e028dce8d84b92bb9b62aef2cd4414df47443fd5443fe4ddeebfc99f2bbc46e03c"}], 0x78}}, {{0x0, 0x0, 0x0}}], 0x3, 0x44040) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-ioctl$sock_SIOCGIFINDEX-socket$nl_route-sendmsg$nl_route detailed listing: executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x4893a, 0x904a}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x811}, 0x4000000) program did not crash single: failed to extract reproducer bisect: bisecting 83 programs with base timeout 30s testing program (duration=50s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 5, 12, 5, 3, 4, 11, 5, 6, 2, 5, 5, 1, 2, 2, 2, 6, 4, 22, 4, 20, 19, 1, 1, 5, 17, 8, 9, 2, 4, 4, 21, 13, 5, 20, 3, 12, 12, 18, 10, 15, 4, 15, 10, 10, 3, 9, 25, 8, 7, 13, 13, 5, 6, 4, 10, 5, 10, 10, 40, 17, 13, 12, 4, 4, 2, 4, 27, 21, 29, 1, 1, 2, 8, 1, 7, 7, 11, 30, 11, 37, 14, 22] detailed listing: executing program 32: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x4893a, 0x904a}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x811}, 0x4000000) executing program 33: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="3c974588005661", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000a80)="1cd2d176b105e80c4c6948cb8e03208676a247beee2e8079c3acecf7d41348143bb77f00f255ec126072189baa9cd36ab46f33aefd759eeedd359d6072abc0828f39002d90784457b6becc1e09605bb23066e9aabd5ecbbeae8fdd48b32d7a20472fd30a02597bc3d32221ded5c29d99f39b4fee7dead10267deeef489460ff04fa592950003137338aa2dc0ed9de834fc5329543e775ee8db9c778f57c4594dcd2f3f129310dfb10bb7ed508abd950c99467f8bd93e7769c44aeb", 0xbb}], 0x1, &(0x7f0000000bc0)=[{0x78, 0x119, 0x8, "add2965dd14fe622eaebc15043b12b9fff620a77ecdc65593ba37049a44990ee603fa0585c80f97d88cf3753a1ea839098983c679fc3c5b42c1abb89b294ad36b3525d9c19e028dce8d84b92bb9b62aef2cd4414df47443fd5443fe4ddeebfc99f2bbc46e03c"}], 0x78}}, {{0x0, 0x0, 0x0}}], 0x3, 0x44040) executing program 34: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x1b, 0x18, 0x5, 0x402, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x3, 0x6, @remote}, 0x14) executing program 35: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) write$binfmt_elf64(r1, 0x0, 0xfffffd0a) executing program 36: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1c0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266"], 0x48}}, 0x0) executing program 37: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/uprobe_events\x00', 0x201, 0x0) listxattr(&(0x7f0000000040)='./tracing/file0\x00', &(0x7f0000000100)=""/89, 0x59) executing program 38: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x8) connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x6, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r3}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r3, r4, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r3, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r2}, 0x20) sendto(r2, &(0x7f0000000700)='a', 0x1, 0x0, 0x0, 0x0) executing program 39: r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_procfs(0x0, &(0x7f00000007c0)='comm\x00') write$FUSE_CREATE_OPEN(r1, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000000)='+\x00', 0x0, r0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) executing program 40: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) connect$unix(r1, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) (async) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x7, 0x400, 0x1c8, 0x4d0, 0x4, 0x3}, {0x45, 0x5b, 0x6, 0x2, 0xfffffffffffff90f, 0xad3}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) executing program 41: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) syz_open_pts(r0, 0x725f81) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000340), &(0x7f0000000380)=0x8) executing program 42: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) syz_open_pts(r0, 0x725f81) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000340), &(0x7f0000000380)=0x8) executing program 43: setxattr$security_capability(&(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000240), &(0x7f0000000140)=@v2={0x2000000, [{0x4, 0x1000}, {0x1, 0x7}]}, 0x14, 0x2) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0xc, &(0x7f0000000080)={[{@subsystem='devices'}]}) executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) executing program 44: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) executing program 45: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') pipe2(&(0x7f0000000080), 0x800) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = socket(0x10, 0x803, 0x0) sendmmsg$inet(r1, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast2}}}], 0x20}}], 0x1, 0xc0) mkdirat(r0, &(0x7f0000001c80)='./file1\x00', 0x4a) executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getegid() setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x6, &(0x7f0000000040)=[{0x3ff, 0x9, 0x7, 0x5}, {0x5, 0x2, 0x6, 0xa6}, {0x0, 0x10, 0x7, 0x3}, {0x9, 0x9, 0x7, 0x3}, {0x37, 0x6, 0x2}, {0xffff, 0xd, 0x5, 0x1}]}, 0x10) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x20, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req={0xfff, 0x637, 0x4, 0xfff}, 0x10) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) mount$cgroup(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0xc, &(0x7f0000000080)={[{@subsystem='devices'}]}) umount2(&(0x7f0000000180)='./file0\x00', 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2ca600, 0x0) setxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)={'L+', 0x1}, 0x16, 0x1) fdatasync(r1) syz_clone(0xc80ec000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x34, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0x0) recvfrom(r2, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)={0x20, 0x15, 0x1, 0x70bd27, 0x25dfdbff, "", [@typed={0x2, 0x138, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x2, 0x0, 0x0, @uid}]}, 0x20}], 0x1}, 0x4000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') unlinkat(r1, &(0x7f0000000040)='./mnt\x00', 0x200) executing program 4: openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x280000, 0x0) (async) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x280000, 0x0) flistxattr(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r3, 0x5) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) accept4$inet(r3, 0x0, 0x0, 0x0) (async) r4 = accept4$inet(r3, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='0', 0x1) (async) write(0xffffffffffffffff, &(0x7f0000000200)='0', 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='reno', 0x4) (async) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='reno', 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x5) (async) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x5) getsockopt$inet_tcp_int(r1, 0x6, 0x1, 0x0, &(0x7f0000003280)) executing program 4: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fadvise64(r0, 0xb6f, 0x3, 0x7caa02def0ceb509) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00') r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/snmp\x00') read$FUSE(r2, 0x0, 0xff5d) r3 = memfd_create(&(0x7f0000000700)='v\xa6\xf5hj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!\x10\x00\x00\x00\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa50\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5g\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xc6\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xec\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed?:\x84S\xb9\xbf\xab#\xd0N\x8f\x1ey7\x9286p\x10uZ\xf0\xd7\xe5\xba\xe7~\xfb\x8b\xce+fL\x11\x8e\xec\xe3\x90w\f\xf1~\x9a\x95v6\xe5O9\xae\r\xed\xac\xb8\t\x8eD#\x8a\x93\xd0\xa7\x12F\t\x03\xa4\x8f*\x1a\x88\xffq\xf9\x03\xca\x97\x98\\\xcaN\x18\xce\x8a\xf3]\\<\x00\x97\x1a\xf6\xfbs\xe6A/\x1c\xe0\xdb\xad\xe7\x16K:6\x0fo\x9f\xe3\x9f\xd91\x10\xd6qoz\xcc\xee?PvF\xde\xf5&o)c\xb4\f*\x0e\xb9\x85\x95\x01\xf0`g\xb7\x03\b\xc41\x90\xa6\xafB\x1b]\x02U\xcb\\\x1fiR\xb7v\xddF\xa59P\xb9\x10\xab\x1c\x05$\xd3P\xba\x83\x1b\xb7\xb3\xf4_\xe1z\x95\x03J3\xf8\x8c;J\xad=\x0f\x98', 0x1) write(r3, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) readlinkat(r1, &(0x7f0000000040)='./file1\x00', &(0x7f00000021c0)=""/102372, 0x18fe4) socket$nl_route(0x10, 0x3, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40a240, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000000100, 0x0) getsockopt$inet6_int(r4, 0x29, 0x50, 0x0, &(0x7f00000003c0)=0x27) r5 = memfd_create(&(0x7f0000000040)='/dev/full\x00', 0x2) close(r5) executing program 4: umount2(0x0, 0x1) executing program 46: umount2(0x0, 0x1) executing program 5: setresuid(0x0, 0xee01, 0x0) (async) futex(0x0, 0x4, 0x1, 0x0, 0x0, 0x4) (async, rerun: 64) mprotect(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x300000e) (async, rerun: 64) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x9, 0x4) executing program 5: getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) getgroups(0x3, &(0x7f0000000240)=[0xee00, 0xee00, 0xee01]) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x802, &(0x7f00000004c0)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x3}}, {@max_read={'max_read', 0x3d, 0x200}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0xf610}}, {@max_read={'max_read', 0x3d, 0xf5}}, {@blksize={'blksize', 0x3d, 0x1400}}, {@blksize={'blksize', 0x3d, 0x200}}, {}, {@default_permissions}], [{@smackfsroot={'smackfsroot', 0x3d, 'security.capability\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '//{}}@]\\:(:\'%\'@([-@'}}]}}, 0x1, 0x0, &(0x7f0000000680)="59c34f1eab3bda949e313eb59abb5fce80fede6a28dd549799591c77e6704ee09e28586469d77b7c") renameat(0xffffffffffffffff, &(0x7f0000000480)='./mnt\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000180)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) sched_getparam(0x0, &(0x7f0000000000)) connect$netlink(r2, &(0x7f00000000c0)=@unspec, 0xc) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000000c0)=""/155) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x191, 0xffffffff}) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1, 0x2, 0x32, 0x520ea3b1}) pselect6(0x40, &(0x7f0000000040)={0x8, 0x4, 0xb, 0x6, 0xfffffffffffffbfa, 0x1, 0x4, 0x3}, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000000), &(0x7f0000000080)=@v2={0x2000000, [{0xfe, 0x6}, {0x5, 0x5}]}, 0x14, 0x1) executing program 5: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregset(0x4205, r1, 0x1, &(0x7f0000000140)={&(0x7f0000000580)}) linkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00', 0x400) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2d, 'perf_event'}, {0x2b, 'cpuset'}, {0x2b, 'cpu'}, {0x2d, 'cpuset'}, {0x2d, 'blkio'}, {0x2d, 'blkio'}, {0x2d, 'hugetlb'}]}, 0x38) signalfd4(0xffffffffffffffff, &(0x7f0000006e80)={[0x7fffffff]}, 0x8, 0x80800) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) (async) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x338, 0x150, 0x150, 0xffffffff, 0xa8, 0x0, 0x2a0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x5, 0x0, {[{{@ip={@loopback, @empty, 0xff, 0xff, 'batadv_slave_1\x00', 'virt_wifi0\x00', {}, {0xff}, 0x6, 0x0, 0x3}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @broadcast, @multicast1, @gre_key=0x8, @gre_key}}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0xff, 'veth0_macvtap\x00', 'ip6_vti0\x00', {0xff}, {}, 0xf7, 0x1, 0x16}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x2, @local, @broadcast, @icmp_id=0x66, @icmp_id=0x64}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x15, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @icmp_id=0x65, @gre_key=0x9}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x29, @loopback, @private=0xa010101, @icmp_id=0x68, @gre_key=0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104418, 0x0) (async) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x10101d, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000100)='./cgroup\x00', 0x0, 0x80000, 0x0) (async) mount$9p_unix(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1000, 0x0) (async) personality(0x6) executing program 5: getrandom(&(0x7f0000000040)=""/130, 0x82, 0x0) (async) getrandom(&(0x7f0000000100)=""/67, 0x43, 0x1) executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x3) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, 0x0) executing program 47: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x3) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, 0x0) executing program 6: r0 = socket$unix(0x1, 0x2, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0xb56]}, 0x8, 0x80000) (async) r2 = shmget$private(0x0, 0x3be4d8b4000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) r3 = shmget$private(0x0, 0x3000, 0x18, &(0x7f0000ffa000/0x3000)=nil) shmat(r3, &(0x7f0000ffa000/0x3000)=nil, 0x2000) r4 = geteuid() read$FUSE(r1, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000023c0)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@remote}}, &(0x7f00000024c0)=0xe8) statx(r1, &(0x7f0000002500)='./file0\x00', 0x400, 0x40, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000002640)=0x0) fcntl$getownex(r1, 0x10, &(0x7f0000002680)={0x0, 0x0}) shmctl$IPC_SET(r3, 0x1, &(0x7f00000026c0)={{0x0, r4, r5, r6, r7, 0x8, 0x3}, 0xc031, 0x8, 0x3, 0x4, r8, r9, 0x88c8}) (async) sysinfo(&(0x7f0000000800)=""/216) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) (async, rerun: 64) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000000c0)) (rerun: 64) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000080)=0x1, 0x4) shmat(r2, &(0x7f0000ffa000/0x1000)=nil, 0x4800) mknodat(r1, &(0x7f0000000280)='./file0\x00', 0x100, 0x3) (async) getsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) gettimeofday(&(0x7f0000000000), &(0x7f0000000040)) (async, rerun: 32) listen(r0, 0x7) (rerun: 32) executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)) connect$packet(r0, &(0x7f00000000c0)={0x11, 0x10, 0x0, 0x1, 0x1, 0x6, @broadcast}, 0x14) r1 = socket(0x840000000002, 0x3, 0xff) getsockname$inet6(r1, 0x0, &(0x7f0000000040)=0x52) r2 = socket$inet(0x2, 0x3, 0x1) setuid(0xee01) r3 = syz_open_procfs(0x0, &(0x7f0000000040)) linkat(r3, &(0x7f0000000380)='./cgroup\x00', r3, &(0x7f0000000300)='./file0\x00', 0x1400) fremovexattr(r2, &(0x7f0000000100)=@random={'security.', '.[*\'-\x00'}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) flock(r4, 0x2) executing program 6: setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="0200000001000000000000000400000000200000100000000000000020"], 0x24, 0x0) (async) r0 = socket$inet_icmp(0x2, 0x2, 0x1) close(r0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.impure\x00') executing program 6: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x1d3400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104419, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x10101d, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./cgroup\x00', 0x0, 0x80000, 0x0) mount$9p_unix(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0xb, &(0x7f0000000040)=""/109, &(0x7f00000000c0)=0x6d) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x40000, 0x148) recvmsg$inet_nvme(r0, &(0x7f0000002700)={&(0x7f0000000000)=@ll, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/85, 0x55}, {&(0x7f0000000100)=""/12, 0xc}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x3, &(0x7f0000001700)=""/4096, 0x1000}, 0x10160) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x80000000) ioctl$TIOCGPGRP(r4, 0x540f, 0x0) setsockopt$sock_int(r0, 0x1, 0x1b8ed52b43f409f1, &(0x7f00000001c0)=0x3, 0x4) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000240)=0x1, 0x4) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f00000000c0), 0x4) fcntl$lock(r0, 0x6, &(0x7f0000000680)={0x1, 0x0, 0x5, 0x40000000003fd}) openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) executing program 6: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0x6, 0x4) executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r0, &(0x7f00000001c0)=""/193, 0xc1) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)=0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10001, 0x0) r2 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000000)=0x5cb, 0x4) r3 = syz_clone(0x8100, 0x0, 0xfffffffffffffdb0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r3, r3, 0x103a, &(0x7f0000000100)={0x28, 0x6}) setpriority(0x0, 0x0, 0x3) r4 = timerfd_create(0x0, 0x80000) timerfd_gettime(r4, &(0x7f00000004c0)) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}}, &(0x7f00000000c0)) executing program 48: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r0, &(0x7f00000001c0)=""/193, 0xc1) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)=0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10001, 0x0) r2 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000000)=0x5cb, 0x4) r3 = syz_clone(0x8100, 0x0, 0xfffffffffffffdb0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r3, r3, 0x103a, &(0x7f0000000100)={0x28, 0x6}) setpriority(0x0, 0x0, 0x3) r4 = timerfd_create(0x0, 0x80000) timerfd_gettime(r4, &(0x7f00000004c0)) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}}, &(0x7f00000000c0)) executing program 7: ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000080)) (async, rerun: 64) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 64) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e24, @multicast2}, 0x10) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000040)={@remote, @remote}, 0xc) (async) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) (async, rerun: 64) setpgid(0x0, r3) (async, rerun: 64) r4 = syz_open_procfs$userns(0x0, &(0x7f00000000c0)) pwrite64(r4, 0x0, 0x0, 0x4ef) ptrace(0x10, r2) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000001440), 0x200000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) ptrace$getregset(0x4204, r2, 0x1, &(0x7f0000000480)={&(0x7f00000002c0)=""/209, 0xd1}) (async, rerun: 64) sched_setparam(r2, &(0x7f0000000000)=0xb) (async) sync_file_range(0xffffffffffffffff, 0x4, 0x40, 0x6) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000100)) executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680), 0x400, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000005300)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0200c00ba700000100070000000000040000000000200001000000d73e00"/39], 0x24, 0x3) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000340)={{0x2, 0x5}, 0x100, './file0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000040)=""/3, &(0x7f0000000100)=0x3) faccessat2(0xffffffffffffffff, &(0x7f0000000fc0)='./file0\x00', 0x1, 0x0) r2 = epoll_create1(0x0) r3 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000000100)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0xc00}}, {@default_permissions}], [{@obj_role={'obj_role', 0x3d, '/dev/net/tun\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fowner_gt={'fowner>', 0xee01}}]}}, 0x1, 0x0, &(0x7f0000000240)="2c396f4cc0317f900194dc439adec54ed938934d100df4ab66595fd1d1762b049ea41c359a8ef0db1e2def7e492429d1593ccdf774bcab7bf16bf7816576740dc186cb57acb1cc0c2e42259491c3e198a7cba085aeb040d893498f9fbeb04e641c0a847a3bda3b7d2a06d89cca13bbde76625eb9f558bb7e37c962367efce12643b65794183dc8d9e32cafb3a84bc116d7138ef4593db77b94965a3ae0a7e3bc93afb1") openat(r3, &(0x7f0000000300)='./file0\x00', 0x801c0, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x20000018}) executing program 7: lsetxattr$smack_xattr_label(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='security.SMACK64EXEC\x00', &(0x7f0000000340)=ANY=[], 0x1, 0x2) r0 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f00000001c0)=0x6e) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x80000000) llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_int(r2, 0x1, 0xb, &(0x7f00000000c0), &(0x7f0000000140)=0x4) socket$unix(0x1, 0x2, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = accept$unix(r0, &(0x7f0000000300), &(0x7f0000000380)=0x6e) syz_clone(0x410c3000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r3, 0x4002f516, &(0x7f00000002c0)={0xf, 0x7}) pselect6(0x40, &(0x7f0000000180)={0xa, 0x7fff, 0x0, 0x1, 0x4000000000030001, 0x4, 0x400, 0x7}, 0x0, 0x0, 0x0, 0x0) getxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="6fa16e3227dc36a5722600"], &(0x7f0000000280)=""/48, 0x30) executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000040), &(0x7f0000000140)=0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000000)) setns(r0, 0x40000000) executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001400)=ANY=[@ANYBLOB="240000001800050d00dffffffedbdf250300d1006f0800000400000008000500"], 0x24}], 0x1, 0x0, 0x0, 0x40000c0}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000002340)='./file0\x00', 0x100) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x8002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) listxattr(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)={0xc0000001}) mount(&(0x7f0000002080)=@sg0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='xfs\x00', 0x8000, &(0x7f0000002140)='\x00') shmdt(0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000002180)={'filter\x00', 0x0, [0xd0, 0x80000000, 0x1, 0x6, 0xe17]}, &(0x7f0000002200)=0x54) sendto$inet6(r0, 0x0, 0x0, 0x4044, &(0x7f0000000000)={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c) executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)="390000001100090468fe070300afb800001c0000020000000000480100767500000019022b000a000300050000000000001e739cf400050000", 0x39}], 0x1) setxattr$security_capability(&(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000300), &(0x7f0000000140)=@v3={0x3000000, [{0x7fff, 0x5}, {0x9, 0x2901}]}, 0x18, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='comm\x00') preadv(r2, 0x0, 0x0, 0xa3, 0xd) getdents64(r0, &(0x7f00000001c0)=""/193, 0xc1) membarrier(0x8, 0x0) r3 = syz_clone(0xcac4400, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x34) executing program 49: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)="390000001100090468fe070300afb800001c0000020000000000480100767500000019022b000a000300050000000000001e739cf400050000", 0x39}], 0x1) setxattr$security_capability(&(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000300), &(0x7f0000000140)=@v3={0x3000000, [{0x7fff, 0x5}, {0x9, 0x2901}]}, 0x18, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='comm\x00') preadv(r2, 0x0, 0x0, 0xa3, 0xd) getdents64(r0, &(0x7f00000001c0)=""/193, 0xc1) membarrier(0x8, 0x0) r3 = syz_clone(0xcac4400, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x34) executing program 8: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000003c0)=[{0x6, 0x9, 0x8, 0x7ff00001}]}) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x161482, 0xe8) executing program 8: futex(&(0x7f0000000080)=0x2, 0x80, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x2, 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/hci\x00') pread64(r1, 0x0, 0x16, 0x1001) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001480)) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000640)='net\x00') getdents64(r2, &(0x7f0000000480)=""/4096, 0x1000) executing program 8: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0x0, 0x200, 0x3c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x700, 0x8, 0x7, 0x9}}) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x9]}, 0x8, 0x80800) mkdirat(r1, &(0x7f0000000080)='./file0/file2\x00', 0x1ed) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) close(0x3) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x7, 0x7, 0x4000201, 0x96e, 0x3, 0x4}) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, 0x0}, 0x58) setitimer(0x1, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f00000000c0)={0x3, 0x0, [{0x3, 0x6, 0xdcf6, [0x2, 0x1, 0xffff, 0x7fffffff, 0x0, 0x0, 0x8, 0x7]}, {0x1, 0x2, 0x2, [0x3, 0x10001, 0x4, 0xe7, 0x0, 0x10001, 0x4d89, 0xd]}, {0x2, 0xfffffff5, 0x80, [0x10001, 0x97, 0xffff, 0x1, 0x9, 0x6, 0x7, 0x1]}]}) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000012c0), 0x402, 0x0) write$cgroup_freezer_state(r4, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000180)=@file={0x1}, 0x6e) semctl$GETPID(0x0, 0x1, 0xb, 0x0) listen(r5, 0x0) connect$unix(r5, &(0x7f0000000200)=@file={0x1}, 0x6e) linkat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x1400) capget(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x2, 0x8001, 0x7fffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000080), &(0x7f0000000040)=0x4) rt_sigpending(&(0x7f0000000000), 0x8) prctl$PR_SET_SECUREBITS(0x1c, 0x0) executing program 8: faccessat2(0xffffffffffffffff, &(0x7f0000000fc0)='./file0\x00', 0x1, 0x1000) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000001080)=""/4096) (async) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000001080)=""/4096) (async) r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) (async) r1 = inotify_init1(0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, 0x0) (async) sendfile(r0, r0, 0x0, 0xffff) mount$9p_xen(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x4402, &(0x7f00000000c0)={'trans=xen,', {[{@ignoreqv}, {@access_uid={'access', 0x3d, 0xee01}}, {@version_L}, {@cache_mmap}]}}) executing program 8: mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x80000000) mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f00000000c0)='gid=1\x00nk]e\xe5\xcd\xeb\x12\xcdx\xa6\xfb\xc7\f5\xaf\xea)\xfc\x80\x81X\xbb\xd33\xdf\bbx\x10\xa3\xc8n\xa4\'') r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r1, &(0x7f0000000200)={{0x107, 0xfe, 0x0, 0x38d, 0x83, 0x1, 0x11b, 0x6}, "4f8a9d37c3330df442333470cfa584387e7dfde089c715386dc4c9e3cfc00268dc420d08787ae76b8c6e6e00fc8289a411d214f0f54f447714b9aec40a8c0b7cb2639700f75f3af33318dd7f577becd03537a234745619c2bed6ed198641f5d536449df855bf179463decc554f721b27231a4d38b1389ac5544f2648e872f630b11c56e275963af1801ce0a54e454366cd183c5c063e2df810736c15898178bbe0ce2db07940da85a05eb486c5e15bcaa2563bbf02f45b745a248bea", ['\x00']}, 0x1dc) executing program 8: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000002e40)={0x14, 0x1a, 0x300, 0x70bd2d, 0x25dfdbff, "", [@nested={0x4, 0x6e}]}, 0x14}], 0x1}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="72b400000059", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000006e80)={[0x691]}, 0x8, 0x80800) (async) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000006e80)={[0x691]}, 0x8, 0x80800) signalfd4(0xffffffffffffffff, &(0x7f0000006e80)={[0x7fffffff]}, 0x8, 0x80800) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ipv6_route\x00') prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) (async) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file1\x00', r1, &(0x7f0000000300)='./file0\x00') (async) symlinkat(&(0x7f00000002c0)='./file1\x00', r1, &(0x7f0000000300)='./file0\x00') mknodat(r2, &(0x7f0000000000)='./file0\x00', 0x40, 0x4) executing program 50: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000002e40)={0x14, 0x1a, 0x300, 0x70bd2d, 0x25dfdbff, "", [@nested={0x4, 0x6e}]}, 0x14}], 0x1}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="72b400000059", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000006e80)={[0x691]}, 0x8, 0x80800) (async) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000006e80)={[0x691]}, 0x8, 0x80800) signalfd4(0xffffffffffffffff, &(0x7f0000006e80)={[0x7fffffff]}, 0x8, 0x80800) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ipv6_route\x00') prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) (async) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file1\x00', r1, &(0x7f0000000300)='./file0\x00') (async) symlinkat(&(0x7f00000002c0)='./file1\x00', r1, &(0x7f0000000300)='./file0\x00') mknodat(r2, &(0x7f0000000000)='./file0\x00', 0x40, 0x4) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901) close_range(r1, r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000100), 0x4) executing program 9: bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%-5lx \x00'}, 0x20) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000240)={{0x0, 0xc, 0x6, 0x2, 0x800, 0x7, 0x3, 0x703, 0xfffffe61, 0x8, 0x4, 0x7, 0x100, 0x28, 0x3}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x7ff]}, 0x8, 0x800) readlinkat(r2, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)=""/227, 0xe3) executing program 9: setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="0200000001000000000000000400000000200000100000000000000020"], 0x24, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 64) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.impure\x00') mount(&(0x7f0000000100)=@md0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='coda\x00', 0x10e0880, &(0x7f00000001c0)='system.posix_acl_default\x00') executing program 9: futex(&(0x7f000000cffc), 0x5, 0x2, 0x0, &(0x7f0000000000)=0x6, 0x25040001) r0 = syz_clone(0x4a84400, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x64010102, @local}, {0x12, 0x0, 0x0, @multicast2}}}}}, 0x0) mount$9p_unix(&(0x7f00000001c0)='./cgroup\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2000, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002340)='./file0\x00', 0x100) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x8002, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10) syz_open_pts(r1, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x0, r0}) executing program 9: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8]}, 0x8, 0x800) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x22000, 0x0) preadv(r1, 0x0, 0x0, 0x1142, 0x0) (async, rerun: 32) linkat(r0, &(0x7f00000000c0)='./file1/file3\x00', r0, &(0x7f0000000100)='./file1/file3\x00', 0x1000) (async, rerun: 32) renameat2(r0, &(0x7f0000000000)='./file1/file3\x00', r0, &(0x7f0000000040)='./file1/file3\x00', 0x6) executing program 9: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001300)={0x6, 