last executing test programs: 8m10.147765141s ago: executing program 0 (id=4139): io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xe9) getdents(r3, &(0x7f0000000080)=""/58, 0x3a) getdents(r3, 0xfffffffffffffffd, 0xbb) r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) preadv(r4, &(0x7f0000000580)=[{&(0x7f0000000000)=""/42, 0x2a}], 0x1, 0x7, 0x800) r5 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x104196, 0x5cff0c9c, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r5, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4e}, 0x48) unshare(0x400) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x4) 8m7.249698263s ago: executing program 0 (id=4149): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(0x0, 0x0) clock_gettime(0x4, &(0x7f0000000400)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040021}, 0xc010) r1 = socket$rxrpc(0x21, 0x2, 0xa) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f0000000480)}}, 0x18) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x1e, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2004c000) 8m7.221697923s ago: executing program 0 (id=4150): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff020000000800000000000000000001140004002001000000000000000000000000000106000340000100000800"], 0xa0}}, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x44, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x24, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x561aa5fe}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x252740d6}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7ac3fcd9}, @NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x20000084) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) recvmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r6 = dup2(0xffffffffffffffff, r5) close_range(r6, 0xffffffffffffffff, 0x0) 8m5.404129653s ago: executing program 0 (id=4156): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000006a000105fefdffffffdbdb250000af3d0000000004000b"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000000)='./file1\x00', 0x101000c, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfd, 0x64e, &(0x7f0000019200)="$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") r3 = fsmount(r1, 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) ioctl$sock_ifreq(r0, 0x891d, &(0x7f0000000400)={'veth1_macvtap\x00', @ifru_data=&(0x7f0000000240)="4499a60e06dd825d8ce0addb7b7b79848ac6c4d52503dd36d57277a479ab07f6"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000380)=0xfffffffe, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x104}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001c40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_pid(r6, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000240), r4) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) socket(0x10, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 8m3.354859285s ago: executing program 0 (id=4162): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = getpgid(0xffffffffffffffff) sched_setattr(r1, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1, 0x9, 0x6, 0xffff, 0xe}, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r3 = eventfd(0x9) io_submit(r2, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x42, r3, 0x0, 0x0, 0x34}, &(0x7f00000000c0)={0x0, 0x0, 0x8000000, 0x7, 0x0, r3, 0x0, 0x0, 0x7, 0x0, 0x1, r3}]) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000080)='(]\x00', &(0x7f0000000180)='./file0\x00', r4) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan0\x00'}) r5 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f00000002c0)={&(0x7f0000000200)=@caif=@dgm={0x25, 0xe}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000140)="18", 0x1}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000010000000010000000900010073797a30000000002c000000030a01040000000000000000010000000900030073797a32000000000900010073797a300000000068000000060a0104000000220a0000000100000008000b40000000000900010073797a3000000000"], 0x1f4}}, 0x44) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x1000, 0x792000) ioctl$LOOP_SET_DIRECT_IO(r6, 0x4c08, 0xe) r7 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r7, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4050040}, 0x0) 8m3.246157036s ago: executing program 0 (id=4164): r0 = socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000080)={0x5, &(0x7f00000001c0)=[{0x2, 0xf, 0x4, 0xfffffff5}, {0x1, 0x5, 0x26, 0x59c}, {0x9, 0x9, 0x7, 0x1}, {0xf5, 0x1, 0x7, 0xfffffffb}, {0x1ff, 0x1, 0xec, 0x1}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x1c, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xf, 0xffffffffffffffff, 0x0) epoll_create(0x6) socket$inet6(0xa, 0x3, 0x87) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x58, &(0x7f0000000680)}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7, 0x6}, 0x204, 0x0, 0x7bb00, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002000)=@newtaction={0xeb4, 0x30, 0xb, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0x3, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf2, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x7fffffff, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x1}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x9, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0xfffffffd, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x57d6, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0xffff, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x103, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0x1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800002, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff3, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x4ce}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x40000000, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0xa, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x7}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x2, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x0) syz_pidfd_open(0x0, 0x0) 7m47.757233274s ago: executing program 32 (id=4164): r0 = socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000080)={0x5, &(0x7f00000001c0)=[{0x2, 0xf, 0x4, 0xfffffff5}, {0x1, 0x5, 0x26, 0x59c}, {0x9, 0x9, 0x7, 0x1}, {0xf5, 0x1, 0x7, 0xfffffffb}, {0x1ff, 0x1, 0xec, 0x1}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x1c, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xf, 0xffffffffffffffff, 0x0) epoll_create(0x6) socket$inet6(0xa, 0x3, 0x87) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x58, &(0x7f0000000680)}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61123000000000006113340000000000bf10000000000000160003000ee600f03d030100000000008701000000000000bc26000000000000bf67000000000000560300000ee60070670200001f000000160300000ee600f0bf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586e3f640f9f7e9a73b761ad4f0952a70046270d2b6436fdeecd791614ed46de741eb8cf91c046ef9beca574b350021c7ec6ef130f53748068ca432dae4e248b22b9ad8b2811f67916a1764578cba4b069037bfb3362d5691ac397f7e207145d970f0d97867552629b146645c785fb77dbeca38e49a9d5221f1f45f0a25890d04d91a15a05ae7e7ed6252c3d6c1973fb858de1da70d67317e7872b0603ce47ed2c1520e71b527bb42aa2e20e1e85df73736ed0a782ab7e7278dd54358cfdf6313d40f926332623625b49626481054787ab2dff85a9bebd6b317f26c691a65aa97bb3d1506a3a565e9c7ea5ad4611d2d77ee8a5c1b23814a26b6a20061fbb65bdd03770fa849f2a29ba69f90625f42592a70ba890f7a92878ae73574c3a233ee5954119931a1905210715fa77a8795f2fbec3797cb90f59fe8a4abec25f40c87bf25b750bbaa"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7, 