last executing test programs: 27m18.046388122s ago: executing program 32 (id=803): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x27}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in=@multicast1, 0x0, 0x2b}, 0x0, @in=@local, 0x6, 0x4, 0x1, 0x0, 0xffffffff}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x840) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r2, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x88, 0x7, @mcast2}, 0x1c, 0x0}, 0x20008b88) 27m10.25245075s ago: executing program 33 (id=869): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002340)=@delchain={0x2c, 0x66, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xf, 0x6}, {0x0, 0xfff1}, {0xc, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000881}, 0x49090) 27m8.636361058s ago: executing program 34 (id=734): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000600)='d', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="86", 0x1, 0x20044005, 0x0, 0x0) 26m55.325273648s ago: executing program 35 (id=1004): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="7fe1b33315b1fd8cd2523811f49a284c7da2c2dab8d7a3562386f41e36", 0x1d}], 0x1}}], 0x1, 0x40) close(r2) 25m14.439681902s ago: executing program 36 (id=1497): r0 = socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000080)={0x5, &(0x7f00000001c0)=[{0x2, 0xf, 0x4, 0xfffffff5}, {0x1, 0x5, 0x26, 0x59c}, {0x9, 0x9, 0x7, 0x1}, {0xf5, 0x1, 0x7, 0xfffffffb}, {0x1ff, 0x1, 0xec, 0x1}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x1c, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xf, 0xffffffffffffffff, 0x0) epoll_create(0x6) socket$inet6(0xa, 0x3, 0x87) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x58, &(0x7f0000000680)}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7, 0x6}, 0x204, 0x0, 0x7bb00, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002000)=@newtaction={0xeb4, 0x30, 0xb, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0x3, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf2, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x7fffffff, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x1}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x9, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0xfffffffd, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x57d6, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0xffff, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x103, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0x1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800002, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff3, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x4ce}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x40000000, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0xa, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x7}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x2, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x0) syz_pidfd_open(0x0, 0x0) 21m17.588079447s ago: executing program 37 (id=2401): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf40000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100), 0x4) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000100)={0x2b, 0x22, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000300)={0x6, 0x7ff, 0x6, 0x9, 0x6, 0x1}) unlinkat(0xffffffffffffff9c, 0x0, 0x0) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r6, 0xd3, 0xd}, 0xc) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='net/vlan/config\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) read$eventfd(r7, &(0x7f0000000000), 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000180)=@file={0x1}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1}, 0x6e) unshare(0x40020000) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000140)=0x1) ioctl$EVIOCSFF(r9, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x51, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x7fe, 0xc7, 0x2}, {0x0, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r9, &(0x7f0000000040)="e2", 0x2250) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYBLOB="01002bbd7000fddbdf250b00000018000180140002006d616373656330000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20008814}, 0xbd7838ee412df6f2) 20m29.655609906s ago: executing program 38 (id=2713): fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x15, 0x5, 0x0) connect$unix(r0, &(0x7f0000000080)=@abs={0xa}, 0x6e) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x68000000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @private1}}, 0xa0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) io_setup(0x1581, 0x0) socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x4, 0x4}, 0x10, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xb619, '.\x00'}}) 20m18.468272632s ago: executing program 39 (id=2769): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@union={0x4, 0x1, 0x0, 0x5, 0x0, 0x8, [{0x1, 0x3, 0x80000001}]}]}, {0x0, [0x2e, 0x659a0ff34001bc7e, 0x61, 0x2e]}}, 0x0, 0x36, 0x0, 0x1, 0xd96b}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x1000) r3 = socket$rds(0x15, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000003, 0xc3072, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@dax}, {@resuid}, {@lazytime}, {@grpid}], [], 0x2c}, 0x84, 0x4f5, &(0x7f0000001340)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) quotactl_fd$Q_SYNC(r4, 0xffffffff80000102, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x8) 20m4.815497906s ago: executing program 40 (id=2854): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) socket$netlink(0x10, 0x3, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000940)=0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x8309}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x3, r5, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x10}, 0x9, 0xcc24, 0xfffffffffffff0cb, 0x2, 0x0, 0x0, 0x42}) setresuid(0x0, r3, r5) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) writev(r2, &(0x7f0000000540)=[{&(0x7f00000002c0)="ff0fd101851e4184898ec81263ade9ba5f9568e9549061e858d464c1dfd3aa0dbcac400b0a6686c65acc056411b471c9c582448c88c6a29ef031d3faed4a4358c5f5fb4b6c5eb4e0c022151529150c8716350faf77a99f3cc8f6ca511e75a11b57efe54beedfb28258cde658dc844eab", 0x70}, {&(0x7f0000000440)="76a759ce24484df0e38bfa4bf44a9dbdf9315d7f364516a818518244813c86f5eca5510baeb45412152f7f1ce199690fcb9ca0b658d43ba01d01d78ebcb971d25658892746e90751abfe9679950659496dd3356a22f46267275af815809c38e8750b26e9001e4353b396233fcaeb43211e411707e9aff4", 0x77}], 0x2) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x74) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000001c0)=0x0) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) sendmmsg$unix(r6, &(0x7f0000000b00)=[{{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='/\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="d5c532a2d64ba06c804fff010000de86c1b89ddd0000000000"], 0x20) 19m36.231555977s ago: executing program 41 (id=3035): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@union={0x4, 0x1, 0x0, 0x5, 0x0, 0x8, [{0x1, 0x3, 0x80000001}]}]}, {0x0, [0x2e, 0x659a0ff34001bc7e, 0x61, 0x2e]}}, 0x0, 0x36, 0x0, 0x1, 0xd96b}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x1000) r3 = socket$rds(0x15, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000003, 0xc3072, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@dax}, {@resuid}, {@lazytime}, {@grpid}], [], 0x2c}, 0x84, 0x4f5, &(0x7f0000001340)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) quotactl_fd$Q_SYNC(r4, 0xffffffff80000102, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x8) 6m58.41367522s ago: executing program 42 (id=6349): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x2, 0x4) listen(r2, 0xfffefffa) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r4, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newqdisc={0x854, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff1, 0x7}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x814, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x2d, 0x8, 0x9, 0x2, 0x6, 0x4, 0x8, 0x1bab, 0x2, 0x5, 0x7, 0x4, 0x7fff, 0x6, 0x87b, 0xfff, 0x2, 0x4, 0x7, 0x3, 0x7, 0x3, 0x748, 0x3c, 0x8, 0x8, 0x76, 0x5ec, 0x4, 0x6dd, 0x1, 0x401, 0x3, 0x3, 0x1, 0x5, 0xfff, 0x2, 0x7, 0x8, 0x84, 0x2, 0x3, 0x700, 0xc, 0x400, 0x94, 0xa5, 0xd, 0x0, 0x2, 0x2, 0x6, 0x2, 0x2, 0x2cdad499, 0x7ff, 0x7f, 0x8, 0xa, 0xb7, 0x6cfc, 0xd0, 0x80000000, 0x6, 0xd23, 0x4, 0x7, 0xfffffffb, 0x1470, 0x2, 0xfe5e, 0x8, 0xffff, 0x5, 0x3, 0x7fffffff, 0x10001, 0x9, 0x81, 0xe, 0x76, 0x3, 0x6, 0x3, 0x4, 0x8, 0x4, 0xdaab, 0x7, 0x7, 0x1, 0x49d, 0x4, 0x2, 0x5, 0x5, 0x2, 0x8, 0x80000001, 0x7, 0x8, 0x98, 0x9, 0x7, 0x401, 0x0, 0x2, 0x6, 0x101, 0x200, 0x6, 0x80, 0x2, 0x1, 0xb9c4, 0x6, 0x4, 0x3379, 0x7c, 0x2, 0xff, 0x9e13962, 0x5, 0x101, 0x9, 0x9, 0xf9a5, 0xffff7fff, 0x2311, 0x9, 0x800, 0x7, 0x6, 0xc9b4bdb, 0x29, 0x80000000, 0xf7, 0x0, 0xfffffff6, 0x2, 0x200, 0x5, 0x3, 0x2, 0xdfb6d2b, 0x4, 0x7e67b159, 0x1, 0x9, 0x5, 0x0, 0x7f, 0x800, 0xffffff80, 0x3, 0x1, 0xfffffffa, 0x9, 0x2, 0x6, 0x7, 0x81, 0x9, 0x1, 0x8, 0x40, 0x8, 0x1, 0x4, 0x8, 0x5b3, 0x1, 0x8, 0x0, 0x1, 0x3, 0x5, 0x1, 0x3064, 0x8, 0x5, 0xfffffeb0, 0x5, 0x3, 0x1, 0x4000004, 0x7, 0x6, 0x1e, 0x0, 0xc, 0x7, 0x7, 0x3, 0x8, 0x1, 0x2, 0x3, 0x0, 0x5, 0x3, 0x6, 0x1, 0x0, 0x6ad, 0x921, 0xfffffc99, 0x3, 0xffffff91, 0xfb15, 0x1, 0xfffffc01, 0xf5f5, 0xfffffff7, 0x7, 0x87, 0x1, 0x95f, 0x5, 0x7f, 0x9fcb, 0x1, 0x1, 0x3ff, 0x7fff, 0x0, 0x5, 0x3, 0xfffffffe, 0x401, 0x81, 0x9, 0x9, 0x2, 0x8, 0x4, 0x8, 0x401, 0x7, 0x1, 0xfffffff6, 0x3, 0x6, 0xa, 0x4, 0x0, 0x823, 0x5, 0x1000000d, 0x4, 0xa2, 0x896, 0x0, 0x7]}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cb}, @TCA_TBF_RTAB={0x404, 0x2, [0xffffffff, 0x1c000000, 0x7, 0xf, 0x9, 0xb1d, 0xa, 0x19, 0x2, 0x5, 0x3, 0x100, 0x7, 0x5, 0xb8ad, 0x4f, 0x0, 0x2, 0x3, 0xd, 0x0, 0x8, 0xba2, 0x5, 0x3ff, 0x401, 0x3, 0xa, 0x8, 0x9, 0x7fff, 0xa, 0x1, 0x2, 0x5, 0xfffffff7, 0x9d73, 0x8, 0x8001, 0x80, 0x90, 0x0, 0x96, 0x7, 0x2, 0x4, 0x541, 0x6, 0xe33, 0x7, 0x2, 0x401, 0x5, 0x2, 0x20cd4a7f, 0x0, 0x3, 0x5, 0x4, 0x800, 0x1, 0x76c4d5c1, 0x80000001, 0x7, 0x8, 0x0, 0x4, 0x121, 0x7ff, 0x2, 0x4, 0xb, 0x81, 0x0, 0x3, 0x2, 0x80, 0x4, 0x7ff, 0x1, 0x3, 0x7f, 0xf1, 0x0, 0x7, 0x1, 0x3, 0x2, 0x7, 0xdb2, 0x5, 0x800, 0x1, 0x7, 0xc, 0x9, 0x1, 0xfff, 0x9, 0x1, 0xf6, 0x80, 0x6, 0x8, 0x10000, 0x5, 0x8, 0xff, 0x0, 0x447d, 0x8, 0x7, 0x5, 0xc, 0x0, 0x5, 0xd5db, 0x7, 0xc6, 0xf, 0x5, 0x3, 0x10b46e0a, 0x80000001, 0xe2, 0x4, 0x7, 0xfff, 0x9, 0x6, 0x3, 0xca, 0x9, 0x200, 0x7f, 0x2, 0xffffffff, 0x1, 0xffff, 0x9c5e, 0x9, 0x0, 0xd026, 0x9, 0x6, 0x4, 0x3, 0xc, 0x9, 0x1c0000, 0xd, 0x9, 0x1, 0x1, 0x4, 0x7, 0x80, 0x7fffffff, 0x2, 0x0, 0x100, 0x1ff, 0xd4, 0x0, 0x5, 0x42d0, 0x3, 0x7fffffff, 0x2020000, 0x5, 0x8, 0x8, 0x5e6, 0x3, 0x9, 0xe, 0x2, 0x3, 0x0, 0xf32, 0x8, 0x1, 0x1f6d, 0x2, 0x0, 0x9, 0xfffff4fd, 0x2, 0x5, 0x8, 0x2772, 0x6, 0x9, 0x3, 0x3, 0xfffff599, 0x2, 0x4, 0xffffff5b, 0x9, 0x8, 0x2, 0x7fffffff, 0x7, 0x40, 0x3, 0x8, 0x9, 0x6, 0x7, 0x5, 0xff, 0x0, 0x6e, 0x4, 0x8ca, 0xfffffff7, 0x0, 0x6, 0x5c, 0x101, 0x80000001, 0xfffffff9, 0x9f, 0xfff, 0x7f, 0x0, 0x100, 0x4, 0x0, 0x8000, 0x310, 0x3, 0x6, 0x5, 0x3, 0x0, 0x2c, 0x5, 0x4, 0x4, 0xffff, 0x100, 0x9, 0x7, 0x10001, 0x6, 0x7, 0x8001, 0x1000000, 0x2, 0x9, 0x2, 0x0, 0x9, 0x404cd945]}]}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x854}, 0x1, 0x0, 0x0, 0x20000002}, 0x2000400c) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r7, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x4}, 'port0\x00', 0x0, 0x60004, 0xffffffff, 0xffffffff, 0x1, 0xfffffffc, 0x0, 0x0, 0x3}) lseek(0xffffffffffffffff, 0x9, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) ioctl$TCFLSH(r6, 0x400455c8, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000000)) 6m40.634795132s ago: executing program 7 (id=6441): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@union={0x4, 0x1, 0x0, 0x5, 0x0, 0x8, [{0x1, 0x3, 0x80000001}]}]}, {0x0, [0x2e, 0x659a0ff34001bc7e, 0x61, 0x2e]}}, 0x0, 0x36, 0x0, 0x1, 0xd96b}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x1000) r3 = socket$rds(0x15, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000003, 0xc3072, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@dax}, {@resuid}, {@lazytime}, {@grpid}], [], 0x2c}, 0x84, 0x4f5, &(0x7f0000001340)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) quotactl_fd$Q_SYNC(r4, 0xffffffff80000102, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) 6m40.605723062s ago: executing program 7 (id=6442): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000100)={r1, &(0x7f0000000000)='\\-\x00', 0x80000, &(0x7f0000000040)={@align=0x5, {0x5, 0xfffb, 0x6}}, 0x4, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r6) keyctl$read(0xb, r6, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x220, 0x700001b, 0x148, 0x220, 0x148, 0x2f8, 0x206, 0x240, 0x2f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x200, 0x220, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'ip6tnl0\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@set={{0x40}, {{0x0, [0x5, 0x4, 0x7, 0x2, 0x1], 0x1, 0x6}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 6m37.705301314s ago: executing program 7 (id=6450): unshare(0x44050400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x80100, 0x9c) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x7ffffffffffffffc, 0x12) 6m37.602240005s ago: executing program 7 (id=6453): mq_open(&(0x7f0000000040)='e;h0\x16F\xc5\xaaGy>\x14Zz\xa1\x18\x82:\xa9#z\xe6\xb0\xe4k\x9fF\xfdzOO\xb5\x97\xdc\xd7hC\xce\xdb\x0f\xd6y]\xda\x05\x00\x00\x00\x00\x00\x00\x00\xd9', 0x40, 0x44, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0000}]}) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000003c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESOCT=r0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") socket$tipc(0x1e, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) dup(0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) 6m35.016650093s ago: executing program 7 (id=6465): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, 0x0, 0x0) listen(r3, 0xfffefffa) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r5, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r4) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newqdisc={0x854, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff1, 0x7}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x814, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x2d, 0x8, 0x9, 0x2, 0x6, 0x4, 0x8, 0x1bab, 0x2, 0x5, 0x7, 0x4, 0x7fff, 0x6, 0x87b, 0xfff, 0x2, 0x4, 0x7, 0x3, 0x7, 0x3, 0x748, 0x3c, 0x8, 0x8, 0x76, 0x5ec, 0x4, 0x6dd, 0x1, 0x401, 0x3, 0x3, 0x1, 0x5, 0xfff, 0x2, 0x7, 0x8, 0x84, 0x2, 0x3, 0x700, 0xc, 0x400, 0x94, 0xa5, 0xd, 0x0, 0x2, 0x2, 0x6, 0x2, 0x2, 0x2cdad499, 0x7ff, 0x7f, 0x8, 0xa, 0xb7, 0x6cfc, 0xd0, 0x80000000, 0x6, 0xd23, 0x4, 0x7, 0xfffffffb, 0x1470, 0x2, 0xfe5e, 0x8, 0xffff, 0x5, 0x3, 0x7fffffff, 0x10001, 0x9, 0x81, 0xe, 0x76, 0x3, 0x6, 0x3, 0x4, 0x8, 0x4, 0xdaab, 0x7, 0x7, 0x1, 0x49d, 0x4, 0x2, 0x5, 0x5, 0x2, 0x8, 0x80000001, 0x7, 0x8, 0x98, 0x9, 0x7, 0x401, 0x0, 0x2, 0x6, 0x101, 0x200, 0x6, 0x80, 0x2, 0x1, 0xb9c4, 0x6, 0x4, 0x3379, 0x7c, 0x2, 0xff, 0x9e13962, 0x5, 0x101, 0x9, 0x9, 0xf9a5, 0xffff7fff, 0x2311, 0x9, 0x800, 0x7, 0x6, 0xc9b4bdb, 0x29, 0x80000000, 0xf7, 0x0, 0xfffffff6, 0x2, 0x200, 0x5, 0x3, 0x2, 0xdfb6d2b, 0x4, 0x7e67b159, 0x1, 0x9, 0x5, 0x0, 0x7f, 0x800, 0xffffff80, 0x3, 0x1, 0xfffffffa, 0x9, 0x2, 0x6, 0x7, 0x81, 0x9, 0x1, 0x8, 0x40, 0x8, 0x1, 0x4, 0x8, 0x5b3, 0x1, 0x8, 0x0, 0x1, 0x3, 0x5, 0x1, 0x3064, 0x8, 0x5, 0xfffffeb0, 0x5, 0x3, 0x1, 0x4000004, 0x7, 0x6, 0x1e, 0x0, 0xc, 0x7, 0x7, 0x3, 0x8, 0x1, 0x2, 0x3, 0x0, 0x5, 0x3, 0x6, 0x1, 0x0, 0x6ad, 0x921, 0xfffffc99, 0x3, 0xffffff91, 0xfb15, 0x1, 0xfffffc01, 0xf5f5, 0xfffffff7, 0x7, 0x87, 0x1, 0x95f, 0x5, 0x7f, 0x9fcb, 0x1, 0x1, 0x3ff, 0x7fff, 0x0, 0x5, 0x3, 0xfffffffe, 0x401, 0x81, 0x9, 0x9, 0x2, 0x8, 0x4, 0x8, 0x401, 0x7, 0x1, 0xfffffff6, 0x3, 0x6, 0xa, 0x4, 0x0, 0x823, 0x5, 0x1000000d, 0x4, 0xa2, 0x896, 0x0, 0x7]}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cb}, @TCA_TBF_RTAB={0x404, 0x2, [0xffffffff, 0x1c000000, 0x7, 0xf, 0x9, 0xb1d, 0xa, 0x19, 0x2, 0x5, 0x3, 0x100, 0x7, 0x5, 0xb8ad, 0x4f, 0x0, 0x2, 0x3, 0xd, 0x0, 0x8, 0xba2, 0x5, 0x3ff, 0x401, 0x3, 0xa, 0x8, 0x9, 0x7fff, 0xa, 0x1, 0x2, 0x5, 0xfffffff7, 0x9d73, 0x8, 0x8001, 0x80, 0x90, 0x0, 0x96, 0x7, 0x2, 0x4, 0x541, 0x6, 0xe33, 0x7, 0x2, 0x401, 0x5, 0x2, 0x20cd4a7f, 0x0, 0x3, 0x5, 0x4, 0x800, 0x1, 0x76c4d5c1, 0x80000001, 0x7, 0x8, 0x0, 0x4, 0x121, 0x7ff, 0x2, 0x4, 0xb, 0x81, 0x0, 0x3, 0x2, 0x80, 0x4, 0x7ff, 0x1, 0x3, 0x7f, 0xf1, 0x0, 0x7, 0x1, 0x3, 0x2, 0x7, 0xdb2, 0x5, 0x800, 0x1, 0x7, 0xc, 0x9, 0x1, 0xfff, 0x9, 0x1, 0xf6, 0x80, 0x6, 0x8, 0x10000, 0x5, 0x8, 0xff, 0x0, 0x447d, 0x8, 0x7, 0x5, 0xc, 0x0, 0x5, 0xd5db, 0x7, 0xc6, 0xf, 0x5, 0x3, 0x10b46e0a, 0x80000001, 0xe2, 0x4, 0x7, 0xfff, 0x9, 0x6, 0x3, 0xca, 0x9, 0x200, 0x7f, 0x2, 0xffffffff, 0x1, 0xffff, 0x9c5e, 0x9, 0x0, 0xd026, 0x9, 0x6, 0x4, 0x3, 0xc, 0x9, 0x1c0000, 0xd, 0x9, 0x1, 0x1, 0x4, 0x7, 0x80, 0x7fffffff, 0x2, 0x0, 0x100, 0x1ff, 0xd4, 0x0, 0x5, 0x42d0, 0x3, 0x7fffffff, 0x2020000, 0x5, 0x8, 0x8, 0x5e6, 0x3, 0x9, 0xe, 0x2, 0x3, 0x0, 0xf32, 0x8, 0x1, 0x1f6d, 0x2, 0x0, 0x9, 0xfffff4fd, 0x2, 0x5, 0x8, 0x2772, 0x6, 0x9, 0x3, 0x3, 0xfffff599, 0x2, 0x4, 0xffffff5b, 0x9, 0x8, 0x2, 0x7fffffff, 0x7, 0x40, 0x3, 0x8, 0x9, 0x6, 0x7, 0x5, 0xff, 0x0, 0x6e, 0x4, 0x8ca, 0xfffffff7, 0x0, 0x6, 0x5c, 0x101, 0x80000001, 0xfffffff9, 0x9f, 0xfff, 0x7f, 0x0, 0x100, 0x4, 0x0, 0x8000, 0x310, 0x3, 0x6, 0x5, 0x3, 0x0, 0x2c, 0x5, 0x4, 0x4, 0xffff, 0x100, 0x9, 0x7, 0x10001, 0x6, 0x7, 0x8001, 0x1000000, 0x2, 0x9, 0x2, 0x0, 0x9, 0x404cd945]}]}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x854}, 0x1, 0x0, 0x0, 0x20000002}, 0x2000400c) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r8, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x4}, 'port0\x00', 0x0, 0x60004, 0xffffffff, 0xffffffff, 0x1, 0xfffffffc, 0x0, 0x0, 0x3}) lseek(0xffffffffffffffff, 0x9, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) ioctl$TCFLSH(r7, 0x400455c8, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000000)) 6m31.58416009s ago: executing program 7 (id=6468): r0 = socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000080)={0x5, &(0x7f00000001c0)=[{0x2, 0xf, 0x4, 0xfffffff5}, {0x1, 0x5, 0x26, 0x59c}, {0x9, 0x9, 0x7, 0x1}, {0xf5, 0x1, 0x7, 0xfffffffb}, {0x1ff, 0x1, 0xec, 0x1}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x1c, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xf, 0xffffffffffffffff, 0x0) epoll_create(0x6) socket$inet6(0xa, 0x3, 0x87) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x58, &(0x7f0000000680)}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7, 0x6}, 0x204, 0x0, 0x7bb00, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002000)=@newtaction={0xeb4, 0x30, 0xb, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0x3, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf2, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x7fffffff, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x1}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x9, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0xfffffffd, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x57d6, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0xffff, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x103, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0x1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800002, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff3, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x4ce}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x40000000, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0xa, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x7}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x2, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x0) syz_pidfd_open(0x0, 0x0) 6m16.431572515s ago: executing program 43 (id=6468): r0 = socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000080)={0x5, &(0x7f00000001c0)=[{0x2, 0xf, 0x4, 0xfffffff5}, {0x1, 0x5, 0x26, 0x59c}, {0x9, 0x9, 0x7, 0x1}, {0xf5, 0x1, 0x7, 0xfffffffb}, {0x1ff, 0x1, 0xec, 0x1}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x1c, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xf, 0xffffffffffffffff, 0x0) epoll_create(0x6) socket$inet6(0xa, 0x3, 0x87) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x58, &(0x7f0000000680)}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7, 0x6}, 0x204, 0x0, 0x7bb00, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002000)=@newtaction={0xeb4, 0x30, 0xb, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0x3, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf2, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x7fffffff, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x1}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x9, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0xfffffffd, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x57d6, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0xffff, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x103, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0x1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800002, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff3, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x4ce}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x40000000, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0xa, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x7}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x2, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x0) syz_pidfd_open(0x0, 0x0) 6m15.466125345s ago: executing program 4 (id=6496): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000100)={r1, &(0x7f0000000000)='\\-\x00', 0x80000, &(0x7f0000000040)={@align=0x5, {0x5, 0xfffb, 0x6}}, 0x4, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r4) keyctl$read(0xb, r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x220, 0x700001b, 0x148, 0x220, 0x148, 0x2f8, 0x206, 0x240, 0x2f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x200, 0x220, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'ip6tnl0\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@set={{0x40}, {{0x0, [0x5, 0x4, 0x7, 0x2, 0x1], 0x1, 0x6}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 6m14.906907021s ago: executing program 4 (id=6501): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@union={0x4, 0x1, 0x0, 0x5, 0x0, 0x8, [{0x1, 0x3, 0x80000001}]}]}, {0x0, [0x2e, 0x659a0ff34001bc7e, 0x61, 0x2e]}}, 0x0, 0x36, 0x0, 0x1, 0xd96b}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x1000) r3 = socket$rds(0x15, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000003, 0xc3072, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@dax}, {@resuid}, {@lazytime}, {@grpid}], [], 0x2c}, 0x84, 0x4f5, &(0x7f0000001340)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) quotactl_fd$Q_SYNC(r4, 