0x23, &(0x7f0000001400)=ANY=[@ANYBLOB="180000000200001333553cefd00011000080010000ff181100007c56e158fff771003af85c5f73c0c247cc8c42d7effefdde045d031459329df72567e1989d9161822583b31749f38c861ae06c37734f274c602de2a80794ddf58bc1f28f98fc", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000ffffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b7080000e00d00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000008520000005000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000200)=""/4096, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001200)={0x2, 0x2, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001240)=[0x1], &(0x7f0000001280)=[{0x1, 0x2, 0xa, 0x1}, {0x1, 0x5, 0x2, 0x8}, {0x2, 0x1, 0xe}, {0x1, 0x2, 0x6, 0x3}, {0x5, 0x5, 0x7, 0x2}, {0x2, 0x4, 0x6}, {0x2, 0x1, 0x3, 0x4}], 0x10, 0x81}, 0x94) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f00000013c0)={0x4c, 0x6}) (async) r1 = socket(0x2, 0x3, 0x11) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r2, 0x1d, &(0x7f0000000100)={0x8, 0x4, 0x4}) (async) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ptrace$getsig(0x4202, r2, 0x902d, &(0x7f0000000080)) (async) accept$inet(r3, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') executing program 51: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001300)={0x6, 0x23, &(0x7f0000001400)=ANY=[@ANYBLOB="180000000200001333553cefd00011000080010000ff181100007c56e158fff771003af85c5f73c0c247cc8c42d7effefdde045d031459329df72567e1989d9161822583b31749f38c861ae06c37734f274c602de2a80794ddf58bc1f28f98fc", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000ffffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b7080000e00d00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000008520000005000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000200)=""/4096, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001200)={0x2, 0x2, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001240)=[0x1], &(0x7f0000001280)=[{0x1, 0x2, 0xa, 0x1}, {0x1, 0x5, 0x2, 0x8}, {0x2, 0x1, 0xe}, {0x1, 0x2, 0x6, 0x3}, {0x5, 0x5, 0x7, 0x2}, {0x2, 0x4, 0x6}, {0x2, 0x1, 0x3, 0x4}], 0x10, 0x81}, 0x94) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f00000013c0)={0x4c, 0x6}) (async) r1 = socket(0x2, 0x3, 0x11) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r2, 0x1d, &(0x7f0000000100)={0x8, 0x4, 0x4}) (async) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ptrace$getsig(0x4202, r2, 0x902d, &(0x7f0000000080)) (async) accept$inet(r3, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xc083, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='mounts\x00') get_mempolicy(&(0x7f0000000040), 0x0, 0x0, &(0x7f00004b0000/0x4000)=nil, 0x2) syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo\x00') (async) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo\x00') openat$cgroup_ro(r2, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x38, &(0x7f0000000080)=""/12, &(0x7f0000000100)=0xc) read$FUSE(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00') preadv(r4, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/181, 0xb5}], 0x1, 0x80, 0x800003) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) clock_gettime(0x0, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f0000000380)) (async) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x40, &(0x7f00000001c0)="0e54e01462ef08f20ce0a17505d9a809dca34c2b10000000c7053f8f922942c07d9b1c1aafb2ad6a23a5d8077d4646ec883bdb99638c1f94e125849be1fff7d40a373e5bac000000000000003cf2547345a8fed935086b2f6c9d782908100121", 0x60) setitimer(0x2, &(0x7f0000000040)={{r5, r6/1000+10000}, {0x0, 0xea60}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x800002, 0x0, 0x86, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000001600)='rootfs\x00', 0x76f0b08e62702311, 0x0) (async) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000001600)='rootfs\x00', 0x76f0b08e62702311, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x42002, 0x101) (async) r8 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x42002, 0x101) getdents64(r8, &(0x7f0000000400)=""/4096, 0xc00) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xa2e0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}) (async) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xa2e0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001480)={'ip_vti0\x00', &(0x7f0000001400)={'syztnl1\x00', r3, 0x7, 0x7800, 0x80000000, 0x2, {{0xf, 0x4, 0x2, 0x6, 0x3c, 0x67, 0x0, 0x5, 0x2f, 0x0, @private=0xa010102, @multicast1, {[@lsrr={0x83, 0x13, 0x31, [@local, @private=0xa010102, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0xdf, 0x1, 0x2, [{@empty}, {@empty, 0x3}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001480)={'ip_vti0\x00', &(0x7f0000001400)={'syztnl1\x00', r3, 0x7, 0x7800, 0x80000000, 0x2, {{0xf, 0x4, 0x2, 0x6, 0x3c, 0x67, 0x0, 0x5, 0x2f, 0x0, @private=0xa010102, @multicast1, {[@lsrr={0x83, 0x13, 0x31, [@local, @private=0xa010102, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0xdf, 0x1, 0x2, [{@empty}, {@empty, 0x3}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001580)={'sit0\x00', &(0x7f00000014c0)={'erspan0\x00', r9, 0x40, 0x8000, 0xa9d, 0x10, {{0x23, 0x4, 0x2, 0x0, 0x8c, 0x64, 0x0, 0x9, 0x4, 0x0, @private=0xa010102, @empty, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x6a, 0x0, 0x9, [0x0, 0x8]}, @cipso={0x86, 0x45, 0x3, [{0x7, 0x9, "857ce3d1ad29bd"}, {0x2, 0x2}, {0x0, 0xb, "1e5b71c41a7394cbb6"}, {0x5, 0x8, "ef97b7c968d1"}, {0x2, 0x10, "51d2cb50e84976a466a135410a16"}, {0x7, 0x11, "8f236babc488915bcdd8560e7ae567"}]}, @generic={0x44, 0x12, "3cae5a05588c87052211a14dfd3e3298"}, @ssrr={0x89, 0xf, 0xfa, [@remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x3a}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001580)={'sit0\x00', &(0x7f00000014c0)={'erspan0\x00', r9, 0x40, 0x8000, 0xa9d, 0x10, {{0x23, 0x4, 0x2, 0x0, 0x8c, 0x64, 0x0, 0x9, 0x4, 0x0, @private=0xa010102, @empty, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x6a, 0x0, 0x9, [0x0, 0x8]}, @cipso={0x86, 0x45, 0x3, [{0x7, 0x9, "857ce3d1ad29bd"}, {0x2, 0x2}, {0x0, 0xb, "1e5b71c41a7394cbb6"}, {0x5, 0x8, "ef97b7c968d1"}, {0x2, 0x10, "51d2cb50e84976a466a135410a16"}, {0x7, 0x11, "8f236babc488915bcdd8560e7ae567"}]}, @generic={0x44, 0x12, "3cae5a05588c87052211a14dfd3e3298"}, @ssrr={0x89, 0xf, 0xfa, [@remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x3a}]}]}}}}}) timer_create(0xfffffff9, 0x0, 0x0) (async) timer_create(0xfffffff9, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) (async) listen(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x5, 0x1, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) pwrite64(r0, 0x0, 0x0, 0x1000) (async) pwrite64(r0, 0x0, 0x0, 0x1000) executing program 0: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x10) r2 = socket$inet(0x2, 0x800, 0xfffffff5) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) r3 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) sendfile(r3, r3, 0x0, 0xffff) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) ioctl$TIOCGSID(r5, 0x5429, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @initdev}, &(0x7f00000000c0)=0xc) setsockopt(r2, 0x0, 0x40, 0x0, 0x0) getsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000080), &(0x7f0000000140)=0x4) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000040)=0x1, 0x4) recvfrom(r6, 0x0, 0x0, 0x140, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000180), 0x4) executing program 0: r0 = socket$inet6(0xa, 0x2, 0x40000000) (async) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x5}) msgget(0x1, 0x2b4) close(0x3) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000000)={@private, @multicast2}, &(0x7f0000000080)=0x8) (async) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000001140)={0x1, 0x1, 0x6, 0x3}) (async) r4 = syz_clone(0x101000, &(0x7f0000000080)="a3a92f6276d08d3506f1447bd2257c69727b0d85e1d5c391897431e22546769b2eaf5a4a0f478a03e86f89f66083adbfd28060356a6d11d6390f0f33356594770caa9564e082bd53a3be4dda6a67b5e31ac0470eb35675", 0x57, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="0ce8fa4ab843ee4fe5e353980fd50c84759156ecbe12e3a4001f6182edd00ca8be7d93320adcf04c") prlimit64(r4, 0xd, &(0x7f00000001c0)={0x5, 0x6}, &(0x7f0000000200)) (async) inotify_init1(0x800) executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000091b000/0x2000)=nil, 0x2000, 0x0) r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = fsopen(&(0x7f0000000100)='autofs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000140)='\x00', 0x0, r1) mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f00000000c0)='gid=1\x00nk]e\xe5\xcd\xeb\x12\xcdx\xa6\xfb\xc7\f5\xaf\xea)\xfc\x80\x81X\xbb\xd33\xdf\bbx\x10\xa3\xc8n\xa4\'') fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f00000000c0)=@v2={0x2000000, [{0x7, 0x5}, {0x39e, 0x5}]}, 0x14, 0x2) msgget(0x1, 0x2b4) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000280)) fsetxattr$security_capability(r0, &(0x7f0000000080), 0x0, 0x3d, 0x1) executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xa]}, 0x8, 0x0) fstat(r0, &(0x7f0000000040)) flistxattr(r0, 0x0, 0x0) (async) flistxattr(r0, 0x0, 0x0) executing program 52: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xa]}, 0x8, 0x0) fstat(r0, &(0x7f0000000040)) flistxattr(r0, 0x0, 0x0) (async) flistxattr(r0, 0x0, 0x0) executing program 1: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$sock_int(r0, 0x1, 0x22, 0x0, &(0x7f0000000000)=0x2) executing program 1: r0 = socket$inet(0x2, 0x802, 0x1) setsockopt(r0, 0x1c2e, 0xb6c, &(0x7f0000000080)="bb8f5d50b6820a67f7aae9f9b2e2906350105a627656895f5f4e0d453302b341d4c230e9105218f114839131e8b13d40c7f89f9b3b83be3fbc2cf00b7d59713ec04aa5e4b936f53d2237877ace4ddb2fae30c8cdca2cf81eec6f026d6dafdd875c44de5e01bc25f932bf7b74598d0e7e813583ea285ad85873df523e4274d129b05e1e5cfb6b0523d9c895f5198c733160daf0aed959fa347c907410044b12d1b4540c556f915346d00cf0547d02cbe030e6cc09a01a9dc57a9fdd944b91df73a571d69f6a6d7f137b93b4cd547977c7d71e26f1366d", 0xd6) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @empty}, &(0x7f00000001c0)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @loopback}, &(0x7f0000000040)=0xc) executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000007600210b00440000000000000300000000000000"], 0x18}}, 0x0) sendto(r4, &(0x7f0000000340)="05c3e8d340ea027d75682af1427a0f19f346a4c14109d602e65d3e95351229592392b833d2744744029da4acd2d1a400a445add91c9dc7b7bcbcb9fdc9a92ed9964f1d1f1ee5c0309a42505f6069b73f481d4ed49ca7868cd9ad2dba4620", 0x5e, 0xdbadab0ecfad9634, &(0x7f00000003c0)=@vsock={0x28, 0x0, 0x2710}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x18, 0x68, 0x1, 0x100003, 0x7ffffffd}, 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a80)=ANY=[@ANYRESOCT=r1], 0x18}, 0x1, 0x0, 0x0, 0x4048844}, 0x40) getresuid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000700)=0xe8) statx(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x6000, 0x7ff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getuid() getgroups(0x7, &(0x7f0000000880)=[0xee00, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee00]) r11 = getegid() r12 = getegid() read$FUSE(r0, &(0x7f00000008c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f0000002900)='./file0\x00', &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) fsetxattr$system_posix_acl(r3, &(0x7f0000000500)='system.posix_acl_access\x00', &(0x7f00000029c0)={{}, {0x1, 0x3}, [{0x2, 0x4, 0xee01}, {0x2, 0x0, 0xee00}, {0x2, 0x5, 0xee01}, {0x2, 0x7, r6}, {0x2, 0x5, r7}, {0x2, 0x1, r8}, {0x2, 0x4d07d305caebf254, 0xee01}, {0x2, 0x0, r9}, {0x2, 0x2}], {0x4, 0x1}, [{0x8, 0x2, r10}, {}, {0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8, 0x7, r13}, {0x8, 0x1, r14}], {}, {0x20, 0x4}}, 0x9c, 0x1) setsockopt$inet6_buf(r2, 0x3a, 0xcd, 0x0, 0x0) r15 = accept4$unix(r0, &(0x7f0000000200), &(0x7f00000002c0)=0x6e, 0x80000) getsockname$unix(r15, &(0x7f0000000080), &(0x7f0000000140)=0x6e) listen(0xffffffffffffffff, 0xbfdd) getsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), &(0x7f0000000040)=0x4) executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x222004, 0x0, 0x0, 0x0, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB='user.'], 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000001440)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3e, 0x1, 0x100, 0x40, 0x200, 0x0, 0x40, 0x38, 0x3, 0x40, 0x2, 0x1}, [{0x1, 0x0, 0x0, 0x10000, 0x150, 0x10, 0x1000}, {0x1, 0x0, 0x0, 0x20000, 0x200, 0x0, 0x2000, 0x10}, {}], '\x00'/4096, ['\x00', '\x00', '\x00']}, 0x13e8) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, &(0x7f0000002840), &(0x7f0000002880), 0x0) listen(r2, 0x5) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r5 = accept4$inet(r2, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='0', 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='reno', 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x5) set_robust_list(&(0x7f0000000080)={0x0, 0x5703}, 0x18) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x469, 0x4) executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r1, 0x0, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = semget$private(0x0, 0x2, 0x4d) semctl$GETPID(r3, 0x1, 0xb, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x7ffffffb, 0x4) r4 = syz_pidfd_open(0x0, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000500)=ANY=[@ANYRESOCT=r4, @ANYRESDEC=r4, @ANYRES32=r4, @ANYRES64=r4], 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0xd, &(0x7f00000000c0)=0x5, 0x4) r6 = signalfd4(r2, &(0x7f0000000240)={[0x8]}, 0x8, 0x800) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0xe4180, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) pselect6(0x40, &(0x7f0000000180)={0xa, 0x7ffc, 0x0, 0x1, 0x4000000000010001, 0x9000000000000008, 0x400, 0x7}, 0x0, 0x0, 0x0, 0x0) syz_clone(0x4a84400, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x8, 0x1) flistxattr(r6, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_clone(0x410c3000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='statm\x00') read$FUSE(r8, 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x3, &(0x7f0000000040)=0x9, 0x4) statx(r8, &(0x7f00000001c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000280)) write$tun(r6, &(0x7f0000002d00)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYRES32=0x41424344, @ANYBLOB="40c2000890780005051200000002000000080000000800000063fe11f9896b33473ccd16f38048fbe0b8bafe0ff989970eb6c1e3a3cf48e9ea6c01fe06e2d4c3d90000009520ec2875228455ab87176082e5f47cbacb236f85421f2777d3aac27e0a90cb7427bcf4205e4e9199ac21af1b568dfb297c7d77dded4bd3ce73cb11d8ac8c940504dc02e0be02dac6abd3aa5e4b74182c0c9c04b2e2e24633f5efcee9a1989895210811b7d7413f619185758e812c7fe11252461924cdd9d6a9bc501f2e42f3686c00fc27fcd202dd6d4719bda20269d6bd8fdc9f5fa09167119b8fdf414347631fc53902b00528e123f8429e6758e02876"], 0x13fc) executing program 1: socket$inet_udp(0x2, 0x2, 0x0) executing program 53: socket$inet_udp(0x2, 0x2, 0x0) executing program 2: sched_setscheduler(0x0, 0x2, &(0x7f0000000000)) getresuid(&(0x7f00000000c0), &(0x7f0000000080), &(0x7f0000000140)) executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000000)=""/11, &(0x7f0000000040)=0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104419, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x10101d, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x80000, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1080008, &(0x7f0000000100)=ANY=[], 0x1, 0x0, 0x0) executing program 2: get_mempolicy(0x0, &(0x7f0000000100), 0x200000316, &(0x7f0000ffd000/0x2000)=nil, 0x4) executing program 2: prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2a0500, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x4, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0x3}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000004380)="0644a6ae6b", 0x5}, {&(0x7f0000000040)="2a23374a5fdc78503e394ddfc214e7c1d7863359f9", 0x15}], 0x2, 0x229, 0x1, 0x2) signalfd4(r0, &(0x7f0000000000)={[0x6]}, 0x8, 0x800) executing program 54: prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2a0500, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x4, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0x3}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000004380)="0644a6ae6b", 0x5}, {&(0x7f0000000040)="2a23374a5fdc78503e394ddfc214e7c1d7863359f9", 0x15}], 0x2, 0x229, 0x1, 0x2) signalfd4(r0, &(0x7f0000000000)={[0x6]}, 0x8, 0x800) executing program 3: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00') r1 = memfd_create(&(0x7f0000000700)='v\xa6\xf5hj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!\x10\x00\x00\x00\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa50\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5g\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xc6\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xec\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed?:\x84S\xb9\xbf\xab#\xd0N\x8f\x1ey7\x9286p\x10uZ\xf0\xd7\xe5\xba\xe7~\xfb\x8b\xce+fL\x11\x8e\xec\xe3\x90w\f\xf1~\x9a\x95v6\xe5O9\xae\r\xed\xac\xb8\t\x8eD#\x8a\x93\xd0\xa7\x12F\t\x03\xa4\x8f*\x1a\x88\xffq\xf9\x03\xca\x97\x98\\\xcaN\x18\xce\x8a\xf3]\\<\x00\x97\x1a\xf6\xfbs\xe6A/\x1c\xe0\xdb\xad\xe7\x16K:6\x0fo\x9f\xe3\x9f\xd91\x10\xd6qoz\xcc\xee?PvF\xde\xf5&o)c\xb4\f*\x0e\xb9\x85\x95\x01\xf0`g\xb7\x03\b\xc41\x90\xa6\xafB\x1b]\x02U\xcb\\\x1fiR\xb7v\xddF\xa59P\xb9\x10\xab\x1c\x05$\xd3P\xba\x83\x1b\xb7\xb3\xf4_\xe1z\x95\x03J3\xf8\x8c;J\xad=\x0f\x98', 0x1) write(r1, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f0000000140)={0x11, 0xf8, 0x0, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0x14) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x7, 0x10, r1, 0x86769000) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) readlinkat(r0, &(0x7f0000000040)='./file1\x00', &(0x7f00000021c0)=""/102372, 0x18fe4) executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/../file0\x00', 0x2027e1, 0x139) r1 = socket$inet(0x2, 0x802, 0x1) recvmmsg(r1, &(0x7f0000004340)=[{{0x0, 0x0, 0x0}, 0x13}], 0x1, 0x40, 0x0) symlinkat(&(0x7f0000000080)='./file1\x00', r0, &(0x7f00000000c0)='./file1\x00') (async) symlinkat(&(0x7f0000000080)='./file1\x00', r0, &(0x7f00000000c0)='./file1\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x11800, 0x0) pidfd_send_signal(r2, 0x3b, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x1400) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) (async) r3 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r4 = dup(r3) write$binfmt_elf32(r4, &(0x7f0000002800)=ANY=[@ANYBLOB="7f454c464a03011301000000000000000200030004000000eb01000038000000d600000097700000fe032000010007000c0007000000000003000000060000000200000000040000d50e"], 0xa58) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000040)) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000040)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) (async) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) (async) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x69, 0x1, 0xf, 0x7, 0x3, 0x6, 0x40, 0x1d7, 0x40, 0x45, 0x1, 0x9, 0x38, 0x3, 0x2, 0x4, 0xe75}, [{0x60000000, 0x4, 0xe, 0x64b0, 0x8, 0x6, 0x4, 0x2}, {0x0, 0x3, 0x9, 0x8, 0x7fff, 0x7, 0x4001, 0x6b}, {0x70000007, 0xe4e, 0x4, 0x401, 0x7fffffff, 0x5a4c, 0x0, 0x10}], "2ad2592ffeebf42f3903bef284830b14b343158ba28771c501ffba14cdbd0e7028436fe6b8e547736da48e274a286db9efeef0d3a84717e7f53bdbaf3b55d3fe571ed90eefce1a8e0b24e8583a034e50bcc17793595329721e1e0b726fb12c9108c8d58a0296dd36ffb78b6f53c843dc91e2d822a417a36e50c979c9e625177d85a9342347874294c891bad6b2299eb522234a6be1158f2381616eb6f980045373230d76", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x68c) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo\x00') openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) statx(r0, &(0x7f0000002880)='./file0\x00', 0x2000, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000140)) ptrace(0x8, 0xffffffffffffffff) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x807]}, 0x8, 0x800) r2 = getpid() ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x8, &(0x7f0000000040)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7, 0x7f, 0x2}, 0x7) msgrcv(0x0, 0x0, 0x0, 0xeeaeacc3478e3cf4, 0x3000) write$FUSE_OPEN(r1, 0x0, 0x0) executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x2000000000000) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) prctl$PR_SET_PDEATHSIG(0x1, 0x13) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x13) prctl$PR_SET_PDEATHSIG(0x1, 0x31) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x31) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ppoll(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r5, 0x13) waitid(0x1, r5, 0x0, 0x2, &(0x7f0000000200)) statfs(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)=""/91) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000100)) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r7 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwrite64(r7, 0x0, 0x43, 0x5) executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080)=r0, 0x12) tgkill(r0, r0, 0x13) (async) tgkill(r0, r0, 0x13) prlimit64(r0, 0x0, &(0x7f0000000000), 0x0) r2 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) fallocate(r2, 0x0, 0x1, 0xb0c) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000001080)=""/4096) (async) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000001080)=""/4096) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') read$FUSE(r3, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x60000, 0xd5b, 0x1, 0x6, 0x9}) (async) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x60000, 0xd5b, 0x1, 0x6, 0x9}) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program did not crash replaying the whole log did not cause a kernel crash single: executing 33 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ptmx-socket$inet_udp-ioctl$TIOCSETD-fcntl$dupfd-ioctl$TCFLSH-ioctl$TIOCSETD-ioctl$TIOCSTI-ioctl$TIOCSTI-ioctl$TIOCSTI-syz_emit_ethernet-seccomp$SECCOMP_SET_MODE_FILTER-openat$tun-ioctl$TUNATTACHFILTER-socket$inet6_tcp-bind$inet6-connect$inet6-fcntl$dupfd-shutdown-socket$inet6_icmp_raw-setsockopt$IP6T_SO_SET_REPLACE-prctl$PR_SET_PDEATHSIG-prctl$PR_SET_PDEATHSIG detailed listing: executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SET_TAGGED_ADDR_CTRL-openat$tun-syz_open_procfs$namespace-socket$netlink-sendmsg$netlink-pwritev2-signalfd4 detailed listing: executing program 0: prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2a0500, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x4, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0x3}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000004380)="0644a6ae6b", 0x5}, {&(0x7f0000000040)="2a23374a5fdc78503e394ddfc214e7c1d7863359f9", 0x15}], 0x2, 0x229, 0x1, 0x2) signalfd4(r0, &(0x7f0000000000)={[0x6]}, 0x8, 0x800) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SET_TAGGED_ADDR_CTRL-openat$tun-syz_open_procfs$namespace-socket$netlink-sendmsg$netlink-pwritev2-signalfd4 detailed listing: executing program 0: prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2a0500, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x4, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0x3}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000004380)="0644a6ae6b", 0x5}, {&(0x7f0000000040)="2a23374a5fdc78503e394ddfc214e7c1d7863359f9", 0x15}], 0x2, 0x229, 0x1, 0x2) signalfd4(r0, &(0x7f0000000000)={[0x6]}, 0x8, 0x800) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp detailed listing: executing program 0: socket$inet_udp(0x2, 0x2, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp detailed listing: executing program 0: socket$inet_udp(0x2, 0x2, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): signalfd4-fstat-flistxattr-flistxattr detailed listing: executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xa]}, 0x8, 0x0) fstat(r0, &(0x7f0000000040)) flistxattr(r0, 0x0, 0x0) (async) flistxattr(r0, 0x0, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): signalfd4-fstat-flistxattr-flistxattr detailed listing: executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xa]}, 0x8, 0x0) fstat(r0, &(0x7f0000000040)) flistxattr(r0, 0x0, 0x0) (async) flistxattr(r0, 0x0, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-ioctl$F2FS_IOC_SET_COMPRESS_OPTION-socket-getsockopt$IPT_SO_GET_REVISION_TARGET-syz_clone-rt_sigqueueinfo-socket$inet_icmp-ptrace$getsig-accept$inet-syz_open_procfs detailed listing: executing program 0: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001300)={0x6, 0x23, &(0x7f0000001400)=ANY=[@ANYBLOB="180000000200001333553cefd00011000080010000ff181100007c56e158fff771003af85c5f73c0c247cc8c42d7effefdde045d031459329df72567e1989d9161822583b31749f38c861ae06c37734f274c602de2a80794ddf58bc1f28f98fc", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000ffffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b7080000e00d00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000008520000005000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000200)=""/4096, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001200)={0x2, 0x2, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001240)=[0x1], &(0x7f0000001280)=[{0x1, 0x2, 0xa, 0x1}, {0x1, 0x5, 0x2, 0x8}, {0x2, 0x1, 0xe}, {0x1, 0x2, 0x6, 0x3}, {0x5, 0x5, 0x7, 0x2}, {0x2, 0x4, 0x6}, {0x2, 0x1, 0x3, 0x4}], 0x10, 0x81}, 0x94) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f00000013c0)={0x4c, 0x6}) (async) r1 = socket(0x2, 0x3, 0x11) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r2, 0x1d, &(0x7f0000000100)={0x8, 0x4, 0x4}) (async) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ptrace$getsig(0x4202, r2, 0x902d, &(0x7f0000000080)) (async) accept$inet(r3, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-ioctl$F2FS_IOC_SET_COMPRESS_OPTION-socket-getsockopt$IPT_SO_GET_REVISION_TARGET-syz_clone-rt_sigqueueinfo-socket$inet_icmp-ptrace$getsig-accept$inet-syz_open_procfs detailed listing: executing program 0: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001300)={0x6, 0x23, &(0x7f0000001400)=ANY=[@ANYBLOB="180000000200001333553cefd00011000080010000ff181100007c56e158fff771003af85c5f73c0c247cc8c42d7effefdde045d031459329df72567e1989d9161822583b31749f38c861ae06c37734f274c602de2a80794ddf58bc1f28f98fc", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000ffffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b7080000e00d00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000008520000005000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000200)=""/4096, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001200)={0x2, 0x2, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001240)=[0x1], &(0x7f0000001280)=[{0x1, 0x2, 0xa, 0x1}, {0x1, 0x5, 0x2, 0x8}, {0x2, 0x1, 0xe}, {0x1, 0x2, 0x6, 0x3}, {0x5, 0x5, 0x7, 0x2}, {0x2, 0x4, 0x6}, {0x2, 0x1, 0x3, 0x4}], 0x10, 0x81}, 0x94) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f00000013c0)={0x4c, 0x6}) (async) r1 = socket(0x2, 0x3, 0x11) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r2, 0x1d, &(0x7f0000000100)={0x8, 0x4, 0x4}) (async) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ptrace$getsig(0x4202, r2, 0x902d, &(0x7f0000000080)) (async) accept$inet(r3, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$netlink-syz_emit_ethernet-signalfd4-signalfd4-signalfd4-syz_open_procfs-prctl$PR_SET_MM_EXE_FILE-prctl$PR_SET_MM_EXE_FILE-syz_mount_image$fuse-symlinkat-symlinkat-mknodat detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000002e40)={0x14, 0x1a, 0x300, 0x70bd2d, 0x25dfdbff, "", [@nested={0x4, 0x6e}]}, 0x14}], 0x1}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="72b400000059", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000006e80)={[0x691]}, 0x8, 0x80800) (async) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000006e80)={[0x691]}, 0x8, 0x80800) signalfd4(0xffffffffffffffff, &(0x7f0000006e80)={[0x7fffffff]}, 0x8, 0x80800) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ipv6_route\x00') prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) (async) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file1\x00', r1, &(0x7f0000000300)='./file0\x00') (async) symlinkat(&(0x7f00000002c0)='./file1\x00', r1, &(0x7f0000000300)='./file0\x00') mknodat(r2, &(0x7f0000000000)='./file0\x00', 0x40, 0x4) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$netlink-syz_emit_ethernet-signalfd4-signalfd4-signalfd4-syz_open_procfs-prctl$PR_SET_MM_EXE_FILE-prctl$PR_SET_MM_EXE_FILE-syz_mount_image$fuse-symlinkat-symlinkat-mknodat detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000002e40)={0x14, 0x1a, 0x300, 0x70bd2d, 0x25dfdbff, "", [@nested={0x4, 0x6e}]}, 0x14}], 0x1}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="72b400000059", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000006e80)={[0x691]}, 0x8, 0x80800) (async) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000006e80)={[0x691]}, 0x8, 0x80800) signalfd4(0xffffffffffffffff, &(0x7f0000006e80)={[0x7fffffff]}, 0x8, 0x80800) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ipv6_route\x00') prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) (async) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file1\x00', r1, &(0x7f0000000300)='./file0\x00') (async) symlinkat(&(0x7f00000002c0)='./file1\x00', r1, &(0x7f0000000300)='./file0\x00') mknodat(r2, &(0x7f0000000000)='./file0\x00', 0x40, 0x4) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-socket$netlink-writev-setxattr$security_capability-syz_open_procfs-preadv-getdents64-membarrier-syz_clone-tkill detailed listing: executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)="390000001100090468fe070300afb800001c0000020000000000480100767500000019022b000a000300050000000000001e739cf400050000", 0x39}], 0x1) setxattr$security_capability(&(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000300), &(0x7f0000000140)=@v3={0x3000000, [{0x7fff, 0x5}, {0x9, 0x2901}]}, 0x18, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='comm\x00') preadv(r2, 0x0, 0x0, 