0x6}, 0x204, 0x0, 0x7bb00, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002000)=@newtaction={0xeb4, 0x30, 0xb, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0x3, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf2, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x7fffffff, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x1}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x9, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0xfffffffd, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x57d6, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0xffff, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x103, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0x1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800002, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff3, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x4ce}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x40000000, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0xa, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x7}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x2, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x0) syz_pidfd_open(0x0, 0x0) 6m29.268276385s ago: executing program 1 (id=4436): r0 = socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000080)={0x5, &(0x7f00000001c0)=[{0x2, 0xf, 0x4, 0xfffffff5}, {0x1, 0x5, 0x26, 0x59c}, {0x9, 0x9, 0x7, 0x1}, {0xf5, 0x1, 0x7, 0xfffffffb}, {0x1ff, 0x1, 0xec, 0x1}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x1c, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xf, 0xffffffffffffffff, 0x0) epoll_create(0x6) socket$inet6(0xa, 0x3, 0x87) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x58, &(0x7f0000000680)}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7, 0x6}, 0x204, 0x0, 0x7bb00, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002000)=@newtaction={0xeb4, 0x30, 0xb, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0x3, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf2, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x7fffffff, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x1}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x9, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0xfffffffd, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x57d6, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0xffff, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x103, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0x1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800002, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff3, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x4ce}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x40000000, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0xa, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x7}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x2, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x0) syz_pidfd_open(0x0, 0x0) 6m26.381329917s ago: executing program 1 (id=4441): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000058f000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00004b2000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000080) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x974, 0x1f480, 0x0, 0x39a}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x4}, 0x1c) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 6m25.966370892s ago: executing program 1 (id=4445): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000200025a729bd7000fddbdf250a0000cdff000001020001000800060000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 6m25.912305072s ago: executing program 1 (id=4447): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) 6m25.806857583s ago: executing program 1 (id=4448): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='blkio.reset_stats\x00', 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x80100, 0x9c) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0x7ffffffffffffffc, 0x12) 6m25.733508814s ago: executing program 1 (id=4450): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x2, 0x4) listen(r3, 0xfffefffa) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newqdisc={0x854, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff1, 0x7}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x814, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x2d, 0x8, 0x9, 0x2, 0x6, 0x4, 0x8, 0x1bab, 0x2, 0x5, 0x7, 0x4, 0x7fff, 0x6, 0x87b, 0xfff, 0x2, 0x4, 0x7, 0x3, 0x7, 0x3, 0x748, 0x3c, 0x8, 0x8, 0x76, 0x5ec, 0x4, 0x6dd, 0x1, 0x401, 0x3, 0x3, 0x1, 0x5, 0xfff, 0x2, 0x7, 0x8, 0x84, 0x2, 0x3, 0x700, 0xc, 0x400, 0x94, 0xa5, 0xd, 0x0, 0x2, 0x2, 0x6, 0x2, 0x2, 0x2cdad499, 0x7ff, 0x7f, 0x8, 0xa, 0xb7, 0x6cfc, 0xd0, 0x80000000, 0x6, 0xd23, 0x4, 0x7, 0xfffffffb, 0x1470, 0x2, 0xfe5e, 0x8, 0xffff, 0x5, 0x3, 0x7fffffff, 0x10001, 0x9, 0x81, 0xe, 0x76, 0x3, 0x6, 0x3, 0x4, 0x8, 0x4, 0xdaab, 0x7, 0x7, 0x1, 0x49d, 0x4, 0x2, 0x5, 0x5, 0x2, 0x8, 0x80000001, 0x7, 0x8, 0x98, 0x9, 0x7, 0x401, 0x0, 0x2, 0x6, 0x101, 0x200, 0x6, 0x80, 0x2, 0x1, 0xb9c4, 0x6, 0x4, 0x3379, 0x7c, 0x2, 0xff, 0x9e13962, 0x5, 0x101, 0x9, 0x9, 0xf9a5, 0xffff7fff, 0x2311, 0x9, 0x800, 0x7, 0x6, 0xc9b4bdb, 0x29, 0x80000000, 0xf7, 0x0, 0xfffffff6, 0x2, 0x200, 0x5, 0x3, 0x2, 0xdfb6d2b, 0x4, 0x7e67b159, 0x1, 0x9, 0x5, 0x0, 0x7f, 0x800, 0xffffff80, 0x3, 0x1, 0xfffffffa, 0x9, 0x2, 0x6, 0x7, 0x81, 0x9, 0x1, 0x8, 0x40, 0x8, 0x1, 0x4, 0x8, 0x5b3, 0x1, 0x8, 0x0, 0x1, 0x3, 0x5, 0x1, 0x3064, 0x8, 0x5, 0xfffffeb0, 0x5, 0x3, 0x1, 0x4000004, 0x7, 0x6, 0x1e, 0x0, 0xc, 0x7, 0x7, 0x3, 0x8, 0x1, 0x2, 0x3, 0x0, 0x5, 0x3, 0x6, 0x1, 0x0, 0x6ad, 0x921, 0xfffffc99, 0x3, 0xffffff91, 0xfb15, 0x1, 0xfffffc01, 0xf5f5, 0xfffffff7, 0x7, 0x87, 0x1, 0x95f, 0x5, 0x7f, 0x9fcb, 0x1, 0x1, 0x3ff, 0x7fff, 0x0, 0x5, 0x3, 0xfffffffe, 0x401, 0x81, 0x9, 0x9, 0x2, 0x8, 0x4, 0x8, 0x401, 0x7, 0x1, 0xfffffff6, 0x3, 0x6, 0xa, 0x4, 0x0, 0x823, 0x5, 0x1000000d, 0x4, 0xa2, 0x896, 0x0, 0x7]}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cb}, @TCA_TBF_RTAB={0x404, 0x2, [0xffffffff, 0x1c000000, 0x7, 0xf, 0x9, 0xb1d, 0xa, 0x19, 0x2, 0x5, 0x3, 0x100, 0x7, 0x5, 0xb8ad, 0x4f, 0x0, 0x2, 0x3, 0xd, 0x0, 0x8, 0xba2, 0x5, 0x3ff, 0x401, 0x3, 0xa, 0x8, 0x9, 0x7fff, 0xa, 0x1, 0x2, 0x5, 0xfffffff7, 0x9d73, 0x8, 0x8001, 0x80, 0x90, 0x0, 0x96, 0x7, 0x2, 0x4, 0x541, 0x6, 0xe33, 0x7, 0x2, 0x401, 0x5, 0x2, 0x20cd4a7f, 0x0, 0x3, 0x5, 0x4, 0x800, 0x1, 0x76c4d5c1, 0x80000001, 0x7, 0x8, 0x0, 0x4, 0x121, 0x7ff, 0x2, 0x4, 0xb, 0x81, 0x0, 0x3, 0x2, 0x80, 0x4, 0x7ff, 0x1, 0x3, 0x7f, 0xf1, 0x0, 0x7, 0x1, 0x3, 0x2, 0x7, 0xdb2, 0x5, 0x800, 0x1, 0x7, 0xc, 0x9, 0x1, 0xfff, 0x9, 0x1, 0xf6, 0x80, 0x6, 0x8, 0x10000, 0x5, 0x8, 0xff, 0x0, 0x447d, 0x8, 0x7, 0x5, 0xc, 0x0, 0x5, 0xd5db, 0x7, 0xc6, 0xf, 0x5, 0x3, 0x10b46e0a, 0x80000001, 0xe2, 0x4, 0x7, 0xfff, 0x9, 0x6, 0x3, 0xca, 0x9, 0x200, 