0xffffffff80000102, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) 6m14.277629908s ago: executing program 4 (id=6503): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf40000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100), 0x4) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000100)={0x2b, 0x22, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000300)={0x6, 0x7ff, 0x6, 0x9, 0x6, 0x1}) unlinkat(0xffffffffffffff9c, 0x0, 0x0) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r6, 0xd3, 0xd}, 0xc) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='net/vlan/config\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) read$eventfd(r7, &(0x7f0000000000), 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000180)=@file={0x1}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1}, 0x6e) unshare(0x40020000) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000140)=0x1) ioctl$EVIOCSFF(r9, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x51, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x7fe, 0xc7, 0x2}, {0x0, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r9, &(0x7f0000000040)="e2", 0x2250) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd7000fddbdf250b00000018000180140002006d6163736563300000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20008814}, 0xbd7838ee412df6f2) 6m9.698215388s ago: executing program 4 (id=6510): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff020000000800000000000000000001140004002001000000000000000000000000000106000340000100000800"], 0xa0}}, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) ioctl$int_in(r1, 0x5452, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x44, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x24, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x561aa5fe}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x252740d6}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7ac3fcd9}, @NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x20000084) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xc, 0x8000000}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r9 = dup2(r0, r8) close_range(r9, 0xffffffffffffffff, 0x0) 6m5.652479641s ago: executing program 4 (id=6512): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff020000000800000000000000000001140004002001000000000000000000000000000106000340000100000800"], 0xa0}}, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x44, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x24, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x561aa5fe}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x252740d6}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7ac3fcd9}, @NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x20000084) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r7 = dup2(r0, r6) close_range(r7, 0xffffffffffffffff, 0x0) 6m4.173957068s ago: executing program 4 (id=6517): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x2, 0x4) listen(r3, 0xfffefffa) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r5, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r4) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newqdisc={0x854, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff1, 0x7}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x814, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x2d, 0x8, 0x9, 0x2, 0x6, 0x4, 0x8, 0x1bab, 0x2, 0x5, 0x7, 0x4, 0x7fff, 0x6, 0x87b, 0xfff, 0x2, 0x4, 0x7, 0x3, 0x7, 0x3, 0x748, 0x3c, 0x8, 0x8, 0x76, 0x5ec, 0x4, 0x6dd, 0x1, 0x401, 0x3, 0x3, 0x1, 0x5, 0xfff, 0x2, 0x7, 0x8, 0x84, 0x2, 0x3, 0x700, 0xc, 0x400, 0x94, 0xa5, 0xd, 0x0, 0x2, 0x2, 0x6, 0x2, 0x2, 0x2cdad499, 0x7ff, 0x7f, 0x8, 0xa, 0xb7, 0x6cfc, 0xd0, 0x80000000, 0x6, 0xd23, 0x4, 0x7, 0xfffffffb, 0x1470, 0x2, 0xfe5e, 0x8, 0xffff, 0x5, 0x3, 0x7fffffff, 0x10001, 0x9, 0x81, 0xe, 0x76, 0x3, 0x6, 0x3, 0x4, 0x8, 0x4, 0xdaab, 0x7, 0x7, 0x1, 0x49d, 0x4, 0x2, 0x5, 0x5, 0x2, 0x8, 0x80000001, 0x7, 0x8, 0x98, 0x9, 0x7, 0x401, 0x0, 0x2, 0x6, 0x101, 0x200, 0x6, 0x80, 0x2, 0x1, 0xb9c4, 0x6, 0x4, 0x3379, 0x7c, 0x2, 0xff, 0x9e13962, 0x5, 0x101, 0x9, 0x9, 0xf9a5, 0xffff7fff, 0x2311, 0x9, 0x800, 0x7, 0x6, 0xc9b4bdb, 0x29, 0x80000000, 0xf7, 0x0, 0xfffffff6, 0x2, 0x200, 0x5, 0x3, 0x2, 0xdfb6d2b, 0x4, 0x7e67b159, 0x1, 0x9, 0x5, 0x0, 0x7f, 0x800, 0xffffff80, 0x3, 0x1, 0xfffffffa, 0x9, 0x2, 0x6, 0x7, 0x81, 0x9, 0x1, 0x8, 0x40, 0x8, 0x1, 0x4, 0x8, 0x5b3, 0x1, 0x8, 0x0, 0x1, 0x3, 0x5, 0x1, 0x3064, 0x8, 0x5, 0xfffffeb0, 0x5, 0x3, 0x1, 0x4000004, 0x7, 0x6, 0x1e, 0x0, 0xc, 0x7, 0x7, 0x3, 0x8, 0x1, 0x2, 0x3, 0x0, 0x5, 0x3, 0x6, 0x1, 0x0, 0x6ad, 0x921, 0xfffffc99, 0x3, 0xffffff91, 0xfb15, 0x1, 0xfffffc01, 0xf5f5, 0xfffffff7, 0x7, 0x87, 0x1, 0x95f, 0x5, 0x7f, 0x9fcb, 0x1, 0x1, 0x3ff, 0x7fff, 0x0, 0x5, 0x3, 0xfffffffe, 0x401, 0x81, 0x9, 0x9, 0x2, 0x8, 0x4, 0x8, 0x401, 0x7, 0x1, 0xfffffff6, 0x3, 0x6, 0xa, 0x4, 0x0, 0x823, 0x5, 0x1000000d, 0x4, 0xa2, 0x896, 0x0, 0x7]}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cb}, @TCA_TBF_RTAB={0x404, 0x2, [0xffffffff, 0x1c000000, 0x7, 0xf, 0x9, 0xb1d, 0xa, 0x19, 0x2, 0x5, 0x3, 0x100, 0x7, 0x5, 0xb8ad, 0x4f, 0x0, 0x2, 0x3, 0xd, 0x0, 0x8, 0xba2, 0x5, 0x3ff, 0x401, 0x3, 0xa, 0x8, 0x9, 0x7fff, 0xa, 0x1, 0x2, 0x5, 0xfffffff7, 0x9d73, 0x8, 0x8001, 0x80, 0x90, 0x0, 0x96, 0x7, 0x2, 0x4, 0x541, 0x6, 0xe33, 0x7, 0x2, 0x401, 0x5, 0x2, 0x20cd4a7f, 0x0, 0x3, 0x5, 0x4, 0x800, 0x1, 0x76c4d5c1, 0x80000001, 0x7, 0x8, 0x0, 0x4, 0x121, 0x7ff, 0x2, 0x4, 0xb, 0x81, 0x0, 0x3, 0x2, 0x80, 0x4, 0x7ff, 0x1, 0x3, 0x7f, 0xf1, 0x0, 0x7, 0x1, 0x3, 0x2, 0x7, 0xdb2, 0x5, 0x800, 0x1, 0x7, 0xc, 0x9, 0x1, 0xfff, 0x9, 0x1, 0xf6, 0x80, 0x6, 0x8, 0x10000, 0x5, 0x8, 0xff, 0x0, 0x447d, 0x8, 0x7, 0x5, 0xc, 0x0, 0x5, 0xd5db, 0x7, 0xc6, 0xf, 0x5, 0x3, 0x10b46e0a, 0x80000001, 0xe2, 0x4, 0x7, 0xfff, 0x9, 0x6, 0x3, 0xca, 0x9, 0x200, 0x7f, 0x2, 0xffffffff, 0x1, 0xffff, 0x9c5e, 0x9, 0x0, 0xd026, 0x9, 0x6, 0x4, 0x3, 0xc, 0x9, 0x1c0000, 0xd, 0x9, 0x1, 0x1, 0x4, 0x7, 0x80, 0x7fffffff, 0x2, 0x0, 0x100, 0x1ff, 0xd4, 0x0, 0x5, 0x42d0, 0x3, 0x7fffffff, 0x2020000, 0x5, 0x8, 0x8, 0x5e6, 0x3, 0x9, 0xe, 0x2, 0x3, 0x0, 0xf32, 0x8, 0x1, 0x1f6d, 0x2, 0x0, 0x9, 0xfffff4fd, 0x2, 0x5, 0x8, 0x2772, 0x6, 0x9, 0x3, 0x3, 0xfffff599, 0x2, 0x4, 0xffffff5b, 0x9, 0x8, 0x2, 0x7fffffff, 0x7, 0x40, 0x3, 0x8, 0x9, 0x6, 0x7, 0x5, 0xff, 0x0, 0x6e, 0x4, 0x8ca, 0xfffffff7, 0x0, 0x6, 0x5c, 0x101, 0x80000001, 0xfffffff9, 0x9f, 0xfff, 0x7f, 0x0, 0x100, 0x4, 0x0, 0x8000, 0x310, 0x3, 0x6, 0x5, 0x3, 0x0, 0x2c, 0x5, 0x4, 0x4, 0xffff, 0x100, 0x9, 0x7, 0x10001, 0x6, 0x7, 0x8001, 0x1000000, 0x2, 0x9, 0x2, 0x0, 0x9, 0x404cd945]}]}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x854}, 0x1, 0x0, 0x0, 0x20000002}, 0x2000400c) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r8, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x4}, 'port0\x00', 0x0, 0x60004, 0xffffffff, 0xffffffff, 0x1, 0xfffffffc, 0x0, 0x0, 0x3}) lseek(0xffffffffffffffff, 0x9, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) ioctl$TCFLSH(r7, 0x400455c8, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000000)) 5m48.689904776s ago: executing program 44 (id=6517): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x2, 0x4) listen(r3, 0xfffefffa) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r5, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r4) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newqdisc={0x854, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff1, 0x7}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x814, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x2d, 0x8, 0x9, 0x2, 0x6, 0x4, 0x8, 0x1bab, 0x2, 0x5, 0x7, 0x4, 0x7fff, 0x6, 0x87b, 0xfff, 0x2, 0x4, 0x7, 0x3, 0x7, 0x3, 0x748, 0x3c, 0x8, 0x8, 0x76, 0x5ec, 0x4, 0x6dd, 0x1, 0x401, 0x3, 0x3, 0x1, 0x5, 0xfff, 0x2, 0x7, 0x8, 0x84, 0x2, 0x3, 0x700, 0xc, 0x400, 0x94, 0xa5, 0xd, 0x0, 0x2, 0x2, 0x6, 0x2, 0x2, 0x2cdad499, 0x7ff, 0x7f, 0x8, 0xa, 0xb7, 0x6cfc, 0xd0, 0x80000000, 0x6, 0xd23, 0x4, 0x7, 0xfffffffb, 0x1470, 0x2, 0xfe5e, 0x8, 0xffff, 0x5, 0x3, 0x7fffffff, 0x10001, 0x9, 0x81, 0xe, 0x76, 0x3, 0x6, 0x3, 0x4, 0x8, 0x4, 0xdaab, 0x7, 0x7, 0x1, 0x49d, 0x4, 0x2, 0x5, 0x5, 0x2, 0x8, 0x80000001, 0x7, 0x8, 0x98, 0x9, 0x7, 0x401, 0x0, 0x2, 0x6, 0x101, 0x200, 0x6, 0x80, 0x2, 0x1, 0xb9c4, 0x6, 0x4, 0x3379, 0x7c, 0x2, 0xff, 0x9e13962, 0x5, 0x101, 0x9, 0x9, 0xf9a5, 0xffff7fff, 0x2311, 0x9, 0x800, 0x7, 0x6, 0xc9b4bdb, 0x29, 0x80000000, 0xf7, 0x0, 0xfffffff6, 0x2, 0x200, 0x5, 0x3, 0x2, 0xdfb6d2b, 0x4, 0x7e67b159, 0x1, 0x9, 0x5, 0x0, 0x7f, 0x800, 0xffffff80, 0x3, 0x1, 0xfffffffa, 0x9, 0x2, 0x6, 0x7, 0x81, 0x9, 0x1, 0x8, 0x40, 0x8, 0x1, 0x4, 0x8, 0x5b3, 0x1, 0x8, 0x0, 0x1, 0x3, 0x5, 0x1, 0x3064, 0x8, 0x5, 0xfffffeb0, 0x5, 0x3, 0x1, 0x4000004, 0x7, 0x6, 0x1e, 0x0, 0xc, 0x7, 0x7, 0x3, 0x8, 0x1, 0x2, 0x3, 0x0, 0x5, 0x3, 0x6, 0x1, 0x0, 0x6ad, 0x921, 0xfffffc99, 0x3, 0xffffff91, 0xfb15, 0x1, 0xfffffc01, 0xf5f5, 0xfffffff7, 0x7, 0x87, 0x1, 0x95f, 0x5, 0x7f, 0x9fcb, 0x1, 0x1, 0x3ff, 0x7fff, 0x0, 0x5, 0x3, 0xfffffffe, 0x401, 0x81, 0x9, 0x9, 0x2, 0x8, 0x4, 0x8, 0x401, 0x7, 0x1, 0xfffffff6, 0x3, 0x6, 0xa, 0x4, 0x0, 0x823, 0x5, 0x1000000d, 0x4, 0xa2, 0x896, 0x0, 0x7]}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cb}, @TCA_TBF_RTAB={0x404, 0x2, [0xffffffff, 0x1c000000, 0x7, 0xf, 0x9, 0xb1d, 0xa, 0x19, 0x2, 0x5, 0x3, 0x100, 0x7, 0x5, 0xb8ad, 0x4f, 0x0, 0x2, 0x3, 0xd, 0x0, 0x8, 0xba2, 0x5, 0x3ff, 0x401, 0x3, 0xa, 0x8, 0x9, 0x7fff, 0xa, 0x1, 0x2, 0x5, 0xfffffff7, 0x9d73, 0x8, 0x8001, 0x80, 0x90, 0x0, 0x96, 0x7, 0x2, 0x4, 0x541, 0x6, 0xe33, 0x7, 0x2, 0x401, 0x5, 0x2, 0x20cd4a7f, 0x0, 0x3, 0x5, 0x4, 0x800, 0x1, 0x76c4d5c1, 0x80000001, 0x7, 0x8, 0x0, 0x4, 0x121, 0x7ff, 0x2, 0x4, 0xb, 0x81, 0x0, 0x3, 0x2, 0x80, 0x4, 0x7ff, 0x1, 0x3, 0x7f, 0xf1, 0x0, 0x7, 0x1, 0x3, 0x2, 0x7, 0xdb2, 0x5, 0x800, 0x1, 0x7, 0xc, 0x9, 0x1, 0xfff, 0x9, 0x1, 0xf6, 0x80, 0x6, 0x8, 0x10000, 0x5, 0x8, 0xff, 0x0, 0x447d, 0x8, 0x7, 0x5, 0xc, 0x0, 0x5, 0xd5db, 0x7, 0xc6, 0xf, 0x5, 0x3, 0x10b46e0a, 0x80000001, 0xe2, 0x4, 0x7, 0xfff, 0x9, 0x6, 0x3, 0xca, 0x9, 0x200, 0x7f, 0x2, 0xffffffff, 0x1, 0xffff, 0x9c5e, 0x9, 0x0, 0xd026, 0x9, 0x6, 0x4, 0x3, 0xc, 0x9, 0x1c0000, 0xd, 0x9, 0x1, 0x1, 0x4, 0x7, 0x80, 0x7fffffff, 0x2, 0x0, 0x100, 0x1ff, 0xd4, 0x0, 0x5, 0x42d0, 0x3, 0x7fffffff, 0x2020000, 0x5, 0x8, 0x8, 0x5e6, 0x3, 0x9, 0xe, 0x2, 0x3, 0x0, 0xf32, 0x8, 0x1, 0x1f6d, 0x2, 0x0, 0x9, 0xfffff4fd, 0x2, 0x5, 0x8, 0x2772, 0x6, 0x9, 0x3, 0x3, 0xfffff599, 0x2, 0x4, 0xffffff5b, 0x9, 0x8, 0x2, 0x7fffffff, 0x7, 0x40, 0x3, 0x8, 0x9, 0x6, 0x7, 0x5, 0xff, 0x0, 0x6e, 0x4, 0x8ca, 0xfffffff7, 0x0, 0x6, 0x5c, 0x101, 0x80000001, 0xfffffff9, 0x9f, 0xfff, 0x7f, 0x0, 0x100, 0x4, 0x0, 0x8000, 0x310, 0x3, 0x6, 0x5, 0x3, 0x0, 0x2c, 0x5, 0x4, 0x4, 0xffff, 0x100, 0x9, 0x7, 0x10001, 0x6, 0x7, 0x8001, 0x1000000, 0x2, 0x9, 0x2, 0x0, 0x9, 0x404cd945]}]}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x854}, 0x1, 0x0, 0x0, 0x20000002}, 0x2000400c) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r8, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x4}, 'port0\x00', 0x0, 0x60004, 0xffffffff, 0xffffffff, 0x1, 0xfffffffc, 0x0, 0x0, 0x3}) lseek(0xffffffffffffffff, 0x9, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) ioctl$TCFLSH(r7, 0x400455c8, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000000)) 4m14.682063806s ago: executing program 5 (id=6723): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000100)={r1, &(0x7f0000000000)='\\-\x00', 0x80000, &(0x7f0000000040)={@align=0x5, {0x5, 0xfffb, 0x6}}, 0x4, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r6) keyctl$read(0xb, r6, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x220, 0x700001b, 0x148, 0x220, 0x148, 0x2f8, 0x206, 0x240, 0x2f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x200, 0x220, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'ip6tnl0\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@set={{0x40}, {{0x0, [0x5, 0x4, 0x7, 0x2, 0x1], 0x1, 0x6}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 4m11.040010156s ago: executing program 5 (id=6731): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',dots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\\-\x00', 0x80000, &(0x7f0000000040)={@align=0x5, {0x5, 0xfffb, 0x6}}, 0x4, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r6) keyctl$read(0xb, r6, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x220, 0x700001b, 0x148, 0x220, 0x148, 0x2f8, 0x206, 0x240, 0x2f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x200, 0x220, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'ip6tnl0\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@set={{0x40}, {{0x0, [0x5, 0x4, 0x7, 0x2, 0x1], 0x1, 0x6}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 4m7.276910386s ago: executing program 5 (id=6739): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0x44010) r0 = socket$inet6(0xa, 0x2, 0x0) io_setup(0xde1, &(0x7f0000002500)=0x0) io_submit(r1, 0x2, &(0x7f0000000100)=[&(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x1000, r0, 0x0}, 0x0]) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000001a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xa6}, [@alu={0x7, 0x0, 0x9, 0x0, 0x0, 0x13, 0x10}]}, &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9d73}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) r10 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000ac0)}, {&(0x7f0000000b40)="eb81393b0eb2d2b1a32d413efa338177130d107858ff9bc2ac70fd29b3238f2edb52b802501ce7fda707634ce9d06dd67e127a0ee755dd2341e5a7ee91e568abf26e7eb3e580cb9cb1951186c44c30223b417209094bf950bcb7cfaf9edaec4370bd3bb307b7fc31fda97c923e4c1f629a1587302c39cb7fac8c69d8bd2cc21edba39cb982bf8e68de9bcda536361f24539250a4ac71df652191f5fc6d35635922e6c46c9a7176411a2612d58ad0ba7780b89ac7e47e68937fd9fe1e6aae409769f82f08529ba2db98de36e4e01a5f3f589dbb7bf795c9de391116e26551ce1417fff486afd85805bc7b8f5178ec56d06b379882b4", 0xf5}], 0x2}, 0x490) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x44000) 4m5.14544509s ago: executing program 5 (id=6744): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',dots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\\-\x00', 0x80000, &(0x7f0000000040)={@align=0x5, {0x5, 0xfffb, 0x6}}, 0x4, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r6) keyctl$read(0xb, r6, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x220, 0x700001b, 0x148, 0x220, 0x148, 0x2f8, 0x206, 0x240, 0x2f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x200, 0x220, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'ip6tnl0\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@set={{0x40}, {{0x0, [0x5, 0x4, 0x7, 0x2, 0x1], 0x1, 0x6}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 4m3.175108911s ago: executing program 5 (id=6747): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc00000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 4m2.096347863s ago: executing program 5 (id=6748): r0 = socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000080)={0x5, &(0x7f00000001c0)=[{0x2, 0xf, 0x4, 0xfffffff5}, {0x1, 0x5, 0x26, 0x59c}, {0x9, 0x9, 0x7, 0x1}, {0xf5, 0x1, 0x7, 0xfffffffb}, {0x1ff, 0x1, 0xec, 0x1}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x1c, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xf, 0xffffffffffffffff, 0x0) epoll_create(0x6) socket$inet6(0xa, 0x3, 0x87) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x58, &(0x7f0000000680)}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bind$inet(r0, 0x0, 0x0) 3m46.944164427s ago: executing program 45 (id=6748): r0 = socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000080)={0x5, &(0x7f00000001c0)=[{0x2, 0xf, 0x4, 0xfffffff5}, {0x1, 0x5, 0x26, 0x59c}, {0x9, 0x9, 0x7, 0x1}, {0xf5, 0x1, 0x7, 0xfffffffb}, {0x1ff, 0x1, 0xec, 0x1}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x1c, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xf, 0xffffffffffffffff, 0x0) epoll_create(0x6) socket$inet6(0xa, 0x3, 0x87) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x58, &(0x7f0000000680)}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bind$inet(r0, 0x0, 0x0) 3m11.847902918s ago: executing program 9 (id=6842): r0 = socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000080)={0x5, &(0x7f00000001c0)=[{0x2, 0xf, 0x4, 0xfffffff5}, {0x1, 0x5, 0x26, 0x59c}, {0x9, 0x9, 0x7, 0x1}, {0xf5, 0x1, 0x7, 0xfffffffb}, {0x1ff, 0x1, 0xec, 0x1}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x1c, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xf, 0xffffffffffffffff, 0x0) epoll_create(0x6) socket$inet6(0xa, 0x3, 0x87) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x58, &(0x7f0000000680)}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61123000000000006113340000000000bf10000000000000160003000ee600f03d030100000000008701000000000000bc26000000000000bf67000000000000560300000ee60070670200001f000000160300000ee600f0bf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586e3f640f9f7e9a73b761ad4f0952a70046270d2b6436fdeecd791614ed46de741eb8cf91c046ef9beca574b350021c7ec6ef130f53748068ca432dae4e248b22b9ad8b2811f67916a1764578cba4b069037bfb3362d5691ac397f7e207145d970f0d97867552629b146645c785fb77dbeca38e49a9d5221f1f45f0a25890d04d91a15a05ae7e7ed6252c3d6c1973fb858de1da70d67317e7872b0603ce47ed2c1520e71b527bb42aa2e20e1e85df73736ed0a782ab7e7278dd54358cfdf6313d40f926332623625b49626481054787ab2dff85a9bebd6b317f26c691a65aa97bb3d1506a3a565e9c7ea5ad4611d2d77ee8a5c1b23814a26b6a20061fbb65bdd03770fa849f2a29ba69f90625f42592a70ba890f7a92878ae73574c3a233ee5954119931a1905210715fa77a8795f2fbec3797cb90f59fe8a4abec25f40c87bf25b750bbaa"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000"], 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7, 0x6}, 0x204, 0x0, 0x7bb00, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002000)=@newtaction={0xeb4, 0x30, 0xb, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0x3, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf2, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x7fffffff, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x1}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x9, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0xfffffffd, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x57d6, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0xffff, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x103, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0x1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800002, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff3, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x4ce}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x40000000, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0xa, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x7}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x2, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x0) syz_pidfd_open(0x0, 0x0) 3m6.988623651s ago: executing program 9 (id=6849): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff020000000800000000000000000001140004002001000000000000000000000000000106000340000100000800"], 0xa0}}, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) ioctl$int_in(r1, 0x5452, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x44, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x24, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x561aa5fe}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x252740d6}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7ac3fcd9}, @NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x20000084) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xc, 0x8000000}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r8 = dup2(r0, r7) close_range(r8, 0xffffffffffffffff, 0x0) 3m0.256756734s ago: executing program 9 (id=6859): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0x3}, 0x102802, 0x3, 0x0, 0x1, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffe1c, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) setresgid(0x0, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x800, 0x0) sync() sync() sync() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x20040090) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x1040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x50) 2m56.734206302s ago: executing program 9 (id=6865): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x0, 0x0, 0x0, 0x1, 0xa5, &(0x7f0000000680)=""/165, 0x40f00, 0x27, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000740)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0xb, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000800)=[{0x3, 0x4, 0x4, 0x4}, {0x2, 0x2, 0x9, 0x8}, {0x0, 0x2, 0xe, 0xc}, {0x0, 0x5, 0x6, 0xc}, {0x1, 0x4, 0x7, 0x9}], 0x10, 0xfa8}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYRES64=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0x8, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r5, 0x4b44, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) syz_emit_ethernet(0x44, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x30, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "c27bf41c2ed3"}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@ipv6_delrule={0x1c, 0x18, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x20, 0x0, 0x0, 0x3, 0x0, 0x7, 0x20001}}, 0x1c}}, 0x0) memfd_secret(0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c00)="5c0000001a006bab9a3fe3d8457f0bd2bf6e17aa0a046b876c1d0048007ea60864160af36504001a00", 0x29}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) fadvise64(r0, 0x8, 0x3, 0x4) 2m55.569201535s ago: executing program 9 (id=6867): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = fsopen(&(0x7f0000000380)='configfs\x00', 0x1) tee(r2, r2, 0xffffffffffffff4f, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001800010000000000000000000a002000fc00000000040000378769a0a9caf16eb882b0f3531cf7db9c007dad87f1383db8950f9769cc697c508f3a0c9fd116b75d032a3a817b6e45669dbd3a0892e0b41cd723ca86983a6c1459f2664b77902849925df1bd4d393635cd78976d5effd544af864ab1b065003e57f359de04042562d19202e20165e0dfa74aab47ef458718f2b52120"], 0x1c}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000480)}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000005c0)='./file0\x00', 0x181d49b, 0x0, 0x40, 0x0, &(0x7f0000000140)) setreuid(0xffffffffffffffff, 0xee01) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) setsockopt$MRT_ASSERT(r4, 0x0, 0xcf, &(0x7f0000000100)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xff000000, 0x10002, 0xc519, 0x1}, 0x50) open(&(0x7f0000000140)='./file0\x00', 0x38e01, 0xa1) 2m52.974313043s ago: executing program 9 (id=6870): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x2, 0x4) listen(r3, 0xfffefffa) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newqdisc={0x854, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff1, 0x7}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x814, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x2d, 0x8, 0x9, 0x2, 0x6, 0x4, 0x8, 0x1bab, 0x2, 0x5, 0x7, 0x4, 0x7fff, 0x6, 0x87b, 0xfff, 0x2, 0x4, 0x7, 0x3, 0x7, 0x3, 0x748, 0x3c, 0x8, 0x8, 0x76, 0x5ec, 0x4, 