0xa3, 0xd) getdents64(r0, &(0x7f00000001c0)=""/193, 0xc1) membarrier(0x8, 0x0) r3 = syz_clone(0xcac4400, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x34) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-socket$netlink-writev-setxattr$security_capability-syz_open_procfs-preadv-getdents64-membarrier-syz_clone-tkill detailed listing: executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)="390000001100090468fe070300afb800001c0000020000000000480100767500000019022b000a000300050000000000001e739cf400050000", 0x39}], 0x1) setxattr$security_capability(&(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000300), &(0x7f0000000140)=@v3={0x3000000, [{0x7fff, 0x5}, {0x9, 0x2901}]}, 0x18, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='comm\x00') preadv(r2, 0x0, 0x0, 0xa3, 0xd) getdents64(r0, &(0x7f00000001c0)=""/193, 0xc1) membarrier(0x8, 0x0) r3 = syz_clone(0xcac4400, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x34) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-getdents64-timer_create-mount$overlay-socket-setsockopt$inet6_int-syz_clone-rt_tgsigqueueinfo-setpriority-timerfd_create-timerfd_gettime-timer_settime detailed listing: executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r0, &(0x7f00000001c0)=""/193, 0xc1) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)=0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10001, 0x0) r2 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000000)=0x5cb, 0x4) r3 = syz_clone(0x8100, 0x0, 0xfffffffffffffdb0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r3, r3, 0x103a, &(0x7f0000000100)={0x28, 0x6}) setpriority(0x0, 0x0, 0x3) r4 = timerfd_create(0x0, 0x80000) timerfd_gettime(r4, &(0x7f00000004c0)) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}}, &(0x7f00000000c0)) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-getdents64-timer_create-mount$overlay-socket-setsockopt$inet6_int-syz_clone-rt_tgsigqueueinfo-setpriority-timerfd_create-timerfd_gettime-timer_settime detailed listing: executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r0, &(0x7f00000001c0)=""/193, 0xc1) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)=0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10001, 0x0) r2 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000000)=0x5cb, 0x4) r3 = syz_clone(0x8100, 0x0, 0xfffffffffffffdb0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r3, r3, 0x103a, &(0x7f0000000100)={0x28, 0x6}) setpriority(0x0, 0x0, 0x3) r4 = timerfd_create(0x0, 0x80000) timerfd_gettime(r4, &(0x7f00000004c0)) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}}, &(0x7f00000000c0)) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-mknodat$loop-setxattr$incfs_metadata-ioctl$OCFS2_IOC_GROUP_EXTEND detailed listing: executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x3) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-mknodat$loop-setxattr$incfs_metadata-ioctl$OCFS2_IOC_GROUP_EXTEND detailed listing: executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x3) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): umount2 detailed listing: executing program 0: umount2(0x0, 0x1) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): umount2 detailed listing: executing program 0: umount2(0x0, 0x1) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-pipe2-syz_open_procfs-socket-sendmmsg$inet-mkdirat detailed listing: executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') pipe2(&(0x7f0000000080), 0x800) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = socket(0x10, 0x803, 0x0) sendmmsg$inet(r1, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast2}}}], 0x20}}], 0x1, 0xc0) mkdirat(r0, &(0x7f0000001c80)='./file1\x00', 0x4a) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_udp-close detailed listing: executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setxattr$security_capability detailed listing: executing program 0: setxattr$security_capability(&(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000240), &(0x7f0000000140)=@v2={0x2000000, [{0x4, 0x1000}, {0x1, 0x7}]}, 0x14, 0x2) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ptmx-syz_open_pts-socket$inet_icmp_raw-socket$unix-getsockopt$sock_linger detailed listing: executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) syz_open_pts(r0, 0x725f81) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000340), &(0x7f0000000380)=0x8) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-close_range detailed listing: executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-socket-connect$unix-openat$fuse-ioctl$sock_SIOCOUTQ-ioctl$FS_IOC_GETFSMAP detailed listing: executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) connect$unix(r1, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) (async) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x7, 0x400, 0x1c8, 0x4d0, 0x4, 0x3}, {0x45, 0x5b, 0x6, 0x2, 0xfffffffffffff90f, 0xad3}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-syz_open_procfs-write$FUSE_CREATE_OPEN-fsconfig$FSCONFIG_SET_FD-sendto$packet detailed listing: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_procfs(0x0, &(0x7f00000007c0)='comm\x00') write$FUSE_CREATE_OPEN(r1, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000000)='+\x00', 0x0, r0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-socket$inet_tcp-bind$inet-listen-connect$inet-accept$inet-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_PROG_ATTACH-bpf$MAP_UPDATE_ELEM-sendto detailed listing: executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x8) connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x6, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r3}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r3, r4, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r3, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r2}, 0x20) sendto(r2, &(0x7f0000000700)='a', 0x1, 0x0, 0x0, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-listxattr detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/uprobe_events\x00', 0x201, 0x0) listxattr(&(0x7f0000000040)='./tracing/file0\x00', &(0x7f0000000100)=""/89, 0x59) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket$nl_route-sendmsg$nl_route detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1c0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266"], 0x48}}, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-bind$inet6-connect$inet6-fcntl$dupfd-write$binfmt_elf64 detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) write$binfmt_elf64(r1, 0x0, 0xfffffd0a) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-ioctl$TUNSETIFF-openat$tun-close-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-ioctl$SIOCSIFHWADDR-socket$packet-ioctl$sock_SIOCGIFINDEX-sendto$packet detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x1b, 0x18, 0x5, 0x402, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x3, 0x6, @remote}, 0x14) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-bind$inet-connect$inet-setsockopt$inet_tcp_TCP_REPAIR-sendmmsg detailed listing: executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="3c974588005661", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000a80)="1cd2d176b105e80c4c6948cb8e03208676a247beee2e8079c3acecf7d41348143bb77f00f255ec126072189baa9cd36ab46f33aefd759eeedd359d6072abc0828f39002d90784457b6becc1e09605bb23066e9aabd5ecbbeae8fdd48b32d7a20472fd30a02597bc3d32221ded5c29d99f39b4fee7dead10267deeef489460ff04fa592950003137338aa2dc0ed9de834fc5329543e775ee8db9c778f57c4594dcd2f3f129310dfb10bb7ed508abd950c99467f8bd93e7769c44aeb", 0xbb}], 0x1, &(0x7f0000000bc0)=[{0x78, 0x119, 0x8, "add2965dd14fe622eaebc15043b12b9fff620a77ecdc65593ba37049a44990ee603fa0585c80f97d88cf3753a1ea839098983c679fc3c5b42c1abb89b294ad36b3525d9c19e028dce8d84b92bb9b62aef2cd4414df47443fd5443fe4ddeebfc99f2bbc46e03c"}], 0x78}}, {{0x0, 0x0, 0x0}}], 0x3, 0x44040) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-ioctl$sock_SIOCGIFINDEX-socket$nl_route-sendmsg$nl_route detailed listing: executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x4893a, 0x904a}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x811}, 0x4000000) program did not crash single: failed to extract reproducer bisect: bisecting 83 programs with base timeout 1m40s testing program (duration=2m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 5, 12, 5, 3, 4, 11, 5, 6, 2, 5, 5, 1, 2, 2, 2, 6, 4, 22, 4, 20, 19, 1, 1, 5, 17, 8, 9, 2, 4, 4, 21, 13, 5, 20, 3, 12, 12, 18, 10, 15, 4, 15, 10, 10, 3, 9, 25, 8, 7, 13, 13, 5, 6, 4, 10, 5, 10, 10, 40, 17, 13, 12, 4, 4, 2, 4, 27, 21, 29, 1, 1, 2, 8, 1, 7, 7, 11, 30, 11, 37, 14, 22] detailed listing: executing program 32: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x4893a, 0x904a}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x811}, 0x4000000) executing program 33: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="3c974588005661", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000a80)="1cd2d176b105e80c4c6948cb8e03208676a247beee2e8079c3acecf7d41348143bb77f00f255ec126072189baa9cd36ab46f33aefd759eeedd359d6072abc0828f39002d90784457b6becc1e09605bb23066e9aabd5ecbbeae8fdd48b32d7a20472fd30a02597bc3d32221ded5c29d99f39b4fee7dead10267deeef489460ff04fa592950003137338aa2dc0ed9de834fc5329543e775ee8db9c778f57c4594dcd2f3f129310dfb10bb7ed508abd950c99467f8bd93e7769c44aeb", 0xbb}], 0x1, &(0x7f0000000bc0)=[{0x78, 0x119, 0x8, "add2965dd14fe622eaebc15043b12b9fff620a77ecdc65593ba37049a44990ee603fa0585c80f97d88cf3753a1ea839098983c679fc3c5b42c1abb89b294ad36b3525d9c19e028dce8d84b92bb9b62aef2cd4414df47443fd5443fe4ddeebfc99f2bbc46e03c"}], 0x78}}, {{0x0, 0x0, 0x0}}], 0x3, 0x44040) executing program 34: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x1b, 0x18, 0x5, 0x402, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x3, 0x6, @remote}, 0x14) executing program 35: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) write$binfmt_elf64(r1, 0x0, 0xfffffd0a) executing program 36: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1c0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266"], 0x48}}, 0x0) executing program 37: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/uprobe_events\x00', 0x201, 0x0) listxattr(&(0x7f0000000040)='./tracing/file0\x00', &(0x7f0000000100)=""/89, 0x59) executing program 38: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x8) connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x6, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r3}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r3, r4, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r3, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r2}, 0x20) sendto(r2, &(0x7f0000000700)='a', 0x1, 0x0, 0x0, 0x0) executing program 39: r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_procfs(0x0, &(0x7f00000007c0)='comm\x00') write$FUSE_CREATE_OPEN(r1, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000000)='+\x00', 0x0, r0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) executing program 40: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) connect$unix(r1, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) (async) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x7, 0x400, 0x1c8, 0x4d0, 0x4, 0x3}, {0x45, 0x5b, 0x6, 0x2, 0xfffffffffffff90f, 0xad3}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) executing program 41: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) syz_open_pts(r0, 0x725f81) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000340), &(0x7f0000000380)=0x8) executing program 42: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) syz_open_pts(r0, 0x725f81) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000340), &(0x7f0000000380)=0x8) executing program 43: setxattr$security_capability(&(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000240), &(0x7f0000000140)=@v2={0x2000000, [{0x4, 0x1000}, {0x1, 0x7}]}, 0x14, 0x2) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0xc, &(0x7f0000000080)={[{@subsystem='devices'}]}) executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) executing program 44: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) executing program 45: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') pipe2(&(0x7f0000000080), 0x800) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = socket(0x10, 0x803, 0x0) sendmmsg$inet(r1, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast2}}}], 0x20}}], 0x1, 0xc0) mkdirat(r0, &(0x7f0000001c80)='./file1\x00', 0x4a) executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getegid() setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x6, &(0x7f0000000040)=[{0x3ff, 0x9, 0x7, 0x5}, {0x5, 0x2, 0x6, 0xa6}, {0x0, 0x10, 0x7, 0x3}, {0x9, 0x9, 0x7, 0x3}, {0x37, 0x6, 0x2}, {0xffff, 0xd, 0x5, 0x1}]}, 0x10) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x20, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req={0xfff, 0x637, 0x4, 0xfff}, 0x10) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) mount$cgroup(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0xc, &(0x7f0000000080)={[{@subsystem='devices'}]}) umount2(&(0x7f0000000180)='./file0\x00', 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2ca600, 0x0) setxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)={'L+', 0x1}, 0x16, 0x1) fdatasync(r1) syz_clone(0xc80ec000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x34, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0x0) recvfrom(r2, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)={0x20, 0x15, 0x1, 0x70bd27, 0x25dfdbff, "", [@typed={0x2, 0x138, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x2, 0x0, 0x0, @uid}]}, 0x20}], 0x1}, 0x4000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') unlinkat(r1, &(0x7f0000000040)='./mnt\x00', 0x200) executing program 4: openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x280000, 0x0) (async) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x280000, 0x0) flistxattr(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r3, 0x5) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) accept4$inet(r3, 0x0, 0x0, 0x0) (async) r4 = accept4$inet(r3, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='0', 0x1) (async) write(0xffffffffffffffff, &(0x7f0000000200)='0', 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='reno', 0x4) (async) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='reno', 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x5) (async) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x5) getsockopt$inet_tcp_int(r1, 0x6, 0x1, 0x0, &(0x7f0000003280)) executing program 4: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fadvise64(r0, 0xb6f, 0x3, 0x7caa02def0ceb509) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00') r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/snmp\x00') read$FUSE(r2, 0x0, 0xff5d) r3 = memfd_create(&(0x7f0000000700)='v\xa6\xf5hj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!\x10\x00\x00\x00\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa50\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5g\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xc6\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xec\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed?:\x84S\xb9\xbf\xab#\xd0N\x8f\x1ey7\x9286p\x10uZ\xf0\xd7\xe5\xba\xe7~\xfb\x8b\xce+fL\x11\x8e\xec\xe3\x90w\f\xf1~\x9a\x95v6\xe5O9\xae\r\xed\xac\xb8\t\x8eD#\x8a\x93\xd0\xa7\x12F\t\x03\xa4\x8f*\x1a\x88\xffq\xf9\x03\xca\x97\x98\\\xcaN\x18\xce\x8a\xf3]\\<\x00\x97\x1a\xf6\xfbs\xe6A/\x1c\xe0\xdb\xad\xe7\x16K:6\x0fo\x9f\xe3\x9f\xd91\x10\xd6qoz\xcc\xee?PvF\xde\xf5&o)c\xb4\f*\x0e\xb9\x85\x95\x01\xf0`g\xb7\x03\b\xc41\x90\xa6\xafB\x1b]\x02U\xcb\\\x1fiR\xb7v\xddF\xa59P\xb9\x10\xab\x1c\x05$\xd3P\xba\x83\x1b\xb7\xb3\xf4_\xe1z\x95\x03J3\xf8\x8c;J\xad=\x0f\x98', 0x1) write(r3, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) readlinkat(r1, &(0x7f0000000040)='./file1\x00', &(0x7f00000021c0)=""/102372, 0x18fe4) socket$nl_route(0x10, 0x3, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40a240, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000000100, 0x0) getsockopt$inet6_int(r4, 0x29, 0x50, 0x0, &(0x7f00000003c0)=0x27) r5 = memfd_create(&(0x7f0000000040)='/dev/full\x00', 0x2) close(r5) executing program 4: umount2(0x0, 0x1) executing program 46: umount2(0x0, 0x1) executing program 5: setresuid(0x0, 0xee01, 0x0) (async) futex(0x0, 0x4, 0x1, 0x0, 0x0, 0x4) (async, rerun: 64) mprotect(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x300000e) (async, rerun: 64) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x9, 0x4) executing program 5: getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) getgroups(0x3, &(0x7f0000000240)=[0xee00, 0xee00, 0xee01]) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x802, &(0x7f00000004c0)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x3}}, {@max_read={'max_read', 0x3d, 0x200}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0xf610}}, {@max_read={'max_read', 0x3d, 0xf5}}, {@blksize={'blksize', 0x3d, 0x1400}}, {@blksize={'blksize', 0x3d, 0x200}}, {}, {@default_permissions}], [{@smackfsroot={'smackfsroot', 0x3d, 'security.capability\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '//{}}@]\\:(:\'%\'@([-@'}}]}}, 0x1, 0x0, &(0x7f0000000680)="59c34f1eab3bda949e313eb59abb5fce80fede6a28dd549799591c77e6704ee09e28586469d77b7c") renameat(0xffffffffffffffff, &(0x7f0000000480)='./mnt\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000180)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) sched_getparam(0x0, &(0x7f0000000000)) connect$netlink(r2, &(0x7f00000000c0)=@unspec, 0xc) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000000c0)=""/155) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x191, 0xffffffff}) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1, 0x2, 0x32, 0x520ea3b1}) pselect6(0x40, &(0x7f0000000040)={0x8, 0x4, 0xb, 0x6, 0xfffffffffffffbfa, 0x1, 0x4, 0x3}, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000000), &(0x7f0000000080)=@v2={0x2000000, [{0xfe, 0x6}, {0x5, 0x5}]}, 0x14, 0x1) executing program 5: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregset(0x4205, r1, 0x1, &(0x7f0000000140)={&(0x7f0000000580)}) linkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00', 0x400) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2d, 'perf_event'}, {0x2b, 'cpuset'}, {0x2b, 'cpu'}, {0x2d, 'cpuset'}, {0x2d, 'blkio'}, {0x2d, 'blkio'}, {0x2d, 'hugetlb'}]}, 0x38) signalfd4(0xffffffffffffffff, &(0x7f0000006e80)={[0x7fffffff]}, 0x8, 0x80800) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) (async) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x338, 0x150, 0x150, 0xffffffff, 0xa8, 0x0, 0x2a0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x5, 0x0, {[{{@ip={@loopback, @empty, 0xff, 0xff, 'batadv_slave_1\x00', 'virt_wifi0\x00', {}, {0xff}, 0x6, 0x0, 0x3}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @broadcast, @multicast1, @gre_key=0x8, @gre_key}}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0xff, 'veth0_macvtap\x00', 'ip6_vti0\x00', {0xff}, {}, 0xf7, 0x1, 0x16}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x2, @local, @broadcast, @icmp_id=0x66, @icmp_id=0x64}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x15, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @icmp_id=0x65, @gre_key=0x9}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x29, @loopback, @private=0xa010101, @icmp_id=0x68, @gre_key=0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104418, 0x0) (async) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x10101d, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000100)='./cgroup\x00', 0x0, 0x80000, 0x0) (async) mount$9p_unix(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1000, 0x0) (async) personality(0x6) executing program 5: getrandom(&(0x7f0000000040)=""/130, 0x82, 0x0) (async) getrandom(&(0x7f0000000100)=""/67, 0x43, 0x1) executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x3) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, 0x0) executing program 47: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x3) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, 0x0) executing program 6: r0 = socket$unix(0x1, 0x2, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0xb56]}, 0x8, 0x80000) (async) r2 = shmget$private(0x0, 0x3be4d8b4000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) r3 = shmget$private(0x0, 0x3000, 0x18, &(0x7f0000ffa000/0x3000)=nil) shmat(r3, &(0x7f0000ffa000/0x3000)=nil, 0x2000) r4 = geteuid() read$FUSE(r1, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000023c0)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@remote}}, &(0x7f00000024c0)=0xe8) statx(r1, &(0x7f0000002500)='./file0\x00', 0x400, 0x40, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000002640)=0x0) fcntl$getownex(r1, 0x10, &(0x7f0000002680)={0x0, 0x0}) shmctl$IPC_SET(r3, 0x1, &(0x7f00000026c0)={{0x0, r4, r5, r6, r7, 0x8, 0x3}, 0xc031, 0x8, 0x3, 0x4, r8, r9, 0x88c8}) (async) sysinfo(&(0x7f0000000800)=""/216) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) (async, rerun: 64) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000000c0)) (rerun: 64) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000080)=0x1, 0x4) shmat(r2, &(0x7f0000ffa000/0x1000)=nil, 0x4800) mknodat(r1, &(0x7f0000000280)='./file0\x00', 0x100, 0x3) (async) getsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) gettimeofday(&(0x7f0000000000), &(0x7f0000000040)) (async, rerun: 32) listen(r0, 0x7) (rerun: 32) executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)) connect$packet(r0, &(0x7f00000000c0)={0x11, 0x10, 0x0, 0x1, 0x1, 0x6, @broadcast}, 0x14) r1 = socket(0x840000000002, 0x3, 0xff) getsockname$inet6(r1, 0x0, &(0x7f0000000040)=0x52) r2 = socket$inet(0x2, 0x3, 0x1) setuid(0xee01) r3 = syz_open_procfs(0x0, &(0x7f0000000040)) linkat(r3, &(0x7f0000000380)='./cgroup\x00', r3, &(0x7f0000000300)='./file0\x00', 0x1400) fremovexattr(r2, &(0x7f0000000100)=@random={'security.', '.[*\'-\x00'}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) flock(r4, 0x2) executing program 6: setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="0200000001000000000000000400000000200000100000000000000020"], 0x24, 0x0) (async) r0 = socket$inet_icmp(0x2, 0x2, 0x1) close(r0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.impure\x00') executing program 6: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x1d3400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104419, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x10101d, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./cgroup\x00', 0x0, 0x80000, 0x0) mount$9p_unix(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0xb, &(0x7f0000000040)=""/109, &(0x7f00000000c0)=0x6d) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x40000, 0x148) recvmsg$inet_nvme(r0, &(0x7f0000002700)={&(0x7f0000000000)=@ll, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/85, 0x55}, {&(0x7f0000000100)=""/12, 0xc}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x3, &(0x7f0000001700)=""/4096, 0x1000}, 0x10160) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x80000000) ioctl$TIOCGPGRP(r4, 0x540f, 0x0) setsockopt$sock_int(r0, 0x1, 0x1b8ed52b43f409f1, &(0x7f00000001c0)=0x3, 0x4) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000240)=0x1, 0x4) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f00000000c0), 0x4) fcntl$lock(r0, 0x6, &(0x7f0000000680)={0x1, 0x0, 0x5, 0x40000000003fd}) openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) executing program 6: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0x6, 0x4) executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r0, &(0x7f00000001c0)=""/193, 0xc1) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)=0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10001, 0x0) r2 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000000)=0x5cb, 0x4) r3 = syz_clone(0x8100, 0x0, 0xfffffffffffffdb0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r3, r3, 0x103a, &(0x7f0000000100)={0x28, 0x6}) setpriority(0x0, 0x0, 0x3) r4 = timerfd_create(0x0, 0x80000) timerfd_gettime(r4, &(0x7f00000004c0)) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}}, &(0x7f00000000c0)) executing program 48: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r0, &(0x7f00000001c0)=""/193, 0xc1) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)=0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10001, 0x0) r2 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000000)=0x5cb, 0x4) r3 = syz_clone(0x8100, 0x0, 0xfffffffffffffdb0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r3, r3, 0x103a, &(0x7f0000000100)={0x28, 0x6}) setpriority(0x0, 0x0, 0x3) r4 = timerfd_create(0x0, 0x80000) timerfd_gettime(r4, &(0x7f00000004c0)) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}}, &(0x7f00000000c0)) executing program 7: ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000080)) (async, rerun: 64) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 64) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e24, @multicast2}, 0x10) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000040)={@remote, @remote}, 0xc) (async) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) (async, rerun: 64) setpgid(0x0, r3) (async, rerun: 64) r4 = syz_open_procfs$userns(0x0, &(0x7f00000000c0)) pwrite64(r4, 0x0, 0x0, 0x4ef) ptrace(0x10, r2) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000001440), 0x200000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) ptrace$getregset(0x4204, r2, 0x1, &(0x7f0000000480)={&(0x7f00000002c0)=""/209, 0xd1}) (async, rerun: 64) sched_setparam(r2, &(0x7f0000000000)=0xb) (async) sync_file_range(0xffffffffffffffff, 0x4, 0x40, 0x6) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000100)) executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680), 0x400, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000005300)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0200c00ba700000100070000000000040000000000200001000000d73e00"/39], 0x24, 0x3) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000340)={{0x2, 0x5}, 0x100, './file0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000040)=""/3, &(0x7f0000000100)=0x3) faccessat2(0xffffffffffffffff, &(0x7f0000000fc0)='./file0\x00', 0x1, 0x0) r2 = epoll_create1(0x0) r3 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000000100)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0xc00}}, {@default_permissions}], [{@obj_role={'obj_role', 0x3d, '/dev/net/tun\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fowner_gt={'fowner>', 0xee01}}]}}, 0x1, 0x0, &(0x7f0000000240)="2c396f4cc0317f900194dc439adec54ed938934d100df4ab66595fd1d1762b049ea41c359a8ef0db1e2def7e492429d1593ccdf774bcab7bf16bf7816576740dc186cb57acb1cc0c2e42259491c3e198a7cba085aeb040d893498f9fbeb04e641c0a847a3bda3b7d2a06d89cca13bbde76625eb9f558bb7e37c962367efce12643b65794183dc8d9e32cafb3a84bc116d7138ef4593db77b94965a3ae0a7e3bc93afb1") openat(r3, &(0x7f0000000300)='./file0\x00', 0x801c0, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x20000018}) executing program 7: lsetxattr$smack_xattr_label(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='security.SMACK64EXEC\x00', &(0x7f0000000340)=ANY=[], 0x1, 0x2) r0 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f00000001c0)=0x6e) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x80000000) llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_int(r2, 0x1, 0xb, &(0x7f00000000c0), &(0x7f0000000140)=0x4) socket$unix(0x1, 0x2, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = accept$unix(r0, &(0x7f0000000300), &(0x7f0000000380)=0x6e) syz_clone(0x410c3000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r3, 0x4002f516, &(0x7f00000002c0)={0xf, 0x7}) pselect6(0x40, &(0x7f0000000180)={0xa, 0x7fff, 0x0, 0x1, 0x4000000000030001, 0x4, 0x400, 0x7}, 0x0, 0x0, 0x0, 0x0) getxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="6fa16e3227dc36a5722600"], &(0x7f0000000280)=""/48, 0x30) executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000040), &(0x7f0000000140)=0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000000)) setns(r0, 0x40000000) executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001400)=ANY=[@ANYBLOB="240000001800050d00dffffffedbdf250300d1006f0800000400000008000500"], 0x24}], 0x1, 0x0, 0x0, 0x40000c0}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000002340)='./file0\x00', 0x100) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x8002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) listxattr(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)={0xc0000001}) mount(&(0x7f0000002080)=@sg0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='xfs\x00', 0x8000, &(0x7f0000002140)='\x00') shmdt(0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000002180)={'filter\x00', 0x0, [0xd0, 0x80000000, 0x1, 0x6, 0xe17]}, &(0x7f0000002200)=0x54) sendto$inet6(r0, 0x0, 0x0, 0x4044, &(0x7f0000000000)={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c) executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)="390000001100090468fe070300afb800001c0000020000000000480100767500000019022b000a000300050000000000001e739cf400050000", 0x39}], 0x1) setxattr$security_capability(&(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000300), &(0x7f0000000140)=@v3={0x3000000, [{0x7fff, 0x5}, {0x9, 0x2901}]}, 0x18, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='comm\x00') preadv(r2, 0x0, 0x0, 0xa3, 0xd) getdents64(r0, &(0x7f00000001c0)=""/193, 0xc1) membarrier(0x8, 0x0) r3 = syz_clone(0xcac4400, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x34) executing program 49: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)="390000001100090468fe070300afb800001c0000020000000000480100767500000019022b000a000300050000000000001e739cf400050000", 0x39}], 