0x7f, 0x2, 0xffffffff, 0x1, 0xffff, 0x9c5e, 0x9, 0x0, 0xd026, 0x9, 0x6, 0x4, 0x3, 0xc, 0x9, 0x1c0000, 0xd, 0x9, 0x1, 0x1, 0x4, 0x7, 0x80, 0x7fffffff, 0x2, 0x0, 0x100, 0x1ff, 0xd4, 0x0, 0x5, 0x42d0, 0x3, 0x7fffffff, 0x2020000, 0x5, 0x8, 0x8, 0x5e6, 0x3, 0x9, 0xe, 0x2, 0x3, 0x0, 0xf32, 0x8, 0x1, 0x1f6d, 0x2, 0x0, 0x9, 0xfffff4fd, 0x2, 0x5, 0x8, 0x2772, 0x6, 0x9, 0x3, 0x3, 0xfffff599, 0x2, 0x4, 0xffffff5b, 0x9, 0x8, 0x2, 0x7fffffff, 0x7, 0x40, 0x3, 0x8, 0x9, 0x6, 0x7, 0x5, 0xff, 0x0, 0x6e, 0x4, 0x8ca, 0xfffffff7, 0x0, 0x6, 0x5c, 0x101, 0x80000001, 0xfffffff9, 0x9f, 0xfff, 0x7f, 0x0, 0x100, 0x4, 0x0, 0x8000, 0x310, 0x3, 0x6, 0x5, 0x3, 0x0, 0x2c, 0x5, 0x4, 0x4, 0xffff, 0x100, 0x9, 0x7, 0x10001, 0x6, 0x7, 0x8001, 0x1000000, 0x2, 0x9, 0x2, 0x0, 0x9, 0x404cd945]}]}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x854}, 0x1, 0x0, 0x0, 0x20000002}, 0x2000400c) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r7, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x4}, 'port0\x00', 0x0, 0x60004, 0xffffffff, 0xffffffff, 0x1, 0xfffffffc, 0x0, 0x0, 0x3}) lseek(0xffffffffffffffff, 0x9, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) ioctl$TCFLSH(r6, 0x400455c8, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000000)) 6m10.357573731s ago: executing program 33 (id=4450): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x2, 0x4) listen(r3, 0xfffefffa) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newqdisc={0x854, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff1, 0x7}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x814, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x2d, 0x8, 0x9, 0x2, 0x6, 0x4, 0x8, 0x1bab, 0x2, 0x5, 0x7, 0x4, 0x7fff, 0x6, 0x87b, 0xfff, 0x2, 0x4, 0x7, 0x3, 0x7, 0x3, 0x748, 0x3c, 0x8, 0x8, 0x76, 0x5ec, 0x4, 0x6dd, 0x1, 0x401, 0x3, 0x3, 0x1, 0x5, 0xfff, 0x2, 0x7, 0x8, 0x84, 0x2, 0x3, 0x700, 0xc, 0x400, 0x94, 0xa5, 0xd, 0x0, 0x2, 0x2, 0x6, 0x2, 0x2, 0x2cdad499, 0x7ff, 0x7f, 0x8, 0xa, 0xb7, 0x6cfc, 0xd0, 0x80000000, 0x6, 0xd23, 0x4, 0x7, 0xfffffffb, 0x1470, 0x2, 0xfe5e, 0x8, 0xffff, 0x5, 0x3, 0x7fffffff, 0x10001, 0x9, 0x81, 0xe, 0x76, 0x3, 0x6, 0x3, 0x4, 0x8, 0x4, 0xdaab, 0x7, 0x7, 0x1, 0x49d, 0x4, 0x2, 0x5, 0x5, 0x2, 0x8, 0x80000001, 0x7, 0x8, 0x98, 0x9, 0x7, 0x401, 0x0, 0x2, 0x6, 0x101, 0x200, 0x6, 0x80, 0x2, 0x1, 0xb9c4, 0x6, 0x4, 0x3379, 0x7c, 0x2, 0xff, 0x9e13962, 0x5, 0x101, 0x9, 0x9, 0xf9a5, 0xffff7fff, 0x2311, 0x9, 0x800, 0x7, 0x6, 0xc9b4bdb, 0x29, 0x80000000, 0xf7, 0x0, 0xfffffff6, 0x2, 0x200, 0x5, 0x3, 0x2, 0xdfb6d2b, 0x4, 0x7e67b159, 0x1, 0x9, 0x5, 0x0, 0x7f, 0x800, 0xffffff80, 0x3, 0x1, 0xfffffffa, 0x9, 0x2, 0x6, 0x7, 0x81, 0x9, 0x1, 0x8, 0x40, 0x8, 0x1, 0x4, 0x8, 0x5b3, 0x1, 0x8, 0x0, 0x1, 0x3, 0x5, 0x1, 0x3064, 0x8, 0x5, 0xfffffeb0, 0x5, 0x3, 0x1, 0x4000004, 0x7, 0x6, 0x1e, 0x0, 0xc, 0x7, 0x7, 0x3, 0x8, 0x1, 0x2, 0x3, 0x0, 0x5, 0x3, 0x6, 0x1, 0x0, 0x6ad, 0x921, 0xfffffc99, 0x3, 0xffffff91, 0xfb15, 0x1, 0xfffffc01, 0xf5f5, 0xfffffff7, 0x7, 0x87, 0x1, 0x95f, 0x5, 0x7f, 0x9fcb, 0x1, 0x1, 0x3ff, 0x7fff, 0x0, 0x5, 0x3, 0xfffffffe, 0x401, 0x81, 0x9, 0x9, 0x2, 0x8, 0x4, 0x8, 0x401, 0x7, 0x1, 0xfffffff6, 0x3, 0x6, 0xa, 0x4, 0x0, 0x823, 0x5, 0x1000000d, 0x4, 0xa2, 0x896, 0x0, 0x7]}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cb}, @TCA_TBF_RTAB={0x404, 0x2, [0xffffffff, 0x1c000000, 0x7, 0xf, 0x9, 0xb1d, 0xa, 0x19, 0x2, 0x5, 0x3, 0x100, 0x7, 0x5, 0xb8ad, 0x4f, 0x0, 0x2, 0x3, 0xd, 0x0, 0x8, 0xba2, 0x5, 0x3ff, 0x401, 0x3, 0xa, 0x8, 0x9, 0x7fff, 0xa, 0x1, 0x2, 0x5, 0xfffffff7, 0x9d73, 0x8, 0x8001, 0x80, 0x90, 0x0, 0x96, 0x7, 0x2, 0x4, 0x541, 0x6, 0xe33, 0x7, 0x2, 0x401, 0x5, 0x2, 0x20cd4a7f, 0x0, 0x3, 0x5, 0x4, 0x800, 0x1, 0x76c4d5c1, 0x80000001, 0x7, 0x8, 0x0, 0x4, 0x121, 0x7ff, 0x2, 0x4, 0xb, 0x81, 0x0, 0x3, 0x2, 0x80, 0x4, 0x7ff, 0x1, 0x3, 0x7f, 0xf1, 0x0, 0x7, 0x1, 0x3, 0x2, 0x7, 0xdb2, 0x5, 0x800, 0x1, 0x7, 0xc, 0x9, 0x1, 0xfff, 0x9, 0x1, 0xf6, 0x80, 0x6, 0x8, 0x10000, 0x5, 0x8, 0xff, 0x0, 0x447d, 0x8, 0x7, 0x5, 0xc, 0x0, 0x5, 0xd5db, 0x7, 0xc6, 0xf, 0x5, 0x3, 0x10b46e0a, 0x80000001, 0xe2, 0x4, 0x7, 0xfff, 0x9, 0x6, 0x3, 0xca, 0x9, 0x200, 0x7f, 0x2, 0xffffffff, 0x1, 0xffff, 0x9c5e, 0x9, 0x0, 0xd026, 0x9, 0x6, 0x4, 0x3, 0xc, 0x9, 0x1c0000, 0xd, 0x9, 0x1, 0x1, 0x4, 0x7, 0x80, 0x7fffffff, 0x2, 0x0, 0x100, 0x1ff, 0xd4, 0x0, 0x5, 0x42d0, 0x3, 0x7fffffff, 0x2020000, 0x5, 0x8, 0x8, 0x5e6, 0x3, 0x9, 0xe, 0x2, 0x3, 0x0, 0xf32, 0x8, 0x1, 0x1f6d, 0x2, 0x0, 0x9, 0xfffff4fd, 0x2, 0x5, 0x8, 0x2772, 0x6, 0x9, 0x3, 0x3, 0xfffff599, 0x2, 0x4, 0xffffff5b, 0x9, 0x8, 0x2, 0x7fffffff, 0x7, 0x40, 0x3, 0x8, 0x9, 0x6, 0x7, 0x5, 0xff, 0x0, 0x6e, 0x4, 0x8ca, 0xfffffff7, 0x0, 0x6, 0x5c, 0x101, 0x80000001, 0xfffffff9, 0x9f, 0xfff, 0x7f, 0x0, 0x100, 0x4, 0x0, 0x8000, 0x310, 0x3, 0x6, 0x5, 0x3, 0x0, 0x2c, 0x5, 0x4, 0x4, 0xffff, 0x100, 0x9, 0x7, 0x10001, 0x6, 0x7, 0x8001, 0x1000000, 0x2, 0x9, 0x2, 0x0, 0x9, 0x404cd945]}]}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x854}, 0x1, 0x0, 0x0, 0x20000002}, 0x2000400c) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r7, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x4}, 'port0\x00', 0x0, 0x60004, 0xffffffff, 0xffffffff, 0x1, 0xfffffffc, 0x0, 0x0, 0x3}) lseek(0xffffffffffffffff, 0x9, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) ioctl$TCFLSH(r6, 0x400455c8, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000000)) 1m7.873410924s ago: executing program 6 (id=5524): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0904010000005987ef270200000138000480340001800b0001006e756d67656e000024000280080003400000000008000240ffff5ddff25ae4f801080001400000000008000440000080000900010073797a30000014000e001100010000000000000000000000000a79f6a639a793bf158d62590fa8dc75969b003c1521d507485a72f0ba539aa005f7e9144702f43c43971f0e1cc76109696e029fe9344ba638e5251343dc8db6cf637e7c3a9ebf"], 0x8c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)={0x64, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0xf8, 0x0, 0x1, [@typed={0x8, 0x133, 0x0, 0x0, @uid}, @nested={0x3d, 0xfb, 0x0, 0x1, [@generic="b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72", @nested={0xc, 0x34, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @uid=0xee00}]}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x39, 0x6, 0x0, 0x0, 0x0, 0x0, 0x90281, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, @perf_config_ext={0x4}, 0x0, 0x3e, 0x0, 0x4, 0x2, 0x7ffdfffc, 0x401, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x3, 0x0, 0x0, 0x25, 0x0, 0x0, 0x1f00, 0x22, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) getsockname$packet(r0, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000440)=0x14) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4d0}, 0x20068801) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fstat(r4, 0x0) r5 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0xda42, 0x80, 0x3, 0x20002f7, 0x0, r4}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m7.561577557s ago: executing program 6 (id=5525): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff020000000800000000000000000001140004002001000000000000000000000000000106000340000100000800"], 0xa0}}, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) ioctl$int_in(r1, 