0x6dd, 0x1, 0x401, 0x3, 0x3, 0x1, 0x5, 0xfff, 0x2, 0x7, 0x8, 0x84, 0x2, 0x3, 0x700, 0xc, 0x400, 0x94, 0xa5, 0xd, 0x0, 0x2, 0x2, 0x6, 0x2, 0x2, 0x2cdad499, 0x7ff, 0x7f, 0x8, 0xa, 0xb7, 0x6cfc, 0xd0, 0x80000000, 0x6, 0xd23, 0x4, 0x7, 0xfffffffb, 0x1470, 0x2, 0xfe5e, 0x8, 0xffff, 0x5, 0x3, 0x7fffffff, 0x10001, 0x9, 0x81, 0xe, 0x76, 0x3, 0x6, 0x3, 0x4, 0x8, 0x4, 0xdaab, 0x7, 0x7, 0x1, 0x49d, 0x4, 0x2, 0x5, 0x5, 0x2, 0x8, 0x80000001, 0x7, 0x8, 0x98, 0x9, 0x7, 0x401, 0x0, 0x2, 0x6, 0x101, 0x200, 0x6, 0x80, 0x2, 0x1, 0xb9c4, 0x6, 0x4, 0x3379, 0x7c, 0x2, 0xff, 0x9e13962, 0x5, 0x101, 0x9, 0x9, 0xf9a5, 0xffff7fff, 0x2311, 0x9, 0x800, 0x7, 0x6, 0xc9b4bdb, 0x29, 0x80000000, 0xf7, 0x0, 0xfffffff6, 0x2, 0x200, 0x5, 0x3, 0x2, 0xdfb6d2b, 0x4, 0x7e67b159, 0x1, 0x9, 0x5, 0x0, 0x7f, 0x800, 0xffffff80, 0x3, 0x1, 0xfffffffa, 0x9, 0x2, 0x6, 0x7, 0x81, 0x9, 0x1, 0x8, 0x40, 0x8, 0x1, 0x4, 0x8, 0x5b3, 0x1, 0x8, 0x0, 0x1, 0x3, 0x5, 0x1, 0x3064, 0x8, 0x5, 0xfffffeb0, 0x5, 0x3, 0x1, 0x4000004, 0x7, 0x6, 0x1e, 0x0, 0xc, 0x7, 0x7, 0x3, 0x8, 0x1, 0x2, 0x3, 0x0, 0x5, 0x3, 0x6, 0x1, 0x0, 0x6ad, 0x921, 0xfffffc99, 0x3, 0xffffff91, 0xfb15, 0x1, 0xfffffc01, 0xf5f5, 0xfffffff7, 0x7, 0x87, 0x1, 0x95f, 0x5, 0x7f, 0x9fcb, 0x1, 0x1, 0x3ff, 0x7fff, 0x0, 0x5, 0x3, 0xfffffffe, 0x401, 0x81, 0x9, 0x9, 0x2, 0x8, 0x4, 0x8, 0x401, 0x7, 0x1, 0xfffffff6, 0x3, 0x6, 0xa, 0x4, 0x0, 0x823, 0x5, 0x1000000d, 0x4, 0xa2, 0x896, 0x0, 0x7]}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cb}, @TCA_TBF_RTAB={0x404, 0x2, [0xffffffff, 0x1c000000, 0x7, 0xf, 0x9, 0xb1d, 0xa, 0x19, 0x2, 0x5, 0x3, 0x100, 0x7, 0x5, 0xb8ad, 0x4f, 0x0, 0x2, 0x3, 0xd, 0x0, 0x8, 0xba2, 0x5, 0x3ff, 0x401, 0x3, 0xa, 0x8, 0x9, 0x7fff, 0xa, 0x1, 0x2, 0x5, 0xfffffff7, 0x9d73, 0x8, 0x8001, 0x80, 0x90, 0x0, 0x96, 0x7, 0x2, 0x4, 0x541, 0x6, 0xe33, 0x7, 0x2, 0x401, 0x5, 0x2, 0x20cd4a7f, 0x0, 0x3, 0x5, 0x4, 0x800, 0x1, 0x76c4d5c1, 0x80000001, 0x7, 0x8, 0x0, 0x4, 0x121, 0x7ff, 0x2, 0x4, 0xb, 0x81, 0x0, 0x3, 0x2, 0x80, 0x4, 0x7ff, 0x1, 0x3, 0x7f, 0xf1, 0x0, 0x7, 0x1, 0x3, 0x2, 0x7, 0xdb2, 0x5, 0x800, 0x1, 0x7, 0xc, 0x9, 0x1, 0xfff, 0x9, 0x1, 0xf6, 0x80, 0x6, 0x8, 0x10000, 0x5, 0x8, 0xff, 0x0, 0x447d, 0x8, 0x7, 0x5, 0xc, 0x0, 0x5, 0xd5db, 0x7, 0xc6, 0xf, 0x5, 0x3, 0x10b46e0a, 0x80000001, 0xe2, 0x4, 0x7, 0xfff, 0x9, 0x6, 0x3, 0xca, 0x9, 0x200, 0x7f, 0x2, 0xffffffff, 0x1, 0xffff, 0x9c5e, 0x9, 0x0, 0xd026, 0x9, 0x6, 0x4, 0x3, 0xc, 0x9, 0x1c0000, 0xd, 0x9, 0x1, 0x1, 0x4, 0x7, 0x80, 0x7fffffff, 0x2, 0x0, 0x100, 0x1ff, 0xd4, 0x0, 0x5, 0x42d0, 0x3, 0x7fffffff, 0x2020000, 0x5, 0x8, 0x8, 0x5e6, 0x3, 0x9, 0xe, 0x2, 0x3, 0x0, 0xf32, 0x8, 0x1, 0x1f6d, 0x2, 0x0, 0x9, 0xfffff4fd, 0x2, 0x5, 0x8, 0x2772, 0x6, 0x9, 0x3, 0x3, 0xfffff599, 0x2, 0x4, 0xffffff5b, 0x9, 0x8, 0x2, 0x7fffffff, 0x7, 0x40, 0x3, 0x8, 0x9, 0x6, 0x7, 0x5, 0xff, 0x0, 0x6e, 0x4, 0x8ca, 0xfffffff7, 0x0, 0x6, 0x5c, 0x101, 0x80000001, 0xfffffff9, 0x9f, 0xfff, 0x7f, 0x0, 0x100, 0x4, 0x0, 0x8000, 0x310, 0x3, 0x6, 0x5, 0x3, 0x0, 0x2c, 0x5, 0x4, 0x4, 0xffff, 0x100, 0x9, 0x7, 0x10001, 0x6, 0x7, 0x8001, 0x1000000, 0x2, 0x9, 0x2, 0x0, 0x9, 0x404cd945]}]}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x854}, 0x1, 0x0, 0x0, 0x20000002}, 0x2000400c) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r7, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x4}, 'port0\x00', 0x0, 0x60004, 0xffffffff, 0xffffffff, 0x1, 0xfffffffc, 0x0, 0x0, 0x3}) lseek(0xffffffffffffffff, 0x9, 0x0) ioctl$TCFLSH(r6, 0x400455c8, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000000)) 2m37.619272049s ago: executing program 46 (id=6870): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x2, 0x4) listen(r3, 0xfffefffa) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newqdisc={0x854, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff1, 0x7}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x814, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x2d, 0x8, 0x9, 0x2, 0x6, 0x4, 0x8, 0x1bab, 0x2, 0x5, 0x7, 0x4, 0x7fff, 0x6, 0x87b, 0xfff, 0x2, 0x4, 0x7, 0x3, 0x7, 0x3, 0x748, 0x3c, 0x8, 0x8, 0x76, 0x5ec, 0x4, 0x6dd, 0x1, 0x401, 0x3, 0x3, 0x1, 0x5, 0xfff, 0x2, 0x7, 0x8, 0x84, 0x2, 0x3, 0x700, 0xc, 0x400, 0x94, 0xa5, 0xd, 0x0, 0x2, 0x2, 0x6, 0x2, 0x2, 0x2cdad499, 0x7ff, 0x7f, 0x8, 0xa, 0xb7, 0x6cfc, 0xd0, 0x80000000, 0x6, 0xd23, 0x4, 0x7, 0xfffffffb, 0x1470, 0x2, 0xfe5e, 0x8, 0xffff, 0x5, 0x3, 0x7fffffff, 0x10001, 0x9, 0x81, 0xe, 0x76, 0x3, 0x6, 0x3, 0x4, 0x8, 0x4, 0xdaab, 0x7, 0x7, 0x1, 0x49d, 0x4, 0x2, 0x5, 0x5, 0x2, 0x8, 0x80000001, 0x7, 0x8, 0x98, 0x9, 0x7, 0x401, 0x0, 0x2, 0x6, 0x101, 0x200, 0x6, 0x80, 0x2, 0x1, 0xb9c4, 0x6, 0x4, 0x3379, 0x7c, 0x2, 0xff, 0x9e13962, 0x5, 0x101, 0x9, 0x9, 0xf9a5, 0xffff7fff, 0x2311, 0x9, 0x800, 0x7, 0x6, 0xc9b4bdb, 0x29, 0x80000000, 0xf7, 0x0, 0xfffffff6, 0x2, 0x200, 0x5, 0x3, 0x2, 0xdfb6d2b, 0x4, 0x7e67b159, 0x1, 0x9, 0x5, 0x0, 0x7f, 0x800, 0xffffff80, 0x3, 0x1, 0xfffffffa, 0x9, 0x2, 0x6, 0x7, 0x81, 0x9, 0x1, 0x8, 0x40, 0x8, 0x1, 0x4, 0x8, 0x5b3, 0x1, 0x8, 0x0, 0x1, 0x3, 0x5, 0x1, 0x3064, 0x8, 0x5, 0xfffffeb0, 0x5, 0x3, 0x1, 0x4000004, 0x7, 0x6, 0x1e, 0x0, 0xc, 0x7, 0x7, 0x3, 0x8, 0x1, 0x2, 0x3, 0x0, 0x5, 0x3, 0x6, 0x1, 0x0, 0x6ad, 0x921, 0xfffffc99, 0x3, 0xffffff91, 0xfb15, 0x1, 0xfffffc01, 0xf5f5, 0xfffffff7, 0x7, 0x87, 0x1, 0x95f, 0x5, 0x7f, 0x9fcb, 0x1, 0x1, 0x3ff, 0x7fff, 0x0, 0x5, 0x3, 0xfffffffe, 0x401, 0x81, 0x9, 0x9, 0x2, 0x8, 0x4, 0x8, 0x401, 0x7, 0x1, 0xfffffff6, 0x3, 0x6, 0xa, 0x4, 0x0, 0x823, 0x5, 0x1000000d, 0x4, 0xa2, 0x896, 0x0, 0x7]}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cb}, @TCA_TBF_RTAB={0x404, 0x2, [0xffffffff, 0x1c000000, 0x7, 0xf, 0x9, 0xb1d, 0xa, 0x19, 0x2, 0x5, 0x3, 0x100, 0x7, 0x5, 0xb8ad, 0x4f, 0x0, 0x2, 0x3, 0xd, 0x0, 0x8, 0xba2, 0x5, 0x3ff, 0x401, 0x3, 0xa, 0x8, 0x9, 0x7fff, 0xa, 0x1, 0x2, 0x5, 0xfffffff7, 0x9d73, 0x8, 0x8001, 0x80, 0x90, 0x0, 0x96, 0x7, 0x2, 0x4, 0x541, 0x6, 0xe33, 0x7, 0x2, 0x401, 0x5, 0x2, 0x20cd4a7f, 0x0, 0x3, 0x5, 0x4, 0x800, 0x1, 0x76c4d5c1, 0x80000001, 0x7, 0x8, 0x0, 0x4, 0x121, 0x7ff, 0x2, 0x4, 0xb, 0x81, 0x0, 0x3, 0x2, 0x80, 0x4, 0x7ff, 0x1, 0x3, 0x7f, 0xf1, 0x0, 0x7, 0x1, 0x3, 0x2, 0x7, 0xdb2, 0x5, 0x800, 0x1, 0x7, 0xc, 0x9, 0x1, 0xfff, 0x9, 0x1, 0xf6, 0x80, 0x6, 0x8, 0x10000, 0x5, 0x8, 0xff, 0x0, 0x447d, 0x8, 0x7, 0x5, 0xc, 0x0, 0x5, 0xd5db, 0x7, 0xc6, 0xf, 0x5, 0x3, 0x10b46e0a, 0x80000001, 0xe2, 0x4, 0x7, 0xfff, 0x9, 0x6, 0x3, 0xca, 0x9, 0x200, 0x7f, 0x2, 0xffffffff, 0x1, 0xffff, 0x9c5e, 0x9, 0x0, 0xd026, 0x9, 0x6, 0x4, 0x3, 0xc, 0x9, 0x1c0000, 0xd, 0x9, 0x1, 0x1, 0x4, 0x7, 0x80, 0x7fffffff, 0x2, 0x0, 0x100, 0x1ff, 0xd4, 0x0, 0x5, 0x42d0, 0x3, 0x7fffffff, 0x2020000, 0x5, 0x8, 0x8, 0x5e6, 0x3, 0x9, 0xe, 0x2, 0x3, 0x0, 0xf32, 0x8, 0x1, 0x1f6d, 0x2, 0x0, 0x9, 0xfffff4fd, 0x2, 0x5, 0x8, 0x2772, 0x6, 0x9, 0x3, 0x3, 0xfffff599, 0x2, 0x4, 0xffffff5b, 0x9, 0x8, 0x2, 0x7fffffff, 0x7, 0x40, 0x3, 0x8, 0x9, 0x6, 0x7, 0x5, 0xff, 0x0, 0x6e, 0x4, 0x8ca, 0xfffffff7, 0x0, 0x6, 0x5c, 0x101, 0x80000001, 0xfffffff9, 0x9f, 0xfff, 0x7f, 0x0, 0x100, 0x4, 0x0, 0x8000, 0x310, 0x3, 0x6, 0x5, 0x3, 0x0, 0x2c, 0x5, 0x4, 0x4, 0xffff, 0x100, 0x9, 0x7, 0x10001, 0x6, 0x7, 0x8001, 0x1000000, 0x2, 0x9, 0x2, 0x0, 0x9, 0x404cd945]}]}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x854}, 0x1, 0x0, 0x0, 0x20000002}, 0x2000400c) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r7, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x4}, 'port0\x00', 0x0, 0x60004, 0xffffffff, 0xffffffff, 0x1, 0xfffffffc, 0x0, 0x0, 0x3}) lseek(0xffffffffffffffff, 0x9, 0x0) ioctl$TCFLSH(r6, 0x400455c8, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000000)) 22.953225891s ago: executing program 1 (id=7416): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080), r1, 0x0, 0x3, 0x1}}, 0x20) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000002c0)={0x0, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @enc_lim={0x4, 0x1, 0xff}, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x10, {0x2, 0x2, 0x70, 0xb8, [0x8]}}, @enc_lim={0x4, 0x1, 0x3}]}, 0x28) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x111140, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x40000, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100), 0x13f, 0x9}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080), r1, 0x0, 0x3, 0x1}}, 0x20) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000002c0)={0x0, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @enc_lim={0x4, 0x1, 0xff}, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x10, {0x2, 0x2, 0x70, 0xb8, [0x8]}}, @enc_lim={0x4, 0x1, 0x3}]}, 0x28) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x111140, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x40000, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async) 22.874534842s ago: executing program 1 (id=7417): r0 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000500)='./file0\x00', 0x2000844, &(0x7f0000000600)={[{@dots}, {@fat=@dos1xfloppy}, {@nodots}, {@fat=@nocase}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x7fff}}, {@nodots}, {@dots}, {@nodots}, {@fat=@errors_remount}, {@fat=@sys_immutable}, {@fat=@flush}, {@fat=@fmask={'fmask', 0x3d, 0x3}}, {@dots}, {@fat=@sys_immutable}, {@fat=@nfs}, {@fat=@check_strict}]}, 0x1, 0x23d, &(0x7f0000000a40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) (fail_nth: 2) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x3a424bc, &(0x7f0000001040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRESOCT=0x0, @ANYRESHEX, @ANYBLOB="e486301f94ddf2a3c6e9c6a4598fef2f7853d743f4831d65b415af9ec7dbc191ae080a134bb75d703b909f2312a98aee8b0f9b0db8e7ed2462a00363dad1638b2153b8042adc1cad959cd28efb4c8408de3df91b02cf343ff378c71b87fe0d59824e1618cd9913d306913a737be0e0af9d7310bf01ca4a8807b84427333d19419f24196d806ff138823247a8bf660b3819db5bbac9a3d8c83bbc03f79dd97f2a3ceb4e16d6a19e70233dd475778c5a2ff5143c51b6058a6effbef0ad0e432f91e823", @ANYRES16=r0, @ANYBLOB="3c6b885bf908489ef65acbe7ed477655fb09210347b7d8625aea2bf1bbe1438c6c7bb3bacc3d987cb3a16cc54c097fcf5bad6fb10f7be6ae948910b691713032a5f6763d324bc636ee214b30bb728d56866bb38294011ac677107fbdf03cbafab6e797204db8b4ecc6e4800260c3da08f67c26f3ddcba7cf5431c12ad1499eb7bf91968e636f0dfefe231011580202573605119adcf2d373223b1697bbf0f1b6ce0ea484188eb2f1883b7198913a9037fb65541a3d7fe5e832b772bcf4727b3959c5a88681d9cd998988e0f7086ef4138436a56ce2100ea996b47c991bcbd1f015ae204010a3e6974e32c43ada4033cd328bc2d9607c57925e6f80007acbd2f75eb275f4e1a0a4d40ca9b923efabf4b7bf9ba393650c4ec8baaae9f6aea489705a4636aa5e3b4eae7a018dd6b2146759ed1f881018c86a58aa50721998e85536bb98db21a521591207e412b3f464abf7665b763c61bf5e448e727d1977efeef078e9793fc701b6f0422a31295785763b6dda5317e8f70f324a3e04ac10296c48226593d5eb8e29505182a351977bf3e75846bf69b2dd255aa3b0f8eef8395a1873065715b9e500"/433, @ANYRES16=r0, @ANYRES8=0x0, @ANYBLOB="787fbcf0d953c7f09e72bb2e52a1f87e9302fa845ff03171634dcdcbfde9f09ac5308b68bf8ccb1186dcaa791090376a8ced429e212b7d50db18595fe44dc1973a193e4ccbd838bba3cb884f228953e593dbe276a8ce3da4d9ee24916115"], 0x5, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) 22.538354156s ago: executing program 1 (id=7420): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000001300)={0xffffffffffffffff, &(0x7f0000001200)='[!#}\x00', 0x8241, &(0x7f0000001240)={@align=0xc, {0x3, 0x7fff, 0x27, 0x80}}, 0x2, &(0x7f0000001280), &(0x7f00000012c0)=0x8}) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x8, 0x41, 0x4, 0x18, 0x0, 0x5, 0x800a1, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000340), 0x6}, 0x20, 0x401, 0x1, 0x0, 0x0, 0xbff, 0x40, 0x0, 0x3, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') ioctl$FICLONE(r2, 0x40049409, r2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf, 0x1, 0x8, 0x0, 0x0, 0x4, 0x10510, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0xc}, 0x200, 0x1ff, 0x0, 0x5, 0x4, 0x101, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xb, r1, 0xa) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) close_range(r1, r0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) sendfile(0xffffffffffffffff, r0, 0x0, 0xef9c) syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r0], 0x0, 0x11ed, &(0x7f0000002480)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x75) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r3, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x8000, 0x8, 0x1b) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x58, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001340), r2) 21.551066506s ago: executing program 1 (id=7424): r0 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000500)='./file0\x00', 0x2000844, &(0x7f0000000600)={[{@dots}, {@fat=@dos1xfloppy}, {@nodots}, {@fat=@nocase}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x7fff}}, {@nodots}, {@dots}, {@nodots}, {@fat=@errors_remount}, {@fat=@sys_immutable}, {@fat=@flush}, {@fat=@fmask={'fmask', 0x3d, 0x3}}, {@dots}, {@fat=@sys_immutable}, {@fat=@nfs}, {@fat=@check_strict}]}, 0x1, 0x23d, &(0x7f0000000a40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r1 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40010}, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/35, 0x23}], 0x1}, 0x10040) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="48000000680001002dbd70000000008000000200000000000c00088008000600ffff0000240002000100000005000000000000008000000002"], 0x48}}, 0x44010) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x3a424bc, &(0x7f0000001040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRESOCT=0x0, @ANYRESHEX, @ANYBLOB="e486301f94ddf2a3c6e9c6a4598fef2f7853d743f4831d65b415af9ec7dbc191ae080a134bb75d703b909f2312a98aee8b0f9b0db8e7ed2462a00363dad1638b2153b8042adc1cad959cd28efb4c8408de3df91b02cf343ff378c71b87fe0d59824e1618cd9913d306913a737be0e0af9d7310bf01ca4a8807b84427333d19419f24196d806ff138823247a8bf660b3819db5bbac9a3d8c83bbc03f79dd97f2a3ceb4e16d6a19e70233dd475778c5a2ff5143c51b6058a6effbef0ad0e432f91e823", @ANYRES16=r0, @ANYBLOB="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"/433, @ANYRES16=r0, @ANYRES8=0x0, @ANYBLOB="787fbcf0d953c7f09e72bb2e52a1f87e9302fa845ff03171634dcdcbfde9f09ac5308b68bf8ccb1186dcaa791090376a8ced429e212b7d50db18595fe44dc1973a193e4ccbd838bba3cb884f228953e593dbe276a8ce3da4d9ee24916115"], 0x5, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000300)=ANY=[@ANYBLOB='nr_inodes=5,size=2']) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f00000000c0)=0x7, 0x2c) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r6 = syz_socket_connect_nvme_tcp() write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x71, 0x1, {{0x80, 0x0, 0x7}}}, 0x18) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) 21.17191038s ago: executing program 1 (id=7429): sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) r0 = getpgid(0xffffffffffffffff) ptrace$getregset(0x4204, r0, 0x1, &(0x7f0000001640)={&(0x7f0000000640)=""/4096, 0x1000}) (async) ioprio_set$uid(0x3, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) (async, rerun: 32) syz_emit_ethernet(0x6e, &(0x7f00000005c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8000", 0x38, 0x3a, 0xff, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0xff, @loopback={0x4000000}, @local, [@fragment={0x1d, 0x0, 0xd, 0x1, 0x0, 0xe, 0x68}]}}}}}}}, 0x0) (rerun: 32) ioprio_get$uid(0x3, 0x0) 20.32174246s ago: executing program 1 (id=7431): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4ea1, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r2, 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r1, 0xffff) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000000)=0x2) 20.154319182s ago: executing program 47 (id=7431): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4ea1, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r2, 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r1, 0xffff) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000000)=0x2) 1.750864001s ago: executing program 8 (id=7578): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000000000202009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000006d0500000200000000000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x1000, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000a80)="d80000001d0081044e81f777db44b904021d080201000000040000a1bc0001000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c16fb4007134cf6ee08000a0e408e8d8ef075c11503c6bbace801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322107c9fd6", 0x81}, {&(0x7f00000006c0)="54f6d4d87eb3f140c5", 0x9}, {&(0x7f0000000980)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e635cbe848495e723490d8e93db224d82d4fbfe76bd22fd358cd467795ad7febfc220d72f", 0x4e}], 0x3, 0x0, 0x0, 0x7400}, 0x10) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0xd2cc) sendmsg$inet(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="dc", 0x1}], 0x1}, 0x4008080) 781.109552ms ago: executing program 6 (id=7602): arch_prctl$ARCH_GET_GS(0x5005, 0x0) add_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0xc000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 780.654692ms ago: executing program 8 (id=7603): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) 736.071352ms ago: executing program 6 (id=7604): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e1e, 0x3, @empty, 0xffff}, 0x1c, 0x0}}], 0x1, 0x60080004) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}}], 0x1, 0x40002142, 0x0) 735.770442ms ago: executing program 6 (id=7605): perf_event_open(&(0x7f0000001200)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x200, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a867e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c27578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x6, 0x5, 0xa, 0x8001, 0x0, 0x0, 0x0, 0x4713}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x1f, &(0x7f0000000500), 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070014000523a608463a3f"], 0xfe33) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r5 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe30e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8800, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=r5, @ANYRES32, @ANYRESDEC=r1], 0x50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNATTACHFILTER(r6, 0x894c, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0xee, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000600), 0xb}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x4, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070004000523a608460400", @ANYRES16=r7], 0xfe33) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r9, 0x0, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x0, 0x1a}, 0x28) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000ffffffec0000000000000000000000517845fd000000"], 0x48) 699.306453ms ago: executing program 8 (id=7607): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x4}, 0x8, 0x1, 0x800, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r2) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x84) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000180)={r1}) 698.966713ms ago: executing program 8 (id=7609): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 620.263473ms ago: executing program 8 (id=7610): socket(0x23, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mq_open(0x0, 0x40, 0x100, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 619.742303ms ago: executing program 2 (id=7611): recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/95, 0x5f}, {0x0}, {0x0}], 0x5}, 0x2040) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x4, 0x3, 0x5}, 0x10}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x2, @perf_bp={0x0, 0x6}, 0x5000, 0x4, 0x0, 0x0, 0x6, 0xa, 0x0, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0xfffffffffffffff9, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xe) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)=0x20000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)=r3}, 0x20) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, 0x0, 0x60044084) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8801, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 546.753724ms ago: executing program 2 (id=7614): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 438.610475ms ago: executing program 2 (id=7617): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 438.247075ms ago: executing program 8 (id=7619): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002e40)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) 436.020275ms ago: executing program 2 (id=7620): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000b00), 0x1, 0x4ca, &(0x7f0000000540)="$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") signalfd(r0, &(0x7f0000000000)={[0x8]}, 0x8) 416.678215ms ago: executing program 6 (id=7621): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00010004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 393.263286ms ago: executing program 0 (id=7622): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) write$nci(0xffffffffffffffff, 0x0, 0x0) read$nci(0xffffffffffffffff, &(0x7f00000002c0)=""/100, 0x64) write$nci(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) 346.233606ms ago: executing program 6 (id=7624): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 320.916407ms ago: executing program 0 (id=7625): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)="42f7"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 301.358197ms ago: executing program 2 (id=7627): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x4080) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x4, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 246.405117ms ago: executing program 6 (id=7628): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() socket$packet(0x11, 0x3, 0x300) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x301880, 0x20d) write$tun(r3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x19) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x10004000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) timer_create(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 246.218857ms ago: executing program 0 (id=7629): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000019080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 226.861377ms ago: executing program 0 (id=7630): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 146.997018ms ago: executing program 0 (id=7633): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x110805, 0x0, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x25, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) socket$kcm(0x2c, 0x3, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x1e, 0x5, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10040) 146.888468ms ago: executing program 3 (id=7634): bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) 146.409458ms ago: executing program 2 (id=7635): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000100)='l', 0x1) 78.645139ms ago: executing program 3 (id=7636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0xe, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c1}, 0x20000840) 78.508469ms