0x1) setxattr$security_capability(&(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000300), &(0x7f0000000140)=@v3={0x3000000, [{0x7fff, 0x5}, {0x9, 0x2901}]}, 0x18, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='comm\x00') preadv(r2, 0x0, 0x0, 0xa3, 0xd) getdents64(r0, &(0x7f00000001c0)=""/193, 0xc1) membarrier(0x8, 0x0) r3 = syz_clone(0xcac4400, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x34) executing program 8: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000003c0)=[{0x6, 0x9, 0x8, 0x7ff00001}]}) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x161482, 0xe8) executing program 8: futex(&(0x7f0000000080)=0x2, 0x80, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x2, 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/hci\x00') pread64(r1, 0x0, 0x16, 0x1001) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001480)) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000640)='net\x00') getdents64(r2, &(0x7f0000000480)=""/4096, 0x1000) executing program 8: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0x0, 0x200, 0x3c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x700, 0x8, 0x7, 0x9}}) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x9]}, 0x8, 0x80800) mkdirat(r1, &(0x7f0000000080)='./file0/file2\x00', 0x1ed) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) close(0x3) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x7, 0x7, 0x4000201, 0x96e, 0x3, 0x4}) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, 0x0}, 0x58) setitimer(0x1, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f00000000c0)={0x3, 0x0, [{0x3, 0x6, 0xdcf6, [0x2, 0x1, 0xffff, 0x7fffffff, 0x0, 0x0, 0x8, 0x7]}, {0x1, 0x2, 0x2, [0x3, 0x10001, 0x4, 0xe7, 0x0, 0x10001, 0x4d89, 0xd]}, {0x2, 0xfffffff5, 0x80, [0x10001, 0x97, 0xffff, 0x1, 0x9, 0x6, 0x7, 0x1]}]}) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000012c0), 0x402, 0x0) write$cgroup_freezer_state(r4, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000180)=@file={0x1}, 0x6e) semctl$GETPID(0x0, 0x1, 0xb, 0x0) listen(r5, 0x0) connect$unix(r5, &(0x7f0000000200)=@file={0x1}, 0x6e) linkat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x1400) capget(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x2, 0x8001, 0x7fffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000080), &(0x7f0000000040)=0x4) rt_sigpending(&(0x7f0000000000), 0x8) prctl$PR_SET_SECUREBITS(0x1c, 0x0) executing program 8: faccessat2(0xffffffffffffffff, &(0x7f0000000fc0)='./file0\x00', 0x1, 0x1000) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000001080)=""/4096) (async) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000001080)=""/4096) (async) r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) (async) r1 = inotify_init1(0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, 0x0) (async) sendfile(r0, r0, 0x0, 0xffff) mount$9p_xen(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x4402, &(0x7f00000000c0)={'trans=xen,', {[{@ignoreqv}, {@access_uid={'access', 0x3d, 0xee01}}, {@version_L}, {@cache_mmap}]}}) executing program 8: mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x80000000) mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f00000000c0)='gid=1\x00nk]e\xe5\xcd\xeb\x12\xcdx\xa6\xfb\xc7\f5\xaf\xea)\xfc\x80\x81X\xbb\xd33\xdf\bbx\x10\xa3\xc8n\xa4\'') r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r1, &(0x7f0000000200)={{0x107, 0xfe, 0x0, 0x38d, 0x83, 0x1, 0x11b, 0x6}, "4f8a9d37c3330df442333470cfa584387e7dfde089c715386dc4c9e3cfc00268dc420d08787ae76b8c6e6e00fc8289a411d214f0f54f447714b9aec40a8c0b7cb2639700f75f3af33318dd7f577becd03537a234745619c2bed6ed198641f5d536449df855bf179463decc554f721b27231a4d38b1389ac5544f2648e872f630b11c56e275963af1801ce0a54e454366cd183c5c063e2df810736c15898178bbe0ce2db07940da85a05eb486c5e15bcaa2563bbf02f45b745a248bea", ['\x00']}, 0x1dc) executing program 8: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000002e40)={0x14, 0x1a, 0x300, 0x70bd2d, 0x25dfdbff, "", [@nested={0x4, 0x6e}]}, 0x14}], 0x1}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="72b400000059", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000006e80)={[0x691]}, 0x8, 0x80800) (async) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000006e80)={[0x691]}, 0x8, 0x80800) signalfd4(0xffffffffffffffff, &(0x7f0000006e80)={[0x7fffffff]}, 0x8, 0x80800) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ipv6_route\x00') prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) (async) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file1\x00', r1, &(0x7f0000000300)='./file0\x00') (async) symlinkat(&(0x7f00000002c0)='./file1\x00', r1, &(0x7f0000000300)='./file0\x00') mknodat(r2, &(0x7f0000000000)='./file0\x00', 0x40, 0x4) executing program 50: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000002e40)={0x14, 0x1a, 0x300, 0x70bd2d, 0x25dfdbff, "", [@nested={0x4, 0x6e}]}, 0x14}], 0x1}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="72b400000059", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000006e80)={[0x691]}, 0x8, 0x80800) (async) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000006e80)={[0x691]}, 0x8, 0x80800) signalfd4(0xffffffffffffffff, &(0x7f0000006e80)={[0x7fffffff]}, 0x8, 0x80800) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ipv6_route\x00') prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) (async) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file1\x00', r1, &(0x7f0000000300)='./file0\x00') (async) symlinkat(&(0x7f00000002c0)='./file1\x00', r1, &(0x7f0000000300)='./file0\x00') mknodat(r2, &(0x7f0000000000)='./file0\x00', 0x40, 0x4) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901) close_range(r1, r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000100), 0x4) executing program 9: bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%-5lx \x00'}, 0x20) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000240)={{0x0, 0xc, 0x6, 0x2, 0x800, 0x7, 0x3, 0x703, 0xfffffe61, 0x8, 0x4, 0x7, 0x100, 0x28, 0x3}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x7ff]}, 0x8, 0x800) readlinkat(r2, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)=""/227, 0xe3) executing program 9: setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="0200000001000000000000000400000000200000100000000000000020"], 0x24, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 64) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.impure\x00') mount(&(0x7f0000000100)=@md0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='coda\x00', 0x10e0880, &(0x7f00000001c0)='system.posix_acl_default\x00') executing program 9: futex(&(0x7f000000cffc), 0x5, 0x2, 0x0, &(0x7f0000000000)=0x6, 0x25040001) r0 = syz_clone(0x4a84400, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x64010102, @local}, {0x12, 0x0, 0x0, @multicast2}}}}}, 0x0) mount$9p_unix(&(0x7f00000001c0)='./cgroup\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2000, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002340)='./file0\x00', 0x100) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x8002, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10) syz_open_pts(r1, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x0, r0}) executing program 9: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8]}, 0x8, 0x800) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x22000, 0x0) preadv(r1, 0x0, 0x0, 0x1142, 0x0) (async, rerun: 32) linkat(r0, &(0x7f00000000c0)='./file1/file3\x00', r0, &(0x7f0000000100)='./file1/file3\x00', 0x1000) (async, rerun: 32) renameat2(r0, &(0x7f0000000000)='./file1/file3\x00', r0, &(0x7f0000000040)='./file1/file3\x00', 0x6) executing program 9: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001300)={0x6, 0x23, &(0x7f0000001400)=ANY=[@ANYBLOB="180000000200001333553cefd00011000080010000ff181100007c56e158fff771003af85c5f73c0c247cc8c42d7effefdde045d031459329df72567e1989d9161822583b31749f38c861ae06c37734f274c602de2a80794ddf58bc1f28f98fc", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000ffffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b7080000e00d00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000008520000005000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000200)=""/4096, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001200)={0x2, 0x2, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001240)=[0x1], &(0x7f0000001280)=[{0x1, 0x2, 0xa, 0x1}, {0x1, 0x5, 0x2, 0x8}, {0x2, 0x1, 0xe}, {0x1, 0x2, 0x6, 0x3}, {0x5, 0x5, 0x7, 0x2}, {0x2, 0x4, 0x6}, {0x2, 0x1, 0x3, 0x4}], 0x10, 0x81}, 0x94) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f00000013c0)={0x4c, 0x6}) (async) r1 = socket(0x2, 0x3, 0x11) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r2, 0x1d, &(0x7f0000000100)={0x8, 0x4, 0x4}) (async) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ptrace$getsig(0x4202, r2, 0x902d, &(0x7f0000000080)) (async) accept$inet(r3, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') executing program 51: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001300)={0x6, 0x23, &(0x7f0000001400)=ANY=[@ANYBLOB="180000000200001333553cefd00011000080010000ff181100007c56e158fff771003af85c5f73c0c247cc8c42d7effefdde045d031459329df72567e1989d9161822583b31749f38c861ae06c37734f274c602de2a80794ddf58bc1f28f98fc", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000ffffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b7080000e00d00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000008520000005000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000200)=""/4096, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001200)={0x2, 0x2, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001240)=[0x1], &(0x7f0000001280)=[{0x1, 0x2, 0xa, 0x1}, {0x1, 0x5, 0x2, 0x8}, {0x2, 0x1, 0xe}, {0x1, 0x2, 0x6, 0x3}, {0x5, 0x5, 0x7, 0x2}, {0x2, 0x4, 0x6}, {0x2, 0x1, 0x3, 0x4}], 0x10, 0x81}, 0x94) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f00000013c0)={0x4c, 0x6}) (async) r1 = socket(0x2, 0x3, 0x11) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r2, 0x1d, &(0x7f0000000100)={0x8, 0x4, 0x4}) (async) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ptrace$getsig(0x4202, r2, 0x902d, &(0x7f0000000080)) (async) accept$inet(r3, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xc083, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='mounts\x00') get_mempolicy(&(0x7f0000000040), 0x0, 0x0, &(0x7f00004b0000/0x4000)=nil, 0x2) syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo\x00') (async) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo\x00') openat$cgroup_ro(r2, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x38, &(0x7f0000000080)=""/12, &(0x7f0000000100)=0xc) read$FUSE(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00') preadv(r4, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/181, 0xb5}], 0x1, 0x80, 0x800003) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) clock_gettime(0x0, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f0000000380)) (async) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x40, &(0x7f00000001c0)="0e54e01462ef08f20ce0a17505d9a809dca34c2b10000000c7053f8f922942c07d9b1c1aafb2ad6a23a5d8077d4646ec883bdb99638c1f94e125849be1fff7d40a373e5bac000000000000003cf2547345a8fed935086b2f6c9d782908100121", 0x60) setitimer(0x2, &(0x7f0000000040)={{r5, r6/1000+10000}, {0x0, 0xea60}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x800002, 0x0, 0x86, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000001600)='rootfs\x00', 0x76f0b08e62702311, 0x0) (async) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000001600)='rootfs\x00', 0x76f0b08e62702311, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x42002, 0x101) (async) r8 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x42002, 0x101) getdents64(r8, &(0x7f0000000400)=""/4096, 0xc00) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xa2e0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}) (async) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xa2e0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001480)={'ip_vti0\x00', &(0x7f0000001400)={'syztnl1\x00', r3, 0x7, 0x7800, 0x80000000, 0x2, {{0xf, 0x4, 0x2, 0x6, 0x3c, 0x67, 0x0, 0x5, 0x2f, 0x0, @private=0xa010102, @multicast1, {[@lsrr={0x83, 0x13, 0x31, [@local, @private=0xa010102, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0xdf, 0x1, 0x2, [{@empty}, {@empty, 0x3}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001480)={'ip_vti0\x00', &(0x7f0000001400)={'syztnl1\x00', r3, 0x7, 0x7800, 0x80000000, 0x2, {{0xf, 0x4, 0x2, 0x6, 0x3c, 0x67, 0x0, 0x5, 0x2f, 0x0, @private=0xa010102, @multicast1, {[@lsrr={0x83, 0x13, 0x31, [@local, @private=0xa010102, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0xdf, 0x1, 0x2, [{@empty}, {@empty, 0x3}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001580)={'sit0\x00', &(0x7f00000014c0)={'erspan0\x00', r9, 0x40, 0x8000, 0xa9d, 0x10, {{0x23, 0x4, 0x2, 0x0, 0x8c, 0x64, 0x0, 0x9, 0x4, 0x0, @private=0xa010102, @empty, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x6a, 0x0, 0x9, [0x0, 0x8]}, @cipso={0x86, 0x45, 0x3, [{0x7, 0x9, "857ce3d1ad29bd"}, {0x2, 0x2}, {0x0, 0xb, "1e5b71c41a7394cbb6"}, {0x5, 0x8, "ef97b7c968d1"}, {0x2, 0x10, "51d2cb50e84976a466a135410a16"}, {0x7, 0x11, "8f236babc488915bcdd8560e7ae567"}]}, @generic={0x44, 0x12, "3cae5a05588c87052211a14dfd3e3298"}, @ssrr={0x89, 0xf, 0xfa, [@remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x3a}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001580)={'sit0\x00', &(0x7f00000014c0)={'erspan0\x00', r9, 0x40, 0x8000, 0xa9d, 0x10, {{0x23, 0x4, 0x2, 0x0, 0x8c, 0x64, 0x0, 0x9, 0x4, 0x0, @private=0xa010102, @empty, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x6a, 0x0, 0x9, [0x0, 0x8]}, @cipso={0x86, 0x45, 0x3, [{0x7, 0x9, "857ce3d1ad29bd"}, {0x2, 0x2}, {0x0, 0xb, "1e5b71c41a7394cbb6"}, {0x5, 0x8, "ef97b7c968d1"}, {0x2, 0x10, "51d2cb50e84976a466a135410a16"}, {0x7, 0x11, "8f236babc488915bcdd8560e7ae567"}]}, @generic={0x44, 0x12, "3cae5a05588c87052211a14dfd3e3298"}, @ssrr={0x89, 0xf, 0xfa, [@remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x3a}]}]}}}}}) timer_create(0xfffffff9, 0x0, 0x0) (async) timer_create(0xfffffff9, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) (async) listen(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x5, 0x1, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) pwrite64(r0, 0x0, 0x0, 0x1000) (async) pwrite64(r0, 0x0, 0x0, 0x1000) executing program 0: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x10) r2 = socket$inet(0x2, 0x800, 0xfffffff5) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) r3 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) sendfile(r3, r3, 0x0, 0xffff) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) ioctl$TIOCGSID(r5, 0x5429, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @initdev}, &(0x7f00000000c0)=0xc) setsockopt(r2, 0x0, 0x40, 0x0, 0x0) getsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000080), &(0x7f0000000140)=0x4) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000040)=0x1, 0x4) recvfrom(r6, 0x0, 0x0, 0x140, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000180), 0x4) executing program 0: r0 = socket$inet6(0xa, 0x2, 0x40000000) (async) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x5}) msgget(0x1, 0x2b4) close(0x3) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000000)={@private, @multicast2}, &(0x7f0000000080)=0x8) (async) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000001140)={0x1, 0x1, 0x6, 0x3}) (async) r4 = syz_clone(0x101000, &(0x7f0000000080)="a3a92f6276d08d3506f1447bd2257c69727b0d85e1d5c391897431e22546769b2eaf5a4a0f478a03e86f89f66083adbfd28060356a6d11d6390f0f33356594770caa9564e082bd53a3be4dda6a67b5e31ac0470eb35675", 0x57, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="0ce8fa4ab843ee4fe5e353980fd50c84759156ecbe12e3a4001f6182edd00ca8be7d93320adcf04c") prlimit64(r4, 0xd, &(0x7f00000001c0)={0x5, 0x6}, &(0x7f0000000200)) (async) inotify_init1(0x800) executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000091b000/0x2000)=nil, 0x2000, 0x0) r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = fsopen(&(0x7f0000000100)='autofs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000140)='\x00', 0x0, r1) mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f00000000c0)='gid=1\x00nk]e\xe5\xcd\xeb\x12\xcdx\xa6\xfb\xc7\f5\xaf\xea)\xfc\x80\x81X\xbb\xd33\xdf\bbx\x10\xa3\xc8n\xa4\'') fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f00000000c0)=@v2={0x2000000, [{0x7, 0x5}, {0x39e, 0x5}]}, 0x14, 0x2) msgget(0x1, 0x2b4) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000280)) fsetxattr$security_capability(r0, &(0x7f0000000080), 0x0, 0x3d, 0x1) executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xa]}, 0x8, 0x0) fstat(r0, &(0x7f0000000040)) flistxattr(r0, 0x0, 0x0) (async) flistxattr(r0, 0x0, 0x0) executing program 52: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xa]}, 0x8, 0x0) fstat(r0, &(0x7f0000000040)) flistxattr(r0, 0x0, 0x0) (async) flistxattr(r0, 0x0, 0x0) executing program 1: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$sock_int(r0, 0x1, 0x22, 0x0, &(0x7f0000000000)=0x2) executing program 1: r0 = socket$inet(0x2, 0x802, 0x1) setsockopt(r0, 0x1c2e, 0xb6c, &(0x7f0000000080)="bb8f5d50b6820a67f7aae9f9b2e2906350105a627656895f5f4e0d453302b341d4c230e9105218f114839131e8b13d40c7f89f9b3b83be3fbc2cf00b7d59713ec04aa5e4b936f53d2237877ace4ddb2fae30c8cdca2cf81eec6f026d6dafdd875c44de5e01bc25f932bf7b74598d0e7e813583ea285ad85873df523e4274d129b05e1e5cfb6b0523d9c895f5198c733160daf0aed959fa347c907410044b12d1b4540c556f915346d00cf0547d02cbe030e6cc09a01a9dc57a9fdd944b91df73a571d69f6a6d7f137b93b4cd547977c7d71e26f1366d", 0xd6) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @empty}, &(0x7f00000001c0)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @loopback}, &(0x7f0000000040)=0xc) executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000007600210b00440000000000000300000000000000"], 0x18}}, 0x0) sendto(r4, &(0x7f0000000340)="05c3e8d340ea027d75682af1427a0f19f346a4c14109d602e65d3e95351229592392b833d2744744029da4acd2d1a400a445add91c9dc7b7bcbcb9fdc9a92ed9964f1d1f1ee5c0309a42505f6069b73f481d4ed49ca7868cd9ad2dba4620", 0x5e, 0xdbadab0ecfad9634, &(0x7f00000003c0)=@vsock={0x28, 0x0, 0x2710}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x18, 0x68, 0x1, 0x100003, 0x7ffffffd}, 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a80)=ANY=[@ANYRESOCT=r1], 0x18}, 0x1, 0x0, 0x0, 0x4048844}, 0x40) getresuid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000700)=0xe8) statx(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x6000, 0x7ff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getuid() getgroups(0x7, &(0x7f0000000880)=[0xee00, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee00]) r11 = getegid() r12 = getegid() read$FUSE(r0, &(0x7f00000008c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f0000002900)='./file0\x00', &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) fsetxattr$system_posix_acl(r3, &(0x7f0000000500)='system.posix_acl_access\x00', &(0x7f00000029c0)={{}, {0x1, 0x3}, [{0x2, 0x4, 0xee01}, {0x2, 0x0, 0xee00}, {0x2, 0x5, 0xee01}, {0x2, 0x7, r6}, {0x2, 0x5, r7}, {0x2, 0x1, r8}, {0x2, 0x4d07d305caebf254, 0xee01}, {0x2, 0x0, r9}, {0x2, 0x2}], {0x4, 0x1}, [{0x8, 0x2, r10}, {}, {0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8, 0x7, r13}, {0x8, 0x1, r14}], {}, {0x20, 0x4}}, 0x9c, 0x1) setsockopt$inet6_buf(r2, 0x3a, 0xcd, 0x0, 0x0) r15 = accept4$unix(r0, &(0x7f0000000200), &(0x7f00000002c0)=0x6e, 0x80000) getsockname$unix(r15, &(0x7f0000000080), &(0x7f0000000140)=0x6e) listen(0xffffffffffffffff, 0xbfdd) getsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), &(0x7f0000000040)=0x4) executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x222004, 0x0, 0x0, 0x0, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB='user.'], 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000001440)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3e, 0x1, 0x100, 0x40, 0x200, 0x0, 0x40, 0x38, 0x3, 0x40, 0x2, 0x1}, [{0x1, 0x0, 0x0, 0x10000, 0x150, 0x10, 0x1000}, {0x1, 0x0, 0x0, 0x20000, 0x200, 0x0, 0x2000, 0x10}, {}], '\x00'/4096, ['\x00', '\x00', '\x00']}, 0x13e8) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, &(0x7f0000002840), &(0x7f0000002880), 0x0) listen(r2, 0x5) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r5 = accept4$inet(r2, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='0', 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='reno', 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x5) set_robust_list(&(0x7f0000000080)={0x0, 0x5703}, 0x18) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x469, 0x4) executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r1, 0x0, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = semget$private(0x0, 0x2, 0x4d) semctl$GETPID(r3, 0x1, 0xb, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x7ffffffb, 0x4) r4 = syz_pidfd_open(0x0, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000500)=ANY=[@ANYRESOCT=r4, @ANYRESDEC=r4, @ANYRES32=r4, @ANYRES64=r4], 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0xd, &(0x7f00000000c0)=0x5, 0x4) r6 = signalfd4(r2, &(0x7f0000000240)={[0x8]}, 0x8, 0x800) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0xe4180, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) pselect6(0x40, &(0x7f0000000180)={0xa, 0x7ffc, 0x0, 0x1, 0x4000000000010001, 0x9000000000000008, 0x400, 0x7}, 0x0, 0x0, 0x0, 0x0) syz_clone(0x4a84400, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x8, 0x1) flistxattr(r6, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_clone(0x410c3000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='statm\x00') read$FUSE(r8, 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x3, &(0x7f0000000040)=0x9, 0x4) statx(r8, &(0x7f00000001c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000280)) write$tun(r6, &(0x7f0000002d00)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYRES32=0x41424344, @ANYBLOB="40c2000890780005051200000002000000080000000800000063fe11f9896b33473ccd16f38048fbe0b8bafe0ff989970eb6c1e3a3cf48e9ea6c01fe06e2d4c3d90000009520ec2875228455ab87176082e5f47cbacb236f85421f2777d3aac27e0a90cb7427bcf4205e4e9199ac21af1b568dfb297c7d77dded4bd3ce73cb11d8ac8c940504dc02e0be02dac6abd3aa5e4b74182c0c9c04b2e2e24633f5efcee9a1989895210811b7d7413f619185758e812c7fe11252461924cdd9d6a9bc501f2e42f3686c00fc27fcd202dd6d4719bda20269d6bd8fdc9f5fa09167119b8fdf414347631fc53902b00528e123f8429e6758e02876"], 0x13fc) executing program 1: socket$inet_udp(0x2, 0x2, 0x0) executing program 53: socket$inet_udp(0x2, 0x2, 0x0) executing program 2: sched_setscheduler(0x0, 0x2, &(0x7f0000000000)) getresuid(&(0x7f00000000c0), &(0x7f0000000080), &(0x7f0000000140)) executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000000)=""/11, &(0x7f0000000040)=0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104419, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x10101d, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x80000, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1080008, &(0x7f0000000100)=ANY=[], 0x1, 0x0, 0x0) executing program 2: get_mempolicy(0x0, &(0x7f0000000100), 0x200000316, &(0x7f0000ffd000/0x2000)=nil, 0x4) executing program 2: prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2a0500, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x4, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0x3}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000004380)="0644a6ae6b", 0x5}, {&(0x7f0000000040)="2a23374a5fdc78503e394ddfc214e7c1d7863359f9", 0x15}], 0x2, 0x229, 0x1, 0x2) signalfd4(r0, &(0x7f0000000000)={[0x6]}, 0x8, 0x800) executing program 54: prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2a0500, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x4, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0x3}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000004380)="0644a6ae6b", 0x5}, {&(0x7f0000000040)="2a23374a5fdc78503e394ddfc214e7c1d7863359f9", 0x15}], 0x2, 0x229, 0x1, 0x2) signalfd4(r0, &(0x7f0000000000)={[0x6]}, 0x8, 0x800) executing program 3: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00') r1 = memfd_create(&(0x7f0000000700)='v\xa6\xf5hj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!\x10\x00\x00\x00\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa50\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5g\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xc6\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xec\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed?:\x84S\xb9\xbf\xab#\xd0N\x8f\x1ey7\x9286p\x10uZ\xf0\xd7\xe5\xba\xe7~\xfb\x8b\xce+fL\x11\x8e\xec\xe3\x90w\f\xf1~\x9a\x95v6\xe5O9\xae\r\xed\xac\xb8\t\x8eD#\x8a\x93\xd0\xa7\x12F\t\x03\xa4\x8f*\x1a\x88\xffq\xf9\x03\xca\x97\x98\\\xcaN\x18\xce\x8a\xf3]\\<\x00\x97\x1a\xf6\xfbs\xe6A/\x1c\xe0\xdb\xad\xe7\x16K:6\x0fo\x9f\xe3\x9f\xd91\x10\xd6qoz\xcc\xee?PvF\xde\xf5&o)c\xb4\f*\x0e\xb9\x85\x95\x01\xf0`g\xb7\x03\b\xc41\x90\xa6\xafB\x1b]\x02U\xcb\\\x1fiR\xb7v\xddF\xa59P\xb9\x10\xab\x1c\x05$\xd3P\xba\x83\x1b\xb7\xb3\xf4_\xe1z\x95\x03J3\xf8\x8c;J\xad=\x0f\x98', 0x1) write(r1, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f0000000140)={0x11, 0xf8, 0x0, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0x14) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x7, 0x10, r1, 0x86769000) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) readlinkat(r0, &(0x7f0000000040)='./file1\x00', &(0x7f00000021c0)=""/102372, 0x18fe4) executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/../file0\x00', 0x2027e1, 0x139) r1 = socket$inet(0x2, 0x802, 0x1) recvmmsg(r1, &(0x7f0000004340)=[{{0x0, 0x0, 0x0}, 0x13}], 0x1, 0x40, 0x0) symlinkat(&(0x7f0000000080)='./file1\x00', r0, &(0x7f00000000c0)='./file1\x00') (async) symlinkat(&(0x7f0000000080)='./file1\x00', r0, &(0x7f00000000c0)='./file1\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x11800, 0x0) pidfd_send_signal(r2, 0x3b, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x1400) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) (async) r3 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r4 = dup(r3) write$binfmt_elf32(r4, &(0x7f0000002800)=ANY=[@ANYBLOB="7f454c464a03011301000000000000000200030004000000eb01000038000000d600000097700000fe032000010007000c0007000000000003000000060000000200000000040000d50e"], 0xa58) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000040)) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000040)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) (async) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) (async) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x69, 0x1, 0xf, 0x7, 0x3, 0x6, 0x40, 0x1d7, 0x40, 0x45, 0x1, 0x9, 0x38, 0x3, 0x2, 0x4, 0xe75}, [{0x60000000, 0x4, 0xe, 0x64b0, 0x8, 0x6, 0x4, 0x2}, {0x0, 0x3, 0x9, 0x8, 0x7fff, 0x7, 0x4001, 0x6b}, {0x70000007, 0xe4e, 0x4, 0x401, 0x7fffffff, 0x5a4c, 0x0, 0x10}], "2ad2592ffeebf42f3903bef284830b14b343158ba28771c501ffba14cdbd0e7028436fe6b8e547736da48e274a286db9efeef0d3a84717e7f53bdbaf3b55d3fe571ed90eefce1a8e0b24e8583a034e50bcc17793595329721e1e0b726fb12c9108c8d58a0296dd36ffb78b6f53c843dc91e2d822a417a36e50c979c9e625177d85a9342347874294c891bad6b2299eb522234a6be1158f2381616eb6f980045373230d76", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x68c) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo\x00') openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) statx(r0, &(0x7f0000002880)='./file0\x00', 0x2000, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000140)) ptrace(0x8, 0xffffffffffffffff) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x807]}, 0x8, 0x800) r2 = getpid() ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x8, &(0x7f0000000040)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7, 0x7f, 0x2}, 0x7) msgrcv(0x0, 0x0, 0x0, 0xeeaeacc3478e3cf4, 0x3000) write$FUSE_OPEN(r1, 0x0, 0x0) executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x2000000000000) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) prctl$PR_SET_PDEATHSIG(0x1, 0x13) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x13) prctl$PR_SET_PDEATHSIG(0x1, 0x31) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x31) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ppoll(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r5, 0x13) waitid(0x1, r5, 0x0, 0x2, &(0x7f0000000200)) statfs(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)=""/91) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000100)) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r7 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwrite64(r7, 0x0, 0x43, 0x5) executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080)=r0, 0x12) tgkill(r0, r0, 0x13) (async) tgkill(r0, r0, 0x13) prlimit64(r0, 0x0, &(0x7f0000000000), 0x0) r2 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) fallocate(r2, 0x0, 0x1, 0xb0c) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000001080)=""/4096) (async) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000001080)=""/4096) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') read$FUSE(r3, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x60000, 0xd5b, 0x1, 0x6, 0x9}) (async) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x60000, 0xd5b, 0x1, 0x6, 0x9}) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. bisect: bisecting 83 programs bisect: split chunks (needed=false): <83> bisect: split chunk #0 of len 83 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=1m53s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 4, 4, 21, 13, 5, 20, 3, 12, 12, 18, 10, 15, 4, 15, 10, 10, 3, 9, 25, 8, 7, 13, 13, 5, 6, 4, 10, 5, 10, 10, 40, 17, 13, 12, 4, 4, 2, 4, 27, 21, 29, 1, 1, 2, 8, 1, 7, 7, 11, 30, 11, 37, 14, 22] detailed listing: executing program 5: getrandom(&(0x7f0000000040)=""/130, 0x82, 0x0) (async) getrandom(&(0x7f0000000100)=""/67, 0x43, 0x1) executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x3) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, 0x0) executing program 47: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x3) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, 0x0) executing program 6: r0 = socket$unix(0x1, 0x2, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0xb56]}, 0x8, 0x80000) (async) r2 = shmget$private(0x0, 0x3be4d8b4000, 0x0, &(0x7f0000fff000/0x1000)=nil) (async) r3 = shmget$private(0x0, 0x3000, 0x18, &(0x7f0000ffa000/0x3000)=nil) shmat(r3, &(0x7f0000ffa000/0x3000)=nil, 0x2000) r4 = geteuid() read$FUSE(r1, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000023c0)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@remote}}, &(0x7f00000024c0)=0xe8) statx(r1, &(0x7f0000002500)='./file0\x00', 0x400, 0x40, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000002640)=0x0) fcntl$getownex(r1, 0x10, &(0x7f0000002680)={0x0, 0x0}) shmctl$IPC_SET(r3, 0x1, &(0x7f00000026c0)={{0x0, r4, r5, r6, r7, 0x8, 0x3}, 0xc031, 0x8, 0x3, 0x4, r8, r9, 0x88c8}) (async) sysinfo(&(0x7f0000000800)=""/216) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) (async, rerun: 64) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000000c0)) (rerun: 64) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000080)=0x1, 0x4) shmat(r2, &(0x7f0000ffa000/0x1000)=nil, 0x4800) mknodat(r1, &(0x7f0000000280)='./file0\x00', 0x100, 0x3) (async) getsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) gettimeofday(&(0x7f0000000000), &(0x7f0000000040)) (async, rerun: 32) listen(r0, 0x7) (rerun: 32) executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)) connect$packet(r0, &(0x7f00000000c0)={0x11, 0x10, 0x0, 0x1, 0x1, 0x6, @broadcast}, 0x14) r1 = socket(0x840000000002, 0x3, 0xff) getsockname$inet6(r1, 0x0, &(0x7f0000000040)=0x52) r2 = socket$inet(0x2, 0x3, 0x1) setuid(0xee01) r3 = syz_open_procfs(0x0, &(0x7f0000000040)) linkat(r3, &(0x7f0000000380)='./cgroup\x00', r3, &(0x7f0000000300)='./file0\x00', 0x1400) fremovexattr(r2, &(0x7f0000000100)=@random={'security.', '.