0x5452, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x44, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x24, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x561aa5fe}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x252740d6}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7ac3fcd9}, @NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x20000084) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xc, 0x8000000}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r9 = dup2(r0, r8) close_range(r9, 0xffffffffffffffff, 0x0) 1m4.941555676s ago: executing program 6 (id=5543): ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000040)=""/242) 1m4.853604856s ago: executing program 6 (id=5545): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@dax}, {@resuid}, {@lazytime}, {@grpid}], [], 0x2c}, 0x84, 0x4f5, &(0x7f0000001340)="$eJzs3Mtv3NQaAPDPTvPoM2lvde/t494GCiKikDRpgS5YAAKpGxASLMoypKEqTVvUBIlWFU0RKsuKvwBYIiGxggVsQAIEbACxhT1CqlA3LSChQZ6xk5lkZjKZtAnp/H6Sk3Ps48d37OOx53gcQMcajIirEbElIn6KiP6ISBYWGKz8u3n94sTv1y9OJFEqPfdbUi534/rFiaJoMd/mPDOURqRvJrGnznqnz184NT41NXkuz4/MnH5lZPr8hQdPnh4/MXli8szYkSOHD40+8vDYQy3FcWmJ6VlcN3a/fnbvrqMvvP30RCle/OaDJI87FsRRMdDSepsZjMEo5ebH9pT/3rvipf+zbI2I3jydbFjjjaFlXRGR7a7ucvvvj66Y33n98dQbc5kv1mgDgdsm+2zavmhsV/4/nfv8Au5EiTYOHar4xM/uf4thNa8/1tq1x7O/k+X4b+bDd89U6ibN7mUHKnfsXQ3m/3edcX3zyVL/EuvfEhHHZv94Jxui7vcQTSQtlwQAmPNZdv3zQL3rv7Tm2mZb3ocyEBEHImJHRPwrInZGOlfmPxHx32Wuf3BBfvH1zw8bl7nIZcmu/x7N+7aKoTKliCuZy20tx9+dvHRyavJgXidD0d2b5UebrOPzJ3+82mjaYNX1XzZk6y+uBfPt+HVDb+08x8dnxlcQco1rlyOJDfXiT+Z6ArIa2BURu9tYflZnJ+9/f2+W3rZ58fSl42/iFvQzld6LuK+y/2djQfyFpLKmRv2TI30xNXlwpDgqFvv2+yvPVue7q9I18fe1FlNfu8HWce1yxKa6x38ef9EMiv7a6Tz/5ZaW13Hl57ca3tMs3v9JHJutLpEf/xvnqy07/nuS58vpnnzca+MzM+dGIz7NR9SMH5tfWpEvymfxD+2vjb9yX5xm57i/3s3n2xMR2UH8v4j4f0Tsy7f9roi4OyL2N4n/6yfuebl5DbV5/N8CWfzHm+3/iIGkur++jUTXqa8+abT+1s5/h8upoXxM9fmvp8FyW93AldYfAAAArAdpuQ86SYernt8u7IxN6dTZ6ZkDg/HqmeOVvuqB6E6Lb7r6q74PHc2/Gy7yYwvyhyJie/lJo43l/PDE2amtaxQzULG5qv1XzgVpOjxcmfZLo4degDvHsvrRqh86+/CjW78xwKrye03oXNo/dC7tHzqX9g+dq177vxRxcw02BVhl7X7+L3xgAFh3SjXvp6zxceu/8gLWJff/0Lm0f+hIi38Sn79uJTsntP+T/6kdR1fyxoDbnyj1tz97NJ40u/wFdrVWuHj7RctLbq1wElGEkzaJq04i0vkxf+ZvkyyP6a6U6Wl9U1c/kS5Z5rGlaqN7We/E6KtTG/vyRG9EtLqcS6tWq8UZIvGWSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYF37OwAA//9fT+xE") socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x18}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='g'], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x4) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xf85, 0x7c}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000081}, 0x80) ptrace$setregs(0xd, r4, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r4, 0x80000001, 0x4) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x88, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) quotactl_fd$Q_SYNC(r5, 0xffffffff80000102, 0x0, 0x0) 1m3.839196188s ago: executing program 6 (id=5557): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0000}]}) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000003c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESOCT=r0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) (fail_nth: 2) 1m3.071624656s ago: executing program 6 (id=5563): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x20004094) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m3.018121006s ago: executing program 34 (id=5563): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x20004094) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 23.869411001s ago: executing program 3 (id=6579): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="05000000010000004000000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 23.835799402s ago: executing program 3 (id=6581): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b704000000000000850000001500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 23.833800362s ago: executing program 3 (id=6583): poll(0x0, 0x0, 0x400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000c0ff00000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 22.945576261s ago: executing program 3 (id=6618): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000003c0)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x10, 0x1213, &(0x7f0000000600)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./file0/file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0/file0/file0\x00', 0x0) 22.860542592s ago: executing program 3 (id=6620): bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="1200000002000000080000000900002716"], 0x50) 22.754532833s ago: executing program 3 (id=6624): syz_open_procfs(0x0, &(0x7f0000001040)='smaps_rollup\x00') socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000200), 0x6, 0x515, &(0x7f0000000c00)="$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") openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000000440)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void, {0x8100, 0x1, 0x0, 0x8b1}}, {@mpls_uc}}, 0x0) 22.721781724s ago: executing program 35 (id=6624): syz_open_procfs(0x0, &(0x7f0000001040)='smaps_rollup\x00') socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000200), 0x6, 0x515, &(0x7f0000000c00)="$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") openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000000440)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void, {0x8100, 0x1, 0x0, 0x8b1}}, {@mpls_uc}}, 0x0) 1.498990154s ago: executing program 4 (id=7202): syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0xfffffff3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x19}, {0xb, 0xb}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.384063145s ago: executing program 4 (id=7210): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0x7c82, 0x4) 1.281096906s ago: executing program 4 (id=7213): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000c0ff00000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1.280678376s ago: executing program 7 (id=7214): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2b, 'pids'}]}, 0xb) 1.280493886s ago: executing program 4 (id=7215): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xb, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4005, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.262826727s ago: executing program 7 (id=7216): recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x2040) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xfffffffffffffff9, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xe) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)=0x20000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000240), &(0x7f00000003c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x60044084) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x15) 1.197862737s ago: executing program 7 (id=7217): syz_usb_connect$midi(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x2466, 0x8010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x8, 0xa0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x6}}}}}]}}, 0x0) 1.191250017s ago: executing program 4 (id=7218): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2014) socket$packet(0x11, 0x3, 0x300) capset(0x0, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000300)={0x40, 