ago: executing program 3 (id=7637): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x60}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x204}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x4850) 77.561059ms ago: executing program 0 (id=7638): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) listen(r3, 0xa1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x13, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x94) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 71.105699ms ago: executing program 3 (id=7639): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmmsg(r0, &(0x7f0000002140)=[{{&(0x7f0000000080)=@rc={0x1f, @any, 0x73}, 0x80, 0x0}}], 0x1, 0x404c010) 34.32832ms ago: executing program 3 (id=7640): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x10}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x31}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000440), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0)=r2, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0xff, 0x10}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r2, r3}, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mkdir(0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0xd, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x2, @perf_bp={&(0x7f0000000140), 0x1}, 0x0, 0x2, 0x3, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfff5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0xffffffffffffff8d, &(0x7f0000000000)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d3f020a000000040000a1180002000000000084150e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100030300080000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) 0s ago: executing program 3 (id=7641): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() socket$inet6(0xa, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000040)=ANY=[], 0x1, 0x30e, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x52) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): T8904] vhci_hcd vhci_hcd.2: disconnect device [ 1715.574826][T31420] CPU: 0 UID: 0 PID: 31420 Comm: syz.1.7266 Tainted: G W syzkaller #0 PREEMPT(full) [ 1715.574943][T31420] Tainted: [W]=WARN [ 1715.574953][T31420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1715.574971][T31420] Call Trace: [ 1715.574982][T31420] [ 1715.574990][T31420] __dump_stack+0x1d/0x30 [ 1715.575016][T31420] dump_stack_lvl+0x95/0xd0 [ 1715.575085][T31420] dump_stack+0x15/0x1b [ 1715.575107][T31420] should_fail_ex+0x263/0x280 [ 1715.575146][T31420] should_fail+0xb/0x20 [ 1715.575180][T31420] should_fail_usercopy+0x1a/0x20 [ 1715.575313][T31420] _copy_from_user+0x1c/0xb0 [ 1715.575346][T31420] __sys_bpf+0x183/0x7e0 [ 1715.575412][T31420] __x64_sys_bpf+0x41/0x50 [ 1715.575438][T31420] x64_sys_call+0x10cb/0x3020 [ 1715.575533][T31420] do_syscall_64+0x12c/0x3b0 [ 1715.575567][T31420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.575592][T31420] RIP: 0033:0x7f183c67cdd9 [ 1715.575677][T31420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1715.575698][T31420] RSP: 002b:00007f183b0cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1715.575719][T31420] RAX: ffffffffffffffda RBX: 00007f183c8f5fa0 RCX: 00007f183c67cdd9 [ 1715.575736][T31420] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 1715.575750][T31420] RBP: 00007f183b0cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1715.575762][T31420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1715.575776][T31420] R13: 00007f183c8f6038 R14: 00007f183c8f5fa0 R15: 00007ffce30dda28 [ 1715.575940][T31420] [ 1716.069485][T31428] FAULT_INJECTION: forcing a failure. [ 1716.069485][T31428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1716.102290][T31428] CPU: 1 UID: 0 PID: 31428 Comm: syz.8.7270 Tainted: G W syzkaller #0 PREEMPT(full) [ 1716.102395][T31428] Tainted: [W]=WARN [ 1716.102412][T31428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1716.102430][T31428] Call Trace: [ 1716.102438][T31428] [ 1716.102447][T31428] __dump_stack+0x1d/0x30 [ 1716.102473][T31428] dump_stack_lvl+0x95/0xd0 [ 1716.102496][T31428] dump_stack+0x15/0x1b [ 1716.102518][T31428] should_fail_ex+0x263/0x280 [ 1716.102620][T31428] should_fail+0xb/0x20 [ 1716.102699][T31428] should_fail_usercopy+0x1a/0x20 [ 1716.102741][T31428] _copy_from_user+0x1c/0xb0 [ 1716.102826][T31428] __sys_connect+0xd0/0x2a0 [ 1716.102859][T31428] __x64_sys_connect+0x3f/0x50 [ 1716.102883][T31428] x64_sys_call+0x2df0/0x3020 [ 1716.102913][T31428] do_syscall_64+0x12c/0x3b0 [ 1716.102986][T31428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1716.103017][T31428] RIP: 0033:0x7f132e1dcdd9 [ 1716.103038][T31428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1716.103100][T31428] RSP: 002b:00007f132cc37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1716.103128][T31428] RAX: ffffffffffffffda RBX: 00007f132e455fa0 RCX: 00007f132e1dcdd9 [ 1716.103158][T31428] RDX: 000000000000006e RSI: 0000200000000080 RDI: 0000000000000003 [ 1716.103177][T31428] RBP: 00007f132cc37090 R08: 0000000000000000 R09: 0000000000000000 [ 1716.103191][T31428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1716.103205][T31428] R13: 00007f132e456038 R14: 00007f132e455fa0 R15: 00007ffc83fa7f98 [ 1716.103270][T31428] [ 1716.376334][T31430] loop2: detected capacity change from 0 to 512 [ 1716.416172][T31430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1716.440469][T31430] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1716.478450][T31430] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #2: comm syz.2.7271: corrupted inode contents [ 1716.509283][T31430] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #2: comm syz.2.7271: mark_inode_dirty error [ 1716.536364][T31430] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #2: comm syz.2.7271: corrupted inode contents [ 1716.572006][T31430] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.7271: mark_inode_dirty error [ 1716.646508][T27205] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1716.707940][T31446] loop2: detected capacity change from 0 to 512 [ 1716.717901][T31447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7273'. [ 1716.723647][T31446] EXT4-fs: Ignoring removed mblk_io_submit option [ 1716.746210][T31446] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1716.790241][T31446] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1716.806340][T31451] FAULT_INJECTION: forcing a failure. [ 1716.806340][T31451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1716.837871][T31451] CPU: 1 UID: 0 PID: 31451 Comm: syz.1.7275 Tainted: G W syzkaller #0 PREEMPT(full) [ 1716.837914][T31451] Tainted: [W]=WARN [ 1716.837924][T31451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1716.837997][T31451] Call Trace: [ 1716.838006][T31451] [ 1716.838023][T31451] __dump_stack+0x1d/0x30 [ 1716.838052][T31451] dump_stack_lvl+0x95/0xd0 [ 1716.838074][T31451] dump_stack+0x15/0x1b [ 1716.838153][T31451] should_fail_ex+0x263/0x280 [ 1716.838192][T31451] should_fail+0xb/0x20 [ 1716.838224][T31451] should_fail_usercopy+0x1a/0x20 [ 1716.838310][T31451] _copy_to_user+0x20/0xa0 [ 1716.838398][T31451] simple_read_from_buffer+0xb5/0x130 [ 1716.838449][T31451] proc_fail_nth_read+0x10e/0x150 [ 1716.838565][T31451] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1716.838596][T31451] vfs_read+0x1ab/0x7f0 [ 1716.838633][T31451] ? __rcu_read_unlock+0x4e/0x70 [ 1716.838656][T31451] ? __fget_files+0x184/0x1c0 [ 1716.838812][T31451] ? mutex_lock+0x57/0x90 [ 1716.838838][T31451] ksys_read+0xdc/0x1a0 [ 1716.838873][T31451] __x64_sys_read+0x40/0x50 [ 1716.838966][T31451] x64_sys_call+0x2886/0x3020 [ 1716.838993][T31451] do_syscall_64+0x12c/0x3b0 [ 1716.839024][T31451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1716.839094][T31451] RIP: 0033:0x7f183c63d60e [ 1716.839116][T31451] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1716.839141][T31451] RSP: 002b:00007f183b0cefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1716.839169][T31451] RAX: ffffffffffffffda RBX: 00007f183b0cf6c0 RCX: 00007f183c63d60e [ 1716.839235][T31451] RDX: 000000000000000f RSI: 00007f183b0cf0a0 RDI: 0000000000000004 [ 1716.839248][T31451] RBP: 00007f183b0cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1716.839310][T31451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1716.839323][T31451] R13: 00007f183c8f6038 R14: 00007f183c8f5fa0 R15: 00007ffce30dda28 [ 1716.839343][T31451] [ 1716.842839][T31446] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1717.065289][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 1717.065304][ T28] audit: type=1400 audit(2000001298.510:23450): avc: denied { write } for pid=31445 comm="syz.2.7274" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1717.168159][T31457] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.7274: iget: bad i_size value: 2533274857506816 [ 1717.180861][ T28] audit: type=1400 audit(2000001298.610:23451): avc: denied { write } for pid=31445 comm="syz.2.7274" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1717.216445][ T28] audit: type=1400 audit(2000001298.610:23452): avc: denied { append } for pid=31445 comm="syz.2.7274" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1717.240075][ T28] audit: type=1400 audit(2000001298.610:23453): avc: denied { write } for pid=31445 comm="syz.2.7274" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1717.297202][T31463] loop1: detected capacity change from 0 to 1024 [ 1717.336715][T31463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1717.391152][T31463] EXT4-fs (loop1): Online resizing not supported with bigalloc [ 1717.434774][T27205] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1717.494717][T31470] loop2: detected capacity change from 0 to 256 [ 1718.041356][T31473] loop3: detected capacity change from 0 to 512 [ 1718.080472][T31473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1718.219249][T13076] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1718.235242][T28977] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1718.270556][T31490] loop1: detected capacity change from 0 to 512 [ 1718.325375][T31496] FAULT_INJECTION: forcing a failure. [ 1718.325375][T31496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1718.338659][T31496] CPU: 1 UID: 0 PID: 31496 Comm: syz.3.7289 Tainted: G W syzkaller #0 PREEMPT(full) [ 1718.338700][T31496] Tainted: [W]=WARN [ 1718.338709][T31496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1718.338725][T31496] Call Trace: [ 1718.338733][T31496] [ 1718.338743][T31496] __dump_stack+0x1d/0x30 [ 1718.338831][T31496] dump_stack_lvl+0x95/0xd0 [ 1718.338854][T31496] dump_stack+0x15/0x1b [ 1718.338878][T31496] should_fail_ex+0x263/0x280 [ 1718.338966][T31496] should_fail+0xb/0x20 [ 1718.338990][T31496] should_fail_usercopy+0x1a/0x20 [ 1718.339019][T31496] _copy_to_user+0x20/0xa0 [ 1718.339049][T31496] simple_read_from_buffer+0xb5/0x130 [ 1718.339139][T31496] proc_fail_nth_read+0x10e/0x150 [ 1718.339168][T31496] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1718.339228][T31496] vfs_read+0x1ab/0x7f0 [ 1718.339254][T31496] ? __rcu_read_unlock+0x4e/0x70 [ 1718.339275][T31496] ? __fget_files+0x184/0x1c0 [ 1718.339294][T31496] ? __sys_bind+0x222/0x290 [ 1718.339324][T31496] ? mutex_lock+0x57/0x90 [ 1718.339418][T31496] ksys_read+0xdc/0x1a0 [ 1718.339446][T31496] __x64_sys_read+0x40/0x50 [ 1718.339473][T31496] x64_sys_call+0x2886/0x3020 [ 1718.339576][T31496] do_syscall_64+0x12c/0x3b0 [ 1718.339604][T31496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1718.339625][T31496] RIP: 0033:0x7fca75a6d60e [ 1718.339641][T31496] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1718.339711][T31496] RSP: 002b:00007fca744fefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1718.339772][T31496] RAX: ffffffffffffffda RBX: 00007fca744ff6c0 RCX: 00007fca75a6d60e [ 1718.339802][T31496] RDX: 000000000000000f RSI: 00007fca744ff0a0 RDI: 0000000000000003 [ 1718.339814][T31496] RBP: 00007fca744ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1718.339825][T31496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1718.339837][T31496] R13: 00007fca75d26038 R14: 00007fca75d25fa0 R15: 00007fff613f1478 [ 1718.339856][T31496] [ 1718.599049][T31490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1718.611625][T31490] ext4 filesystem being mounted at /955/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1718.625185][T31490] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #2: comm syz.1.7286: corrupted inode contents [ 1718.637178][T31490] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #2: comm syz.1.7286: mark_inode_dirty error [ 1718.648712][T31490] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #2: comm syz.1.7286: corrupted inode contents [ 1718.660668][T31490] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.7286: mark_inode_dirty error [ 1718.680076][ T28] audit: type=1400 audit(2000001300.040:23454): avc: denied { write } for pid=31489 comm="syz.1.7286" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1718.716952][T13076] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1718.772811][ T28] audit: type=1400 audit(2000001300.210:23455): avc: denied { read } for pid=31514 comm="syz.1.7293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1718.793568][T31516] x_tables: duplicate underflow at hook 1 [ 1718.802619][ T28] audit: type=1400 audit(2000001300.230:23456): avc: denied { ioctl } for pid=31514 comm="syz.1.7293" path="socket:[106871]" dev="sockfs" ino=106871 ioctlcmd=0x6e81 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1718.840068][ T28] audit: type=1400 audit(2000001300.240:23457): avc: denied { append } for pid=31514 comm="syz.1.7293" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1718.863963][ T28] audit: type=1400 audit(2000001300.240:23458): avc: denied { ioctl } for pid=31514 comm="syz.1.7293" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1718.915457][T31521] loop1: detected capacity change from 0 to 2048 [ 1718.952379][T31515] loop2: detected capacity change from 0 to 512 [ 1718.965548][T31515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1719.000703][T27205] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1719.117362][T31533] loop1: detected capacity change from 0 to 512 [ 1719.165141][T31535] FAULT_INJECTION: forcing a failure. [ 1719.165141][T31535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1719.178248][T31535] CPU: 1 UID: 0 PID: 31535 Comm: syz.0.7303 Tainted: G W syzkaller #0 PREEMPT(full) [ 1719.178290][T31535] Tainted: [W]=WARN [ 1719.178299][T31535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1719.178318][T31535] Call Trace: [ 1719.178367][T31535] [ 1719.178376][T31535] __dump_stack+0x1d/0x30 [ 1719.178408][T31535] dump_stack_lvl+0x95/0xd0 [ 1719.178436][T31535] dump_stack+0x15/0x1b [ 1719.178459][T31535] should_fail_ex+0x263/0x280 [ 1719.178500][T31535] should_fail+0xb/0x20 [ 1719.178532][T31535] should_fail_usercopy+0x1a/0x20 [ 1719.178639][T31535] _copy_from_user+0x1c/0xb0 [ 1719.178675][T31535] ___sys_sendmsg+0xc1/0x1e0 [ 1719.178735][T31535] __x64_sys_sendmsg+0xd4/0x160 [ 1719.178766][T31535] x64_sys_call+0x194c/0x3020 [ 1719.178794][T31535] do_syscall_64+0x12c/0x3b0 [ 1719.178892][T31535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1719.178918][T31535] RIP: 0033:0x7efd2ec9cdd9 [ 1719.178935][T31535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1719.178956][T31535] RSP: 002b:00007efd2d6ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1719.179023][T31535] RAX: ffffffffffffffda RBX: 00007efd2ef15fa0 RCX: 00007efd2ec9cdd9 [ 1719.179039][T31535] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1719.179053][T31535] RBP: 00007efd2d6ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1719.179067][T31535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1719.179158][T31535] R13: 00007efd2ef16038 R14: 00007efd2ef15fa0 R15: 00007ffd1c0a8d38 [ 1719.179179][T31535] [ 1719.382427][T31533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1719.404523][T31533] ext4 filesystem being mounted at /961/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1719.422388][T31533] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #2: comm syz.1.7302: corrupted inode contents [ 1719.422773][ T28] audit: type=1400 audit(2000001300.870:23459): avc: denied { write } for pid=31532 comm="syz.1.7302" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1719.435094][T31533] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #2: comm syz.1.7302: mark_inode_dirty error [ 1719.467952][T31533] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #2: comm syz.1.7302: corrupted inode contents [ 1719.498505][T31533] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.7302: mark_inode_dirty error [ 1719.534229][T31552] loop0: detected capacity change from 0 to 256 [ 1719.538306][T31555] loop2: detected capacity change from 0 to 2048 [ 1719.604174][T13076] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1719.853632][T31568] loop2: detected capacity change from 0 to 164 [ 1720.749754][T31568] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1720.773967][T31459] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1721.118682][T31568] loop2: detected capacity change from 0 to 1024 [ 1721.756651][T31568] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1721.768640][T31568] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 1721.780855][T31568] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1721.797461][T31568] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #3: comm syz.2.7311: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1721.815513][T31568] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1721.815731][T31568] EXT4-fs (loop2): no journal found [ 1721.830031][T31568] EXT4-fs (loop2): can't get journal size [ 1721.837951][T31568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1722.144287][T31569] xt_NFQUEUE: number of total queues is 0 [ 1722.410864][T27205] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1722.540679][T31589] FAULT_INJECTION: forcing a failure. [ 1722.540679][T31589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1722.553970][T31589] CPU: 0 UID: 0 PID: 31589 Comm: syz.1.7319 Tainted: G W syzkaller #0 PREEMPT(full) [ 1722.554077][T31589] Tainted: [W]=WARN [ 1722.554087][T31589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1722.554103][T31589] Call Trace: [ 1722.554176][T31589] [ 1722.554186][T31589] __dump_stack+0x1d/0x30 [ 1722.554217][T31589] dump_stack_lvl+0x95/0xd0 [ 1722.554239][T31589] dump_stack+0x15/0x1b [ 1722.554259][T31589] should_fail_ex+0x263/0x280 [ 1722.554371][T31589] should_fail+0xb/0x20 [ 1722.554405][T31589] should_fail_usercopy+0x1a/0x20 [ 1722.554474][T31589] _copy_from_user+0x1c/0xb0 [ 1722.554537][T31589] __sys_connect+0xd0/0x2a0 [ 1722.554562][T31589] __x64_sys_connect+0x3f/0x50 [ 1722.554586][T31589] x64_sys_call+0x2df0/0x3020 [ 1722.554619][T31589] do_syscall_64+0x12c/0x3b0 [ 1722.554681][T31589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1722.554712][T31589] RIP: 0033:0x7f183c67cdd9 [ 1722.554733][T31589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1722.554829][T31589] RSP: 002b:00007f183b0cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1722.554853][T31589] RAX: ffffffffffffffda RBX: 00007f183c8f5fa0 RCX: 00007f183c67cdd9 [ 1722.554872][T31589] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000004 [ 1722.554957][T31589] RBP: 00007f183b0cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1722.554972][T31589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1722.554984][T31589] R13: 00007f183c8f6038 R14: 00007f183c8f5fa0 R15: 00007ffce30dda28 [ 1722.555009][T31589] [ 1722.816346][T31597] loop0: detected capacity change from 0 to 2048 [ 1722.850371][T31587] EXT4-fs (loop2): unsupported inode size: 0 [ 1722.867128][T31587] EXT4-fs (loop2): blocksize: 2048 [ 1722.929765][T31606] FAT-fs (loop3): bogus number of FAT sectors [ 1722.960531][T31606] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1723.082893][T31613] FAULT_INJECTION: forcing a failure. [ 1723.082893][T31613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1723.109014][T31617] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7329'. [ 1723.118226][T31616] set_capacity_and_notify: 3 callbacks suppressed [ 1723.118246][T31616] loop0: detected capacity change from 0 to 128 [ 1723.126637][T31613] CPU: 0 UID: 0 PID: 31613 Comm: syz.2.7327 Tainted: G W syzkaller #0 PREEMPT(full) [ 1723.126746][T31613] Tainted: [W]=WARN [ 1723.126777][T31613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1723.126828][T31613] Call Trace: [ 1723.126851][T31613] [ 1723.126874][T31613] __dump_stack+0x1d/0x30 [ 1723.127028][T31613] dump_stack_lvl+0x95/0xd0 [ 1723.127110][T31613] dump_stack+0x15/0x1b [ 1723.127183][T31613] should_fail_ex+0x263/0x280 [ 1723.127281][T31613] should_fail+0xb/0x20 [ 1723.127442][T31613] should_fail_usercopy+0x1a/0x20 [ 1723.127561][T31613] _copy_from_user+0x1c/0xb0 [ 1723.127677][T31613] ___sys_sendmsg+0xc1/0x1e0 [ 1723.127864][T31613] __x64_sys_sendmsg+0xd4/0x160 [ 1723.127959][T31613] x64_sys_call+0x194c/0x3020 [ 1723.128043][T31613] do_syscall_64+0x12c/0x3b0 [ 1723.128155][T31613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1723.128314][T31613] RIP: 0033:0x7f0f8875cdd9 [ 1723.128374][T31613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1723.128438][T31613] RSP: 002b:00007f0f871b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1723.128577][T31613] RAX: ffffffffffffffda RBX: 00007f0f889d5fa0 RCX: 00007f0f8875cdd9 [ 1723.128592][T31613] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1723.128605][T31613] RBP: 00007f0f871b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1723.128722][T31613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1723.128766][T31613] R13: 00007f0f889d6038 R14: 00007f0f889d5fa0 R15: 00007ffc0c54ecc8 [ 1723.128852][T31613] [ 1723.216165][T31617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7329'. [ 1723.254590][ T28] audit: type=1400 audit(2000001304.660:23460): avc: denied { getopt } for pid=31615 comm="syz.3.7329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1723.343382][T31620] loop2: detected capacity change from 0 to 256 [ 1723.542205][ T28] audit: type=1326 audit(2000001304.980:23461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31603 comm="syz.8.7324" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132e1dcdd9 code=0x7ffc0000 [ 1723.586654][T31626] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1723.597971][T31629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7334'. [ 1723.633995][ T28] audit: type=1326 audit(2000001304.980:23462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31603 comm="syz.8.7324" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132e1dcdd9 code=0x7ffc0000 [ 1723.668776][ T28] audit: type=1326 audit(2000001304.980:23463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31603 