[*\'-\x00'}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) flock(r4, 0x2) executing program 6: setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="0200000001000000000000000400000000200000100000000000000020"], 0x24, 0x0) (async) r0 = socket$inet_icmp(0x2, 0x2, 0x1) close(r0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.impure\x00') executing program 6: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x1d3400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104419, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x10101d, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./cgroup\x00', 0x0, 0x80000, 0x0) mount$9p_unix(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0xb, &(0x7f0000000040)=""/109, &(0x7f00000000c0)=0x6d) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x40000, 0x148) recvmsg$inet_nvme(r0, &(0x7f0000002700)={&(0x7f0000000000)=@ll, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/85, 0x55}, {&(0x7f0000000100)=""/12, 0xc}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x3, &(0x7f0000001700)=""/4096, 0x1000}, 0x10160) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x80000000) ioctl$TIOCGPGRP(r4, 0x540f, 0x0) setsockopt$sock_int(r0, 0x1, 0x1b8ed52b43f409f1, &(0x7f00000001c0)=0x3, 0x4) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000240)=0x1, 0x4) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f00000000c0), 0x4) fcntl$lock(r0, 0x6, &(0x7f0000000680)={0x1, 0x0, 0x5, 0x40000000003fd}) openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) executing program 6: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0x6, 0x4) executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r0, &(0x7f00000001c0)=""/193, 0xc1) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)=0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10001, 0x0) r2 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000000)=0x5cb, 0x4) r3 = syz_clone(0x8100, 0x0, 0xfffffffffffffdb0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r3, r3, 0x103a, &(0x7f0000000100)={0x28, 0x6}) setpriority(0x0, 0x0, 0x3) r4 = timerfd_create(0x0, 0x80000) timerfd_gettime(r4, &(0x7f00000004c0)) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}}, &(0x7f00000000c0)) executing program 48: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r0, &(0x7f00000001c0)=""/193, 0xc1) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)=0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10001, 0x0) r2 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000000)=0x5cb, 0x4) r3 = syz_clone(0x8100, 0x0, 0xfffffffffffffdb0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r3, r3, 0x103a, &(0x7f0000000100)={0x28, 0x6}) setpriority(0x0, 0x0, 0x3) r4 = timerfd_create(0x0, 0x80000) timerfd_gettime(r4, &(0x7f00000004c0)) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}}, &(0x7f00000000c0)) executing program 7: ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000080)) (async, rerun: 64) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 64) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e24, @multicast2}, 0x10) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000040)={@remote, @remote}, 0xc) (async) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) (async, rerun: 64) setpgid(0x0, r3) (async, rerun: 64) r4 = syz_open_procfs$userns(0x0, &(0x7f00000000c0)) pwrite64(r4, 0x0, 0x0, 0x4ef) ptrace(0x10, r2) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000001440), 0x200000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) ptrace$getregset(0x4204, r2, 0x1, &(0x7f0000000480)={&(0x7f00000002c0)=""/209, 0xd1}) (async, rerun: 64) sched_setparam(r2, &(0x7f0000000000)=0xb) (async) sync_file_range(0xffffffffffffffff, 0x4, 0x40, 0x6) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000100)) executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680), 0x400, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000005300)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0200c00ba700000100070000000000040000000000200001000000d73e00"/39], 0x24, 0x3) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000340)={{0x2, 0x5}, 0x100, './file0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000040)=""/3, &(0x7f0000000100)=0x3) faccessat2(0xffffffffffffffff, &(0x7f0000000fc0)='./file0\x00', 0x1, 0x0) r2 = epoll_create1(0x0) r3 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000000100)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0xc00}}, {@default_permissions}], [{@obj_role={'obj_role', 0x3d, '/dev/net/tun\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fowner_gt={'fowner>', 0xee01}}]}}, 0x1, 0x0, &(0x7f0000000240)="2c396f4cc0317f900194dc439adec54ed938934d100df4ab66595fd1d1762b049ea41c359a8ef0db1e2def7e492429d1593ccdf774bcab7bf16bf7816576740dc186cb57acb1cc0c2e42259491c3e198a7cba085aeb040d893498f9fbeb04e641c0a847a3bda3b7d2a06d89cca13bbde76625eb9f558bb7e37c962367efce12643b65794183dc8d9e32cafb3a84bc116d7138ef4593db77b94965a3ae0a7e3bc93afb1") openat(r3, &(0x7f0000000300)='./file0\x00', 0x801c0, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x20000018}) executing program 7: lsetxattr$smack_xattr_label(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='security.SMACK64EXEC\x00', &(0x7f0000000340)=ANY=[], 0x1, 0x2) r0 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f00000001c0)=0x6e) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x80000000) llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_int(r2, 0x1, 0xb, &(0x7f00000000c0), &(0x7f0000000140)=0x4) socket$unix(0x1, 0x2, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = accept$unix(r0, &(0x7f0000000300), &(0x7f0000000380)=0x6e) syz_clone(0x410c3000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r3, 0x4002f516, &(0x7f00000002c0)={0xf, 0x7}) pselect6(0x40, &(0x7f0000000180)={0xa, 0x7fff, 0x0, 0x1, 0x4000000000030001, 0x4, 0x400, 0x7}, 0x0, 0x0, 0x0, 0x0) getxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="6fa16e3227dc36a5722600"], &(0x7f0000000280)=""/48, 0x30) executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000040), &(0x7f0000000140)=0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000000)) setns(r0, 0x40000000) executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001400)=ANY=[@ANYBLOB="240000001800050d00dffffffedbdf250300d1006f0800000400000008000500"], 0x24}], 0x1, 0x0, 0x0, 0x40000c0}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000002340)='./file0\x00', 0x100) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x8002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) listxattr(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)={0xc0000001}) mount(&(0x7f0000002080)=@sg0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='xfs\x00', 0x8000, &(0x7f0000002140)='\x00') shmdt(0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000002180)={'filter\x00', 0x0, [0xd0, 0x80000000, 0x1, 0x6, 0xe17]}, &(0x7f0000002200)=0x54) sendto$inet6(r0, 0x0, 0x0, 0x4044, &(0x7f0000000000)={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c) executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)="390000001100090468fe070300afb800001c0000020000000000480100767500000019022b000a000300050000000000001e739cf400050000", 0x39}], 0x1) setxattr$security_capability(&(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000300), &(0x7f0000000140)=@v3={0x3000000, [{0x7fff, 0x5}, {0x9, 0x2901}]}, 0x18, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='comm\x00') preadv(r2, 0x0, 0x0, 0xa3, 0xd) getdents64(r0, &(0x7f00000001c0)=""/193, 0xc1) membarrier(0x8, 0x0) r3 = syz_clone(0xcac4400, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x34) executing program 49: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)="390000001100090468fe070300afb800001c0000020000000000480100767500000019022b000a000300050000000000001e739cf400050000", 0x39}], 0x1) setxattr$security_capability(&(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000300), &(0x7f0000000140)=@v3={0x3000000, [{0x7fff, 0x5}, {0x9, 0x2901}]}, 0x18, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='comm\x00') preadv(r2, 0x0, 0x0, 0xa3, 0xd) getdents64(r0, &(0x7f00000001c0)=""/193, 0xc1) membarrier(0x8, 0x0) r3 = syz_clone(0xcac4400, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x34) executing program 8: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000003c0)=[{0x6, 0x9, 0x8, 0x7ff00001}]}) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x161482, 0xe8) executing program 8: futex(&(0x7f0000000080)=0x2, 0x80, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x2, 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/hci\x00') pread64(r1, 0x0, 0x16, 0x1001) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001480)) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000640)='net\x00') getdents64(r2, &(0x7f0000000480)=""/4096, 0x1000) executing program 8: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0x0, 0x200, 0x3c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x700, 0x8, 0x7, 0x9}}) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x9]}, 0x8, 0x80800) mkdirat(r1, &(0x7f0000000080)='./file0/file2\x00', 0x1ed) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) close(0x3) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x7, 0x7, 0x4000201, 0x96e, 0x3, 0x4}) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, 0x0}, 0x58) setitimer(0x1, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f00000000c0)={0x3, 0x0, [{0x3, 0x6, 0xdcf6, [0x2, 0x1, 0xffff, 0x7fffffff, 0x0, 0x0, 0x8, 0x7]}, {0x1, 0x2, 0x2, [0x3, 0x10001, 0x4, 0xe7, 0x0, 0x10001, 0x4d89, 0xd]}, {0x2, 0xfffffff5, 0x80, [0x10001, 0x97, 0xffff, 0x1, 0x9, 0x6, 0x7, 0x1]}]}) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000012c0), 0x402, 0x0) write$cgroup_freezer_state(r4, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000180)=@file={0x1}, 0x6e) semctl$GETPID(0x0, 0x1, 0xb, 0x0) listen(r5, 0x0) connect$unix(r5, &(0x7f0000000200)=@file={0x1}, 0x6e) linkat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x1400) capget(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x2, 0x8001, 0x7fffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000080), &(0x7f0000000040)=0x4) rt_sigpending(&(0x7f0000000000), 0x8) prctl$PR_SET_SECUREBITS(0x1c, 0x0) executing program 8: faccessat2(0xffffffffffffffff, &(0x7f0000000fc0)='./file0\x00', 0x1, 0x1000) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000001080)=""/4096) (async) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000001080)=""/4096) (async) r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) (async) r1 = inotify_init1(0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, 0x0) (async) sendfile(r0, r0, 0x0, 0xffff) mount$9p_xen(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x4402, &(0x7f00000000c0)={'trans=xen,', {[{@ignoreqv}, {@access_uid={'access', 0x3d, 0xee01}}, {@version_L}, {@cache_mmap}]}}) executing program 8: mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x80000000) mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f00000000c0)='gid=1\x00nk]e\xe5\xcd\xeb\x12\xcdx\xa6\xfb\xc7\f5\xaf\xea)\xfc\x80\x81X\xbb\xd33\xdf\bbx\x10\xa3\xc8n\xa4\'') r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r1, &(0x7f0000000200)={{0x107, 0xfe, 0x0, 0x38d, 0x83, 0x1, 0x11b, 0x6}, "4f8a9d37c3330df442333470cfa584387e7dfde089c715386dc4c9e3cfc00268dc420d08787ae76b8c6e6e00fc8289a411d214f0f54f447714b9aec40a8c0b7cb2639700f75f3af33318dd7f577becd03537a234745619c2bed6ed198641f5d536449df855bf179463decc554f721b27231a4d38b1389ac5544f2648e872f630b11c56e275963af1801ce0a54e454366cd183c5c063e2df810736c15898178bbe0ce2db07940da85a05eb486c5e15bcaa2563bbf02f45b745a248bea", ['\x00']}, 0x1dc) executing program 8: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000002e40)={0x14, 0x1a, 0x300, 0x70bd2d, 0x25dfdbff, "", [@nested={0x4, 0x6e}]}, 0x14}], 0x1}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="72b400000059", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000006e80)={[0x691]}, 0x8, 0x80800) (async) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000006e80)={[0x691]}, 0x8, 0x80800) signalfd4(0xffffffffffffffff, &(0x7f0000006e80)={[0x7fffffff]}, 0x8, 0x80800) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ipv6_route\x00') prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) (async) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file1\x00', r1, &(0x7f0000000300)='./file0\x00') (async) symlinkat(&(0x7f00000002c0)='./file1\x00', r1, &(0x7f0000000300)='./file0\x00') mknodat(r2, &(0x7f0000000000)='./file0\x00', 0x40, 0x4) executing program 50: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000002e40)={0x14, 0x1a, 0x300, 0x70bd2d, 0x25dfdbff, "", [@nested={0x4, 0x6e}]}, 0x14}], 0x1}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="72b400000059", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000006e80)={[0x691]}, 0x8, 0x80800) (async) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000006e80)={[0x691]}, 0x8, 0x80800) signalfd4(0xffffffffffffffff, &(0x7f0000006e80)={[0x7fffffff]}, 0x8, 0x80800) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ipv6_route\x00') prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) (async) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file1\x00', r1, &(0x7f0000000300)='./file0\x00') (async) symlinkat(&(0x7f00000002c0)='./file1\x00', r1, &(0x7f0000000300)='./file0\x00') mknodat(r2, &(0x7f0000000000)='./file0\x00', 0x40, 0x4) executing program 9: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901) close_range(r1, r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000100), 0x4) executing program 9: bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%-5lx \x00'}, 0x20) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000240)={{0x0, 0xc, 0x6, 0x2, 0x800, 0x7, 0x3, 0x703, 0xfffffe61, 0x8, 0x4, 0x7, 0x100, 0x28, 0x3}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x7ff]}, 0x8, 0x800) readlinkat(r2, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)=""/227, 0xe3) executing program 9: setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="0200000001000000000000000400000000200000100000000000000020"], 0x24, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 64) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.impure\x00') mount(&(0x7f0000000100)=@md0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='coda\x00', 0x10e0880, &(0x7f00000001c0)='system.posix_acl_default\x00') executing program 9: futex(&(0x7f000000cffc), 0x5, 0x2, 0x0, &(0x7f0000000000)=0x6, 0x25040001) r0 = syz_clone(0x4a84400, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x64010102, @local}, {0x12, 0x0, 0x0, @multicast2}}}}}, 0x0) mount$9p_unix(&(0x7f00000001c0)='./cgroup\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2000, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002340)='./file0\x00', 0x100) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x8002, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10) syz_open_pts(r1, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x0, r0}) executing program 9: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8]}, 0x8, 0x800) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x22000, 0x0) preadv(r1, 0x0, 0x0, 0x1142, 0x0) (async, rerun: 32) linkat(r0, &(0x7f00000000c0)='./file1/file3\x00', r0, &(0x7f0000000100)='./file1/file3\x00', 0x1000) (async, rerun: 32) renameat2(r0, &(0x7f0000000000)='./file1/file3\x00', r0, &(0x7f0000000040)='./file1/file3\x00', 0x6) executing program 9: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001300)={0x6, 0x23, &(0x7f0000001400)=ANY=[@ANYBLOB="180000000200001333553cefd00011000080010000ff181100007c56e158fff771003af85c5f73c0c247cc8c42d7effefdde045d031459329df72567e1989d9161822583b31749f38c861ae06c37734f274c602de2a80794ddf58bc1f28f98fc", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000ffffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b7080000e00d00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000008520000005000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000200)=""/4096, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001200)={0x2, 0x2, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001240)=[0x1], &(0x7f0000001280)=[{0x1, 0x2, 0xa, 0x1}, {0x1, 0x5, 0x2, 0x8}, {0x2, 0x1, 0xe}, {0x1, 0x2, 0x6, 0x3}, {0x5, 0x5, 0x7, 0x2}, {0x2, 0x4, 0x6}, {0x2, 0x1, 0x3, 0x4}], 0x10, 0x81}, 0x94) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f00000013c0)={0x4c, 0x6}) (async) r1 = socket(0x2, 0x3, 0x11) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r2, 0x1d, &(0x7f0000000100)={0x8, 0x4, 0x4}) (async) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ptrace$getsig(0x4202, r2, 0x902d, &(0x7f0000000080)) (async) accept$inet(r3, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') executing program 51: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001300)={0x6, 0x23, &(0x7f0000001400)=ANY=[@ANYBLOB="180000000200001333553cefd00011000080010000ff181100007c56e158fff771003af85c5f73c0c247cc8c42d7effefdde045d031459329df72567e1989d9161822583b31749f38c861ae06c37734f274c602de2a80794ddf58bc1f28f98fc", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000ffffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b7080000e00d00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000008520000005000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000200)=""/4096, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001200)={0x2, 0x2, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001240)=[0x1], &(0x7f0000001280)=[{0x1, 0x2, 0xa, 0x1}, {0x1, 0x5, 0x2, 0x8}, {0x2, 0x1, 0xe}, {0x1, 0x2, 0x6, 0x3}, {0x5, 0x5, 0x7, 0x2}, {0x2, 0x4, 0x6}, {0x2, 0x1, 0x3, 0x4}], 0x10, 0x81}, 0x94) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f00000013c0)={0x4c, 0x6}) (async) r1 = socket(0x2, 0x3, 0x11) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r2, 0x1d, &(0x7f0000000100)={0x8, 0x4, 0x4}) (async) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ptrace$getsig(0x4202, r2, 0x902d, &(0x7f0000000080)) (async) accept$inet(r3, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xc083, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='mounts\x00') get_mempolicy(&(0x7f0000000040), 0x0, 0x0, &(0x7f00004b0000/0x4000)=nil, 0x2) syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo\x00') (async) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo\x00') openat$cgroup_ro(r2, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x38, &(0x7f0000000080)=""/12, &(0x7f0000000100)=0xc) read$FUSE(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00') preadv(r4, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/181, 0xb5}], 0x1, 0x80, 0x800003) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) clock_gettime(0x0, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f0000000380)) (async) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x40, &(0x7f00000001c0)="0e54e01462ef08f20ce0a17505d9a809dca34c2b10000000c7053f8f922942c07d9b1c1aafb2ad6a23a5d8077d4646ec883bdb99638c1f94e125849be1fff7d40a373e5bac000000000000003cf2547345a8fed935086b2f6c9d782908100121", 0x60) setitimer(0x2, &(0x7f0000000040)={{r5, r6/1000+10000}, {0x0, 0xea60}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x800002, 0x0, 0x86, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000001600)='rootfs\x00', 0x76f0b08e62702311, 0x0) (async) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000001600)='rootfs\x00', 0x76f0b08e62702311, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x42002, 0x101) (async) r8 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x42002, 0x101) getdents64(r8, &(0x7f0000000400)=""/4096, 0xc00) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xa2e0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}) (async) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xa2e0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001480)={'ip_vti0\x00', &(0x7f0000001400)={'syztnl1\x00', r3, 0x7, 0x7800, 0x80000000, 0x2, {{0xf, 0x4, 0x2, 0x6, 0x3c, 0x67, 0x0, 0x5, 0x2f, 0x0, @private=0xa010102, @multicast1, {[@lsrr={0x83, 0x13, 0x31, [@local, @private=0xa010102, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0xdf, 0x1, 0x2, [{@empty}, {@empty, 0x3}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001480)={'ip_vti0\x00', &(0x7f0000001400)={'syztnl1\x00', r3, 0x7, 0x7800, 0x80000000, 0x2, {{0xf, 0x4, 0x2, 0x6, 0x3c, 0x67, 0x0, 0x5, 0x2f, 0x0, @private=0xa010102, @multicast1, {[@lsrr={0x83, 0x13, 0x31, [@local, @private=0xa010102, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0xdf, 0x1, 0x2, [{@empty}, {@empty, 0x3}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001580)={'sit0\x00', &(0x7f00000014c0)={'erspan0\x00', r9, 0x40, 0x8000, 0xa9d, 0x10, {{0x23, 0x4, 0x2, 0x0, 0x8c, 0x64, 0x0, 0x9, 0x4, 0x0, @private=0xa010102, @empty, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x6a, 0x0, 0x9, [0x0, 0x8]}, @cipso={0x86, 0x45, 0x3, [{0x7, 0x9, "857ce3d1ad29bd"}, {0x2, 0x2}, {0x0, 0xb, "1e5b71c41a7394cbb6"}, {0x5, 0x8, "ef97b7c968d1"}, {0x2, 0x10, "51d2cb50e84976a466a135410a16"}, {0x7, 0x11, "8f236babc488915bcdd8560e7ae567"}]}, @generic={0x44, 0x12, "3cae5a05588c87052211a14dfd3e3298"}, @ssrr={0x89, 0xf, 0xfa, [@remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x3a}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001580)={'sit0\x00', &(0x7f00000014c0)={'erspan0\x00', r9, 0x40, 0x8000, 0xa9d, 0x10, {{0x23, 0x4, 0x2, 0x0, 0x8c, 0x64, 0x0, 0x9, 0x4, 0x0, @private=0xa010102, @empty, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x6a, 0x0, 0x9, [0x0, 0x8]}, @cipso={0x86, 0x45, 0x3, [{0x7, 0x9, "857ce3d1ad29bd"}, {0x2, 0x2}, {0x0, 0xb, "1e5b71c41a7394cbb6"}, {0x5, 0x8, "ef97b7c968d1"}, {0x2, 0x10, "51d2cb50e84976a466a135410a16"}, {0x7, 0x11, "8f236babc488915bcdd8560e7ae567"}]}, @generic={0x44, 0x12, "3cae5a05588c87052211a14dfd3e3298"}, @ssrr={0x89, 0xf, 0xfa, [@remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x3a}]}]}}}}}) timer_create(0xfffffff9, 0x0, 0x0) (async) timer_create(0xfffffff9, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) (async) listen(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x5, 0x1, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) pwrite64(r0, 0x0, 0x0, 0x1000) (async) pwrite64(r0, 0x0, 0x0, 0x1000) executing program 0: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x10) r2 = socket$inet(0x2, 0x800, 0xfffffff5) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) r3 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) sendfile(r3, r3, 0x0, 0xffff) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) ioctl$TIOCGSID(r5, 0x5429, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @initdev}, &(0x7f00000000c0)=0xc) setsockopt(r2, 0x0, 0x40, 0x0, 0x0) getsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000080), &(0x7f0000000140)=0x4) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000040)=0x1, 0x4) recvfrom(r6, 0x0, 0x0, 0x140, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000180), 0x4) executing program 0: r0 = socket$inet6(0xa, 0x2, 0x40000000) (async) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x5}) msgget(0x1, 0x2b4) close(0x3) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000000)={@private, @multicast2}, &(0x7f0000000080)=0x8) (async) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000001140)={0x1, 0x1, 0x6, 0x3}) (async) r4 = syz_clone(0x101000, &(0x7f0000000080)="a3a92f6276d08d3506f1447bd2257c69727b0d85e1d5c391897431e22546769b2eaf5a4a0f478a03e86f89f66083adbfd28060356a6d11d6390f0f33356594770caa9564e082bd53a3be4dda6a67b5e31ac0470eb35675", 0x57, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="0ce8fa4ab843ee4fe5e353980fd50c84759156ecbe12e3a4001f6182edd00ca8be7d93320adcf04c") prlimit64(r4, 0xd, &(0x7f00000001c0)={0x5, 0x6}, &(0x7f0000000200)) (async) inotify_init1(0x800) executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000091b000/0x2000)=nil, 0x2000, 0x0) r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = fsopen(&(0x7f0000000100)='autofs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000140)='\x00', 0x0, r1) mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f00000000c0)='gid=1\x00nk]e\xe5\xcd\xeb\x12\xcdx\xa6\xfb\xc7\f5\xaf\xea)\xfc\x80\x81X\xbb\xd33\xdf\bbx\x10\xa3\xc8n\xa4\'') fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f00000000c0)=@v2={0x2000000, [{0x7, 0x5}, {0x39e, 0x5}]}, 0x14, 0x2) msgget(0x1, 0x2b4) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000280)) fsetxattr$security_capability(r0, &(0x7f0000000080), 0x0, 0x3d, 0x1) executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xa]}, 0x8, 0x0) fstat(r0, &(0x7f0000000040)) flistxattr(r0, 0x0, 0x0) (async) flistxattr(r0, 0x0, 0x0) executing program 52: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xa]}, 0x8, 0x0) fstat(r0, &(0x7f0000000040)) flistxattr(r0, 0x0, 0x0) (async) flistxattr(r0, 0x0, 0x0) executing program 1: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$sock_int(r0, 0x1, 0x22, 0x0, &(0x7f0000000000)=0x2) executing program 1: r0 = socket$inet(0x2, 0x802, 0x1) setsockopt(r0, 0x1c2e, 0xb6c, &(0x7f0000000080)="bb8f5d50b6820a67f7aae9f9b2e2906350105a627656895f5f4e0d453302b341d4c230e9105218f114839131e8b13d40c7f89f9b3b83be3fbc2cf00b7d59713ec04aa5e4b936f53d2237877ace4ddb2fae30c8cdca2cf81eec6f026d6dafdd875c44de5e01bc25f932bf7b74598d0e7e813583ea285ad85873df523e4274d129b05e1e5cfb6b0523d9c895f5198c733160daf0aed959fa347c907410044b12d1b4540c556f915346d00cf0547d02cbe030e6cc09a01a9dc57a9fdd944b91df73a571d69f6a6d7f137b93b4cd547977c7d71e26f1366d", 0xd6) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @empty}, &(0x7f00000001c0)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @loopback}, &(0x7f0000000040)=0xc) executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000007600210b00440000000000000300000000000000"], 0x18}}, 0x0) sendto(r4, &(0x7f0000000340)="05c3e8d340ea027d75682af1427a0f19f346a4c14109d602e65d3e95351229592392b833d2744744029da4acd2d1a400a445add91c9dc7b7bcbcb9fdc9a92ed9964f1d1f1ee5c0309a42505f6069b73f481d4ed49ca7868cd9ad2dba4620", 0x5e, 0xdbadab0ecfad9634, &(0x7f00000003c0)=@vsock={0x28, 0x0, 0x2710}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x18, 0x68, 0x1, 0x100003, 0x7ffffffd}, 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a80)=ANY=[@ANYRESOCT=r1], 0x18}, 0x1, 0x0, 0x0, 0x4048844}, 0x40) getresuid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000700)=0xe8) statx(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x6000, 0x7ff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getuid() getgroups(0x7, &(0x7f0000000880)=[0xee00, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee00]) r11 = getegid() r12 = getegid() read$FUSE(r0, &(0x7f00000008c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f0000002900)='./file0\x00', &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) fsetxattr$system_posix_acl(r3, &(0x7f0000000500)='system.posix_acl_access\x00', &(0x7f00000029c0)={{}, {0x1, 0x3}, [{0x2, 0x4, 0xee01}, {0x2, 0x0, 0xee00}, {0x2, 0x5, 0xee01}, {0x2, 0x7, r6}, {0x2, 0x5, r7}, {0x2, 0x1, r8}, {0x2, 0x4d07d305caebf254, 0xee01}, {0x2, 0x0, r9}, {0x2, 0x2}], {0x4, 0x1}, [{0x8, 0x2, r10}, {}, {0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8, 0x7, r13}, {0x8, 0x1, r14}], {}, {0x20, 0x4}}, 0x9c, 0x1) setsockopt$inet6_buf(r2, 0x3a, 0xcd, 0x0, 0x0) r15 = accept4$unix(r0, &(0x7f0000000200), &(0x7f00000002c0)=0x6e, 0x80000) getsockname$unix(r15, &(0x7f0000000080), &(0x7f0000000140)=0x6e) listen(0xffffffffffffffff, 0xbfdd) getsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), &(0x7f0000000040)=0x4) executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x222004, 0x0, 0x0, 0x0, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB='user.'], 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000001440)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3e, 0x1, 0x100, 0x40, 0x200, 0x0, 0x40, 0x38, 0x3, 0x40, 0x2, 0x1}, [{0x1, 0x0, 0x0, 0x10000, 0x150, 0x10, 0x1000}, {0x1, 0x0, 0x0, 0x20000, 0x200, 0x0, 0x2000, 0x10}, {}], '\x00'/4096, ['\x00', '\x00', '\x00']}, 0x13e8) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, &(0x7f0000002840), &(0x7f0000002880), 0x0) listen(r2, 0x5) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r5 = accept4$inet(r2, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='0', 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='reno', 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x5) set_robust_list(&(0x7f0000000080)={0x0, 0x5703}, 0x18) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x469, 0x4) executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r1, 0x0, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = semget$private(0x0, 0x2, 0x4d) semctl$GETPID(r3, 0x1, 0xb, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x7ffffffb, 0x4) r4 = syz_pidfd_open(0x0, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000500)=ANY=[@ANYRESOCT=r4, @ANYRESDEC=r4, @ANYRES32=r4, @ANYRES64=r4], 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0xd, &(0x7f00000000c0)=0x5, 0x4) r6 = signalfd4(r2, &(0x7f0000000240)={[0x8]}, 0x8, 0x800) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0xe4180, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) pselect6(0x40, &(0x7f0000000180)={0xa, 0x7ffc, 0x0, 0x1, 0x4000000000010001, 0x9000000000000008, 0x400, 0x7}, 0x0, 0x0, 0x0, 0x0) syz_clone(0x4a84400, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x8, 0x1) flistxattr(r6, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_clone(0x410c3000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='statm\x00') read$FUSE(r8, 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x3, &(0x7f0000000040)=0x9, 0x4) statx(r8, &(0x7f00000001c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000280)) write$tun(r6, &(0x7f0000002d00)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYRES32=0x41424344, @ANYBLOB="40c2000890780005051200000002000000080000000800000063fe11f9896b33473ccd16f38048fbe0b8bafe0ff989970eb6c1e3a3cf48e9ea6c01fe06e2d4c3d90000009520ec2875228455ab87176082e5f47cbacb236f85421f2777d3aac27e0a90cb7427bcf4205e4e9199ac21af1b568dfb297c7d77dded4bd3ce73cb11d8ac8c940504dc02e0be02dac6abd3aa5e4b74182c0c9c04b2e2e24633f5efcee9a1989895210811b7d7413f619185758e812c7fe11252461924cdd9d6a9bc501f2e42f3686c00fc27fcd202dd6d4719bda20269d6bd8fdc9f5fa09167119b8fdf414347631fc53902b00528e123f8429e6758e02876"], 0x13fc) executing program 1: socket$inet_udp(0x2, 0x2, 0x0) executing program 53: socket$inet_udp(0x2, 0x2, 0x0) executing program 2: sched_setscheduler(0x0, 0x2, &(0x7f0000000000)) getresuid(&(0x7f00000000c0), &(0x7f0000000080), &(0x7f0000000140)) executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000000)=""/11, &(0x7f0000000040)=0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104419, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x10101d, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x80000, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1080008, &(0x7f0000000100)=ANY=[], 0x1, 0x0, 0x0) executing program 2: get_mempolicy(0x0, &(0x7f0000000100), 0x200000316, &(0x7f0000ffd000/0x2000)=nil, 0x4) executing program 2: prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2a0500, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x4, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0x3}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000004380)="0644a6ae6b", 0x5}, {&(0x7f0000000040)="2a23374a5fdc78503e394ddfc214e7c1d7863359f9", 0x15}], 0x2, 0x229, 0x1, 0x2) signalfd4(r0, &(0x7f0000000000)={[0x6]}, 0x8, 0x800) executing program 54: prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2a0500, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x4, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0x3}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000004380)="0644a6ae6b", 0x5}, {&(0x7f0000000040)="2a23374a5fdc78503e394ddfc214e7c1d7863359f9", 0x15}], 0x2, 0x229, 0x1, 0x2) signalfd4(r0, &(0x7f0000000000)={[0x6]}, 0x8, 0x800) executing program 3: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00') r1 = memfd_create(&(0x7f0000000700)='v\xa6\xf5hj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!