0xe, 0x39, "016da5a87d15f257352e261e509991dfdae5607ef60653eccea5597311a45a46f86e37a540f1a4258f40a5dad30e3d14f38947ca5e9e447fd8"}, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0xa0, 0x20}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0xffc0}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, 0x0) 942.26473ms ago: executing program 5 (id=7228): dup(0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000200)=""/9, 0x9) close(r0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) prlimit64(0x0, 0x4, 0x0, 0x0) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x810) 837.861231ms ago: executing program 5 (id=7229): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x103000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xa, 0x12, "ff000000000000000000000000000200"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCXONC(r1, 0x540a, 0x0) 837.697271ms ago: executing program 5 (id=7230): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, 0x0) 837.570911ms ago: executing program 5 (id=7231): socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd, 0x3}, {0x0, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7c7}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x26}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 831.188881ms ago: executing program 5 (id=7232): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109025c0002010010030904000001020d0000052406000105240007000d240f0100d72800000000000006241a00002409058103000400fd000904010000020d00000904010102020d000009059cd173"], 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 784.795572ms ago: executing program 2 (id=7233): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f00000004000000040000004700000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000402026161c62fb43f2563bfc5e2a41f1b397a682033bcf31b90b6282744b879405d589a665d722dcb0246936bbd77b73f04984130cf5c6919e742e1290e232f9cec53599c594af93", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x3ff, 0x8b, &(0x7f0000000540)=""/139, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000080)={0x0, 0x1, 0x4a, 0x3}, 0x10, 0x23971, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = socket$kcm(0x2a, 0x2, 0x0) recvmsg(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x16, 0x0, 0xfffffffe, &(0x7f0000000400)=[0x0], 0x1, 0x0, &(0x7f0000000440), &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r2}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000400)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x3, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x40) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x1, 0x14, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[{0x18, 0x110, 0xe, "4811e5ac"}], 0x18}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0) socketpair(0x1d, 0x2, 0x2, 0x0) 759.873962ms ago: executing program 2 (id=7234): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff90}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00357428bd7000fed3df250200", @ANYRES32, @ANYBLOB="080026040a000100000000000000000008000f00"], 0x30}, 0x1, 0x0, 0x0, 0x240400c0}, 0x80c0) 738.276452ms ago: executing program 2 (id=7235): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000c0ff00000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 677.720463ms ago: executing program 2 (id=7236): syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0xfffffff3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x19}, {0xb, 0xb}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 677.607423ms ago: executing program 7 (id=7237): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0x7c82, 0x4) 668.595283ms ago: executing program 7 (id=7238): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x44, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x818}, 0x0) 662.673663ms ago: executing program 2 (id=7239): recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x2040) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xfffffffffffffff9, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xe) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)=0x20000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000240), &(0x7f00000003c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x60044084) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x15) 645.629063ms ago: executing program 7 (id=7240): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000004500)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x120, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r2, &(0x7f0000011e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 593.646304ms ago: executing program 2 (id=7241): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() socket$inet6(0xa, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000040)=ANY=[], 0x1, 0x30e, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x52) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 593.455104ms ago: executing program 4 (id=7242): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000080000000000000000000008500000036000000850000002a0000009500000000000000910f001083f7b8033157ad3a9ec3e0a154dde8e516b33d49cd6d8ea1ef44e2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)=ANY=[], 0x1000f) 283.656487ms ago: executing program 5 (id=7244): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x820000000000) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f00000002c0)) 169.654868ms ago: executing program 8 (id=7248): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0x7c82, 0x4) 167.624728ms ago: executing program 8 (id=7249): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2fb, &(0x7f0000000180)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x1) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./bus\x00', 0x0, 0x1c10, 0x0) fdatasync(r0) 130.997119ms ago: executing program 8 (id=7250): socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000000)={0x32, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @enc_lim={0x4, 0x1, 0x1}, @calipso={0x7, 0x10, {0x3, 0x2, 0x5, 0x3, [0x5]}}, @jumbo={0xc2, 0x4, 0xefb}]}, 0x30) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1391.505850][T22677] RSP: 002b:00007fb4ccfdf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1391.505869][T22677] RAX: ffffffffffffffda RBX: 00007fb4ce805fa0 RCX: 00007fb4ce58cdd9 [ 1391.505884][T22677] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1391.505899][T22677] RBP: 00007fb4ccfdf090 R08: 0000000000000000 R09: 0000000000000000 [ 1391.505915][T22677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1391.505928][T22677] R13: 00007fb4ce806038 R14: 00007fb4ce805fa0 R15: 00007ffefca958b8 [ 1391.505950][T22677] [ 1391.792423][T22685] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5524'. [ 1392.009821][T22695] xt_NFQUEUE: number of total queues is 0 [ 1392.243937][T22498] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1392.277386][T22498] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1392.306976][T22498] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1392.343309][T22498] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1392.375341][T22498] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1392.404698][T22498] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1392.429373][T22498] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1392.469231][T22498] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1392.505204][T22723] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5525'. [ 