comm="syz.8.7324" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132e1dcdd9 code=0x7ffc0000 [ 1723.703964][ T28] audit: type=1326 audit(2000001304.980:23464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31603 comm="syz.8.7324" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132e1dcdd9 code=0x7ffc0000 [ 1723.768176][ T28] audit: type=1326 audit(2000001304.990:23465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31603 comm="syz.8.7324" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f132e1dcdd9 code=0x7ffc0000 [ 1723.835954][T31639] loop3: detected capacity change from 0 to 2048 [ 1723.867262][ T28] audit: type=1326 audit(2000001304.990:23466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31603 comm="syz.8.7324" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132e1dcdd9 code=0x7ffc0000 [ 1723.938189][ T28] audit: type=1326 audit(2000001304.990:23467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31603 comm="syz.8.7324" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132e1dcdd9 code=0x7ffc0000 [ 1724.073450][T31649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7337'. [ 1724.084533][ T8906] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.193087][ T8906] bond0: (slave netdevsim2): Releasing backup interface [ 1724.269228][ T8906] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.461718][ T8906] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.488708][T31653] loop2: detected capacity change from 0 to 512 [ 1724.567706][ T28] audit: type=1326 audit(2000001304.990:23468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31603 comm="syz.8.7324" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132e1dcdd9 code=0x7ffc0000 [ 1724.597588][T31653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1724.615424][ T8906] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.645295][ T28] audit: type=1326 audit(2000001304.990:23469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31603 comm="syz.8.7324" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f132e1dcdd9 code=0x7ffc0000 [ 1724.692057][T31627] bridge0: port 1(bridge_slave_0) entered blocking state [ 1724.699379][T31627] bridge0: port 1(bridge_slave_0) entered disabled state [ 1724.708258][T31627] bridge_slave_0: entered allmulticast mode [ 1724.714933][T31627] bridge_slave_0: entered promiscuous mode [ 1724.721785][T31627] bridge0: port 2(bridge_slave_1) entered blocking state [ 1724.729015][T31627] bridge0: port 2(bridge_slave_1) entered disabled state [ 1724.736278][T31627] bridge_slave_1: entered allmulticast mode [ 1724.742720][T31627] bridge_slave_1: entered promiscuous mode [ 1724.767247][T31627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1724.777756][T31627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1724.801523][T31627] team0: Port device team_slave_0 added [ 1724.820054][T31627] team0: Port device team_slave_1 added [ 1724.822192][T27205] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1724.850331][T31627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1724.857529][T31627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1724.883711][T31627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1724.894857][ T8906] bridge_slave_1: left allmulticast mode [ 1724.900588][ T8906] bridge_slave_1: left promiscuous mode [ 1724.906340][ T8906] bridge0: port 2(bridge_slave_1) entered disabled state [ 1724.914386][ T8906] bridge_slave_0: left allmulticast mode [ 1724.920100][ T8906] bridge_slave_0: left promiscuous mode [ 1724.927192][ T8906] bridge0: port 1(bridge_slave_0) entered disabled state [ 1725.037550][ T8906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1725.047391][ T8906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1725.056837][ T8906] bond0 (unregistering): Released all slaves [ 1725.064754][T31627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1725.071777][T31627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1725.097995][T31627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1725.120698][T31664] loop0: detected capacity change from 0 to 256 [ 1725.123985][T31666] loop2: detected capacity change from 0 to 1024 [ 1725.138535][T31666] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1725.165454][T31668] loop8: detected capacity change from 0 to 256 [ 1725.192476][T31627] hsr_slave_0: entered promiscuous mode [ 1725.198663][T31627] hsr_slave_1: entered promiscuous mode [ 1725.204686][T31627] debugfs: 'hsr0' already exists in 'hsr' [ 1725.210618][T31627] Cannot create hsr debugfs directory [ 1725.260575][ T8906] tipc: Left network mode [ 1725.270783][ T8906] hsr_slave_0: left promiscuous mode [ 1725.282691][ T8906] hsr_slave_1: left promiscuous mode [ 1725.293547][ T8906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1725.304980][ T8906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1725.307586][T31666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1725.345135][ T8906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1725.363843][ T8906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1725.408677][ T8906] veth1_macvtap: left promiscuous mode [ 1725.430221][ T8906] veth0_macvtap: left promiscuous mode [ 1725.438401][ T8906] veth1_vlan: left promiscuous mode [ 1725.443687][ T8906] veth0_vlan: left promiscuous mode [ 1725.476791][T27205] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1725.488424][T31684] netlink: 'syz.3.7344': attribute type 13 has an invalid length. [ 1725.510316][T31689] FAULT_INJECTION: forcing a failure. [ 1725.510316][T31689] name failslab, interval 1, probability 0, space 0, times 0 [ 1725.523119][T31689] CPU: 0 UID: 0 PID: 31689 Comm: syz.0.7340 Tainted: G W syzkaller #0 PREEMPT(full) [ 1725.523151][T31689] Tainted: [W]=WARN [ 1725.523158][T31689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1725.523170][T31689] Call Trace: [ 1725.523180][T31689] [ 1725.523189][T31689] __dump_stack+0x1d/0x30 [ 1725.523222][T31689] dump_stack_lvl+0x95/0xd0 [ 1725.523278][T31689] dump_stack+0x15/0x1b [ 1725.523298][T31689] should_fail_ex+0x263/0x280 [ 1725.523389][T31689] should_failslab+0x8c/0xb0 [ 1725.523431][T31689] kmem_cache_alloc_noprof+0x66/0x3f0 [ 1725.523583][T31689] ? do_getname+0x2e/0x1c0 [ 1725.523609][T31689] do_getname+0x2e/0x1c0 [ 1725.523629][T31689] __se_sys_mkdirat+0x21/0xf0 [ 1725.523709][T31689] __x64_sys_mkdirat+0x43/0x50 [ 1725.523812][T31689] x64_sys_call+0x2c4e/0x3020 [ 1725.523844][T31689] do_syscall_64+0x12c/0x3b0 [ 1725.523932][T31689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1725.523961][T31689] RIP: 0033:0x7efd2ec9bc47 [ 1725.523979][T31689] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1725.524004][T31689] RSP: 002b:00007efd2d6ace58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1725.524072][T31689] RAX: ffffffffffffffda RBX: 00007efd2d6acee0 RCX: 00007efd2ec9bc47 [ 1725.524104][T31689] RDX: 00000000000001ff RSI: 0000200000000340 RDI: 00000000ffffff9c [ 1725.524117][T31689] RBP: 0000200000000080 R08: 0000200000000140 R09: 0000000000000000 [ 1725.524130][T31689] R10: 0000200000000080 R11: 0000000000000246 R12: 0000200000000340 [ 1725.524145][T31689] R13: 00007efd2d6acea0 R14: 0000000000000000 R15: 0000000000000000 [ 1725.524193][T31689] [ 1725.541257][T31684] netlink: 'syz.3.7344': attribute type 17 has an invalid length. [ 1725.726230][T31691] FAULT_INJECTION: forcing a failure. [ 1725.726230][T31691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1725.748396][T31691] CPU: 0 UID: 0 PID: 31691 Comm: syz.8.7343 Tainted: G W syzkaller #0 PREEMPT(full) [ 1725.748457][T31691] Tainted: [W]=WARN [ 1725.748475][T31691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1725.748493][T31691] Call Trace: [ 1725.748502][T31691] [ 1725.748511][T31691] __dump_stack+0x1d/0x30 [ 1725.748559][T31691] dump_stack_lvl+0x95/0xd0 [ 1725.748638][T31691] dump_stack+0x15/0x1b [ 1725.748665][T31691] should_fail_ex+0x263/0x280 [ 1725.748696][T31691] should_fail+0xb/0x20 [ 1725.748833][T31691] should_fail_usercopy+0x1a/0x20 [ 1725.748875][T31691] _copy_from_user+0x1c/0xb0 [ 1725.748912][T31691] ___sys_sendmsg+0xc1/0x1e0 [ 1725.748951][T31691] __x64_sys_sendmsg+0xd4/0x160 [ 1725.748993][T31691] x64_sys_call+0x194c/0x3020 [ 1725.749097][T31691] do_syscall_64+0x12c/0x3b0 [ 1725.749134][T31691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1725.749165][T31691] RIP: 0033:0x7f132e1dcdd9 [ 1725.749187][T31691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1725.749330][T31691] RSP: 002b:00007f132cc16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1725.749350][T31691] RAX: ffffffffffffffda RBX: 00007f132e456090 RCX: 00007f132e1dcdd9 [ 1725.749364][T31691] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1725.749395][T31691] RBP: 00007f132cc16090 R08: 0000000000000000 R09: 0000000000000000 [ 1725.749412][T31691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1725.749428][T31691] R13: 00007f132e456128 R14: 00007f132e456090 R15: 00007ffc83fa7f98 [ 1725.749455][T31691] [ 1726.058218][ T8906] team0 (unregistering): Port device team_slave_1 removed [ 1726.070994][ T8906] team0 (unregistering): Port device team_slave_0 removed [ 1726.173780][T31683] bridge0: port 2(bridge_slave_1) entered disabled state [ 1726.181147][T31683] bridge0: port 1(bridge_slave_0) entered disabled state [ 1726.239388][T31683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1726.249201][T31683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1726.406048][T31684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1726.416159][T31684] 8021q: adding VLAN 0 to HW filter on device team0 [ 1726.427521][T31684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1726.440920][T31711] loop2: detected capacity change from 0 to 512 [ 1726.478438][T31684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1726.505113][T31684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1726.525466][T31684] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1726.542174][T31684] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1726.558553][T31684] veth1_vlan: left promiscuous mode [ 1726.564793][T31684] veth0_vlan: left promiscuous mode [ 1726.570536][T31684] veth0_vlan: entered promiscuous mode [ 1726.579835][T31684] veth1_vlan: entered promiscuous mode [ 1726.590199][T31684] veth1_macvtap: left promiscuous mode [ 1726.594296][T31711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1726.608559][T31684] veth0_macvtap: left promiscuous mode [ 1726.615001][T31684] veth0_macvtap: entered promiscuous mode [ 1726.627059][T31684] veth1_macvtap: entered promiscuous mode [ 1726.635979][T31684] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1726.646889][T31684] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1726.662112][T31684] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1726.673472][T31684] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1726.685429][ T3023] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1726.708933][T10453] bridge0: port 1(bridge_slave_0) entered blocking state [ 1726.716099][T10453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1726.725501][T10453] bridge0: port 2(bridge_slave_1) entered blocking state [ 1726.732644][T10453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1726.877355][T31729] loop0: detected capacity change from 0 to 2048 [ 1726.974426][T31733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7348'. [ 1727.221259][T31738] loop0: detected capacity change from 0 to 512 [ 1727.412131][ T3023] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1727.483008][T27205] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1727.528161][T31751] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7353'. [ 1727.613620][T31738] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1727.626252][T31738] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1727.634403][T31759] FAULT_INJECTION: forcing a failure. [ 1727.634403][T31759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1727.651286][T31759] CPU: 0 UID: 0 PID: 31759 Comm: syz.2.7351 Tainted: G W syzkaller #0 PREEMPT(full) [ 1727.651366][T31759] Tainted: [W]=WARN [ 1727.651374][T31759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1727.651427][T31759] Call Trace: [ 1727.651433][T31759] [ 1727.651441][T31759] __dump_stack+0x1d/0x30 [ 1727.651469][T31759] dump_stack_lvl+0x95/0xd0 [ 1727.651495][T31759] dump_stack+0x15/0x1b [ 1727.651516][T31759] should_fail_ex+0x263/0x280 [ 1727.651617][T31759] should_fail+0xb/0x20 [ 1727.651647][T31759] should_fail_usercopy+0x1a/0x20 [ 1727.651749][T31759] _copy_from_user+0x1c/0xb0 [ 1727.651790][T31759] ___sys_sendmsg+0xc1/0x1e0 [ 1727.651838][T31759] __x64_sys_sendmsg+0xd4/0x160 [ 1727.651960][T31759] x64_sys_call+0x194c/0x3020 [ 1727.651997][T31759] do_syscall_64+0x12c/0x3b0 [ 1727.652036][T31759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1727.652123][T31759] RIP: 0033:0x7f0f8875cdd9 [ 1727.652146][T31759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1727.652170][T31759] RSP: 002b:00007f0f87196028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1727.652196][T31759] RAX: ffffffffffffffda RBX: 00007f0f889d6090 RCX: 00007f0f8875cdd9 [ 1727.652216][T31759] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1727.652312][T31759] RBP: 00007f0f87196090 R08: 0000000000000000 R09: 0000000000000000 [ 1727.652327][T31759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1727.652341][T31759] R13: 00007f0f889d6128 R14: 00007f0f889d6090 R15: 00007ffc0c54ecc8 [ 1727.652402][T31759] [ 1727.669055][T31738] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #2: comm syz.0.7352: corrupted inode contents [ 1727.862353][T31738] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #2: comm syz.0.7352: mark_inode_dirty error [ 1727.876534][T31738] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #2: comm syz.0.7352: corrupted inode contents [ 1727.888629][T31738] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.7352: mark_inode_dirty error [ 1727.914045][T29796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1727.983021][T31753] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1728.009180][T31774] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1728.038987][T27205] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1728.108786][T28977] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1728.202921][T31801] FAULT_INJECTION: forcing a failure. [ 1728.202921][T31801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1728.235803][T31627] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1728.249972][T31627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1728.257115][T31800] set_capacity_and_notify: 2 callbacks suppressed [ 1728.257134][T31800] loop0: detected capacity change from 0 to 2048 [ 1728.267033][T31627] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1728.274030][T31801] CPU: 1 UID: 0 PID: 31801 Comm: syz.3.7357 Tainted: G W syzkaller #0 PREEMPT(full) [ 1728.274133][T31801] Tainted: [W]=WARN [ 1728.274173][T31801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1728.274206][T31801] Call Trace: [ 1728.274226][T31801] [ 1728.274254][T31801] __dump_stack+0x1d/0x30 [ 1728.274366][T31801] dump_stack_lvl+0x95/0xd0 [ 1728.274481][T31801] dump_stack+0x15/0x1b [ 1728.274553][T31801] should_fail_ex+0x263/0x280 [ 1728.274642][T31801] should_fail+0xb/0x20 [ 1728.274742][T31801] should_fail_usercopy+0x1a/0x20 [ 1728.274840][T31801] _copy_from_user+0x1c/0xb0 [ 1728.274932][T31801] uhid_char_write+0xee/0x650 [ 1728.275018][T31801] ? __pfx_uhid_char_write+0x10/0x10 [ 1728.275097][T31801] vfs_write+0x269/0x9f0 [ 1728.275224][T31801] ? __rcu_read_unlock+0x4e/0x70 [ 1728.275292][T31801] ? __fget_files+0x184/0x1c0 [ 1728.275383][T31801] ksys_write+0xdc/0x1a0 [ 1728.275506][T31801] __x64_sys_write+0x40/0x50 [ 1728.275583][T31801] x64_sys_call+0x27e1/0x3020 [ 1728.275764][T31801] do_syscall_64+0x12c/0x3b0 [ 1728.275898][T31801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.275968][T31801] RIP: 0033:0x7fca75aacdd9 [ 1728.276018][T31801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1728.276076][T31801] RSP: 002b:00007fca744ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1728.276198][T31801] RAX: ffffffffffffffda RBX: 00007fca75d25fa0 RCX: 00007fca75aacdd9 [ 1728.276239][T31801] RDX: 0000000000000119 RSI: 0000000000000000 RDI: 0000000000000003 [ 1728.276287][T31801] RBP: 00007fca744ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1728.276313][T31801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1728.276369][T31801] R13: 00007fca75d26038 R14: 00007fca75d25fa0 R15: 00007fff613f1478 [ 1728.276421][T31801] [ 1728.346297][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 1728.346349][ T28] audit: type=1400 audit(2000001309.740:23514): avc: denied { write } for pid=31803 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1728.509110][T31627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1728.517107][T31804] tipc: Enabling of bearer rejected, failed to enable media [ 1728.530777][T31627] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1728.542861][T31627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1728.570531][T31627] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1728.617638][T31627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1728.738766][T31832] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7362'. [ 1729.223030][T31627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1729.262264][T31827] loop0: detected capacity change from 0 to 1024 [ 1729.269455][T31827] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1729.295066][T31627] 8021q: adding VLAN 0 to HW filter on device team0 [ 1729.336842][T31847] loop8: detected capacity change from 0 to 256 [ 1729.372078][ T28] audit: type=1400 audit(2000001310.810:23515): avc: denied { write } for pid=31811 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1729.445046][T31859] loop3: detected capacity change from 0 to 256 [ 1729.613722][T31863] xt_NFQUEUE: number of total queues is 0 [ 1730.440681][ T8906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1730.447947][ T8906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1730.474856][T31862] xt_NFQUEUE: number of total queues is 0 [ 1730.481649][T31862] FAULT_INJECTION: forcing a failure. [ 1730.481649][T31862] name failslab, interval 1, probability 0, space 0, times 0 [ 1730.494389][T31862] CPU: 1 UID: 0 PID: 31862 Comm: syz.3.7372 Tainted: G W syzkaller #0 PREEMPT(full) [ 1730.494435][T31862] Tainted: [W]=WARN [ 1730.494444][T31862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1730.494460][T31862] Call Trace: [ 1730.494468][T31862] [ 1730.494478][T31862] __dump_stack+0x1d/0x30 [ 1730.494510][T31862] dump_stack_lvl+0x95/0xd0 [ 1730.494595][T31862] dump_stack+0x15/0x1b [ 1730.494626][T31862] should_fail_ex+0x263/0x280 [ 1730.494653][T31862] should_failslab+0x8c/0xb0 [ 1730.494711][T31862] kmem_cache_alloc_noprof+0x66/0x3f0 [ 1730.494757][T31862] ? do_getname+0x2e/0x1c0 [ 1730.494778][T31862] do_getname+0x2e/0x1c0 [ 1730.494796][T31862] __se_sys_rename+0x20/0x1c0 [ 1730.494828][T31862] __x64_sys_rename+0x31/0x40 [ 1730.494848][T31862] x64_sys_call+0x2b3/0x3020 [ 1730.494873][T31862] do_syscall_64+0x12c/0x3b0 [ 1730.494903][T31862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1730.494980][T31862] RIP: 0033:0x7fca75aacdd9 [ 1730.495000][T31862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1730.495025][T31862] RSP: 002b:00007fca744de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 1730.495048][T31862] RAX: ffffffffffffffda RBX: 00007fca75d26090 RCX: 00007fca75aacdd9 [ 1730.495066][T31862] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000200000000000 [ 1730.495083][T31862] RBP: 00007fca744de090 R08: 0000000000000000 R09: 0000000000000000 [ 1730.495097][T31862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1730.495183][T31862] R13: 00007fca75d26128 R14: 00007fca75d26090 R15: 00007fff613f1478 [ 1730.495208][T31862] [ 1730.498105][ T8906] bridge0: port 2(bridge_slave_1) entered blocking state [ 1730.672910][ T8906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1730.697551][ T28] audit: type=1400 audit(2000001312.140:23516): avc: denied { write } for pid=31866 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1730.747124][ T28] audit: type=1400 audit(2000001312.190:23517): avc: denied { ioctl } for pid=31865 comm="syz.0.7373" path="socket:[108474]" dev="sockfs" ino=108474 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1730.775919][T31871] loop8: detected capacity change from 0 to 256 [ 1730.937886][ T28] audit: type=1326 audit(2000001312.380:23518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31868 comm="syz.8.7374" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132e1dcdd9 code=0x7ffc0000 [ 1730.972716][ T28] audit: type=1326 audit(2000001312.380:23519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31868 comm="syz.8.7374" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132e1dcdd9 code=0x7ffc0000 [ 1730.998536][ T28] audit: type=1326 audit(2000001312.380:23520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31868 comm="syz.8.7374" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132e1dcdd9 code=0x7ffc0000 [ 1731.024117][ T28] audit: type=1326 audit(2000001312.380:23522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31868 comm="syz.8.7374" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f132e1dcdd9 code=0x7ffc0000 [ 1731.049805][ T28] audit: type=1326 audit(2000001312.380:23523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31868 comm="syz.8.7374" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132e1dcdd9 code=0x7ffc0000 [ 1731.055431][T31627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1731.078888][ T28] audit: type=1326 audit(2000001312.380:23521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31868 comm="syz.8.7374" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132e1dcdd9 code=0x7ffc0000 [ 1731.110288][T31871] xt_NFQUEUE: number of total queues is 0 [ 1731.169522][T31627] veth0_vlan: entered promiscuous mode [ 1731.177720][T31627] veth1_vlan: entered promiscuous mode [ 1731.193900][T31627] veth0_macvtap: entered promiscuous mode [ 1731.201459][T31627] veth1_macvtap: entered promiscuous mode [ 1731.212690][T31627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1731.222610][T31627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1731.241279][T28929] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1731.250158][T28929] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1731.266540][T28929] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1731.275643][T28929] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1731.321425][T31893] loop1: detected capacity change from 0 to 512 [ 1731.336108][T31893] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1731.363365][T31893] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 1731.383290][T31893] System zones: 1-12 [ 