\x10\x00\x00\x00\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa50\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5g\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xc6\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xec\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed?:\x84S\xb9\xbf\xab#\xd0N\x8f\x1ey7\x9286p\x10uZ\xf0\xd7\xe5\xba\xe7~\xfb\x8b\xce+fL\x11\x8e\xec\xe3\x90w\f\xf1~\x9a\x95v6\xe5O9\xae\r\xed\xac\xb8\t\x8eD#\x8a\x93\xd0\xa7\x12F\t\x03\xa4\x8f*\x1a\x88\xffq\xf9\x03\xca\x97\x98\\\xcaN\x18\xce\x8a\xf3]\\<\x00\x97\x1a\xf6\xfbs\xe6A/\x1c\xe0\xdb\xad\xe7\x16K:6\x0fo\x9f\xe3\x9f\xd91\x10\xd6qoz\xcc\xee?PvF\xde\xf5&o)c\xb4\f*\x0e\xb9\x85\x95\x01\xf0`g\xb7\x03\b\xc41\x90\xa6\xafB\x1b]\x02U\xcb\\\x1fiR\xb7v\xddF\xa59P\xb9\x10\xab\x1c\x05$\xd3P\xba\x83\x1b\xb7\xb3\xf4_\xe1z\x95\x03J3\xf8\x8c;J\xad=\x0f\x98', 0x1) write(r1, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f0000000140)={0x11, 0xf8, 0x0, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0x14) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x7, 0x10, r1, 0x86769000) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) readlinkat(r0, &(0x7f0000000040)='./file1\x00', &(0x7f00000021c0)=""/102372, 0x18fe4) executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/../file0\x00', 0x2027e1, 0x139) r1 = socket$inet(0x2, 0x802, 0x1) recvmmsg(r1, &(0x7f0000004340)=[{{0x0, 0x0, 0x0}, 0x13}], 0x1, 0x40, 0x0) symlinkat(&(0x7f0000000080)='./file1\x00', r0, &(0x7f00000000c0)='./file1\x00') (async) symlinkat(&(0x7f0000000080)='./file1\x00', r0, &(0x7f00000000c0)='./file1\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x11800, 0x0) pidfd_send_signal(r2, 0x3b, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x1400) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) (async) r3 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r4 = dup(r3) write$binfmt_elf32(r4, &(0x7f0000002800)=ANY=[@ANYBLOB="7f454c464a03011301000000000000000200030004000000eb01000038000000d600000097700000fe032000010007000c0007000000000003000000060000000200000000040000d50e"], 0xa58) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000040)) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000040)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) (async) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) (async) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x69, 0x1, 0xf, 0x7, 0x3, 0x6, 0x40, 0x1d7, 0x40, 0x45, 0x1, 0x9, 0x38, 0x3, 0x2, 0x4, 0xe75}, [{0x60000000, 0x4, 0xe, 0x64b0, 0x8, 0x6, 0x4, 0x2}, {0x0, 0x3, 0x9, 0x8, 0x7fff, 0x7, 0x4001, 0x6b}, {0x70000007, 0xe4e, 0x4, 0x401, 0x7fffffff, 0x5a4c, 0x0, 0x10}], "2ad2592ffeebf42f3903bef284830b14b343158ba28771c501ffba14cdbd0e7028436fe6b8e547736da48e274a286db9efeef0d3a84717e7f53bdbaf3b55d3fe571ed90eefce1a8e0b24e8583a034e50bcc17793595329721e1e0b726fb12c9108c8d58a0296dd36ffb78b6f53c843dc91e2d822a417a36e50c979c9e625177d85a9342347874294c891bad6b2299eb522234a6be1158f2381616eb6f980045373230d76", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x68c) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo\x00') openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) statx(r0, &(0x7f0000002880)='./file0\x00', 0x2000, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000140)) ptrace(0x8, 0xffffffffffffffff) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x807]}, 0x8, 0x800) r2 = getpid() ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x8, &(0x7f0000000040)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7, 0x7f, 0x2}, 0x7) msgrcv(0x0, 0x0, 0x0, 0xeeaeacc3478e3cf4, 0x3000) write$FUSE_OPEN(r1, 0x0, 0x0) executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$eJzsmL9rFEEUx78zu7d3iRKx0MLmLAJGMHu7eyppBGMvCImo5WHGEN3kwuWKJCAk2NhYi/+IRSoLO61sbCxUECxMaSU4Mj+Wm9vdu7DmtMn7wM195+28t29m372FA0EQJ5avX35+fnFrYfkKgNOYRd3av3tWfDwF7qz/9MqrWfl2Y+bpQT4eAyDlYO4fcf8AwJtFD9gzYaV0vYFZG3MZXGvFXXBctvoeGMIsVznwFmB4YM2PN2W2At0pK1LBHnbTlUdrqYjUEKshUUMbkEP5H+4zrABo2FswJ7+tnd0nnRToGZGKTNRkdp/Cpaqi7NyYm98ixw3nCNTzuv/82b6ah9YeOecXgyO2ug2GJasXUEcYhk07FbGz/wv+IL5nHpthr8pOGsc7iKri7HzJpZsAxrtPpULtdmJp/Jbj16jn9ReRg6ESLFlTLMp/JlQe1b14s+gVHBFHHD9nlrcwUxINbTl/ePCu6PXtvxXt5IVuXLkae6nK5sN0mt4u9To3ZLk44icTDPekYkmY/sF84JLTn3znrdDqr2+2tnZ259fWO6tiVWwkSft6dDWKriUt3ZvNWNYCbfyG7k/TTvzaiLUBC7ztTr/fi7eBfi8OWAA9T8zodNyl190f+u3Edf/jmPslZfZ60duu5xqxM1Ufrr+VmvNGJk8QBEEQBEEQBEEQBEEQBDGe3D+QTTC8nwHkGTOXpfjJHX31TwAAAP//QJBWPQ==") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x2000000000000) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) prctl$PR_SET_PDEATHSIG(0x1, 0x13) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x13) prctl$PR_SET_PDEATHSIG(0x1, 0x31) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x31) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ppoll(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r5, 0x13) waitid(0x1, r5, 0x0, 0x2, &(0x7f0000000200)) statfs(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)=""/91) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000100)) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r7 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwrite64(r7, 0x0, 0x43, 0x5) executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080)=r0, 0x12) tgkill(r0, r0, 0x13) (async) tgkill(r0, r0, 0x13) prlimit64(r0, 0x0, &(0x7f0000000000), 0x0) r2 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) fallocate(r2, 0x0, 0x1, 0xb0c) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000001080)=""/4096) (async) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000001080)=""/4096) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') read$FUSE(r3, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x60000, 0xd5b, 0x1, 0x6, 0x9}) (async) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x60000, 0xd5b, 0x1, 0x6, 0x9}) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=1m46s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 10, 10, 40, 17, 13, 12, 4, 4, 2, 4, 27, 21, 29, 1, 1, 2, 8, 1, 7, 7, 11, 30, 11, 37, 14, 22] detailed listing: executing program 9: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8]}, 0x8, 0x800) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x22000, 0x0) preadv(r1, 0x0, 0x0, 0x1142, 0x0) (async, rerun: 32) linkat(r0, &(0x7f00000000c0)='./file1/file3\x00', r0, &(0x7f0000000100)='./file1/file3\x00', 0x1000) (async, rerun: 32) renameat2(r0, &(0x7f0000000000)='./file1/file3\x00', r0, &(0x7f0000000040)='./file1/file3\x00', 0x6) executing program 9: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001300)={0x6, 0x23, &(0x7f0000001400)=ANY=[@ANYBLOB="180000000200001333553cefd00011000080010000ff181100007c56e158fff771003af85c5f73c0c247cc8c42d7effefdde045d031459329df72567e1989d9161822583b31749f38c861ae06c37734f274c602de2a80794ddf58bc1f28f98fc", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000ffffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b7080000e00d00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000008520000005000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000200)=""/4096, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001200)={0x2, 0x2, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001240)=[0x1], &(0x7f0000001280)=[{0x1, 0x2, 0xa, 0x1}, {0x1, 0x5, 0x2, 0x8}, {0x2, 0x1, 0xe}, {0x1, 0x2, 0x6, 0x3}, {0x5, 0x5, 0x7, 0x2}, {0x2, 0x4, 0x6}, {0x2, 0x1, 0x3, 0x4}], 0x10, 0x81}, 0x94) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f00000013c0)={0x4c, 0x6}) (async) r1 = socket(0x2, 0x3, 0x11) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r2, 0x1d, &(0x7f0000000100)={0x8, 0x4, 0x4}) (async) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ptrace$getsig(0x4202, r2, 0x902d, &(0x7f0000000080)) (async) accept$inet(r3, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') executing program 51: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001300)={0x6, 0x23, &(0x7f0000001400)=ANY=[@ANYBLOB="180000000200001333553cefd00011000080010000ff181100007c56e158fff771003af85c5f73c0c247cc8c42d7effefdde045d031459329df72567e1989d9161822583b31749f38c861ae06c37734f274c602de2a80794ddf58bc1f28f98fc", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000ffffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b7080000e00d00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000008520000005000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000200)=""/4096, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001200)={0x2, 0x2, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001240)=[0x1], &(0x7f0000001280)=[{0x1, 0x2, 0xa, 0x1}, {0x1, 0x5, 0x2, 0x8}, {0x2, 0x1, 0xe}, {0x1, 0x2, 0x6, 0x3}, {0x5, 0x5, 0x7, 0x2}, {0x2, 0x4, 0x6}, {0x2, 0x1, 0x3, 0x4}], 0x10, 0x81}, 0x94) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f00000013c0)={0x4c, 0x6}) (async) r1 = socket(0x2, 0x3, 0x11) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r2, 0x1d, &(0x7f0000000100)={0x8, 0x4, 0x4}) (async) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ptrace$getsig(0x4202, r2, 0x902d, &(0x7f0000000080)) (async) accept$inet(r3, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xc083, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='mounts\x00') get_mempolicy(&(0x7f0000000040), 0x0, 0x0, &(0x7f00004b0000/0x4000)=nil, 0x2) syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo\x00') (async) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo\x00') openat$cgroup_ro(r2, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x38, &(0x7f0000000080)=""/12, &(0x7f0000000100)=0xc) read$FUSE(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00') preadv(r4, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/181, 0xb5}], 0x1, 0x80, 0x800003) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) clock_gettime(0x0, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f0000000380)) (async) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x40, &(0x7f00000001c0)="0e54e01462ef08f20ce0a17505d9a809dca34c2b10000000c7053f8f922942c07d9b1c1aafb2ad6a23a5d8077d4646ec883bdb99638c1f94e125849be1fff7d40a373e5bac000000000000003cf2547345a8fed935086b2f6c9d782908100121", 0x60) setitimer(0x2, &(0x7f0000000040)={{r5, r6/1000+10000}, {0x0, 0xea60}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x800002, 0x0, 0x86, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000001600)='rootfs\x00', 0x76f0b08e62702311, 0x0) (async) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000001600)='rootfs\x00', 0x76f0b08e62702311, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x42002, 0x101) (async) r8 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x42002, 0x101) getdents64(r8, &(0x7f0000000400)=""/4096, 0xc00) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xa2e0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}) (async) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xa2e0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001480)={'ip_vti0\x00', &(0x7f0000001400)={'syztnl1\x00', r3, 0x7, 0x7800, 0x80000000, 0x2, {{0xf, 0x4, 0x2, 0x6, 0x3c, 0x67, 0x0, 0x5, 0x2f, 0x0, @private=0xa010102, @multicast1, {[@lsrr={0x83, 0x13, 0x31, [@local, @private=0xa010102, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0xdf, 0x1, 0x2, [{@empty}, {@empty, 0x3}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001480)={'ip_vti0\x00', &(0x7f0000001400)={'syztnl1\x00', r3, 0x7, 0x7800, 0x80000000, 0x2, {{0xf, 0x4, 0x2, 0x6, 0x3c, 0x67, 0x0, 0x5, 0x2f, 0x0, @private=0xa010102, @multicast1, {[@lsrr={0x83, 0x13, 0x31, [@local, @private=0xa010102, @multicast2, @empty]}, @timestamp_addr={0x44, 0x14, 0xdf, 0x1, 0x2, [{@empty}, {@empty, 0x3}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001580)={'sit0\x00', &(0x7f00000014c0)={'erspan0\x00', r9, 0x40, 0x8000, 0xa9d, 0x10, {{0x23, 0x4, 0x2, 0x0, 0x8c, 0x64, 0x0, 0x9, 0x4, 0x0, @private=0xa010102, @empty, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x6a, 0x0, 0x9, [0x0, 0x8]}, @cipso={0x86, 0x45, 0x3, [{0x7, 0x9, "857ce3d1ad29bd"}, {0x2, 0x2}, {0x0, 0xb, "1e5b71c41a7394cbb6"}, {0x5, 0x8, "ef97b7c968d1"}, {0x2, 0x10, "51d2cb50e84976a466a135410a16"}, {0x7, 0x11, "8f236babc488915bcdd8560e7ae567"}]}, @generic={0x44, 0x12, "3cae5a05588c87052211a14dfd3e3298"}, @ssrr={0x89, 0xf, 0xfa, [@remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x3a}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001580)={'sit0\x00', &(0x7f00000014c0)={'erspan0\x00', r9, 0x40, 0x8000, 0xa9d, 0x10, {{0x23, 0x4, 0x2, 0x0, 0x8c, 0x64, 0x0, 0x9, 0x4, 0x0, @private=0xa010102, @empty, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x6a, 0x0, 0x9, [0x0, 0x8]}, @cipso={0x86, 0x45, 0x3, [{0x7, 0x9, "857ce3d1ad29bd"}, {0x2, 0x2}, {0x0, 0xb, "1e5b71c41a7394cbb6"}, {0x5, 0x8, "ef97b7c968d1"}, {0x2, 0x10, "51d2cb50e84976a466a135410a16"}, {0x7, 0x11, "8f236babc488915bcdd8560e7ae567"}]}, @generic={0x44, 0x12, "3cae5a05588c87052211a14dfd3e3298"}, @ssrr={0x89, 0xf, 0xfa, [@remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x3a}]}]}}}}}) timer_create(0xfffffff9, 0x0, 0x0) (async) timer_create(0xfffffff9, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) (async) listen(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x5, 0x1, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) pwrite64(r0, 0x0, 0x0, 0x1000) (async) pwrite64(r0, 0x0, 0x0, 0x1000) executing program 0: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x10) r2 = socket$inet(0x2, 0x800, 0xfffffff5) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) r3 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) sendfile(r3, r3, 0x0, 0xffff) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) ioctl$TIOCGSID(r5, 0x5429, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @initdev}, &(0x7f00000000c0)=0xc) setsockopt(r2, 0x0, 0x40, 0x0, 0x0) getsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000080), &(0x7f0000000140)=0x4) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000040)=0x1, 0x4) recvfrom(r6, 0x0, 0x0, 0x140, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000180), 0x4) executing program 0: r0 = socket$inet6(0xa, 0x2, 0x40000000) (async) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x5}) msgget(0x1, 0x2b4) close(0x3) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000000)={@private, @multicast2}, &(0x7f0000000080)=0x8) (async) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000001140)={0x1, 0x1, 0x6, 0x3}) (async) r4 = syz_clone(0x101000, &(0x7f0000000080)="a3a92f6276d08d3506f1447bd2257c69727b0d85e1d5c391897431e22546769b2eaf5a4a0f478a03e86f89f66083adbfd28060356a6d11d6390f0f33356594770caa9564e082bd53a3be4dda6a67b5e31ac0470eb35675", 0x57, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="0ce8fa4ab843ee4fe5e353980fd50c84759156ecbe12e3a4001f6182edd00ca8be7d93320adcf04c") prlimit64(r4, 0xd, &(0x7f00000001c0)={0x5, 0x6}, &(0x7f0000000200)) (async) inotify_init1(0x800) executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000091b000/0x2000)=nil, 0x2000, 0x0) r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = fsopen(&(0x7f0000000100)='autofs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000140)='\x00', 0x0, r1) mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f00000000c0)='gid=1\x00nk]e\xe5\xcd\xeb\x12\xcdx\xa6\xfb\xc7\f5\xaf\xea)\xfc\x80\x81X\xbb\xd33\xdf\bbx\x10\xa3\xc8n\xa4\'') fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f00000000c0)=@v2={0x2000000, [{0x7, 0x5}, {0x39e, 0x5}]}, 0x14, 0x2) msgget(0x1, 0x2b4) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000280)) fsetxattr$security_capability(r0, &(0x7f0000000080), 0x0, 0x3d, 0x1) executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xa]}, 0x8, 0x0) fstat(r0, &(0x7f0000000040)) flistxattr(r0, 0x0, 0x0) (async) flistxattr(r0, 0x0, 0x0) executing program 52: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xa]}, 0x8, 0x0) fstat(r0, &(0x7f0000000040)) flistxattr(r0, 0x0, 0x0) (async) flistxattr(r0, 0x0, 0x0) executing program 1: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$sock_int(r0, 0x1, 0x22, 0x0, &(0x7f0000000000)=0x2) executing program 1: r0 = socket$inet(0x2, 0x802, 0x1) setsockopt(r0, 0x1c2e, 0xb6c, &(0x7f0000000080)="bb8f5d50b6820a67f7aae9f9b2e2906350105a627656895f5f4e0d453302b341d4c230e9105218f114839131e8b13d40c7f89f9b3b83be3fbc2cf00b7d59713ec04aa5e4b936f53d2237877ace4ddb2fae30c8cdca2cf81eec6f026d6dafdd875c44de5e01bc25f932bf7b74598d0e7e813583ea285ad85873df523e4274d129b05e1e5cfb6b0523d9c895f5198c733160daf0aed959fa347c907410044b12d1b4540c556f915346d00cf0547d02cbe030e6cc09a01a9dc57a9fdd944b91df73a571d69f6a6d7f137b93b4cd547977c7d71e26f1366d", 0xd6) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @empty}, &(0x7f00000001c0)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @loopback}, &(0x7f0000000040)=0xc) executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000007600210b00440000000000000300000000000000"], 0x18}}, 0x0) sendto(r4, &(0x7f0000000340)="05c3e8d340ea027d75682af1427a0f19f346a4c14109d602e65d3e95351229592392b833d2744744029da4acd2d1a400a445add91c9dc7b7bcbcb9fdc9a92ed9964f1d1f1ee5c0309a42505f6069b73f481d4ed49ca7868cd9ad2dba4620", 0x5e, 0xdbadab0ecfad9634, &(0x7f00000003c0)=@vsock={0x28, 0x0, 0x2710}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x18, 0x68, 0x1, 0x100003, 0x7ffffffd}, 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a80)=ANY=[@ANYRESOCT=r1], 0x18}, 0x1, 0x0, 0x0, 0x4048844}, 0x40) getresuid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000700)=0xe8) statx(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x6000, 0x7ff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getuid() getgroups(0x7, &(0x7f0000000880)=[0xee00, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee00]) r11 = getegid() r12 = getegid() read$FUSE(r0, &(0x7f00000008c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f0000002900)='./file0\x00', &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) fsetxattr$system_posix_acl(r3, &(0x7f0000000500)='system.posix_acl_access\x00', &(0x7f00000029c0)={{}, {0x1, 0x3}, [{0x2, 0x4, 0xee01}, {0x2, 0x0, 0xee00}, {0x2, 0x5, 0xee01}, {0x2, 0x7, r6}, {0x2, 0x5, r7}, {0x2, 0x1, r8}, {0x2, 0x4d07d305caebf254, 0xee01}, {0x2, 0x0, r9}, {0x2, 0x2}], {0x4, 0x1}, [{0x8, 0x2, r10}, {}, {0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8, 0x7, r13}, {0x8, 0x1, r14}], {}, {0x20, 0x4}}, 0x9c, 0x1) setsockopt$inet6_buf(r2, 0x3a, 0xcd, 0x0, 0x0) r15 = accept4$unix(r0, &(0x7f0000000200), &(0x7f00000002c0)=0x6e, 0x80000) getsockname$unix(r15, &(0x7f0000000080), &(0x7f0000000140)=0x6e) listen(0xffffffffffffffff, 0xbfdd) getsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), &(0x7f0000000040)=0x4) executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x222004, 0x0, 0x0, 0x0, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB='user.'], 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000001440)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3e, 0x1, 0x100, 0x40, 0x200, 0x0, 0x40, 0x38, 0x3, 0x40, 0x2, 0x1}, [{0x1, 0x0, 0x0, 0x10000, 0x150, 0x10, 0x1000}, {0x1, 0x0, 0x0, 0x20000, 0x200, 0x0, 0x2000, 0x10}, {}], '\x00'/4096, ['\x00', '\x00', '\x00']}, 0x13e8) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, &(0x7f0000002840), &(0x7f0000002880), 0x0) listen(r2, 0x5) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r5 = accept4$inet(r2, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='0', 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='reno', 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x5) set_robust_list(&(0x7f0000000080)={0x0, 0x5703}, 0x18) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x469, 0x4) executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r1, 0x0, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = semget$private(0x0, 0x2, 0x4d) semctl$GETPID(r3, 0x1, 0xb, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x7ffffffb, 0x4) r4 = syz_pidfd_open(0x0, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000500)=ANY=[@ANYRESOCT=r4, @ANYRESDEC=r4, @ANYRES32=r4, @ANYRES64=r4], 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0xd, &(0x7f00000000c0)=0x5, 0x4) r6 = signalfd4(r2, &(0x7f0000000240)={[0x8]}, 0x8, 0x800) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0xe4180, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) pselect6(0x40, &(0x7f0000000180)={0xa, 0x7ffc, 0x0, 0x1, 0x4000000000010001, 0x9000000000000008, 0x400, 0x7}, 0x0, 0x0, 0x0, 0x0) syz_clone(0x4a84400, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x8, 0x1) flistxattr(r6, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_clone(0x410c3000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='statm\x00') read$FUSE(r8, 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x3, &(0x7f0000000040)=0x9, 0x4) statx(r8, &(0x7f00000001c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000280)) write$tun(r6, &(0x7f0000002d00)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYRES32=0x41424344, @ANYBLOB="40c2000890780005051200000002000000080000000800000063fe11f9896b33473ccd16f38048fbe0b8bafe0ff989970eb6c1e3a3cf48e9ea6c01fe06e2d4c3d90000009520ec2875228455ab87176082e5f47cbacb236f85421f2777d3aac27e0a90cb7427bcf4205e4e9199ac21af1b568dfb297c7d77dded4bd3ce73cb11d8ac8c940504dc02e0be02dac6abd3aa5e4b74182c0c9c04b2e2e24633f5efcee9a1989895210811b7d7413f619185758e812c7fe11252461924cdd9d6a9bc501f2e42f3686c00fc27fcd202dd6d4719bda20269d6bd8fdc9f5fa09167119b8fdf414347631fc53902b00528e123f8429e6758e02876"], 0x13fc) executing program 1: socket$inet_udp(0x2, 0x2, 0x0) executing program 53: socket$inet_udp(0x2, 0x2, 0x0) executing program 2: sched_setscheduler(0x0, 0x2, &(0x7f0000000000)) getresuid(&(0x7f00000000c0), &(0x7f0000000080), &(0x7f0000000140)) executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000000)=""/11, &(0x7f0000000040)=0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104419, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x10101d, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x80000, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1080008, &(0x7f0000000100)=ANY=[], 0x1, 0x0, 0x0) executing program 2: get_mempolicy(0x0, &(0x7f0000000100), 0x200000316, &(0x7f0000ffd000/0x2000)=nil, 0x4) executing program 2: prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2a0500, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x4, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0x3}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000004380)="0644a6ae6b", 0x5}, {&(0x7f0000000040)="2a23374a5fdc78503e394ddfc214e7c1d7863359f9", 0x15}], 0x2, 0x229, 0x1, 0x2) signalfd4(r0, &(0x7f0000000000)={[0x6]}, 0x8, 0x800) executing program 54: prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2a0500, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x4, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0x3}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000004380)="0644a6ae6b", 0x5}, {&(0x7f0000000040)="2a23374a5fdc78503e394ddfc214e7c1d7863359f9", 0x15}], 0x2, 0x229, 0x1, 0x2) signalfd4(r0, &(0x7f0000000000)={[0x6]}, 0x8, 0x800) executing program 3: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00') r1 = memfd_create(&(0x7f0000000700)='v\xa6\xf5hj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!