1392.612154][T22498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1392.658461][T22498] 8021q: adding VLAN 0 to HW filter on device team0 [ 1392.685338][ T4112] bridge0: port 1(bridge_slave_0) entered blocking state [ 1392.692451][ T4112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1392.734649][ T4112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1392.741832][ T4112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1393.021469][ T310] tipc: Subscription rejected, illegal request [ 1393.110903][T22498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1393.333196][T22498] veth0_vlan: entered promiscuous mode [ 1393.353568][T22498] veth1_vlan: entered promiscuous mode [ 1393.403163][T22498] veth0_macvtap: entered promiscuous mode [ 1393.429393][T22498] veth1_macvtap: entered promiscuous mode [ 1393.471451][T22498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1393.532496][T22498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1393.564560][ T310] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.623192][ T310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.650669][ T310] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.672438][ T310] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.748232][T22796] FAULT_INJECTION: forcing a failure. [ 1393.748232][T22796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1393.780617][T22796] CPU: 0 UID: 0 PID: 22796 Comm: syz.2.5533 Tainted: G W syzkaller #0 PREEMPT(full) [ 1393.780713][T22796] Tainted: [W]=WARN [ 1393.780721][T22796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1393.780736][T22796] Call Trace: [ 1393.780743][T22796] [ 1393.780751][T22796] __dump_stack+0x1d/0x30 [ 1393.780815][T22796] dump_stack_lvl+0x95/0xd0 [ 1393.780840][T22796] dump_stack+0x15/0x1b [ 1393.780863][T22796] should_fail_ex+0x263/0x280 [ 1393.780897][T22796] should_fail+0xb/0x20 [ 1393.780920][T22796] should_fail_usercopy+0x1a/0x20 [ 1393.781017][T22796] _copy_from_user+0x1c/0xb0 [ 1393.781050][T22796] __copy_msghdr+0x244/0x300 [ 1393.781082][T22796] ___sys_sendmsg+0x10c/0x1e0 [ 1393.781111][T22796] __x64_sys_sendmsg+0xd4/0x160 [ 1393.781205][T22796] x64_sys_call+0x194c/0x3020 [ 1393.781228][T22796] do_syscall_64+0x12c/0x3b0 [ 1393.781254][T22796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1393.781278][T22796] RIP: 0033:0x7f951cc7cdd9 [ 1393.781294][T22796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1393.781393][T22796] RSP: 002b:00007f951b6cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1393.781419][T22796] RAX: ffffffffffffffda RBX: 00007f951cef5fa0 RCX: 00007f951cc7cdd9 [ 1393.781436][T22796] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 1393.781452][T22796] RBP: 00007f951b6cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1393.781467][T22796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1393.781544][T22796] R13: 00007f951cef6038 R14: 00007f951cef5fa0 R15: 00007ffd670e9178 [ 1393.781566][T22796] [ 1394.005565][ T28] kauditd_printk_skb: 169 callbacks suppressed [ 1394.005581][ T28] audit: type=1400 audit(1393.968:28935): avc: denied { bind } for pid=22798 comm="syz.3.5489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1394.025313][T22804] FAULT_INJECTION: forcing a failure. [ 1394.025313][T22804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1394.048941][T22804] CPU: 1 UID: 0 PID: 22804 Comm: syz.4.5535 Tainted: G W syzkaller #0 PREEMPT(full) [ 1394.048974][T22804] Tainted: [W]=WARN [ 1394.048982][T22804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1394.048996][T22804] Call Trace: [ 1394.049003][T22804] [ 1394.049015][T22804] __dump_stack+0x1d/0x30 [ 1394.049038][T22804] dump_stack_lvl+0x95/0xd0 [ 1394.049082][T22804] dump_stack+0x15/0x1b [ 1394.049141][T22804] should_fail_ex+0x263/0x280 [ 1394.049204][T22804] should_fail+0xb/0x20 [ 1394.049229][T22804] should_fail_usercopy+0x1a/0x20 [ 1394.049264][T22804] _copy_to_user+0x20/0xa0 [ 1394.049443][T22804] simple_read_from_buffer+0xb5/0x130 [ 1394.049475][T22804] proc_fail_nth_read+0x10e/0x150 [ 1394.049508][T22804] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1394.049538][T22804] vfs_read+0x1ab/0x7f0 [ 1394.049638][T22804] ? __rcu_read_unlock+0x4e/0x70 [ 1394.049658][T22804] ? __fget_files+0x184/0x1c0 [ 1394.049677][T22804] ? mutex_lock+0x57/0x90 [ 1394.049708][T22804] ksys_read+0xdc/0x1a0 [ 1394.049735][T22804] __x64_sys_read+0x40/0x50 [ 1394.049767][T22804] x64_sys_call+0x2886/0x3020 [ 1394.049796][T22804] do_syscall_64+0x12c/0x3b0 [ 1394.049888][T22804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1394.049912][T22804] RIP: 0033:0x7fb24058d60e [ 1394.049931][T22804] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1394.049951][T22804] RSP: 002b:00007fb23f026fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1394.049975][T22804] RAX: ffffffffffffffda RBX: 00007fb23f0276c0 RCX: 00007fb24058d60e [ 1394.049992][T22804] RDX: 000000000000000f RSI: 00007fb23f0270a0 RDI: 0000000000000004 [ 1394.050079][T22804] RBP: 00007fb23f027090 R08: 0000000000000000 R09: 0000000000000000 [ 1394.050092][T22804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1394.050105][T22804] R13: 00007fb240846038 R14: 00007fb240845fa0 R15: 00007ffcd6901848 [ 1394.050122][T22804] [ 1394.072007][ T28] audit: type=1400 audit(1393.968:28936): avc: denied { allowed } for pid=22799 comm="syz.2.5534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1394.085223][T16472] IPVS: starting estimator thread 0... [ 1394.109697][ T28] audit: type=1400 audit(1393.968:28937): avc: denied { setopt } for pid=22798 comm="syz.3.5489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1394.200710][T22809] loop4: detected capacity change from 0 to 512 [ 1394.221727][ T28] audit: type=1400 audit(1393.968:28938): avc: denied { create } for pid=22799 comm="syz.2.5534" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1394.300622][T22802] IPVS: using max 2304 ests per chain, 115200 per kthread [ 1394.322776][ T28] audit: type=1400 audit(1393.968:28939): avc: denied { setopt } for pid=22799 comm="syz.2.5534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1394.362447][ T28] audit: type=1400 audit(1393.968:28940): avc: denied { connect } for pid=22799 comm="syz.2.5534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1394.382153][T22809] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1394.393799][ T28] audit: type=1400 audit(1394.228:28941): avc: denied { create } for pid=22787 comm="syz.5.5530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1394.413006][T22809] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 1394.424464][T22809] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.5536: Corrupt directory, running e2fsck is recommended [ 1394.440020][T22809] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 1394.448362][T22809] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.5536: corrupted in-inode xattr: e_name out of bounds [ 