1731.393565][T31893] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1731.404002][T31893] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7331: bg 0: block 361: padding at end of block bitmap is not set [ 1731.433779][T31893] loop1: lost filesystem error report for type 5 error -117 [ 1731.434289][T31893] EXT4-fs (loop1): Remounting filesystem read-only [ 1731.448191][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1731.448216][ C0] EXT4-fs (loop1): initial error at time 2000001312: ext4_validate_block_bitmap:441 [ 1731.448240][ C0] EXT4-fs (loop1): last error at time 2000001312: ext4_validate_block_bitmap:441 [ 1731.509636][T31893] EXT4-fs (loop1): 1 truncate cleaned up [ 1731.524613][T31893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1731.564192][T31627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1735.765011][ T28] kauditd_printk_skb: 82 callbacks suppressed [ 1735.765030][ T28] audit: type=1400 audit(2000001317.210:23606): avc: denied { map_create } for pid=31900 comm="syz.3.7379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1735.792006][T31906] loop1: detected capacity change from 0 to 256 [ 1735.815509][ T28] audit: type=1400 audit(2000001317.210:23607): avc: denied { read write } for pid=31904 comm="syz.1.7377" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1735.844200][ T28] audit: type=1400 audit(2000001317.240:23608): avc: denied { open } for pid=31904 comm="syz.1.7377" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1735.868392][ T28] audit: type=1400 audit(2000001317.240:23609): avc: denied { ioctl } for pid=31904 comm="syz.1.7377" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1735.901419][T31910] xt_hashlimit: max too large, truncated to 1048576 [ 1735.962992][ T28] audit: type=1400 audit(2000001317.240:23610): avc: denied { read write } for pid=31898 comm="syz.2.7375" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1736.057233][ T28] audit: type=1400 audit(2000001317.240:23611): avc: denied { open } for pid=31898 comm="syz.2.7375" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1736.088572][ T28] audit: type=1400 audit(2000001317.250:23612): avc: denied { open } for pid=31898 comm="syz.2.7375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1736.108050][ T28] audit: type=1400 audit(2000001317.250:23613): avc: denied { mounton } for pid=31904 comm="syz.1.7377" path="/1/file0" dev="tmpfs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1736.188301][T31919] Cannot find set identified by id 0 to match [ 1736.336645][ T28] audit: type=1400 audit(2000001317.250:23614): avc: denied { perfmon } for pid=31898 comm="syz.2.7375" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1736.358348][ T28] audit: type=1400 audit(2000001317.250:23615): avc: denied { kernel } for pid=31898 comm="syz.2.7375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1736.499415][T31918] loop2: detected capacity change from 0 to 4096 [ 1736.509409][T31918] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1736.704962][T31918] EXT4-fs (loop2): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 1736.764118][T31925] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7382'. [ 1736.960024][T31918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1737.119906][T31703] IPVS: starting estimator thread 0... [ 1737.178432][T31933] FAULT_INJECTION: forcing a failure. [ 1737.178432][T31933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1737.209687][T31933] CPU: 1 UID: 0 PID: 31933 Comm: syz.0.7383 Tainted: G W syzkaller #0 PREEMPT(full) [ 1737.209733][T31933] Tainted: [W]=WARN [ 1737.209742][T31933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1737.209758][T31933] Call Trace: [ 1737.209765][T31933] [ 1737.209834][T31933] __dump_stack+0x1d/0x30 [ 1737.209866][T31933] dump_stack_lvl+0x95/0xd0 [ 1737.209895][T31933] dump_stack+0x15/0x1b [ 1737.209923][T31933] should_fail_ex+0x263/0x280 [ 1737.209970][T31933] should_fail+0xb/0x20 [ 1737.210035][T31933] should_fail_usercopy+0x1a/0x20 [ 1737.210078][T31933] strncpy_from_user+0x27/0x250 [ 1737.210159][T31933] ? kmem_cache_alloc_noprof+0x18c/0x3f0 [ 1737.210208][T31933] do_getname+0x59/0x1c0 [ 1737.210298][T31933] getname_flags+0x1d/0x30 [ 1737.210323][T31933] do_sys_openat2+0x60/0x130 [ 1737.210358][T31933] __x64_sys_openat+0xf2/0x120 [ 1737.210393][T31933] x64_sys_call+0x1e39/0x3020 [ 1737.210505][T31933] do_syscall_64+0x12c/0x3b0 [ 1737.210560][T31933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1737.210591][T31933] RIP: 0033:0x7efd2ec5d60e [ 1737.210612][T31933] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1737.210642][T31933] RSP: 002b:00007efd2d6eeb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1737.210719][T31933] RAX: ffffffffffffffda RBX: 00007efd2d6ef6c0 RCX: 00007efd2ec5d60e [ 1737.210736][T31933] RDX: 0000000000000002 RSI: 00007efd2d6eec00 RDI: ffffffffffffff9c [ 1737.210828][T31933] RBP: 00007efd2d6ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1737.210843][T31933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1737.210858][T31933] R13: 00007efd2ef16038 R14: 00007efd2ef15fa0 R15: 00007ffd1c0a8d38 [ 1737.210882][T31933] [ 1737.349300][T31929] IPVS: using max 2304 ests per chain, 115200 per kthread [ 1737.446258][T31935] loop1: detected capacity change from 0 to 1024 [ 1737.456906][T31937] FAULT_INJECTION: forcing a failure. [ 1737.456906][T31937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1737.475569][T31935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1737.482195][T27205] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1737.536809][T31934] xfrm0 speed is unknown, defaulting to 1000 [ 1737.568017][T31941] loop0: detected capacity change from 0 to 1024 [ 1737.578364][T31937] CPU: 0 UID: 0 PID: 31937 Comm: syz.8.7387 Tainted: G W syzkaller #0 PREEMPT(full) [ 1737.578405][T31937] Tainted: [W]=WARN [ 1737.578415][T31937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1737.578432][T31937] Call Trace: [ 1737.578441][T31937] [ 1737.578451][T31937] __dump_stack+0x1d/0x30 [ 1737.578502][T31937] dump_stack_lvl+0x95/0xd0 [ 1737.578531][T31937] dump_stack+0x15/0x1b [ 1737.578552][T31937] should_fail_ex+0x263/0x280 [ 1737.578585][T31937] should_fail+0xb/0x20 [ 1737.578621][T31937] should_fail_usercopy+0x1a/0x20 [ 1737.578721][T31937] strncpy_from_user+0x27/0x250 [ 1737.578779][T31937] ? __kmalloc_cache_noprof+0x18a/0x400 [ 1737.578910][T31937] __se_sys_memfd_create+0x20f/0x3b0 [ 1737.579007][T31937] __x64_sys_memfd_create+0x31/0x40 [ 1737.579066][T31937] x64_sys_call+0x1f22/0x3020 [ 1737.579093][T31937] do_syscall_64+0x12c/0x3b0 [ 1737.579155][T31937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1737.579223][T31937] RIP: 0033:0x7f132e1dcdd9 [ 1737.579241][T31937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1737.579260][T31937] RSP: 002b:00007f132cc36e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1737.579280][T31937] RAX: ffffffffffffffda RBX: 0000000000000597 RCX: 00007f132e1dcdd9 [ 1737.579298][T31937] RDX: 00007f132cc36ee0 RSI: 0000000000000000 RDI: 00007f132e272f49 [ 1737.579317][T31937] RBP: 0000200000000680 R08: 00000000ffffffff R09: 0000000000000000 [ 1737.579335][T31937] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000600 [ 1737.579351][T31937] R13: 00007f132cc36ee0 R14: 00007f132cc36ea0 R15: 0000200000000640 [ 1737.579374][T31937] [ 1737.671121][T31934] xfrm0 speed is unknown, defaulting to 1000 [ 1737.682824][T31939] loop3: detected capacity change from 0 to 1024 [ 1737.770743][T31627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1737.771227][T31941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1737.784521][T31939] EXT4-fs: Ignoring removed mblk_io_submit option [ 1737.799256][T31934] xfrm0 speed is unknown, defaulting to 1000 [ 1737.885779][T29796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1737.896666][T31939] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1737.931281][T31939] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1737.945012][T31944] loop1: detected capacity change from 0 to 4096 [ 1737.956973][T31952] loop8: detected capacity change from 0 to 512 [ 1737.970634][T31944] EXT4-fs: Ignoring removed bh option [ 1738.024719][T31952] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.7392: inode has both inline data and extents flags [ 1738.059355][T31939] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 3: comm syz.3.7385: lblock 3 mapped to illegal pblock 3 (length 3) [ 1738.084646][T31952] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1738.084813][T31952] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.7392: couldn't read orphan inode 15 (err -117) [ 1738.113740][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1738.120268][ C0] EXT4-fs (loop8): initial error at time 2000001319: ext4_orphan_get:1397: inode 15 [ 1738.123450][T31934] infiniband syz0: set active [ 1738.129802][ C0] EXT4-fs (loop8): last error at time 2000001319: ext4_orphan_get:1397: inode 15 [ 1738.134441][T31718] xfrm0 speed is unknown, defaulting to 1000 [ 1738.146384][T31934] infiniband syz0: added xfrm0 [ 1738.150424][T31952] loop8: lost filesystem error report for type 5 error -117 [ 1738.155468][T31952] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1738.176604][T31939] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 1738.193598][T31944] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1738.207654][T31939] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1738.207654][T31939] [ 1738.237527][T31944] EXT4-fs error (device loop1): ext4_empty_dir:3101: inode #12: block 80: comm syz.1.7389: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 1738.265491][T31944] EXT4-fs (loop1): Remounting filesystem read-only [ 1738.272792][T31934] RDS/IB: syz0: added [ 1738.274010][T31944] EXT4-fs warning (device loop1): ext4_empty_dir:3104: inode #12: comm syz.1.7389: directory missing '..' [ 1738.287733][T31934] smc: adding ib device syz0 with port count 1 [ 1738.295520][T31934] smc: ib device syz0 port 1 has pnetid SYZ1 (user defined) [ 1738.303261][T31703] xfrm0 speed is unknown, defaulting to 1000 [ 1738.311644][T31934] xfrm0 speed is unknown, defaulting to 1000 [ 1738.421618][T26502] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1738.548685][T31971] xfrm0 speed is unknown, defaulting to 1000 [ 1738.579389][T28929] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 1738.607385][T28929] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 1738.623607][T28929] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1738.623607][T28929] [ 1738.652439][T31962] xfrm0 speed is unknown, defaulting to 1000 [ 1738.710884][T31987] loop8: detected capacity change from 0 to 256 [ 1738.822676][T31934] xfrm0 speed is unknown, defaulting to 1000 [ 1738.912570][T31961] loop2: detected capacity change from 0 to 512 [ 1738.945272][T31993] xt_NFQUEUE: number of total queues is 0 [ 1739.288897][T31934] xfrm0 speed is unknown, defaulting to 1000 [ 1739.331786][T31961] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1739.432880][T31961] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1739.638184][T32005] netlink: 'syz.8.7396': attribute type 9 has an invalid length. [ 1739.683899][T31934] xfrm0 speed is unknown, defaulting to 1000 [ 1739.844387][T32020] loop0: detected capacity change from 0 to 512 [ 1739.862784][T31934] xfrm0 speed is unknown, defaulting to 1000 [ 1739.879128][T32020] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.7400: inode has both inline data and extents flags [ 1739.910153][T32020] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1739.910484][T32020] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.7400: couldn't read orphan inode 15 (err -117) [ 1739.919746][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1739.919779][ C0] EXT4-fs (loop0): initial error at time 2000001321: ext4_orphan_get:1397: inode 15 [ 1739.919819][ C0] EXT4-fs (loop0): last error at time 2000001321: ext4_orphan_get:1397: inode 15 [ 1739.956784][T32020] loop0: lost filesystem error report for type 5 error -117 [ 1739.959303][T32020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1740.020565][T32005] xfrm0 speed is unknown, defaulting to 1000 [ 1740.074638][T29796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1740.155341][T28977] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1740.173229][T28977] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1740.273184][T32045] EXT4-fs: Ignoring removed oldalloc option [ 1740.312797][T32045] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1740.343216][T32045] EXT4-fs (loop0): 1 truncate cleaned up [ 1740.349642][T32045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1740.363194][T32045] FAULT_INJECTION: forcing a failure. [ 1740.363194][T32045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1740.376479][T32045] CPU: 0 UID: 0 PID: 32045 Comm: syz.0.7403 Tainted: G W syzkaller #0 PREEMPT(full) [ 1740.376516][T32045] Tainted: [W]=WARN [ 1740.376580][T32045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1740.376655][T32045] Call Trace: [ 1740.376663][T32045] [ 1740.376672][T32045] __dump_stack+0x1d/0x30 [ 1740.376702][T32045] dump_stack_lvl+0x95/0xd0 [ 1740.376727][T32045] dump_stack+0x15/0x1b [ 1740.376818][T32045] should_fail_ex+0x263/0x280 [ 1740.376852][T32045] should_fail+0xb/0x20 [ 1740.376931][T32045] should_fail_usercopy+0x1a/0x20 [ 1740.376966][T32045] _copy_to_user+0x20/0xa0 [ 1740.377083][T32045] simple_read_from_buffer+0xb5/0x130 [ 1740.377126][T32045] proc_fail_nth_read+0x10e/0x150 [ 1740.377228][T32045] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1740.377266][T32045] vfs_read+0x1ab/0x7f0 [ 1740.377296][T32045] ? __rcu_read_unlock+0x4e/0x70 [ 1740.377320][T32045] ? __fget_files+0x184/0x1c0 [ 1740.377361][T32045] ? mutex_lock+0x57/0x90 [ 1740.377392][T32045] ksys_read+0xdc/0x1a0 [ 1740.377451][T32045] __x64_sys_read+0x40/0x50 [ 1740.377501][T32045] x64_sys_call+0x2886/0x3020 [ 1740.377537][T32045] do_syscall_64+0x12c/0x3b0 [ 1740.377586][T32045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1740.377659][T32045] RIP: 0033:0x7efd2ec5d60e [ 1740.377685][T32045] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1740.377709][T32045] RSP: 002b:00007efd2d6eefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1740.377785][T32045] RAX: ffffffffffffffda RBX: 00007efd2d6ef6c0 RCX: 00007efd2ec5d60e [ 1740.377801][T32045] RDX: 000000000000000f RSI: 00007efd2d6ef0a0 RDI: 0000000000000005 [ 1740.377817][T32045] RBP: 00007efd2d6ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1740.377830][T32045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1740.377845][T32045] R13: 00007efd2ef16038 R14: 00007efd2ef15fa0 R15: 00007ffd1c0a8d38 [ 1740.377871][T32045] [ 1740.627375][T29796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1740.858637][T32073] set_capacity_and_notify: 2 callbacks suppressed [ 1740.858660][T32073] loop3: detected capacity change from 0 to 256 [ 1740.995331][ T28] kauditd_printk_skb: 72 callbacks suppressed [ 1740.995448][ T28] audit: type=1400 audit(2000001322.440:23688): avc: denied { audit_write } for pid=32060 comm="syz.0.7405" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1741.695525][T32098] xt_NFQUEUE: number of total queues is 0 [ 1741.833042][ T28] audit: type=1107 audit(2000001322.460:23689): pid=32060 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='鋽09C嗶駄3a鍯梃篣Z衔簓STS}n瞴n隞嵾rA殷f鬆贁I' [ 1742.072275][T31627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1742.144639][ T28] audit: type=1400 audit(2000001323.590:23690): avc: denied { write } for pid=32112 comm="syz.3.7411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1742.183625][T32115] loop8: detected capacity change from 0 to 1024 [ 1742.215570][T32117] netlink: 'syz.1.7410': attribute type 1 has an invalid length. [ 1742.217558][T32113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7411'. [ 1742.235650][ T28] audit: type=1400 audit(2000001323.590:23691): avc: denied { read } for pid=32112 comm="syz.3.7411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1742.258772][T32117] 8021q: VLANs not supported on nlmon0 [ 1742.277910][T32115] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1742.291122][ T28] audit: type=1400 audit(2000001323.650:23693): avc: denied { bind } for pid=32116 comm="syz.1.7410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1742.314106][T32115] EXT4-fs (loop8): Online resizing not supported with bigalloc [ 1742.323409][T32123] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1742.325332][T32115] FAULT_INJECTION: forcing a failure. [ 1742.325332][T32115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1742.344828][ T28] audit: type=1400 audit(2000001323.650:23694): avc: denied { node_bind } for pid=32116 comm="syz.1.7410" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1742.356995][T32115] CPU: 0 UID: 0 PID: 32115 Comm: syz.8.7413 Tainted: G W syzkaller #0 PREEMPT(full) [ 1742.357124][T32115] Tainted: [W]=WARN [ 1742.357147][T32115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1742.357192][T32115] Call Trace: [ 1742.357216][T32115] [ 1742.357241][T32115] __dump_stack+0x1d/0x30 [ 1742.357370][T32115] dump_stack_lvl+0x95/0xd0 [ 1742.357454][T32115] dump_stack+0x15/0x1b [ 1742.357560][T32115] should_fail_ex+0x263/0x280 [ 1742.357718][T32115] should_fail+0xb/0x20 [ 1742.357810][T32115] should_fail_usercopy+0x1a/0x20 [ 1742.357919][T32115] _copy_to_user+0x20/0xa0 [ 1742.358149][T32115] simple_read_from_buffer+0xb5/0x130 [ 1742.358281][T32115] proc_fail_nth_read+0x10e/0x150 [ 1742.358390][T32115] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1742.358497][T32115] vfs_read+0x1ab/0x7f0 [ 1742.358694][T32115] ? __rcu_read_unlock+0x4e/0x70 [ 1742.358770][T32115] ? __fget_files+0x184/0x1c0 [ 1742.358886][T32115] ? mutex_lock+0x57/0x90 [ 1742.358908][T32115] ksys_read+0xdc/0x1a0 [ 1742.359027][T32115] __x64_sys_read+0x40/0x50 [ 1742.359177][T32115] x64_sys_call+0x2886/0x3020 [ 1742.359307][T32115] do_syscall_64+0x12c/0x3b0 [ 1742.359417][T32115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1742.359514][T32115] RIP: 0033:0x7f132e19d60e [ 1742.359572][T32115] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1742.359654][T32115] RSP: 002b:00007f132cc36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1742.359804][T32115] RAX: ffffffffffffffda RBX: 00007f132cc376c0 RCX: 00007f132e19d60e [ 1742.359857][T32115] RDX: 000000000000000f RSI: 00007f132cc370a0 RDI: 0000000000000005 [ 1742.359921][T32115] RBP: 00007f132cc37090 R08: 0000000000000000 R09: 0000000000000000 [ 1742.359976][T32115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1742.360019][T32115] R13: 00007f132e456038 R14: 00007f132e455fa0 R15: 00007ffc83fa7f98 [ 1742.360112][T32115] [ 1742.383199][T32119] loop0: detected capacity change from 0 to 512 [ 1742.389993][ T28] audit: type=1400 audit(2000001323.650:23695): avc: denied { connect } for pid=32116 comm="syz.1.7410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1742.390021][ T28] audit: type=1400 audit(2000001323.650:23696): avc: denied { write } for pid=32116 comm="syz.1.7410" laddr=::1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1742.463538][T32119] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1742.483862][ T28] audit: type=1400 audit(2000001323.640:23692): avc: denied { create } for pid=32112 comm="syz.3.7411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1742.665389][T32119] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1742.815050][T26502] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1742.824950][ T28] audit: type=1400 audit(2000001323.650:23697): avc: denied { ioctl } for pid=32112 comm="syz.3.7411" path="socket:[109849]" dev="sockfs" ino=109849 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1742.827119][T32119] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.7412: Failed to acquire dquot type 1 [ 1742.849974][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1742.849995][ C0] EXT4-fs (loop0): initial error at time 2000001324: ext4_mb_generate_buddy:1317 [ 1742.850021][ C0] EXT4-fs (loop0): last error at time 2000001324: ext4_mb_generate_buddy:1317 [ 1742.994322][T32119] loop0: lost filesystem error report for type 5 error -28 [ 1742.996768][T32119] EXT4-fs (loop0): 1 truncate cleaned up [ 1743.020919][T32119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1743.165595][T32119] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.7412: Failed to acquire dquot type 1 [ 1743.210331][T32140] loop1: detected capacity change from 0 to 512 [ 1743.235099][T32140] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1743.261525][T32119] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.7412: iget: bad i_size value: 360287970189639690 [ 1743.275874][T32140] FAULT_INJECTION: forcing a failure. [ 1743.275874][T32140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1743.299261][T32119] EXT4-fs: Ignoring removed bh option [ 1743.305724][T32140] CPU: 1 UID: 0 PID: 32140 Comm: syz.1.7417 Tainted: G W syzkaller #0 PREEMPT(full) [ 1743.305839][T32140] Tainted: [W]=WARN [ 1743.305879][T32140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1743.305893][T32140] Call Trace: [ 1743.305901][T32140] [ 1743.305911][T32140] __dump_stack+0x1d/0x30 [ 1743.305943][T32140] dump_stack_lvl+0x95/0xd0 [ 1743.305987][T32140] dump_stack+0x15/0x1b [ 1743.306007][T32140] should_fail_ex+0x263/0x280 [ 1743.306045][T32140] should_fail+0xb/0x20 [ 1743.306077][T32140] should_fail_usercopy+0x1a/0x20 [ 1743.306184][T32140] strncpy_from_user+0x27/0x250 [ 1743.306209][T32140] ? kmem_cache_alloc_noprof+0x18c/0x3f0 [ 1743.306262][T32140] do_getname+0x59/0x1c0 [ 1743.306290][T32140] __se_sys_mkdirat+0x21/0xf0 [ 1743.306332][T32140] __x64_sys_mkdirat+0x43/0x50 [ 1743.306364][T32140] x64_sys_call+0x2c4e/0x3020 [ 1743.306390][T32140] do_syscall_64+0x12c/0x3b0 [ 1743.306454][T32140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1743.306560][T32140] RIP: 0033:0x7fe144d1cdd9 [ 1743.306583][T32140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1743.306627][T32140] RSP: 002b:00007fe14376f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1743.306728][T32140] RAX: ffffffffffffffda RBX: 00007fe144f95fa0 RCX: 00007fe144d1cdd9 [ 1743.306747][T32140] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 1743.306763][T32140] RBP: 00007fe14376f090 R08: 0000000000000000 R09: 0000000000000000 [ 1743.306778][T32140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1743.306796][T32140] R13: 00007fe144f96038 R14: 00007fe144f95fa0 R15: 00007ffe10a6dab8 [ 1743.306822][T32140] [ 1743.506784][T29796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1743.516047][T10457] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1743.665116][T32150] loop8: detected capacity change from 0 to 256 [ 1743.706028][T32143] loop3: detected capacity change from 0 to 512 [ 1743.725819][T32148] loop0: detected capacity change from 0 to 8192 [ 1743.797122][T32143] EXT4-fs: Ignoring removed oldalloc option [ 1743.814106][T32145] loop1: detected capacity change from 0 to 8192 [ 1743.837024][T32143] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1743.851020][T32148] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1743.879253][T32143] EXT4-fs (loop3): 1 truncate cleaned up [ 1743.934625][T32143] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1743.951179][T32155] xt_NFQUEUE: number of total queues is 0 [ 1744.259000][T32148] FAT-fs (loop0): error, clusters badly computed (1 != 0) [ 1744.343813][T32148] FAT-fs (loop0): Filesystem has been set read-only [ 1744.415061][T32156] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7419'. [ 1744.530172][T28977] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1744.579988][T32159] netlink: 83992 bytes leftover after parsing attributes in process `syz.8.7425'. [ 1744.633303][T32165] xt_TCPMSS: Only works on TCP SYN packets [ 1744.656927][T32159] netlink: zone id is out of range [ 1744.679156][T32159] netlink: zone id is out of range [ 1744.719834][T32169] loop1: detected capacity change from 0 to 512 [ 1744.754351][T32159] netlink: set zone limit has 8 unknown bytes [ 1744.769077][T31705] xfrm0 speed is unknown, defaulting to 1000 [ 1744.772964][T32169] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1744.901899][T32174] loop0: detected capacity change from 0 to 1024 [ 1744.934267][T32174] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1745.267786][T32092] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1745.327115][T32092] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1745.342582][T32165] loop8: p1 < > p3 < p5 p6 > p4 < > [ 1745.358099][T32185] EXT4-fs (loop0): Online resizing not supported with bigalloc [ 1745.365737][T32165] loop8: partition table partially beyond EOD, truncated [ 1745.401256][T32165] loop8: p4 start 1426063360 is beyond EOD, truncated [ 1745.408725][T32186] FAULT_INJECTION: forcing a failure. [ 1745.408725][T32186] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1745.433282][T32092] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1745.434569][T32165] loop8: p6 start 270080 is beyond EOD, [ 1745.446733][T32186] CPU: 0 UID: 0 PID: 32186 Comm: syz.3.7430 Tainted: G W syzkaller #0 PREEMPT(full) [ 1745.446777][T32186] Tainted: [W]=WARN [ 1745.446786][T32186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1745.446803][T32186] Call Trace: [ 1745.446816][T32186] [ 1745.446825][T32186] __dump_stack+0x1d/0x30 [ 1745.446878][T32186] dump_stack_lvl+0x95/0xd0 [ 1745.446901][T32186] dump_stack+0x15/0x1b [ 1745.446996][T32186] should_fail_ex+0x263/0x280 [ 1745.447030][T32186] should_fail_alloc_page+0xf2/0x100 [ 1745.447077][T32186] __alloc_frozen_pages_noprof+0x108/0x350 [ 1745.447179][T32186] alloc_pages_mpol+0xb3/0x260 [ 1745.447214][T32186] alloc_pages_noprof+0x8f/0x140 [ 1745.447247][T32186] pte_alloc_one+0x1c/0xc0 [ 1745.447291][T32186] handle_mm_fault+0x1682/0x2e70 [ 1745.447341][T32186] ? __pfx_arena_vm_fault+0x10/0x10 [ 1745.447377][T32186] ? lock_mm_and_find_vma+0x8b/0x3d0 [ 1745.447419][T32186] do_user_addr_fault+0x3fd/0x1050 [ 1745.447491][T32186] ? kstrtouint_from_user+0xa8/0xf0 [ 1745.447572][T32186] exc_page_fault+0x62/0xa0 [ 1745.447595][T32186] asm_exc_page_fault+0x26/0x30 [ 1745.447725][T32186] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 1745.447850][T32186] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d 1e 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1745.447870][T32186] RSP: 0018:ffffc90002f77e38 EFLAGS: 00050212 [ 1745.447892][T32186] RAX: ffff8881052b70f8 RBX: 0000000000000010 RCX: 0000000000000010 [ 1745.447910][T32186] RDX: 0000000000000001 RSI: 0000200000003700 RDI: ffffc90002f77e60 [ 1745.447930][T32186] RBP: 0000000000000000 R08: 00000000000009d8 R09: 0000000000000000 [ 1745.447981][T32186] R10: 0001c90002f77e60 R11: 0001c90002f77e6f R12: ffffc90002f77e60 [ 1745.447997][T32186] R13: ffff8881052b6600 R14: ffffc90002f77e60 R15: 0000200000003700 [ 1745.448019][T32186] _copy_from_user+0x6f/0xb0 [ 1745.448056][T32186] get_timespec64+0x4c/0x100 [ 1745.448086][T32186] __x64_sys_recvmmsg+0xa3/0x170 [ 1745.448125][T32186] x64_sys_call+0x80f/0x3020 [ 1745.448167][T32186] do_syscall_64+0x12c/0x3b0 [ 1745.448201][T32186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1745.448224][T32186] RIP: 0033:0x7fca75aacdd9 [ 1745.448338][T32186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1745.448430][T32186] RSP: 002b:00007fca744bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1745.448456][T32186] RAX: ffffffffffffffda RBX: 00007fca75d26180 RCX: 00007fca75aacdd9 [ 1745.448474][T32186] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 1745.448492][T32186] RBP: 00007fca744bd090 R08: 0000200000003700 R09: 0000000000000000 [ 1745.448510][T32186] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 1745.448528][T32186] R13: 00007fca75d26218 R14: 00007fca75d26180 R15: 00007fff613f1478 [ 1745.448625][T32186] [ 1745.533869][T32165] truncated [ 1745.735395][T32077] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1745.841021][T32092] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1745.854290][T29796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1745.868076][T32153] udevd[32153]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1745.886293][T31916] udevd[31916]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 1745.900609][T31917] udevd[31917]: inotify_add_watch(7, /dev/loop8p5, 10) failed: No such file or directory [ 1745.917866][T32088] tipc: Subscription rejected, illegal request [ 1745.967956][T32196] set_capacity_and_notify: 1 callbacks suppressed [ 1745.967977][T32196] loop0: detected capacity change from 0 to 256 [ 1746.038180][ T28] kauditd_printk_skb: 126 callbacks suppressed [ 1746.038199][ T28] audit: type=1400 audit(2000001327.480:23818): avc: denied { search } for pid=3023 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1746.084740][T32092] bridge_slave_1: left allmulticast mode [ 1746.105144][T32092] bridge_slave_1: left promiscuous mode [ 1746.128962][T32092] bridge0: port 2(bridge_slave_1) entered disabled state [ 1746.173470][T32092] bridge_slave_0: left allmulticast mode [ 1746.201474][ T28] audit: type=1400 audit(2000001327.510:23819): avc: denied { search } for pid=3023 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1746.223629][ T28] audit: type=1400 audit(2000001327.510:23820): avc: denied { search } for pid=3023 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1746.238078][T32092] bridge_slave_0: left promiscuous mode [ 1746.245641][ T28] audit: type=1400 audit(2000001327.510:23821): avc: denied { read } for pid=3023 comm="dhcpcd" name="n93" dev="tmpfs" ino=52189 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1746.317582][ T28] audit: type=1400 audit(2000001327.510:23822): avc: denied { open } for pid=3023 comm="dhcpcd" path="/run/udev/data/n93" dev="tmpfs" ino=52189 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1746.347419][T32205] xt_NFQUEUE: number of total queues is 0 [ 1746.430706][ T28] audit: type=1400 audit(2000001327.510:23823): avc: denied { getattr } for pid=3023 comm="dhcpcd" path="/run/udev/data/n93" dev="tmpfs" ino=52189 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1746.603627][ T28] audit: type=1400 audit(2000001327.750:23824): avc: denied { mounton } for pid=32203 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1746.833008][T32092] bridge0: port 1(bridge_slave_0) entered disabled state [ 1747.026504][T32092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1747.042824][T32092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1747.058297][T32092] bond0 (unregistering): Released all slaves [ 1747.151333][T32208] xfrm0 speed is unknown, defaulting to 1000 [ 1747.182830][ T28] audit: type=1400 audit(2000001328.620:23825): avc: denied { read } for pid=32223 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1747.239001][T32092] hsr_slave_0: left promiscuous mode [ 1747.254459][T32092] hsr_slave_1: left promiscuous mode [ 1747.261676][ T28] audit: type=1400 audit(2000001328.620:23826): avc: denied { read open } for pid=32223 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1747.294181][T32092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1747.316719][T32092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1747.341253][T32092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1747.355834][ T28] audit: type=1400 audit(2000001328.620:23827): avc: denied { getattr } for pid=32223 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1747.383614][T32092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1747.421367][T32092] veth1_macvtap: left promiscuous mode [ 1747.427061][T32092] veth0_macvtap: left promiscuous mode [ 1747.448971][T32092] veth1_vlan: left promiscuous mode [ 1747.467427][T32092] veth0_vlan: left promiscuous mode [ 1747.473345][T32212] FAULT_INJECTION: forcing a failure. [ 1747.473345][T32212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1747.537507][T32212] CPU: 0 UID: 0 PID: 32212 Comm: syz.0.7437 Tainted: G W syzkaller #0 PREEMPT(full) [ 1747.537545][T32212] Tainted: [W]=WARN [ 1747.537553][T32212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1747.537619][T32212] Call Trace: [ 1747.537625][T32212] [ 1747.537633][T32212] __dump_stack+0x1d/0x30 [ 1747.537710][T32212] dump_stack_lvl+0x95/0xd0 [ 1747.537733][T32212] dump_stack+0x15/0x1b [ 1747.537754][T32212] should_fail_ex+0x263/0x280 [ 1747.537785][T32212] should_fail+0xb/0x20 [ 1747.537812][T32212] should_fail_usercopy+0x1a/0x20 [ 1747.537960][T32212] _copy_to_user+0x20/0xa0 [ 1747.537995][T32212] simple_read_from_buffer+0xb5/0x130 [ 1747.538034][T32212] proc_fail_nth_read+0x10e/0x150 [ 1747.538142][T32212] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1747.538174][T32212] vfs_read+0x1ab/0x7f0 [ 1747.538204][T32212] ? __rcu_read_unlock+0x4e/0x70 [ 1747.538284][T32212] ? __fget_files+0x184/0x1c0 [ 1747.538396][T32212] ? mutex_lock+0x57/0x90 [ 1747.538419][T32212] ksys_read+0xdc/0x1a0 [ 1747.538452][T32212] __x64_sys_read+0x40/0x50 [ 1747.538503][T32212] x64_sys_call+0x2886/0x3020 [ 1747.538531][T32212] do_syscall_64+0x12c/0x3b0 [ 1747.538564][T32212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1747.538637][T32212] RIP: 0033:0x7efd2ec5d60e [ 1747.538655][T32212] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1747.538738][T32212] RSP: 002b:00007efd2d6eefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1747.538759][T32212] RAX: ffffffffffffffda RBX: 00007efd2d6ef6c0 RCX: 00007efd2ec5d60e [ 1747.538774][T32212] RDX: 000000000000000f RSI: 00007efd2d6ef0a0 RDI: 0000000000000004 [ 1747.538801][T32212] RBP: 00007efd2d6ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1747.538815][T32212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1747.538828][T32212] R13: 00007efd2ef16038 R14: 00007efd2ef15fa0 R15: 00007ffd1c0a8d38 [ 1747.538851][T32212] [ 1747.769174][T32248] FAULT_INJECTION: forcing a failure. [ 1747.769174][T32248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1747.797263][T27205] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1747.813924][T32248] CPU: 1 UID: 0 PID: 32248 Comm: syz.3.7441 Tainted: G W syzkaller #0 PREEMPT(full) [ 1747.813993][T32248] Tainted: [W]=WARN [ 1747.814001][T32248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1747.814016][T32248] Call Trace: [ 1747.814066][T32248] [ 1747.814075][T32248] __dump_stack+0x1d/0x30 [ 1747.814108][T32248] dump_stack_lvl+0x95/0xd0 [ 1747.814145][T32248] dump_stack+0x15/0x1b [ 1747.814171][T32248] should_fail_ex+0x263/0x280 [ 1747.814210][T32248] should_fail+0xb/0x20 [ 1747.814316][T32248] should_fail_usercopy+0x1a/0x20 [ 1747.814370][T32248] _copy_to_user+0x20/0xa0 [ 1747.814413][T32248] simple_read_from_buffer+0xb5/0x130 [ 1747.814497][T32248] proc_fail_nth_read+0x10e/0x150 [ 1747.814612][T32248] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1747.814650][T32248] vfs_read+0x1ab/0x7f0 [ 1747.814685][T32248] ? __rcu_read_unlock+0x4e/0x70 [ 1747.814778][T32248] ? __fget_files+0x184/0x1c0 [ 1747.814805][T32248] ? mutex_lock+0x57/0x90 [ 1747.814904][T32248] ksys_read+0xdc/0x1a0 [ 1747.814988][T32248] __x64_sys_read+0x40/0x50 [ 1747.815097][T32248] x64_sys_call+0x2886/0x3020 [ 1747.815135][T32248] do_syscall_64+0x12c/0x3b0 [ 1747.815196][T32248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1747.815226][T32248] RIP: 0033:0x7fca75a6d60e [ 1747.815248][T32248] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1747.815276][T32248] RSP: 002b:00007fca744fefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1747.815322][T32248] RAX: ffffffffffffffda RBX: 00007fca744ff6c0 RCX: 00007fca75a6d60e [ 1747.815341][T32248] RDX: 000000000000000f RSI: 00007fca744ff0a0 RDI: 0000000000000006 [ 1747.815359][T32248] RBP: 00007fca744ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1747.815375][T32248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1747.815392][T32248] R13: 00007fca75d26038 R14: 00007fca75d25fa0 R15: 00007fff613f1478 [ 1747.815418][T32248] [ 1748.098496][T32252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7444'. [ 1748.204135][T32092] team0 (unregistering): Port device team_slave_1 removed [ 1748.218458][T32092] team0 (unregistering): Port device team_slave_0 removed [ 1748.258207][T32260] FAULT_INJECTION: forcing a failure. [ 1748.258207][T32260] name failslab, interval 1, probability 0, space 0, times 0 [ 1748.272289][T32260] CPU: 1 UID: 0 PID: 32260 Comm: syz.3.7447 Tainted: G W syzkaller #0 PREEMPT(full) [ 1748.272328][T32260] Tainted: [W]=WARN [ 1748.272389][T32260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1748.272402][T32260] Call Trace: [ 1748.272412][T32260] [ 1748.272421][T32260] __dump_stack+0x1d/0x30 [ 1748.272449][T32260] dump_stack_lvl+0x95/0xd0 [ 1748.272478][T32260] dump_stack+0x15/0x1b [ 1748.272531][T32260] should_fail_ex+0x263/0x280 [ 1748.272560][T32260] should_failslab+0x8c/0xb0 [ 1748.272596][T32260] __kmalloc_cache_node_noprof+0x6b/0x470 [ 1748.272740][T32260] ? avc_has_perm_noaudit+0xab/0x130 [ 1748.272776][T32260] ? __get_vm_area_node+0x106/0x1d0 [ 1748.272864][T32260] __get_vm_area_node+0x106/0x1d0 [ 1748.272903][T32260] __vmalloc_node_range_noprof+0x25a/0x11c0 [ 1748.272981][T32260] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 1748.273023][T32260] ? cred_has_capability+0x224/0x2a0 [ 1748.273059][T32260] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 1748.273155][T32260] __vmalloc_noprof+0xa4/0xf0 [ 1748.273182][T32260] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 1748.273221][T32260] bpf_prog_alloc_no_stats+0x47/0x390 [ 1748.273247][T32260] ? bpf_prog_alloc+0x2a/0x150 [ 1748.273270][T32260] bpf_prog_alloc+0x3c/0x150 [ 1748.273298][T32260] bpf_prog_load+0x50d/0x1030 [ 1748.273387][T32260] ? security_bpf+0x2b/0x90 [ 1748.273410][T32260] __sys_bpf+0x505/0x7e0 [ 1748.273451][T32260] __x64_sys_bpf+0x41/0x50 [ 1748.273528][T32260] x64_sys_call+0x10cb/0x3020 [ 1748.273559][T32260] do_syscall_64+0x12c/0x3b0 [ 1748.273592][T32260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1748.273615][T32260] RIP: 0033:0x7fca75aacdd9 [ 1748.273644][T32260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1748.273665][T32260] RSP: 002b:00007fca744ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1748.273685][T32260] RAX: ffffffffffffffda RBX: 00007fca75d25fa0 RCX: 00007fca75aacdd9 [ 1748.273699][T32260] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 1748.273712][T32260] RBP: 00007fca744ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1748.273774][T32260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1748.273791][T32260] R13: 00007fca75d26038 R14: 00007fca75d25fa0 R15: 00007fff613f1478 [ 1748.273817][T32260] [ 1748.379814][T32263] loop2: detected capacity change from 0 to 164 [ 1748.400151][T32260] syz.3.7447: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 1748.423902][T32203] xfrm0 speed is unknown, defaulting to 1000 [ 1748.429972][T32263] iso9660: Unknown parameter '' [ 1748.466547][T32260] ,cpuset= [ 1748.515378][ T3023] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1748.529262][T32260] /,mems_allowed=0 [ 1748.551768][T32260] CPU: 1 UID: 0 PID: 32260 Comm: syz.3.7447 Tainted: G W syzkaller #0 PREEMPT(full) [ 1748.551824][T32260] Tainted: [W]=WARN [ 1748.551831][T32260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1748.551844][T32260] Call Trace: [ 1748.551850][T32260] [ 1748.551857][T32260] __dump_stack+0x1d/0x30 [ 1748.551883][T32260] dump_stack_lvl+0x95/0xd0 [ 1748.551906][T32260] dump_stack+0x15/0x1b [ 1748.551935][T32260] warn_alloc+0x145/0x1c0 [ 1748.552075][T32260] __vmalloc_node_range_noprof+0x27f/0x11c0 [ 1748.552113][T32260] ? cred_has_capability+0x224/0x2a0 [ 1748.552200][T32260] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 1748.552237][T32260] __vmalloc_noprof+0xa4/0xf0 [ 1748.552263][T32260] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 1748.552297][T32260] bpf_prog_alloc_no_stats+0x47/0x390 [ 1748.552442][T32260] ? bpf_prog_alloc+0x2a/0x150 [ 1748.552466][T32260] bpf_prog_alloc+0x3c/0x150 [ 1748.552491][T32260] bpf_prog_load+0x50d/0x1030 [ 1748.552536][T32260] ? security_bpf+0x2b/0x90 [ 1748.552591][T32260] __sys_bpf+0x505/0x7e0 [ 1748.552623][T32260] __x64_sys_bpf+0x41/0x50 [ 1748.552650][T32260] x64_sys_call+0x10cb/0x3020 [ 1748.552761][T32260] do_syscall_64+0x12c/0x3b0 [ 1748.552799][T32260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1748.552830][T32260] RIP: 0033:0x7fca75aacdd9 [ 1748.552884][T32260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1748.552926][T32260] RSP: 002b:00007fca744ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1748.552979][T32260] RAX: ffffffffffffffda RBX: 00007fca75d25fa0 RCX: 00007fca75aacdd9 [ 1748.553050][T32260] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 1748.553064][T32260] RBP: 00007fca744ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1748.553129][T32260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1748.553189][T32260] R13: 00007fca75d26038 R14: 00007fca75d25fa0 R15: 00007fff613f1478 [ 1748.553215][T32260] [ 1748.553501][T32260] Mem-Info: [ 1748.593088][T32258] team0: Port device bridge2 added [ 1748.594285][T32260] active_anon:8352 inactive_anon:0 isolated_anon:0 [ 1748.594285][T32260] active_file:23930 inactive_file:4497 isolated_file:0 [ 1748.594285][T32260] unevictable:0 dirty:106 writeback:0 [ 1748.594285][T32260] slab_reclaimable:4065 slab_unreclaimable:57463 [ 1748.594285][T32260] mapped:32015 shmem:290 pagetables:5773 [ 1748.594285][T32260] sec_pagetables:0 bounce:0 [ 1748.594285][T32260] kernel_misc_reclaimable:0 [ 1748.594285][T32260] free:1823471 free_pcp:13955 free_cma:0 [ 1748.837656][T32260] Node 0 active_anon:33092kB inactive_anon:0kB active_file:95720kB inactive_file:17924kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120012kB dirty:512kB writeback:0kB shmem:1056kB kernel_stack:4576kB pagetables:23012kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1748.871995][T32260] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1748.902265][T32260] lowmem_reserve[]: 0 2878 7857 7857 [ 1748.930068][T32260] Node 0 DMA32 free:2944532kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948056kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 1748.961854][T32260] lowmem_reserve[]: 0 0 4978 4978 [ 1748.967282][T32260] Node 0 Normal free:4337936kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33324kB inactive_anon:0kB active_file:95720kB inactive_file:17924kB unevictable:0kB writepending:512kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:48104kB local_pcp:27236kB free_cma:0kB [ 1749.002711][T32260] lowmem_reserve[]: 0 0 0 0 [ 1749.007448][T32260] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1749.033396][T32276] loop2: detected capacity change from 0 to 2048 [ 1749.048177][T32274] FAULT_INJECTION: forcing a failure. [ 1749.048177][T32274] name failslab, interval 1, probability 0, space 0, times 0 [ 1749.071491][T32260] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 2*64kB (M) 3*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944532kB [ 1749.074109][T32274] CPU: 1 UID: 0 PID: 32274 Comm: syz.0.7449 Tainted: G W syzkaller #0 PREEMPT(full) [ 1749.074254][T32274] Tainted: [W]=WARN [ 1749.074278][T32274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1749.074327][T32274] Call Trace: [ 1749.074348][T32274] [ 1749.074416][T32274] __dump_stack+0x1d/0x30 [ 1749.074506][T32274] dump_stack_lvl+0x95/0xd0 [ 1749.074605][T32274] dump_stack+0x15/0x1b [ 1749.074676][T32274] should_fail_ex+0x263/0x280 [ 1749.074863][T32274] should_failslab+0x8c/0xb0 [ 1749.075026][T32274] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 1749.075145][T32274] ? __alloc_skb+0x2d6/0x690 [ 1749.075225][T32274] __alloc_skb+0x2d6/0x690 [ 1749.075287][T32274] ? __alloc_skb+0x200/0x690 [ 1749.075401][T32274] netlink_alloc_large_skb+0xbf/0xf0 [ 1749.075480][T32274] netlink_sendmsg+0x40c/0x6f0 [ 1749.075612][T32274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1749.075728][T32274] ____sys_sendmsg+0x563/0x5b0 [ 1749.075824][T32274] ___sys_sendmsg+0x195/0x1e0 [ 1749.075995][T32274] __x64_sys_sendmsg+0xd4/0x160 [ 1749.076123][T32274] x64_sys_call+0x194c/0x3020 [ 1749.076226][T32274] do_syscall_64+0x12c/0x3b0 [ 1749.076381][T32274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1749.076466][T32274] RIP: 0033:0x7efd2ec9cdd9 [ 1749.076552][T32274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1749.076610][T32274] RSP: 002b:00007efd2d6ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1749.076765][T32274] RAX: ffffffffffffffda RBX: 00007efd2ef16090 RCX: 00007efd2ec9cdd9 [ 1749.076818][T32274] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 1749.076926][T32274] RBP: 00007efd2d6ce090 R08: 0000000000000000 R09: 0000000000000000 [ 1749.076970][T32274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1749.077029][T32274] R13: 00007efd2ef16128 R14: 00007efd2ef16090 R15: 00007ffd1c0a8d38 [ 1749.077115][T32274] [ 1749.241458][T32203] bridge0: port 1(bridge_slave_0) entered blocking state [ 1749.247578][T32260] Node 0 [ 1749.273635][T32203] bridge0: port 1(bridge_slave_0) entered disabled state [ 1749.299818][T32260] Normal: 1841*4kB (UME) 2920*8kB (UME) 1481*16kB (UME) 1121*32kB (UME) 1186*64kB (UME) 1003*128kB (UME) 952*256kB (UME) 703*512kB (UM) 520*1024kB (UME) 346*2048kB (UME) 537*4096kB (UM) = 4338868kB [ 1749.304614][T32203] bridge_slave_0: entered allmulticast mode [ 1749.328763][T32260] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1749.339773][T32260] 28669 total pagecache pages [ 1749.367149][T32260] 0 pages in swap cache [ 1749.375972][T32260] Free swap = 124996kB [ 1749.380609][T32260] Total swap = 124996kB [ 1749.386203][T32260] 2097051 pages RAM [ 1749.390064][T32260] 0 pages HighMem/MovableOnly [ 1749.394977][T32260] 81638 pages reserved [ 1749.474309][T32203] bridge_slave_0: entered promiscuous mode [ 1749.481382][T32203] bridge0: port 2(bridge_slave_1) entered blocking state [ 