\x10\x00\x00\x00\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa50\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5g\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xc6\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xec\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed?:\x84S\xb9\xbf\xab#\xd0N\x8f\x1ey7\x9286p\x10uZ\xf0\xd7\xe5\xba\xe7~\xfb\x8b\xce+fL\x11\x8e\xec\xe3\x90w\f\xf1~\x9a\x95v6\xe5O9\xae\r\xed\xac\xb8\t\x8eD#\x8a\x93\xd0\xa7\x12F\t\x03\xa4\x8f*\x1a\x88\xffq\xf9\x03\xca\x97\x98\\\xcaN\x18\xce\x8a\xf3]\\<\x00\x97\x1a\xf6\xfbs\xe6A/\x1c\xe0\xdb\xad\xe7\x16K:6\x0fo\x9f\xe3\x9f\xd91\x10\xd6qoz\xcc\xee?PvF\xde\xf5&o)c\xb4\f*\x0e\xb9\x85\x95\x01\xf0`g\xb7\x03\b\xc41\x90\xa6\xafB\x1b]\x02U\xcb\\\x1fiR\xb7v\xddF\xa59P\xb9\x10\xab\x1c\x05$\xd3P\xba\x83\x1b\xb7\xb3\xf4_\xe1z\x95\x03J3\xf8\x8c;J\xad=\x0f\x98', 0x1) write(r1, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f0000000140)={0x11, 0xf8, 0x0, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0x14) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x7, 0x10, r1, 0x86769000) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) readlinkat(r0, &(0x7f0000000040)='./file1\x00', &(0x7f00000021c0)=""/102372, 0x18fe4) executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/../file0\x00', 0x2027e1, 0x139) r1 = socket$inet(0x2, 0x802, 0x1) recvmmsg(r1, &(0x7f0000004340)=[{{0x0, 0x0, 0x0}, 0x13}], 0x1, 0x40, 0x0) symlinkat(&(0x7f0000000080)='./file1\x00', r0, &(0x7f00000000c0)='./file1\x00') (async) symlinkat(&(0x7f0000000080)='./file1\x00', r0, &(0x7f00000000c0)='./file1\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x11800, 0x0) pidfd_send_signal(r2, 0x3b, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x1400) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) (async) r3 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r4 = dup(r3) write$binfmt_elf32(r4, &(0x7f0000002800)=ANY=[@ANYBLOB="7f454c464a03011301000000000000000200030004000000eb01000038000000d600000097700000fe032000010007000c0007000000000003000000060000000200000000040000d50e"], 0xa58) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000040)) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000040)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) (async) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) (async) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x69, 0x1, 0xf, 0x7, 0x3, 0x6, 0x40, 0x1d7, 0x40, 0x45, 0x1, 0x9, 0x38, 0x3, 0x2, 0x4, 0xe75}, [{0x60000000, 0x4, 0xe, 0x64b0, 0x8, 0x6, 0x4, 0x2}, {0x0, 0x3, 0x9, 0x8, 0x7fff, 0x7, 0x4001, 0x6b}, {0x70000007, 0xe4e, 0x4, 0x401, 0x7fffffff, 0x5a4c, 0x0, 0x10}], "2ad2592ffeebf42f3903bef284830b14b343158ba28771c501ffba14cdbd0e7028436fe6b8e547736da48e274a286db9efeef0d3a84717e7f53bdbaf3b55d3fe571ed90eefce1a8e0b24e8583a034e50bcc17793595329721e1e0b726fb12c9108c8d58a0296dd36ffb78b6f53c843dc91e2d822a417a36e50c979c9e625177d85a9342347874294c891bad6b2299eb522234a6be1158f2381616eb6f980045373230d76", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x68c) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo\x00') openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) statx(r0, &(0x7f0000002880)='./file0\x00', 0x2000, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000140)) ptrace(0x8, 0xffffffffffffffff) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x807]}, 0x8, 0x800) r2 = getpid() ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x8, &(0x7f0000000040)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7, 0x7f, 0x2}, 0x7) msgrcv(0x0, 0x0, 0x0, 0xeeaeacc3478e3cf4, 0x3000) write$FUSE_OPEN(r1, 0x0, 0x0) executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x2000000000000) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) prctl$PR_SET_PDEATHSIG(0x1, 0x13) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x13) prctl$PR_SET_PDEATHSIG(0x1, 0x31) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x31) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ppoll(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r5, 0x13) waitid(0x1, r5, 0x0, 0x2, &(0x7f0000000200)) statfs(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)=""/91) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000100)) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r7 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwrite64(r7, 0x0, 0x43, 0x5) executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080)=r0, 0x12) tgkill(r0, r0, 0x13) (async) tgkill(r0, r0, 0x13) prlimit64(r0, 0x0, &(0x7f0000000000), 0x0) r2 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) fallocate(r2, 0x0, 0x1, 0xb0c) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000001080)=""/4096) (async) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000001080)=""/4096) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') read$FUSE(r3, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x60000, 0xd5b, 0x1, 0x6, 0x9}) (async) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x60000, 0xd5b, 0x1, 0x6, 0x9}) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. bisect: the chunk can be dropped bisect: testing without sub-chunk 3/3 bisect: split chunks (needed=true): <27> bisect: split chunk #0 of len 27 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 2, 8, 1, 7, 7, 11, 30, 11, 37, 14, 22] detailed listing: executing program 1: socket$inet_udp(0x2, 0x2, 0x0) executing program 53: socket$inet_udp(0x2, 0x2, 0x0) executing program 2: sched_setscheduler(0x0, 0x2, &(0x7f0000000000)) getresuid(&(0x7f00000000c0), &(0x7f0000000080), &(0x7f0000000140)) executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000000)=""/11, &(0x7f0000000040)=0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104419, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x10101d, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x80000, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1080008, &(0x7f0000000100)=ANY=[], 0x1, 0x0, 0x0) executing program 2: get_mempolicy(0x0, &(0x7f0000000100), 0x200000316, &(0x7f0000ffd000/0x2000)=nil, 0x4) executing program 2: prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2a0500, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x4, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0x3}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000004380)="0644a6ae6b", 0x5}, {&(0x7f0000000040)="2a23374a5fdc78503e394ddfc214e7c1d7863359f9", 0x15}], 0x2, 0x229, 0x1, 0x2) signalfd4(r0, &(0x7f0000000000)={[0x6]}, 0x8, 0x800) executing program 54: prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2a0500, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x4, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0x3}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000004380)="0644a6ae6b", 0x5}, {&(0x7f0000000040)="2a23374a5fdc78503e394ddfc214e7c1d7863359f9", 0x15}], 0x2, 0x229, 0x1, 0x2) signalfd4(r0, &(0x7f0000000000)={[0x6]}, 0x8, 0x800) executing program 3: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00') r1 = memfd_create(&(0x7f0000000700)='v\xa6\xf5hj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!\x10\x00\x00\x00\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa50\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5g\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xc6\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xec\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed?:\x84S\xb9\xbf\xab#\xd0N\x8f\x1ey7\x9286p\x10uZ\xf0\xd7\xe5\xba\xe7~\xfb\x8b\xce+fL\x11\x8e\xec\xe3\x90w\f\xf1~\x9a\x95v6\xe5O9\xae\r\xed\xac\xb8\t\x8eD#\x8a\x93\xd0\xa7\x12F\t\x03\xa4\x8f*\x1a\x88\xffq\xf9\x03\xca\x97\x98\\\xcaN\x18\xce\x8a\xf3]\\<\x00\x97\x1a\xf6\xfbs\xe6A/\x1c\xe0\xdb\xad\xe7\x16K:6\x0fo\x9f\xe3\x9f\xd91\x10\xd6qoz\xcc\xee?PvF\xde\xf5&o)c\xb4\f*\x0e\xb9\x85\x95\x01\xf0`g\xb7\x03\b\xc41\x90\xa6\xafB\x1b]\x02U\xcb\\\x1fiR\xb7v\xddF\xa59P\xb9\x10\xab\x1c\x05$\xd3P\xba\x83\x1b\xb7\xb3\xf4_\xe1z\x95\x03J3\xf8\x8c;J\xad=\x0f\x98', 0x1) write(r1, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f0000000140)={0x11, 0xf8, 0x0, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0x14) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x7, 0x10, r1, 0x86769000) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) readlinkat(r0, &(0x7f0000000040)='./file1\x00', &(0x7f00000021c0)=""/102372, 0x18fe4) executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/../file0\x00', 0x2027e1, 0x139) r1 = socket$inet(0x2, 0x802, 0x1) recvmmsg(r1, &(0x7f0000004340)=[{{0x0, 0x0, 0x0}, 0x13}], 0x1, 0x40, 0x0) symlinkat(&(0x7f0000000080)='./file1\x00', r0, &(0x7f00000000c0)='./file1\x00') (async) symlinkat(&(0x7f0000000080)='./file1\x00', r0, &(0x7f00000000c0)='./file1\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x11800, 0x0) pidfd_send_signal(r2, 0x3b, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x1400) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) (async) r3 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r4 = dup(r3) write$binfmt_elf32(r4, &(0x7f0000002800)=ANY=[@ANYBLOB="7f454c464a03011301000000000000000200030004000000eb01000038000000d600000097700000fe032000010007000c0007000000000003000000060000000200000000040000d50e"], 0xa58) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000040)) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000040)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) (async) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) (async) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x69, 0x1, 0xf, 0x7, 0x3, 0x6, 0x40, 0x1d7, 0x40, 0x45, 0x1, 0x9, 0x38, 0x3, 0x2, 0x4, 0xe75}, [{0x60000000, 0x4, 0xe, 0x64b0, 0x8, 0x6, 0x4, 0x2}, {0x0, 0x3, 0x9, 0x8, 0x7fff, 0x7, 0x4001, 0x6b}, {0x70000007, 0xe4e, 0x4, 0x401, 0x7fffffff, 0x5a4c, 0x0, 0x10}], "2ad2592ffeebf42f3903bef284830b14b343158ba28771c501ffba14cdbd0e7028436fe6b8e547736da48e274a286db9efeef0d3a84717e7f53bdbaf3b55d3fe571ed90eefce1a8e0b24e8583a034e50bcc17793595329721e1e0b726fb12c9108c8d58a0296dd36ffb78b6f53c843dc91e2d822a417a36e50c979c9e625177d85a9342347874294c891bad6b2299eb522234a6be1158f2381616eb6f980045373230d76", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x68c) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo\x00') openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) statx(r0, &(0x7f0000002880)='./file0\x00', 0x2000, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000140)) ptrace(0x8, 0xffffffffffffffff) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x807]}, 0x8, 0x800) r2 = getpid() ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x8, &(0x7f0000000040)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7, 0x7f, 0x2}, 0x7) msgrcv(0x0, 0x0, 0x0, 0xeeaeacc3478e3cf4, 0x3000) write$FUSE_OPEN(r1, 0x0, 0x0) executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x2000000000000) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) prctl$PR_SET_PDEATHSIG(0x1, 0x13) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x13) prctl$PR_SET_PDEATHSIG(0x1, 0x31) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x31) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ppoll(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r5, 0x13) waitid(0x1, r5, 0x0, 0x2, &(0x7f0000000200)) statfs(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)=""/91) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000100)) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r7 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwrite64(r7, 0x0, 0x43, 0x5) executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080)=r0, 0x12) tgkill(r0, r0, 0x13) (async) tgkill(r0, r0, 0x13) prlimit64(r0, 0x0, &(0x7f0000000000), 0x0) r2 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) fallocate(r2, 0x0, 0x1, 0xb0c) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000001080)=""/4096) (async) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000001080)=""/4096) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') read$FUSE(r3, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x60000, 0xd5b, 0x1, 0x6, 0x9}) (async) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x60000, 0xd5b, 0x1, 0x6, 0x9}) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <13> bisect: split chunk #0 of len 13 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 30, 11, 37, 14, 22] detailed listing: executing program 3: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00') r1 = memfd_create(&(0x7f0000000700)='v\xa6\xf5hj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!\x10\x00\x00\x00\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa50\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5g\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xc6\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xec\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed?:\x84S\xb9\xbf\xab#\xd0N\x8f\x1ey7\x9286p\x10uZ\xf0\xd7\xe5\xba\xe7~\xfb\x8b\xce+fL\x11\x8e\xec\xe3\x90w\f\xf1~\x9a\x95v6\xe5O9\xae\r\xed\xac\xb8\t\x8eD#\x8a\x93\xd0\xa7\x12F\t\x03\xa4\x8f*\x1a\x88\xffq\xf9\x03\xca\x97\x98\\\xcaN\x18\xce\x8a\xf3]\\<\x00\x97\x1a\xf6\xfbs\xe6A/\x1c\xe0\xdb\xad\xe7\x16K:6\x0fo\x9f\xe3\x9f\xd91\x10\xd6qoz\xcc\xee?PvF\xde\xf5&o)c\xb4\f*\x0e\xb9\x85\x95\x01\xf0`g\xb7\x03\b\xc41\x90\xa6\xafB\x1b]\x02U\xcb\\\x1fiR\xb7v\xddF\xa59P\xb9\x10\xab\x1c\x05$\xd3P\xba\x83\x1b\xb7\xb3\xf4_\xe1z\x95\x03J3\xf8\x8c;J\xad=\x0f\x98', 0x1) write(r1, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f0000000140)={0x11, 0xf8, 0x0, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0x14) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x7, 0x10, r1, 0x86769000) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) readlinkat(r0, &(0x7f0000000040)='./file1\x00', &(0x7f00000021c0)=""/102372, 0x18fe4) executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/../file0\x00', 0x2027e1, 0x139) r1 = socket$inet(0x2, 0x802, 0x1) recvmmsg(r1, &(0x7f0000004340)=[{{0x0, 0x0, 0x0}, 0x13}], 0x1, 0x40, 0x0) symlinkat(&(0x7f0000000080)='./file1\x00', r0, &(0x7f00000000c0)='./file1\x00') (async) symlinkat(&(0x7f0000000080)='./file1\x00', r0, &(0x7f00000000c0)='./file1\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x11800, 0x0) pidfd_send_signal(r2, 0x3b, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x1400) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) (async) r3 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r4 = dup(r3) write$binfmt_elf32(r4, &(0x7f0000002800)=ANY=[@ANYBLOB="7f454c464a03011301000000000000000200030004000000eb01000038000000d600000097700000fe032000010007000c0007000000000003000000060000000200000000040000d50e"], 0xa58) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000040)) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000040)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) (async) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) (async) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x69, 0x1, 0xf, 0x7, 0x3, 0x6, 0x40, 0x1d7, 0x40, 0x45, 0x1, 0x9, 0x38, 0x3, 0x2, 0x4, 0xe75}, [{0x60000000, 0x4, 0xe, 0x64b0, 0x8, 0x6, 0x4, 0x2}, {0x0, 0x3, 0x9, 0x8, 0x7fff, 0x7, 0x4001, 0x6b}, {0x70000007, 0xe4e, 0x4, 0x401, 0x7fffffff, 0x5a4c, 0x0, 0x10}], "2ad2592ffeebf42f3903bef284830b14b343158ba28771c501ffba14cdbd0e7028436fe6b8e547736da48e274a286db9efeef0d3a84717e7f53bdbaf3b55d3fe571ed90eefce1a8e0b24e8583a034e50bcc17793595329721e1e0b726fb12c9108c8d58a0296dd36ffb78b6f53c843dc91e2d822a417a36e50c979c9e625177d85a9342347874294c891bad6b2299eb522234a6be1158f2381616eb6f980045373230d76", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x68c) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo\x00') openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) statx(r0, &(0x7f0000002880)='./file0\x00', 0x2000, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000140)) ptrace(0x8, 0xffffffffffffffff) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x807]}, 0x8, 0x800) r2 = getpid() ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x8, &(0x7f0000000040)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7, 0x7f, 0x2}, 0x7) msgrcv(0x0, 0x0, 0x0, 0xeeaeacc3478e3cf4, 0x3000) write$FUSE_OPEN(r1, 0x0, 0x0) executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$eJzsmL9rFEEUx78zu7d3iRKx0MLmLAJGMHu7eyppBGMvCImo5WHGEN3kwuWKJCAk2NhYi/+IRSoLO61sbCxUECxMaSU4Mj+Wm9vdu7DmtMn7wM195+28t29m372FA0EQJ5avX35+fnFrYfkKgNOYRd3av3tWfDwF7qz/9MqrWfl2Y+bpQT4eAyDlYO4fcf8AwJtFD9gzYaV0vYFZG3MZXGvFXXBctvoeGMIsVznwFmB4YM2PN2W2At0pK1LBHnbTlUdrqYjUEKshUUMbkEP5H+4zrABo2FswJ7+tnd0nnRToGZGKTNRkdp/Cpaqi7NyYm98ixw3nCNTzuv/82b6ah9YeOecXgyO2ug2GJasXUEcYhk07FbGz/wv+IL5nHpthr8pOGsc7iKri7HzJpZsAxrtPpULtdmJp/Jbj16jn9ReRg6ESLFlTLMp/JlQe1b14s+gVHBFHHD9nlrcwUxINbTl/ePCu6PXtvxXt5IVuXLkae6nK5sN0mt4u9To3ZLk44icTDPekYkmY/sF84JLTn3znrdDqr2+2tnZ259fWO6tiVWwkSft6dDWKriUt3ZvNWNYCbfyG7k/TTvzaiLUBC7ztTr/fi7eBfi8OWAA9T8zodNyl190f+u3Edf/jmPslZfZ60duu5xqxM1Ufrr+VmvNGJk8QBEEQBEEQBEEQBEEQBDGe3D+QTTC8nwHkGTOXpfjJHX31TwAAAP//QJBWPQ==") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x2000000000000) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) prctl$PR_SET_PDEATHSIG(0x1, 0x13) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x13) prctl$PR_SET_PDEATHSIG(0x1, 0x31) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x31) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ppoll(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r5, 0x13) waitid(0x1, r5, 0x0, 0x2, &(0x7f0000000200)) statfs(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)=""/91) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000100)) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r7 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwrite64(r7, 0x0, 0x43, 0x5) executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080)=r0, 0x12) tgkill(r0, r0, 0x13) (async) tgkill(r0, r0, 0x13) prlimit64(r0, 0x0, &(0x7f0000000000), 0x0) r2 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) fallocate(r2, 0x0, 0x1, 0xb0c) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000001080)=""/4096) (async) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000001080)=""/4096) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') read$FUSE(r3, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x60000, 0xd5b, 0x1, 0x6, 0x9}) (async) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x60000, 0xd5b, 0x1, 0x6, 0x9}) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <6> bisect: split chunk #0 of len 6 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [37, 14, 22] detailed listing: executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x2000000000000) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) prctl$PR_SET_PDEATHSIG(0x1, 0x13) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x13) prctl$PR_SET_PDEATHSIG(0x1, 0x31) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x31) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ppoll(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r5, 0x13) waitid(0x1, r5, 0x0, 0x2, &(0x7f0000000200)) statfs(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)=""/91) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000100)) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r7 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwrite64(r7, 0x0, 0x43, 0x5) executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080)=r0, 0x12) tgkill(r0, r0, 0x13) (async) tgkill(r0, r0, 0x13) prlimit64(r0, 0x0, &(0x7f0000000000), 0x0) r2 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) fallocate(r2, 0x0, 0x1, 0xb0c) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000001080)=""/4096) (async) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000001080)=""/4096) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') read$FUSE(r3, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x60000, 0xd5b, 0x1, 0x6, 0x9}) (async) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x60000, 0xd5b, 0x1, 0x6, 0x9}) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <3> bisect: split chunk #0 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ptmx-socket$inet_udp-ioctl$TIOCSETD-fcntl$dupfd-ioctl$TCFLSH-ioctl$TIOCSETD-ioctl$TIOCSTI-ioctl$TIOCSTI-ioctl$TIOCSTI-syz_emit_ethernet-seccomp$SECCOMP_SET_MODE_FILTER-openat$tun-ioctl$TUNATTACHFILTER-socket$inet6_tcp-bind$inet6-connect$inet6-fcntl$dupfd-shutdown-socket$inet6_icmp_raw-setsockopt$IP6T_SO_SET_REPLACE-prctl$PR_SET_PDEATHSIG-prctl$PR_SET_PDEATHSIG detailed listing: executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [37, 14] detailed listing: executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x2000000000000) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) prctl$PR_SET_PDEATHSIG(0x1, 0x13) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x13) prctl$PR_SET_PDEATHSIG(0x1, 0x31) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x31) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ppoll(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r5, 0x13) waitid(0x1, r5, 0x0, 0x2, &(0x7f0000000200)) statfs(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)=""/91) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000100)) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r7 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwrite64(r7, 0x0, 0x43, 0x5) executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080)=r0, 0x12) tgkill(r0, r0, 0x13) (async) tgkill(r0, r0, 0x13) prlimit64(r0, 0x0, &(0x7f0000000000), 0x0) r2 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) fallocate(r2, 0x0, 0x1, 0xb0c) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000001080)=""/4096) (async) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000001080)=""/4096) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') read$FUSE(r3, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x60000, 0xd5b, 0x1, 0x6, 0x9}) (async) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x60000, 0xd5b, 0x1, 0x6, 0x9}) program did not crash bisect: split chunks (needed=true): <2>, <1> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 22] detailed listing: executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080)=r0, 0x12) tgkill(r0, r0, 0x13) (async) tgkill(r0, r0, 0x13) prlimit64(r0, 0x0, &(0x7f0000000000), 0x0) r2 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) fallocate(r2, 0x0, 0x1, 0xb0c) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000001080)=""/4096) (async) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000001080)=""/4096) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') read$FUSE(r3, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x60000, 0xd5b, 0x1, 0x6, 0x9}) (async) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x60000, 0xd5b, 0x1, 0x6, 0x9}) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [37, 22] detailed listing: executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x2000000000000) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) prctl$PR_SET_PDEATHSIG(0x1, 0x13) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x13) prctl$PR_SET_PDEATHSIG(0x1, 0x31) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x31) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ppoll(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r5, 0x13) waitid(0x1, r5, 0x0, 0x2, &(0x7f0000000200)) statfs(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)=""/91) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000100)) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r7 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwrite64(r7, 0x0, 0x43, 0x5) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. bisect: the chunk can be dropped bisect: split chunk #1 of len 1 into 2 parts bisect: no way to further split the chunk bisect: split chunks (needed=true): <1>, <1, final> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 2 programs left: executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x2000000000000) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) prctl$PR_SET_PDEATHSIG(0x1, 0x13) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x13) prctl$PR_SET_PDEATHSIG(0x1, 0x31) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x31) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ppoll(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r5, 0x13) waitid(0x1, r5, 0x0, 0x2, &(0x7f0000000200)) statfs(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)=""/91) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000100)) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r7 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwrite64(r7, 0x0, 0x43, 0x5) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) bisect: trying to concatenate bisect: concatenate 2 entries minimizing program #0 before concatenation testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [36, 22] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x2000000000000) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) prctl$PR_SET_PDEATHSIG(0x1, 0x13) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x13) prctl$PR_SET_PDEATHSIG(0x1, 0x31) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x31) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ppoll(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r5, 0x13) waitid(0x1, r5, 0x0, 0x2, &(0x7f0000000200)) statfs(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)=""/91) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000100)) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [35, 22] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x2000000000000) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) prctl$PR_SET_PDEATHSIG(0x1, 0x13) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x13) prctl$PR_SET_PDEATHSIG(0x1, 0x31) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x31) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ppoll(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r5, 0x13) waitid(0x1, r5, 0x0, 0x2, &(0x7f0000000200)) statfs(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)=""/91) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000100)) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [34, 22] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$eJzsmL9rFEEUx78zu7d3iRKx0MLmLAJGMHu7eyppBGMvCImo5WHGEN3kwuWKJCAk2NhYi/+IRSoLO61sbCxUECxMaSU4Mj+Wm9vdu7DmtMn7wM195+28t29m372FA0EQJ5avX35+fnFrYfkKgNOYRd3av3tWfDwF7qz/9MqrWfl2Y+bpQT4eAyDlYO4fcf8AwJtFD9gzYaV0vYFZG3MZXGvFXXBctvoeGMIsVznwFmB4YM2PN2W2At0pK1LBHnbTlUdrqYjUEKshUUMbkEP5H+4zrABo2FswJ7+tnd0nnRToGZGKTNRkdp/Cpaqi7NyYm98ixw3nCNTzuv/82b6ah9YeOecXgyO2ug2GJasXUEcYhk07FbGz/wv+IL5nHpthr8pOGsc7iKri7HzJpZsAxrtPpULtdmJp/Jbj16jn9ReRg6ESLFlTLMp/JlQe1b14s+gVHBFHHD9nlrcwUxINbTl/ePCu6PXtvxXt5IVuXLkae6nK5sN0mt4u9To3ZLk44icTDPekYkmY/sF84JLTn3znrdDqr2+2tnZ259fWO6tiVWwkSft6dDWKriUt3ZvNWNYCbfyG7k/TTvzaiLUBC7ztTr/fi7eBfi8OWAA9T8zodNyl190f+u3Edf/jmPslZfZ60duu5xqxM1Ufrr+VmvNGJk8QBEEQBEEQBEEQBEEQBDGe3D+QTTC8nwHkGTOXpfjJHX31TwAAAP//QJBWPQ==") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x2000000000000) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) prctl$PR_SET_PDEATHSIG(0x1, 0x13) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x13) prctl$PR_SET_PDEATHSIG(0x1, 0x31) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x31) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ppoll(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r5, 0x13) waitid(0x1, r5, 0x0, 0x2, &(0x7f0000000200)) statfs(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)=""/91) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000100)) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [33, 22] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x2000000000000) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) prctl$PR_SET_PDEATHSIG(0x1, 0x13) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x13) prctl$PR_SET_PDEATHSIG(0x1, 0x31) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x31) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ppoll(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r5, 0x13) waitid(0x1, r5, 0x0, 0x2, &(0x7f0000000200)) statfs(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)=""/91) socket$inet6_icmp(0xa, 0x2, 0x3a) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [32, 22] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x2000000000000) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) prctl$PR_SET_PDEATHSIG(0x1, 0x13) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x13) prctl$PR_SET_PDEATHSIG(0x1, 0x31) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x31) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ppoll(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r5, 0x13) waitid(0x1, r5, 0x0, 0x2, &(0x7f0000000200)) statfs(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)=""/91) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [31, 22] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x2000000000000) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) prctl$PR_SET_PDEATHSIG(0x1, 0x13) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x13) prctl$PR_SET_PDEATHSIG(0x1, 0x31) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x31) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ppoll(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r5, 0x13) waitid(0x1, r5, 0x0, 0x2, &(0x7f0000000200)) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 22] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x2000000000000) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) prctl$PR_SET_PDEATHSIG(0x1, 0x13) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x13) prctl$PR_SET_PDEATHSIG(0x1, 0x31) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x31) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ppoll(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r5, 0x13) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [29, 22] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x2000000000000) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) prctl$PR_SET_PDEATHSIG(0x1, 0x13) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x13) prctl$PR_SET_PDEATHSIG(0x1, 0x31) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x31) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ppoll(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [28, 22] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x2000000000000) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) prctl$PR_SET_PDEATHSIG(0x1, 0x13) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x13) prctl$PR_SET_PDEATHSIG(0x1, 0x31) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x31) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ppoll(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 22] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x2000000000000) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) prctl$PR_SET_PDEATHSIG(0x1, 0x13) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x13) prctl$PR_SET_PDEATHSIG(0x1, 0x31) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x31) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ppoll(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 22] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x2000000000000) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) prctl$PR_SET_PDEATHSIG(0x1, 0x13) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x13) prctl$PR_SET_PDEATHSIG(0x1, 0x31) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x31) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ppoll(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 22] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$eJzsmL9rFEEUx78zu7d3iRKx0MLmLAJGMHu7eyppBGMvCImo5WHGEN3kwuWKJCAk2NhYi/+IRSoLO61sbCxUECxMaSU4Mj+Wm9vdu7DmtMn7wM195+28t29m372FA0EQJ5avX35+fnFrYfkKgNOYRd3av3tWfDwF7qz/9MqrWfl2Y+bpQT4eAyDlYO4fcf8AwJtFD9gzYaV0vYFZG3MZXGvFXXBctvoeGMIsVznwFmB4YM2PN2W2At0pK1LBHnbTlUdrqYjUEKshUUMbkEP5H+4zrABo2FswJ7+tnd0nnRToGZGKTNRkdp/Cpaqi7NyYm98ixw3nCNTzuv/82b6ah9YeOecXgyO2ug2GJasXUEcYhk07FbGz/wv+IL5nHpthr8pOGsc7iKri7HzJpZsAxrtPpULtdmJp/Jbj16jn9ReRg6ESLFlTLMp/JlQe1b14s+gVHBFHHD9nlrcwUxINbTl/ePCu6PXtvxXt5IVuXLkae6nK5sN0mt4u9To3ZLk44icTDPekYkmY/sF84JLTn3znrdDqr2+2tnZ259fWO6tiVWwkSft6dDWKriUt3ZvNWNYCbfyG7k/TTvzaiLUBC7ztTr/fi7eBfi8OWAA9T8zodNyl190f+u3Edf/jmPslZfZ60duu5xqxM1Ufrr+VmvNGJk8QBEEQBEEQBEEQBEEQBDGe3D+QTTC8nwHkGTOXpfjJHX31TwAAAP//QJBWPQ==") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x2000000000000) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) prctl$PR_SET_PDEATHSIG(0x1, 