1394.473563][T22809] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1394.473758][T22809] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.5536: couldn't read orphan inode 15 (err -117) [ 1394.482503][ T28] audit: type=1400 audit(1394.458:28942): avc: denied { accept } for pid=22816 comm="syz.2.5539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1394.482917][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1394.520212][ C0] EXT4-fs (loop4): initial error at time 1394: ext4_iget_extra_inode:5128: inode 15 [ 1394.529629][ C0] EXT4-fs (loop4): last error at time 1394: ext4_iget_extra_inode:5128: inode 15 [ 1394.554078][ T28] audit: type=1400 audit(1394.518:28943): avc: denied { bind } for pid=22816 comm="syz.2.5539" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1394.564276][T22809] loop4: lost filesystem error report for type 5 error -117 [ 1394.574483][T22809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1394.594932][ T28] audit: type=1400 audit(1394.518:28944): avc: denied { node_bind } for pid=22816 comm="syz.2.5539" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1394.645527][T22000] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1394.761121][T22827] FAULT_INJECTION: forcing a failure. [ 1394.761121][T22827] name failslab, interval 1, probability 0, space 0, times 0 [ 1394.780352][T22827] CPU: 0 UID: 0 PID: 22827 Comm: syz.5.5544 Tainted: G W syzkaller #0 PREEMPT(full) [ 1394.780457][T22827] Tainted: [W]=WARN [ 1394.780465][T22827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1394.780479][T22827] Call Trace: [ 1394.780485][T22827] [ 1394.780492][T22827] __dump_stack+0x1d/0x30 [ 1394.780516][T22827] dump_stack_lvl+0x95/0xd0 [ 1394.780541][T22827] dump_stack+0x15/0x1b [ 1394.780683][T22827] should_fail_ex+0x263/0x280 [ 1394.780769][T22827] should_failslab+0x8c/0xb0 [ 1394.780798][T22827] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 1394.780837][T22827] ? __alloc_skb+0x2d6/0x690 [ 1394.780856][T22827] __alloc_skb+0x2d6/0x690 [ 1394.780872][T22827] ? __alloc_skb+0x200/0x690 [ 1394.780889][T22827] netlink_alloc_large_skb+0xbf/0xf0 [ 1394.780916][T22827] netlink_sendmsg+0x40c/0x6f0 [ 1394.781002][T22827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1394.781029][T22827] ____sys_sendmsg+0x563/0x5b0 [ 1394.781052][T22827] ___sys_sendmsg+0x195/0x1e0 [ 1394.781084][T22827] __x64_sys_sendmsg+0xd4/0x160 [ 1394.781119][T22827] x64_sys_call+0x194c/0x3020 [ 1394.781145][T22827] do_syscall_64+0x12c/0x3b0 [ 1394.781238][T22827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1394.781267][T22827] RIP: 0033:0x7faa7c71cdd9 [ 1394.781287][T22827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1394.781307][T22827] RSP: 002b:00007faa7b16f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1394.781342][T22827] RAX: ffffffffffffffda RBX: 00007faa7c995fa0 RCX: 00007faa7c71cdd9 [ 1394.781358][T22827] RDX: 0000000020008000 RSI: 0000200000000040 RDI: 0000000000000004 [ 1394.781374][T22827] RBP: 00007faa7b16f090 R08: 0000000000000000 R09: 0000000000000000 [ 1394.781390][T22827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1394.781404][T22827] R13: 00007faa7c996038 R14: 00007faa7c995fa0 R15: 00007fff73cc9ea8 [ 1394.781426][T22827] [ 1394.796330][T22831] loop6: detected capacity change from 0 to 512 [ 1394.914823][T22832] xt_NFQUEUE: number of total queues is 0 [ 1394.961034][T22831] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1394.973795][T22837] team0: Device gtp0 is of different type [ 1394.985447][T22831] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 1395.020664][T22831] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.5545: Corrupt directory, running e2fsck is recommended [ 1395.034903][T22831] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 1395.052194][T22831] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.5545: corrupted in-inode xattr: e_name out of bounds [ 1395.068853][T22831] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1395.069060][T22831] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.5545: couldn't read orphan inode 15 (err -117) [ 1395.078221][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1395.078250][ C0] EXT4-fs (loop6): initial error at time 1395: ext4_iget_extra_inode:5128: inode 15 [ 1395.078280][ C0] EXT4-fs (loop6): last error at time 1395: ext4_iget_extra_inode:5128: inode 15 [ 1395.116585][T22841] loop2: detected capacity change from 0 to 512 [ 1395.125545][T22831] loop6: lost filesystem error report for type 5 error -117 [ 1395.133672][T22831] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1395.186460][T22841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1395.347267][T22855] xfrm0 speed is unknown, defaulting to 1000 [ 1395.353712][T22855] xfrm0 speed is unknown, defaulting to 1000 [ 1395.360047][T22855] xfrm0 speed is unknown, defaulting to 1000 [ 1395.382693][T22858] loop5: detected capacity change from 0 to 128 [ 1395.443851][T22200] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1395.468021][T22859] loop4: detected capacity change from 0 to 1024 [ 1395.490074][T22859] EXT4-fs: Ignoring removed mblk_io_submit option [ 1395.546075][T22859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1395.579759][T22859] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 3: comm syz.4.5551: lblock 3 mapped to illegal pblock 3 (length 3) [ 1395.603108][T22859] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 1395.607329][T22869] loop5: detected capacity change from 0 to 256 [ 1395.624343][T22859] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1395.624343][T22859] [ 1395.724608][T22875] FAULT_INJECTION: forcing a failure. [ 1395.724608][T22875] name failslab, interval 1, probability 0, space 0, times 0 [ 1395.748986][T22869] FAT-fs (loop5): codepage cp936 not found [ 1395.762487][T18461] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1395.765173][T22875] CPU: 0 UID: 0 PID: 22875 Comm: syz.2.5556 Tainted: G W syzkaller #0 PREEMPT(full) [ 1395.765262][T22875] Tainted: [W]=WARN [ 1395.765269][T22875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1395.765282][T22875] Call Trace: [ 1395.765290][T22875] [ 1395.765299][T22875] __dump_stack+0x1d/0x30 [ 1395.765325][T22875] dump_stack_lvl+0x95/0xd0 [ 1395.765348][T22875] dump_stack+0x15/0x1b [ 1395.765369][T22875] should_fail_ex+0x263/0x280 [ 1395.765403][T22875] should_failslab+0x8c/0xb0 [ 1395.765437][T22875] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 1395.765491][T22875] ? __alloc_skb+0x2d6/0x690 [ 1395.765513][T22875] __alloc_skb+0x2d6/0x690 [ 1395.765532][T22875] ? __alloc_skb+0x200/0x690 [ 1395.765552][T22875] netlink_alloc_large_skb+0xbf/0xf0 [ 1395.765628][T22875] netlink_sendmsg+0x40c/0x6f0 [ 1395.765724][T22875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1395.765754][T22875] ____sys_sendmsg+0x563/0x5b0 [ 1395.765782][T22875] ___sys_sendmsg+0x195/0x1e0 [ 1395.765816][T22875] __x64_sys_sendmsg+0xd4/0x160 [ 1395.765857][T22875] x64_sys_call+0x194c/0x3020 [ 1395.765882][T22875] do_syscall_64+0x12c/0x3b0 [ 1395.765909][T22875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.765930][T22875] RIP: 0033:0x7f951cc7cdd9 [ 