1749.488644][T32203] bridge0: port 2(bridge_slave_1) entered disabled state [ 1749.495975][T32203] bridge_slave_1: entered allmulticast mode [ 1749.502470][T32203] bridge_slave_1: entered promiscuous mode [ 1749.520985][T32203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1749.532932][T32203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1749.716730][T32299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7454'. [ 1750.276163][T32203] team0: Port device team_slave_0 added [ 1750.302414][ T3023] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1750.332165][T32203] team0: Port device team_slave_1 added [ 1750.355326][T32319] loop0: detected capacity change from 0 to 512 [ 1750.376908][T32319] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.7460: inode has both inline data and extents flags [ 1750.402706][T32319] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1750.403715][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1750.411362][T32319] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.7460: couldn't read orphan inode 15 (err -117) [ 1750.413025][ C0] EXT4-fs (loop0): initial error at time 2000001331: ext4_orphan_get:1397: inode 15 [ 1750.440679][ C0] EXT4-fs (loop0): last error at time 2000001331: ext4_orphan_get:1397: inode 15 [ 1750.459271][T32319] loop0: lost filesystem error report for type 5 error -117 [ 1750.498885][T32326] loop2: detected capacity change from 0 to 164 [ 1750.566299][T32319] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1750.652015][T32326] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1750.690745][T32203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1750.714343][T32203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1751.598065][T32333] netlink: 1192 bytes leftover after parsing attributes in process `syz.8.7462'. [ 1751.753720][T32203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1752.396226][T32331] loop3: detected capacity change from 0 to 164 [ 1752.739121][T32203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1752.748732][T32203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1752.778320][T32203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1752.835259][T32331] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1753.659906][T32333] loop8: detected capacity change from 0 to 512 [ 1753.692545][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 1753.692560][ T28] audit: type=1326 audit(2000001335.130:23846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32338 comm="syz.2.7463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8875cdd9 code=0x7ffc0000 [ 1753.751267][ T28] audit: type=1326 audit(2000001335.170:23847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32338 comm="syz.2.7463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8875cdd9 code=0x7ffc0000 [ 1753.763521][T32333] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1753.788963][T32333] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 1753.802911][T32333] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.7462: Corrupt directory, running e2fsck is recommended [ 1753.816675][ T28] audit: type=1326 audit(2000001335.170:23848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32338 comm="syz.2.7463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8875cdd9 code=0x7ffc0000 [ 1753.842932][ T28] audit: type=1326 audit(2000001335.170:23849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32338 comm="syz.2.7463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8875cdd9 code=0x7ffc0000 [ 1753.843769][T32333] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 1753.871363][T29796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1753.877700][ T28] audit: type=1326 audit(2000001335.170:23850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32338 comm="syz.2.7463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f0f8875cdd9 code=0x7ffc0000 [ 1753.919238][T32345] loop3: detected capacity change from 0 to 256 [ 1753.930169][T32333] EXT4-fs error (device loop8): ext4_iget_extra_inode:5128: inode #15: comm syz.8.7462: corrupted in-inode xattr: e_name out of bounds [ 1753.945732][ T28] audit: type=1326 audit(2000001335.170:23851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32338 comm="syz.2.7463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8875cdd9 code=0x7ffc0000 [ 1754.013786][T32333] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1754.023692][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1754.039362][ C1] EXT4-fs (loop8): initial error at time 2000001335: ext4_iget_extra_inode:5128: inode 15 [ 1754.049359][ C1] EXT4-fs (loop8): last error at time 2000001335: ext4_iget_extra_inode:5128: inode 15 [ 1754.081908][T32333] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.7462: couldn't read orphan inode 15 (err -117) [ 1754.122634][ T28] audit: type=1326 audit(2000001335.170:23852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32338 comm="syz.2.7463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8875cdd9 code=0x7ffc0000 [ 1754.130876][T32333] loop8: lost filesystem error report for type 5 error -117 [ 1754.149794][T32349] loop0: detected capacity change from 0 to 2048 [ 1754.214923][T32353] xt_NFQUEUE: number of total queues is 0 [ 1754.279808][ T28] audit: type=1326 audit(2000001335.170:23853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32338 comm="syz.2.7463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8875cdd9 code=0x7ffc0000 [ 1754.337516][T32333] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1754.461308][T32339] loop2: detected capacity change from 0 to 8192 [ 1754.551976][ T28] audit: type=1326 audit(2000001335.170:23854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32338 comm="syz.2.7463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8875cdd9 code=0x7ffc0000 [ 1754.698460][ T28] audit: type=1326 audit(2000001335.170:23855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32338 comm="syz.2.7463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f0f8875cdd9 code=0x7ffc0000 [ 1754.748630][T32203] hsr_slave_0: entered promiscuous mode [ 1754.778582][T32203] hsr_slave_1: entered promiscuous mode [ 1754.847305][T26502] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1754.949280][ T3023] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1755.034730][T31706] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 1755.056449][T31706] hid-generic 0000:0000:0000.004E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1755.148059][T32375] loop8: detected capacity change from 0 to 4096 [ 1755.174154][T32375] ext4: Bad value for 'commit' [ 1755.320205][T32203] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1755.354278][T32203] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1755.378328][T32203] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1755.415018][T32203] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1755.447413][T32203] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1755.479027][T32203] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1755.504297][T32203] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1755.525613][T32203] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1755.545534][ T3023] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1755.672808][T32203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1755.703863][T32203] 8021q: adding VLAN 0 to HW filter on device team0 [ 1755.734401][T10453] bridge0: port 1(bridge_slave_0) entered blocking state [ 1755.741547][T10453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1755.833651][T10453] bridge0: port 2(bridge_slave_1) entered blocking state [ 1755.840839][T10453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1755.948672][T32203] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1755.962887][T32374] FAULT_INJECTION: forcing a failure. [ 1755.962887][T32374] name failslab, interval 1, probability 0, space 0, times 0 [ 1756.003892][T32416] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.7472'. [ 1756.025586][T32374] CPU: 1 UID: 0 PID: 32374 Comm: syz.2.7470 Tainted: G W syzkaller #0 PREEMPT(full) [ 1756.025630][T32374] Tainted: [W]=WARN [ 1756.025666][T32374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1756.025679][T32374] Call Trace: [ 1756.025686][T32374] [ 1756.025694][T32374] __dump_stack+0x1d/0x30 [ 1756.025781][T32374] dump_stack_lvl+0x95/0xd0 [ 1756.025804][T32374] dump_stack+0x15/0x1b [ 1756.025825][T32374] should_fail_ex+0x263/0x280 [ 1756.025932][T32374] should_failslab+0x8c/0xb0 [ 1756.025973][T32374] kmem_cache_alloc_noprof+0x66/0x3f0 [ 1756.026017][T32374] ? do_getname+0x2e/0x1c0 [ 1756.026095][T32374] do_getname+0x2e/0x1c0 [ 1756.026117][T32374] getname_flags+0x1d/0x30 [ 1756.026221][T32374] do_sys_openat2+0x60/0x130 [ 1756.026250][T32374] __x64_sys_openat+0xf2/0x120 [ 1756.026284][T32374] x64_sys_call+0x1e39/0x3020 [ 1756.026318][T32374] do_syscall_64+0x12c/0x3b0 [ 1756.026414][T32374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1756.026438][T32374] RIP: 0033:0x7f0f8871d60e [ 1756.026454][T32374] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1756.026480][T32374] RSP: 002b:00007f0f871b6b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1756.026505][T32374] RAX: ffffffffffffffda RBX: 00007f0f871b76c0 RCX: 00007f0f8871d60e [ 1756.026530][T32374] RDX: 000000000014a002 RSI: 00007f0f871b6c00 RDI: ffffffffffffff9c [ 1756.026543][T32374] RBP: 00007f0f871b6c00 R08: 0000000000000000 R09: 0000000000000000 [ 1756.026565][T32374] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1756.026581][T32374] R13: 00007f0f889d6038 R14: 00007f0f889d5fa0 R15: 00007ffc0c54ecc8 [ 1756.026601][T32374] [ 1756.442755][T32439] netlink: 'syz.0.7474': attribute type 10 has an invalid length. [ 1756.482477][T32439] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7474'. [ 1756.520641][T32439] ipvlan1: entered promiscuous mode [ 1756.546132][T32439] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1756.593080][T32203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1756.866362][T32458] netlink: 168 bytes leftover after parsing attributes in process `syz.2.7475'. [ 1756.875858][T32461] syzkaller0: entered promiscuous mode [ 1756.895290][T32461] syzkaller0: entered allmulticast mode [ 1757.190794][T32203] veth0_vlan: entered promiscuous mode [ 1757.229028][T32203] veth1_vlan: entered promiscuous mode [ 1757.287227][T32203] veth0_macvtap: entered promiscuous mode [ 1757.311822][T32203] veth1_macvtap: entered promiscuous mode [ 1757.357647][T32203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1757.389510][T32203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1757.423026][T32077] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.449583][T32077] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.487716][T32077] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.518468][T32077] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.528052][T32521] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.7488'. [ 1757.856078][T32532] netlink: 'syz.3.7490': attribute type 10 has an invalid length. [ 1757.904851][T32532] bond0: (slave veth1_to_batadv): Enslaving as an active interface with an up link [ 1758.091872][T32564] netlink: 'syz.0.7496': attribute type 39 has an invalid length. [ 1758.214640][T32573] netlink: 'syz.8.7497': attribute type 29 has an invalid length. [ 1758.291414][T32573] 熾: port 1(gretap0) entered blocking state [ 1758.310553][T32575] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.7498'. [ 1758.311531][T32573] 熾: port 1(gretap0) entered disabled state [ 1758.345226][T32573] gretap0: entered allmulticast mode [ 1758.374332][T32573] gretap0: entered promiscuous mode [ 1758.708788][ T28] kauditd_printk_skb: 189 callbacks suppressed [ 1758.708806][ T28] audit: type=1400 audit(2000001340.150:24045): avc: denied { write } for pid=32619 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1758.859830][ T28] audit: type=1400 audit(2000001340.300:24046): avc: denied { write } for pid=32621 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1758.906657][ T28] audit: type=1400 audit(2000001340.350:24047): avc: denied { write } for pid=32632 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1759.221847][T32575] netlink: 3074 bytes leftover after parsing attributes in process `syz.3.7498'. [ 1759.372286][ T28] audit: type=1400 audit(2000001340.810:24048): avc: denied { create } for pid=32649 comm="syz.2.7509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1759.446225][ T28] audit: type=1400 audit(2000001340.890:24049): avc: denied { write } for pid=32636 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1759.502490][ T28] audit: type=1400 audit(2000001340.940:24050): avc: denied { write } for pid=32657 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1759.679450][ T28] audit: type=1400 audit(2000001341.120:24051): avc: denied { write } for pid=32661 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1759.738359][ T28] audit: type=1400 audit(2000001341.180:24052): avc: denied { write } for pid=32683 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1759.865027][ T28] audit: type=1400 audit(2000001341.300:24053): avc: denied { ioctl } for pid=32667 comm="syz.3.7513" path="socket:[110545]" dev="sockfs" ino=110545 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1759.922406][ T28] audit: type=1400 audit(2000001341.360:24054): avc: denied { write } for pid=32687 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1760.065716][T32714] netlink: 'syz.2.7520': attribute type 10 has an invalid length. [ 1760.107916][T32721] netlink: 'syz.8.7521': attribute type 10 has an invalid length. [ 1760.702755][T32721] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 1760.718404][T32721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1760.732717][T32721] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1761.274928][ T312] netlink: 'syz.0.7545': attribute type 10 has an invalid length. [ 1761.287049][ T312] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.7545'. [ 1761.530546][ T351] netlink: 'syz.8.7558': attribute type 10 has an invalid length. [ 1761.547402][ T351] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7558'. [ 1761.804027][ T361] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.7562'. [ 1764.067344][ T376] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.7566'. [ 1764.085711][ T376] netlink: zone id is out of range [ 1764.093004][ T376] netlink: get zone limit has 4 unknown bytes [ 1764.102195][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 1764.102209][ T28] audit: type=1400 audit(2000001345.550:24070): avc: denied { connect } for pid=383 comm="syz.2.7571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1764.135968][ T28] audit: type=1400 audit(2000001345.550:24071): avc: denied { name_connect } for pid=383 comm="syz.2.7571" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1764.158105][ T28] audit: type=1400 audit(2000001345.580:24072): avc: denied { ioctl } for pid=385 comm="syz.6.7572" path="socket:[111830]" dev="sockfs" ino=111830 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1764.229633][ T393] netlink: 'syz.8.7574': attribute type 3 has an invalid length. [ 1764.237946][ T393] netlink: 16066 bytes leftover after parsing attributes in process `syz.8.7574'. [ 1764.290807][ T399] netlink: 'syz.0.7576': attribute type 21 has an invalid length. [ 1764.299408][ T399] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7576'. [ 1764.344593][ T401] netlink: 'syz.0.7577': attribute type 10 has an invalid length. [ 1764.393276][ T405] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1764.407478][ T405] syzkaller0: entered promiscuous mode [ 1764.413116][ T405] syzkaller0: entered allmulticast mode [ 1764.478504][ T28] audit: type=1400 audit(2000001345.920:24073): avc: denied { ioctl } for pid=411 comm="syz.0.7581" path="socket:[111892]" dev="sockfs" ino=111892 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1764.516934][ T412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7581'. [ 1764.568312][ T416] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.7582'. [ 1764.596329][ T420] netlink: 'syz.6.7584': attribute type 10 has an invalid length. [ 1764.604317][ T420] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7584'. [ 1764.613325][ T420] bridge0: port 3(veth0_macvtap) entered blocking state [ 1764.620472][ T420] bridge0: port 3(veth0_macvtap) entered disabled state [ 1764.627722][ T420] veth0_macvtap: entered allmulticast mode [ 1764.634179][ T420] veth0_macvtap: left allmulticast mode [ 1764.640427][ T420] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1764.713162][ T28] audit: type=1400 audit(2000001346.150:24074): avc: denied { name_connect } for pid=423 comm="syz.0.7586" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1764.773339][ T428] netlink: 'syz.0.7586': attribute type 10 has an invalid length. [ 1764.788556][ T428] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1764.799323][ T428] team0: Port device netdevsim1 added [ 1764.905044][ T434] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7590'. [ 1764.914295][ T434] veth1_to_bridge: entered allmulticast mode [ 1764.949567][ T28] audit: type=1400 audit(2000001346.390:24075): avc: denied { bind } for pid=435 comm="syz.3.7591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1764.969888][ T28] audit: type=1400 audit(2000001346.390:24076): avc: denied { name_bind } for pid=435 comm="syz.3.7591" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1765.015016][ T28] audit: type=1400 audit(2000001346.390:24077): avc: denied { node_bind } for pid=435 comm="syz.3.7591" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1765.065907][ T28] audit: type=1400 audit(2000001346.510:24078): avc: denied { ioctl } for pid=445 comm="syz.3.7595" path="socket:[111954]" dev="sockfs" ino=111954 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1765.164524][ T450] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1765.172834][ T450] syzkaller0: entered promiscuous mode [ 1765.178769][ T450] syzkaller0: entered allmulticast mode [ 1765.192731][ T28] audit: type=1400 audit(2000001346.630:24079): avc: denied { create } for pid=453 comm="syz.6.7598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1765.290760][ T463] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1765.412537][ T470] netlink: 'syz.6.7605': attribute type 10 has an invalid length. [ 1765.424347][ T470] veth0_macvtap: left promiscuous mode [ 1765.590090][ T496] can: request_module (can-proto-0) failed. [ 1765.684653][ T507] loop2: detected capacity change from 0 to 512 [ 1765.718133][ T507] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1765.737871][ T507] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1765.795209][T27205] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1765.895075][ T535] 9p: Bad value for 'source' [ 1765.965704][ T546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1765.975446][ T546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1766.108558][ T558] loop3: detected capacity change from 0 to 128 [ 1766.186977][ T558] ================================================================== [ 1766.195103][ T558] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 1766.202239][ T558] [ 1766.204566][ T558] write to 0xffff88811ace6dbc of 4 bytes by task 560 on cpu 0: [ 1766.212116][ T558] xas_set_mark+0x12b/0x140 [ 1766.216667][ T558] __folio_start_writeback+0x17b/0x370 [ 1766.222162][ T558] __mpage_writepages+0xdbd/0x1390 [ 1766.227284][ T558] fat_writepages+0x26/0x30 [ 1766.231802][ T558] do_writepages+0x1c6/0x310 [ 1766.236406][ T558] file_write_and_wait_range+0x178/0x2f0 [ 1766.242060][ T558] mmb_fsync_noflush+0x48/0x140 [ 1766.246922][ T558] fat_file_fsync+0x98/0x110 [ 1766.251520][ T558] vfs_fsync_range+0xc5/0xe0 [ 1766.256116][ T558] generic_file_write_iter+0x1ba/0x310 [ 1766.261583][ T558] iter_file_splice_write+0x6c4/0xa80 [ 1766.266990][ T558] direct_splice_actor+0x156/0x2a0 [ 1766.272119][ T558] splice_direct_to_actor+0x311/0x670 [ 1766.277545][ T558] do_splice_direct+0x119/0x1a0 [ 1766.282432][ T558] do_sendfile+0x382/0x650 [ 1766.286859][ T558] __x64_sys_sendfile64+0x105/0x150 [ 1766.292083][ T558] x64_sys_call+0x2dc4/0x3020 [ 1766.296793][ T558] do_syscall_64+0x12c/0x3b0 [ 1766.301397][ T558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1766.307298][ T558] [ 1766.309628][ T558] read to 0xffff88811ace6dbc of 4 bytes by task 558 on cpu 1: [ 1766.317108][ T558] xas_find_marked+0x5d7/0x620 [ 1766.321917][ T558] filemap_get_folios_tag+0xfa/0x430 [ 1766.327236][ T558] filemap_fdatawait_range+0x88/0x1e0 [ 1766.332633][ T558] __writeback_single_inode+0xda/0x650 [ 1766.338115][ T558] writeback_single_inode+0x16d/0x3f0 [ 1766.343510][ T558] sync_inode_metadata+0x6e/0xa0 [ 1766.348492][ T558] mmb_fsync_noflush+0xfa/0x140 [ 1766.353388][ T558] fat_file_fsync+0x98/0x110 [ 1766.357995][ T558] vfs_fsync_range+0xc5/0xe0 [ 1766.362601][ T558] generic_file_write_iter+0x1ba/0x310 [ 1766.368069][ T558] iter_file_splice_write+0x6c4/0xa80 [ 1766.373469][ T558] direct_splice_actor+0x156/0x2a0 [ 1766.378613][ T558] splice_direct_to_actor+0x311/0x670 [ 1766.384022][ T558] do_splice_direct+0x119/0x1a0 [ 1766.388904][ T558] do_sendfile+0x382/0x650 [ 1766.393346][ T558] __x64_sys_sendfile64+0x105/0x150 [ 1766.398593][ T558] x64_sys_call+0x2dc4/0x3020 [ 1766.403289][ T558] do_syscall_64+0x12c/0x3b0 [ 1766.407894][ T558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1766.413812][ T558] [ 1766.416143][ T558] value changed: 0x0a000021 -> 0x04000021 [ 1766.421863][ T558] [ 1766.424188][ T558] Reported by Kernel Concurrency Sanitizer on: [ 1766.430344][ T558] CPU: 1 UID: 0 PID: 558 Comm: syz.3.7641 Tainted: G W syzkaller #0 PREEMPT(full) [ 1766.441119][ T558] Tainted: [W]=WARN [ 1766.444952][ T558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1766.455125][ T558] ================================================================== [ 1770.119829][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 1770.119846][ T28] audit: type=1400 audit(2000001351.560:24113): avc: denied { write } for pid=579 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1770.158293][ T28] audit: type=1400 audit(2000001351.600:24114): avc: denied { write } for pid=591 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1771.221549][ T28] audit: type=1400 audit(2000001352.660:24115): avc: denied { write } for pid=594 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1771.256773][ T28] audit: type=1400 audit(2000001352.700:24116): avc: denied { write } for pid=605 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1772.067910][ T28] audit: type=1400 audit(2000001353.510:24117): avc: denied { write } for pid=608 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1772.101285][ T28] audit: type=1400 audit(2000001353.540:24118): avc: denied { write } for pid=619 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1