0x13) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x13) prctl$PR_SET_PDEATHSIG(0x1, 0x31) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x31) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ppoll(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 22] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x2000000000000) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) prctl$PR_SET_PDEATHSIG(0x1, 0x13) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x13) prctl$PR_SET_PDEATHSIG(0x1, 0x31) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x31) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ppoll(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x8) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [23, 22] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x2000000000000) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) prctl$PR_SET_PDEATHSIG(0x1, 0x13) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x13) prctl$PR_SET_PDEATHSIG(0x1, 0x31) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x31) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [22, 22] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x2000000000000) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) prctl$PR_SET_PDEATHSIG(0x1, 0x13) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x13) prctl$PR_SET_PDEATHSIG(0x1, 0x31) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x31) getdents64(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [22, 22] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x2000000000000) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) prctl$PR_SET_PDEATHSIG(0x1, 0x13) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x13) prctl$PR_SET_PDEATHSIG(0x1, 0x31) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x31) getdents64(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [22, 22] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x2000000000000) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) prctl$PR_SET_PDEATHSIG(0x1, 0x13) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x13) prctl$PR_SET_PDEATHSIG(0x1, 0x31) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x31) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 22] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x2000000000000) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) prctl$PR_SET_PDEATHSIG(0x1, 0x13) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x13) prctl$PR_SET_PDEATHSIG(0x1, 0x31) (async) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 22] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$eJzsmL9rFEEUx78zu7d3iRKx0MLmLAJGMHu7eyppBGMvCImo5WHGEN3kwuWKJCAk2NhYi/+IRSoLO61sbCxUECxMaSU4Mj+Wm9vdu7DmtMn7wM195+28t29m372FA0EQJ5avX35+fnFrYfkKgNOYRd3av3tWfDwF7qz/9MqrWfl2Y+bpQT4eAyDlYO4fcf8AwJtFD9gzYaV0vYFZG3MZXGvFXXBctvoeGMIsVznwFmB4YM2PN2W2At0pK1LBHnbTlUdrqYjUEKshUUMbkEP5H+4zrABo2FswJ7+tnd0nnRToGZGKTNRkdp/Cpaqi7NyYm98ixw3nCNTzuv/82b6ah9YeOecXgyO2ug2GJasXUEcYhk07FbGz/wv+IL5nHpthr8pOGsc7iKri7HzJpZsAxrtPpULtdmJp/Jbj16jn9ReRg6ESLFlTLMp/JlQe1b14s+gVHBFHHD9nlrcwUxINbTl/ePCu6PXtvxXt5IVuXLkae6nK5sN0mt4u9To3ZLk44icTDPekYkmY/sF84JLTn3znrdDqr2+2tnZ259fWO6tiVWwkSft6dDWKriUt3ZvNWNYCbfyG7k/TTvzaiLUBC7ztTr/fi7eBfi8OWAA9T8zodNyl190f+u3Edf/jmPslZfZ60duu5xqxM1Ufrr+VmvNGJk8QBEEQBEEQBEEQBEEQBDGe3D+QTTC8nwHkGTOXpfjJHX31TwAAAP//QJBWPQ==") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x2000000000000) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) prctl$PR_SET_PDEATHSIG(0x1, 0x13) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x13) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 22] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x2000000000000) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) prctl$PR_SET_PDEATHSIG(0x1, 0x13) (async) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 22] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x2000000000000) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) (async) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [17, 22] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$eJzsmL9rFEEUx78zu7d3iRKx0MLmLAJGMHu7eyppBGMvCImo5WHGEN3kwuWKJCAk2NhYi/+IRSoLO61sbCxUECxMaSU4Mj+Wm9vdu7DmtMn7wM195+28t29m372FA0EQJ5avX35+fnFrYfkKgNOYRd3av3tWfDwF7qz/9MqrWfl2Y+bpQT4eAyDlYO4fcf8AwJtFD9gzYaV0vYFZG3MZXGvFXXBctvoeGMIsVznwFmB4YM2PN2W2At0pK1LBHnbTlUdrqYjUEKshUUMbkEP5H+4zrABo2FswJ7+tnd0nnRToGZGKTNRkdp/Cpaqi7NyYm98ixw3nCNTzuv/82b6ah9YeOecXgyO2ug2GJasXUEcYhk07FbGz/wv+IL5nHpthr8pOGsc7iKri7HzJpZsAxrtPpULtdmJp/Jbj16jn9ReRg6ESLFlTLMp/JlQe1b14s+gVHBFHHD9nlrcwUxINbTl/ePCu6PXtvxXt5IVuXLkae6nK5sN0mt4u9To3ZLk44icTDPekYkmY/sF84JLTn3znrdDqr2+2tnZ259fWO6tiVWwkSft6dDWKriUt3ZvNWNYCbfyG7k/TTvzaiLUBC7ztTr/fi7eBfi8OWAA9T8zodNyl190f+u3Edf/jmPslZfZ60duu5xqxM1Ufrr+VmvNGJk8QBEEQBEEQBEEQBEEQBDGe3D+QTTC8nwHkGTOXpfjJHX31TwAAAP//QJBWPQ==") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x2000000000000) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) (async) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 22] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x2000000000000) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 22] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 22] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 22] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 22] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 22] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$eJzsmL9rFEEUx78zu7d3iRKx0MLmLAJGMHu7eyppBGMvCImo5WHGEN3kwuWKJCAk2NhYi/+IRSoLO61sbCxUECxMaSU4Mj+Wm9vdu7DmtMn7wM195+28t29m372FA0EQJ5avX35+fnFrYfkKgNOYRd3av3tWfDwF7qz/9MqrWfl2Y+bpQT4eAyDlYO4fcf8AwJtFD9gzYaV0vYFZG3MZXGvFXXBctvoeGMIsVznwFmB4YM2PN2W2At0pK1LBHnbTlUdrqYjUEKshUUMbkEP5H+4zrABo2FswJ7+tnd0nnRToGZGKTNRkdp/Cpaqi7NyYm98ixw3nCNTzuv/82b6ah9YeOecXgyO2ug2GJasXUEcYhk07FbGz/wv+IL5nHpthr8pOGsc7iKri7HzJpZsAxrtPpULtdmJp/Jbj16jn9ReRg6ESLFlTLMp/JlQe1b14s+gVHBFHHD9nlrcwUxINbTl/ePCu6PXtvxXt5IVuXLkae6nK5sN0mt4u9To3ZLk44icTDPekYkmY/sF84JLTn3znrdDqr2+2tnZ259fWO6tiVWwkSft6dDWKriUt3ZvNWNYCbfyG7k/TTvzaiLUBC7ztTr/fi7eBfi8OWAA9T8zodNyl190f+u3Edf/jmPslZfZ60duu5xqxM1Ufrr+VmvNGJk8QBEEQBEEQBEEQBEEQBDGe3D+QTTC8nwHkGTOXpfjJHX31TwAAAP//QJBWPQ==") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) syz_pidfd_open(r2, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 22] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 22] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) getpid() r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 22] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$eJzsmL9rFEEUx78zu7d3iRKx0MLmLAJGMHu7eyppBGMvCImo5WHGEN3kwuWKJCAk2NhYi/+IRSoLO61sbCxUECxMaSU4Mj+Wm9vdu7DmtMn7wM195+28t29m372FA0EQJ5avX35+fnFrYfkKgNOYRd3av3tWfDwF7qz/9MqrWfl2Y+bpQT4eAyDlYO4fcf8AwJtFD9gzYaV0vYFZG3MZXGvFXXBctvoeGMIsVznwFmB4YM2PN2W2At0pK1LBHnbTlUdrqYjUEKshUUMbkEP5H+4zrABo2FswJ7+tnd0nnRToGZGKTNRkdp/Cpaqi7NyYm98ixw3nCNTzuv/82b6ah9YeOecXgyO2ug2GJasXUEcYhk07FbGz/wv+IL5nHpthr8pOGsc7iKri7HzJpZsAxrtPpULtdmJp/Jbj16jn9ReRg6ESLFlTLMp/JlQe1b14s+gVHBFHHD9nlrcwUxINbTl/ePCu6PXtvxXt5IVuXLkae6nK5sN0mt4u9To3ZLk44icTDPekYkmY/sF84JLTn3znrdDqr2+2tnZ259fWO6tiVWwkSft6dDWKriUt3ZvNWNYCbfyG7k/TTvzaiLUBC7ztTr/fi7eBfi8OWAA9T8zodNyl190f+u3Edf/jmPslZfZ60duu5xqxM1Ufrr+VmvNGJk8QBEEQBEEQBEEQBEEQBDGe3D+QTTC8nwHkGTOXpfjJHX31TwAAAP//QJBWPQ==") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 22] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0xc40, 0x0) (async) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 22] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$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") open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 22] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='\x00', 0x4002, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0], 0x5, 0x220, &(0x7f0000000980)="$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") r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 22] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 22] detailed listing: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 22] detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) program crashed: panic: UserChainTarget should never be called. minimized 37 calls -> 2 calls minimizing program #1 before concatenation testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 21] detailed listing: executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) prctl$PR_SET_PDEATHSIG(0x1, 0x1b) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 20] detailed listing: executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2f, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv4=@multicast1, @gre_key=0x8, @gre_key=0x5}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xd196c8d1b433854c, 0x0, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'batadv0\x00', {}, {}, 0x16, 0x2, 0x4, 0x61}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e22, @icmp_id=0x67}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'hsr0\x00', {0xff}, {}, 0x8, 0x7, 0x3, 0x40}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8acf6fdec1e84778af01201d771ed04d75423c15413e1eedc05974665657"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 19] detailed listing: executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 18] detailed listing: executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) r5 = fcntl$dupfd(r4, 0x406, r4) shutdown(r5, 0x1) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 17] detailed listing: executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) fcntl$dupfd(r4, 0x406, r4) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 16] detailed listing: executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e22, 0x10007, @empty, 0x5}, 0xffffffffffffff4f) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 15] detailed listing: executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 14] detailed listing: executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) socket$inet6_tcp(0xa, 0x1, 0x0) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 13] detailed listing: executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0xfff8, 0x7, 0x8, 0xffff}, {0x1, 0xa5, 0xda, 0x9}, {0x9, 0x7d, 0x8, 0x9f}, {0x7, 0x82, 0xfa, 0x8}, {0xfffd, 0x10, 0x5, 0x4}, {0x0, 0x4, 0x4d, 0x2}]}) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 12] detailed listing: executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 11] detailed listing: executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xef, 0x0, 0xfffffffe}]}) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 10] detailed listing: executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 9] detailed listing: executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 9] detailed listing: executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 8] detailed listing: executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 7] detailed listing: executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 6] detailed listing: executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 5] detailed listing: executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) fcntl$dupfd(r0, 0x0, r1) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 4] detailed listing: executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3] detailed listing: executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2] detailed listing: executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) program crashed: panic: UserChainTarget should never be called. testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1] detailed listing: executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) executing program 0: syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) program crashed: panic: UserChainTarget should never be called. minimized 22 calls -> 1 calls testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) program crashed: panic: UserChainTarget should never be called. bisect: concatenation succeeded found reproducer with 3 syscalls minimizing guilty program testing program (duration=26.021435582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) program did not crash testing program (duration=26.021435582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-syz_emit_ethernet detailed listing: executing program 0: socket$inet6(0xa, 0x3, 0xff) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) program did not crash testing program (duration=26.021435582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet detailed listing: executing program 0: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) program did not crash testing program (duration=26.021435582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) program did not crash testing program (duration=26.021435582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) syz_emit_ethernet(0x0, 0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=26.021435582s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet program crashed: panic: UserChainTarget should never be called. simplifying C reproducer testing compiled C program (duration=26.021435582s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet program crashed: panic: UserChainTarget should never be called. testing compiled C program (duration=26.021435582s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet program crashed: panic: UserChainTarget should never be called. testing compiled C program (duration=26.021435582s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet program did not crash testing compiled C program (duration=26.021435582s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet program did not crash testing compiled C program (duration=26.021435582s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet program crashed: panic: UserChainTarget should never be called. testing compiled C program (duration=26.021435582s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet program crashed: panic: UserChainTarget should never be called. testing compiled C program (duration=26.021435582s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet program crashed: panic: UserChainTarget should never be called. testing compiled C program (duration=26.021435582s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet program crashed: panic: UserChainTarget should never be called. testing compiled C program (duration=26.021435582s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet program crashed: panic: UserChainTarget should never be called. testing compiled C program (duration=26.021435582s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet program crashed: panic: UserChainTarget should never be called. testing program (duration=26.021435582s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) program crashed: panic: UserChainTarget should never be called. validation run: crashed=true testing program (duration=26.021435582s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) program crashed: panic: UserChainTarget should never be called. validation run: crashed=true testing program (duration=26.021435582s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet detailed listing: executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b8}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b60aa829396d988bc9686f9cca6b4a0a7ede93866e0a2fabb9b83fd7a935"}}, {{@ipv6={@empty, @empty}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) program crashed: panic: UserChainTarget should never be called. validation run: crashed=true reproducing took 1h45m43.809059302s repro crashed as (corrupted=false): panic: UserChainTarget should never be called. goroutine 1367 gp=0x5d9e2d7fc20 m=28 mp=0x5d9e2520008 [running]: panic({0x1bd63a0?, 0x1f2a9c0?}) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/go/src/runtime/panic.go:879 +0x15c fp=0x5d9e2889f00 sp=0x5d9e2889e50 pc=0x9667c gvisor.dev/gvisor/pkg/tcpip/stack.(*UserChainTarget).Action(...) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/stack/iptables_targets.go:174 gvisor.dev/gvisor/pkg/sentry/socket/netfilter.(*userChainTarget).Action(0x0?, 0x0?, 0x0?, 0x10?, {0x0?, 0x0?}) :1 +0x80 fp=0x5d9e2889f20 sp=0x5d9e2889f00 pc=0xebbda0 gvisor.dev/gvisor/pkg/tcpip/stack.(*IPTables).checkRule(0x2?, 0x1, 0x5d9e2412c60, {{0x5d9e301cc08, 0x4, 0x4}, {0xffffffffffffffff, 0x1, 0x2, 0x0, ...}, ...}, ...) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/stack/iptables.go:774 +0x3d0 fp=0x5d9e288a130 sp=0x5d9e2889f20 pc=0xbedaf0 gvisor.dev/gvisor/pkg/tcpip/stack.(*IPTables).checkChain(0x5d9e21ebc08, 0x1, 0x5d9e2412c60, {{0x5d9e301cc08, 0x4, 0x4}, {0xffffffffffffffff, 0x1, 0x2, 0x0, ...}, ...}, ...) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/stack/iptables.go:705 +0x16c fp=0x5d9e288a220 sp=0x5d9e288a130 pc=0xbed25c gvisor.dev/gvisor/pkg/tcpip/stack.(*IPTables).check(0xffffffffffffffff?, {{0x5d9e301cc08, 0x4, 0x4}, {0xffffffffffffffff, 0x1, 0x2, 0x0, 0xffffffffffffffff}, {0xffffffffffffffff, ...}}, ...) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/stack/iptables.go:650 +0x114 fp=0x5d9e288a3f0 sp=0x5d9e288a220 pc=0xbec9c4 gvisor.dev/gvisor/pkg/tcpip/stack.check(0x5d9e2412c60?, {{0x5d9e301cc08, 0x4, 0x4}, {0xffffffffffffffff, 0x1, 0x2, 0x0, 0xffffffffffffffff}, {0xffffffffffffffff, ...}}, ...) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/stack/iptables.go:640 +0xc4 fp=0x5d9e288a4c0 sp=0x5d9e288a3f0 pc=0xbec864 gvisor.dev/gvisor/pkg/tcpip/stack.(*IPTables).CheckInput(0x5d9e21ebc08, 0x5d9e2412c60, {0x5d9e1add108, 0x7}) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/stack/iptables.go:459 +0x2b8 fp=0x5d9e288a7f0 sp=0x5d9e288a4c0 pc=0xbeb3c8 gvisor.dev/gvisor/pkg/tcpip/network/ipv6.(*endpoint).deliverPacketLocally(0x5d9e16fea88, {0x5d9e290278e, 0x30, 0x72}, 0x5d9e2412c60, {0x5d9e1add108?, 0x5?}) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/network/ipv6/ipv6.go:1436 +0x168 fp=0x5d9e288aa50 sp=0x5d9e288a7f0 pc=0x1027738 gvisor.dev/gvisor/pkg/tcpip/network/ipv6.(*endpoint).handleValidatedPacket(0x5d9e16fea88, {0x5d9e290278e, 0x30, 0x72}, 0x5d9e2412c60, {0x5d9e1add108, 0x7}) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/network/ipv6/ipv6.go:1425 +0x1148 fp=0x5d9e288ad40 sp=0x5d9e288aa50 pc=0x10270f8 gvisor.dev/gvisor/pkg/tcpip/network/ipv6.(*endpoint).HandlePacket(0x5d9e16fea88, 0x5d9e2412c60) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/network/ipv6/ipv6.go:1195 +0x1d80 fp=0x5d9e288b2a0 sp=0x5d9e288ad40 pc=0x10205f0 gvisor.dev/gvisor/pkg/tcpip/stack.(*nic).DeliverNetworkPacket(0x5d9e21e86c8, 0x86dd, 0x5d9e2412c60) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/stack/nic.go:781 +0xa00 fp=0x5d9e288b2e0 sp=0x5d9e288b2a0 pc=0xc0e280 gvisor.dev/gvisor/pkg/tcpip/link/nested.(*Endpoint).DeliverNetworkPacket(0x5d9e288b348?, 0x86dd, 0x5d9e2412c60) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/link/nested/nested.go:61 +0x154 fp=0x5d9e288b320 sp=0x5d9e288b2e0 pc=0x1070c44 gvisor.dev/gvisor/pkg/tcpip/link/packetsocket.(*Endpoint).DeliverNetworkPacket(0x5d9e1aa29b0, 0x86dd, 0x5d9e2412c60) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/link/packetsocket/packetsocket.go:50 +0xa4 fp=0x5d9e288b350 sp=0x5d9e288b320 pc=0x1074794 gvisor.dev/gvisor/pkg/tcpip/link/channel.(*Endpoint).InjectInbound(0x5d9e24a0300, 0x86dd, 0x5d9e2412c60) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/link/channel/channel.go:208 +0x18c fp=0x5d9e288b390 sp=0x5d9e288b350 pc=0x107c3ac gvisor.dev/gvisor/pkg/tcpip/link/tun.(*Device).Write(0x5d9e27a5db0, 0x5d9e250e2a0) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/link/tun/device.go:279 +0x17f8 fp=0x5d9e288b540 sp=0x5d9e288b390 pc=0x1083238 gvisor.dev/gvisor/pkg/sentry/devices/tundev.(*tunFD).Write(0x1f33d78?, {0x1f583a0, 0x5d9e243f208}, {{0x1f4d9f8, 0x5d9e2ed0008}, {0x0, 0x1, 0x200001c0, 0x4a}, {0x0}}, ...) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/devices/tundev/tundev.go:176 +0x828 fp=0x5d9e288b600 sp=0x5d9e288b540 pc=0x1774b18 gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).Write(0x5d9e27a5d40, {0x1f583a0, 0x5d9e243f208}, {{0x1f4d9f8, 0x5d9e2ed0008}, {0x0, 0x1, 0x200001c0, 0x4a}, {0x0}}, ...) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/vfs/file_description.go:728 +0x174 fp=0x5d9e288b680 sp=0x5d9e288b600 pc=0x707354 gvisor.dev/gvisor/pkg/sentry/syscalls/linux.write(0x5d9e243f208, 0x5d9e27a5d40, {{0x1f4d9f8, 0x5d9e2ed0008}, {0x0, 0x1, 0x200001c0, 0x4a}, {0x0}}, {0x0?}) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/syscalls/linux/sys_read_write.go:333 +0xdc fp=0x5d9e288b800 sp=0x5d9e288b680 pc=0x11b677c gvisor.dev/gvisor/pkg/sentry/syscalls/linux.Write(0x5d9e243f208, 0xda?, {{0xc8}, {0x200001c0}, {0x4a}, {0x0}, {0x0}, {0x0}}) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/syscalls/linux/sys_read_write.go:304 +0x4c0 fp=0x5d9e288b940 sp=0x5d9e288b800 pc=0x11b4d80 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0x5d9e243f208, 0x40, {{0xc8}, {0x200001c0}, {0x4a}, {0x0}, {0x0}, {0x0}}) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_syscall.go:143 +0x1230 fp=0x5d9e288bc80 sp=0x5d9e288b940 pc=0xe08340 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0x5d9e243f208, 0x40, {{0xc8}, {0x200001c0}, {0x4a}, {0x0}, {0x0}, {0x0}}) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_syscall.go:323 +0xb0 fp=0x5d9e288bce0 sp=0x5d9e288bc80 pc=0xe0b550 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0x5d9e243f208, 0x40, {{0xc8}, {0x200001c0}, {0x4a}, {0x0}, {0x0}, {0x0}}) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_syscall.go:283 +0x14c fp=0x5d9e288bd30 sp=0x5d9e288bce0 pc=0xe0a59c gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0x5d9e2ec7110?) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_syscall.go:258 +0x8cc fp=0x5d9e288be10 sp=0x5d9e288bd30 pc=0xe09d6c gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0x5d9e2302630?, 0x5d9e243f208) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_run.go:258 +0x2fec fp=0x5d9e288bf10 sp=0x5d9e288be10 pc=0xdea75c gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0x5d9e243f208, 0x62) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_run.go:89 +0x56c fp=0x5d9e288bfb0 sp=0x5d9e288bf10 pc=0xde6e6c gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1() /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_start.go:531 +0x20 fp=0x5d9e288bfd0 sp=0x5d9e288bfb0 pc=0xe04b80 runtime.goexit({}) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/go/src/runtime/asm_arm64.s:1447 +0x4 fp=0x5d9e288bfd0 sp=0x5d9e288bfd0 pc=0x9ef54 created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 1315 /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_start.go:531 +0x16c final repro crashed as (corrupted=false): panic: UserChainTarget should never be called. goroutine 1367 gp=0x5d9e2d7fc20 m=28 mp=0x5d9e2520008 [running]: panic({0x1bd63a0?, 0x1f2a9c0?}) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/go/src/runtime/panic.go:879 +0x15c fp=0x5d9e2889f00 sp=0x5d9e2889e50 pc=0x9667c gvisor.dev/gvisor/pkg/tcpip/stack.(*UserChainTarget).Action(...) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/stack/iptables_targets.go:174 gvisor.dev/gvisor/pkg/sentry/socket/netfilter.(*userChainTarget).Action(0x0?, 0x0?, 0x0?, 0x10?, {0x0?, 0x0?}) :1 +0x80 fp=0x5d9e2889f20 sp=0x5d9e2889f00 pc=0xebbda0 gvisor.dev/gvisor/pkg/tcpip/stack.(*IPTables).checkRule(0x2?, 0x1, 0x5d9e2412c60, {{0x5d9e301cc08, 0x4, 0x4}, {0xffffffffffffffff, 0x1, 0x2, 0x0, ...}, ...}, ...) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/stack/iptables.go:774 +0x3d0 fp=0x5d9e288a130 sp=0x5d9e2889f20 pc=0xbedaf0 gvisor.dev/gvisor/pkg/tcpip/stack.(*IPTables).checkChain(0x5d9e21ebc08, 0x1, 0x5d9e2412c60, {{0x5d9e301cc08, 0x4, 0x4}, {0xffffffffffffffff, 0x1, 0x2, 0x0, ...}, ...}, ...) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/stack/iptables.go:705 +0x16c fp=0x5d9e288a220 sp=0x5d9e288a130 pc=0xbed25c gvisor.dev/gvisor/pkg/tcpip/stack.(*IPTables).check(0xffffffffffffffff?, {{0x5d9e301cc08, 0x4, 0x4}, {0xffffffffffffffff, 0x1, 0x2, 0x0, 0xffffffffffffffff}, {0xffffffffffffffff, ...}}, ...) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/stack/iptables.go:650 +0x114 fp=0x5d9e288a3f0 sp=0x5d9e288a220 pc=0xbec9c4 gvisor.dev/gvisor/pkg/tcpip/stack.check(0x5d9e2412c60?, {{0x5d9e301cc08, 0x4, 0x4}, {0xffffffffffffffff, 0x1, 0x2, 0x0, 0xffffffffffffffff}, {0xffffffffffffffff, ...}}, ...) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/stack/iptables.go:640 +0xc4 fp=0x5d9e288a4c0 sp=0x5d9e288a3f0 pc=0xbec864 gvisor.dev/gvisor/pkg/tcpip/stack.(*IPTables).CheckInput(0x5d9e21ebc08, 0x5d9e2412c60, {0x5d9e1add108, 0x7}) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/stack/iptables.go:459 +0x2b8 fp=0x5d9e288a7f0 sp=0x5d9e288a4c0 pc=0xbeb3c8 gvisor.dev/gvisor/pkg/tcpip/network/ipv6.(*endpoint).deliverPacketLocally(0x5d9e16fea88, {0x5d9e290278e, 0x30, 0x72}, 0x5d9e2412c60, {0x5d9e1add108?, 0x5?}) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/network/ipv6/ipv6.go:1436 +0x168 fp=0x5d9e288aa50 sp=0x5d9e288a7f0 pc=0x1027738 gvisor.dev/gvisor/pkg/tcpip/network/ipv6.(*endpoint).handleValidatedPacket(0x5d9e16fea88, {0x5d9e290278e, 0x30, 0x72}, 0x5d9e2412c60, {0x5d9e1add108, 0x7}) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/network/ipv6/ipv6.go:1425 +0x1148 fp=0x5d9e288ad40 sp=0x5d9e288aa50 pc=0x10270f8 gvisor.dev/gvisor/pkg/tcpip/network/ipv6.(*endpoint).HandlePacket(0x5d9e16fea88, 0x5d9e2412c60) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/network/ipv6/ipv6.go:1195 +0x1d80 fp=0x5d9e288b2a0 sp=0x5d9e288ad40 pc=0x10205f0 gvisor.dev/gvisor/pkg/tcpip/stack.(*nic).DeliverNetworkPacket(0x5d9e21e86c8, 0x86dd, 0x5d9e2412c60) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/stack/nic.go:781 +0xa00 fp=0x5d9e288b2e0 sp=0x5d9e288b2a0 pc=0xc0e280 gvisor.dev/gvisor/pkg/tcpip/link/nested.(*Endpoint).DeliverNetworkPacket(0x5d9e288b348?, 0x86dd, 0x5d9e2412c60) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/link/nested/nested.go:61 +0x154 fp=0x5d9e288b320 sp=0x5d9e288b2e0 pc=0x1070c44 gvisor.dev/gvisor/pkg/tcpip/link/packetsocket.(*Endpoint).DeliverNetworkPacket(0x5d9e1aa29b0, 0x86dd, 0x5d9e2412c60) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/link/packetsocket/packetsocket.go:50 +0xa4 fp=0x5d9e288b350 sp=0x5d9e288b320 pc=0x1074794 gvisor.dev/gvisor/pkg/tcpip/link/channel.(*Endpoint).InjectInbound(0x5d9e24a0300, 0x86dd, 0x5d9e2412c60) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/link/channel/channel.go:208 +0x18c fp=0x5d9e288b390 sp=0x5d9e288b350 pc=0x107c3ac gvisor.dev/gvisor/pkg/tcpip/link/tun.(*Device).Write(0x5d9e27a5db0, 0x5d9e250e2a0) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/tcpip/link/tun/device.go:279 +0x17f8 fp=0x5d9e288b540 sp=0x5d9e288b390 pc=0x1083238 gvisor.dev/gvisor/pkg/sentry/devices/tundev.(*tunFD).Write(0x1f33d78?, {0x1f583a0, 0x5d9e243f208}, {{0x1f4d9f8, 0x5d9e2ed0008}, {0x0, 0x1, 0x200001c0, 0x4a}, {0x0}}, ...) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/devices/tundev/tundev.go:176 +0x828 fp=0x5d9e288b600 sp=0x5d9e288b540 pc=0x1774b18 gvisor.dev/gvisor/pkg/sentry/vfs.(*FileDescription).Write(0x5d9e27a5d40, {0x1f583a0, 0x5d9e243f208}, {{0x1f4d9f8, 0x5d9e2ed0008}, {0x0, 0x1, 0x200001c0, 0x4a}, {0x0}}, ...) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/vfs/file_description.go:728 +0x174 fp=0x5d9e288b680 sp=0x5d9e288b600 pc=0x707354 gvisor.dev/gvisor/pkg/sentry/syscalls/linux.write(0x5d9e243f208, 0x5d9e27a5d40, {{0x1f4d9f8, 0x5d9e2ed0008}, {0x0, 0x1, 0x200001c0, 0x4a}, {0x0}}, {0x0?}) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/syscalls/linux/sys_read_write.go:333 +0xdc fp=0x5d9e288b800 sp=0x5d9e288b680 pc=0x11b677c gvisor.dev/gvisor/pkg/sentry/syscalls/linux.Write(0x5d9e243f208, 0xda?, {{0xc8}, {0x200001c0}, {0x4a}, {0x0}, {0x0}, {0x0}}) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/syscalls/linux/sys_read_write.go:304 +0x4c0 fp=0x5d9e288b940 sp=0x5d9e288b800 pc=0x11b4d80 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0x5d9e243f208, 0x40, {{0xc8}, {0x200001c0}, {0x4a}, {0x0}, {0x0}, {0x0}}) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_syscall.go:143 +0x1230 fp=0x5d9e288bc80 sp=0x5d9e288b940 pc=0xe08340 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0x5d9e243f208, 0x40, {{0xc8}, {0x200001c0}, {0x4a}, {0x0}, {0x0}, {0x0}}) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_syscall.go:323 +0xb0 fp=0x5d9e288bce0 sp=0x5d9e288bc80 pc=0xe0b550 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0x5d9e243f208, 0x40, {{0xc8}, {0x200001c0}, {0x4a}, {0x0}, {0x0}, {0x0}}) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_syscall.go:283 +0x14c fp=0x5d9e288bd30 sp=0x5d9e288bce0 pc=0xe0a59c gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0x5d9e2ec7110?) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_syscall.go:258 +0x8cc fp=0x5d9e288be10 sp=0x5d9e288bd30 pc=0xe09d6c gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0x5d9e2302630?, 0x5d9e243f208) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_run.go:258 +0x2fec fp=0x5d9e288bf10 sp=0x5d9e288be10 pc=0xdea75c gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0x5d9e243f208, 0x62) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_run.go:89 +0x56c fp=0x5d9e288bfb0 sp=0x5d9e288bf10 pc=0xde6e6c gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1() /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_start.go:531 +0x20 fp=0x5d9e288bfd0 sp=0x5d9e288bfb0 pc=0xe04b80 runtime.goexit({}) /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/go/src/runtime/asm_arm64.s:1447 +0x4 fp=0x5d9e288bfd0 sp=0x5d9e288bfd0 pc=0x9ef54 created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 1315 /syzkaller/.cache/bazel/_bazel_root/2defe4792b6e1aac1936903102d81265/sandbox/linux-sandbox/124/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_start.go:531 +0x16c