1395.766006][T22875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1395.766025][T22875] RSP: 002b:00007f951b6cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1395.766047][T22875] RAX: ffffffffffffffda RBX: 00007f951cef5fa0 RCX: 00007f951cc7cdd9 [ 1395.766063][T22875] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1395.766101][T22875] RBP: 00007f951b6cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1395.766115][T22875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1395.766129][T22875] R13: 00007f951cef6038 R14: 00007f951cef5fa0 R15: 00007ffd670e9178 [ 1395.766149][T22875] [ 1395.837272][T22855] infiniband syz0: set active [ 1395.837314][T11781] xfrm0 speed is unknown, defaulting to 1000 [ 1395.852872][T22878] tmpfs: Bad value for 'nr_blocks' [ 1395.997302][T22855] infiniband syz0: added xfrm0 [ 1396.002849][T18461] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 1396.033642][T18461] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 1396.058353][T22869] SET target dimension over the limit! [ 1396.063611][T22855] RDS/IB: syz0: added [ 1396.073058][T18461] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 3: comm syz-executor: path /217/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 1396.094218][T22855] smc: adding ib device syz0 with port count 1 [ 1396.101104][T18461] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 8: comm syz-executor: path /217/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 1396.121573][T22855] smc: ib device syz0 port 1 has no pnetid [ 1396.180904][T11781] xfrm0 speed is unknown, defaulting to 1000 [ 1396.187427][T22855] xfrm0 speed is unknown, defaulting to 1000 [ 1396.196872][T22889] Cannot find set identified by id 0 to match [ 1396.256153][T20812] tipc: Subscription rejected, illegal request [ 1396.358857][T22855] xfrm0 speed is unknown, defaulting to 1000 [ 1396.378150][T22890] loop2: detected capacity change from 0 to 128 [ 1396.443857][T22855] xfrm0 speed is unknown, defaulting to 1000 [ 1396.483930][ T4120] tipc: Subscription rejected, illegal request [ 1396.501662][T22862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1396.518540][ T310] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.589493][T22855] xfrm0 speed is unknown, defaulting to 1000 [ 1396.663372][ T310] bond0: (slave netdevsim2): Releasing backup interface [ 1396.672936][ T310] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.728030][T22855] xfrm0 speed is unknown, defaulting to 1000 [ 1396.748396][ T310] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.805680][ T310] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.942407][T20812] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 1396.956791][ T310] bridge_slave_1: left allmulticast mode [ 1396.962595][ T310] bridge_slave_1: left promiscuous mode [ 1396.969740][T20812] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 1396.972719][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.993980][T20812] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1396.993980][T20812] [ 1397.013909][T22000] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1397.026458][ T310] bridge_slave_0: left allmulticast mode [ 1397.036302][T22000] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1397.040602][ T310] bridge_slave_0: left promiscuous mode [ 1397.068349][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1397.273544][ T310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1397.296106][ T310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1397.319042][ T310] bond0 (unregistering): Released all slaves [ 1397.357377][T22904] xfrm0 speed is unknown, defaulting to 1000 [ 1397.382928][ T310] tipc: Left network mode [ 1397.507263][T22930] pim6reg1: entered allmulticast mode [ 1397.551336][T22939] netlink: 'syz.3.5571': attribute type 10 has an invalid length. [ 1397.577311][ T310] hsr_slave_0: left promiscuous mode [ 1397.584922][ T310] hsr_slave_1: left promiscuous mode [ 1397.591534][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1397.606175][ T310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1397.621513][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1397.629588][ T310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1397.650413][ T310] veth1_macvtap: left promiscuous mode [ 1397.661495][ T310] veth0_macvtap: left promiscuous mode [ 1397.670675][ T310] veth1_vlan: left promiscuous mode [ 1397.679376][ T310] veth0_vlan: left promiscuous mode [ 1397.805292][ T310] team0 (unregistering): Port device team_slave_1 removed [ 1397.823632][ T310] team0 (unregistering): Port device team_slave_0 removed [ 1397.871919][T22939] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1397.881443][T22939] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1397.890399][T22939] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1397.900323][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1398.108899][T22963] netlink: 'syz.3.5578': attribute type 39 has an invalid length. [ 1398.460160][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1398.574614][T22904] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.591016][T22904] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.598225][T22904] bridge_slave_0: entered allmulticast mode [ 1398.606465][T22904] bridge_slave_0: entered promiscuous mode [ 1398.613990][T22904] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.621180][T22904] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.628363][T22904] bridge_slave_1: entered allmulticast mode [ 1398.635030][T22904] bridge_slave_1: entered promiscuous mode [ 1398.684351][T22904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1398.697594][T22904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1398.761877][T22904] team0: Port device team_slave_0 added [ 1398.782185][T22904] team0: Port device team_slave_1 added [ 1398.815401][T22904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1398.832856][T22904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1398.873817][T22904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1398.888044][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1398.895540][T22904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1398.902724][T22904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1398.936646][T22904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1398.988339][T22904] hsr_slave_0: entered promiscuous mode [ 1398.994575][T22904] hsr_slave_1: entered promiscuous mode [ 1399.000501][T22904] debugfs: 'hsr0' already exists in 'hsr' [ 1399.019376][T22904] Cannot create hsr debugfs directory [ 1399.074737][T23042] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5597'. [ 1399.089694][ T28] kauditd_printk_skb: 246 callbacks suppressed [ 1399.089710][ T28] audit: type=1400 audit(1399.058:29191): avc: denied { ioctl } for pid=23045 comm="syz.2.5598" path="socket:[80837]" dev="sockfs" ino=80837 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1399.108114][T23042] bridge0: port 2(bridge_slave_1) entered disabled state [ 1399.168243][T23042] bridge_slave_1 (unregistering): left allmulticast mode [ 1399.179817][T23042] bridge_slave_1 (unregistering): left promiscuous mode [ 1399.190772][T23042] bridge0: port 2(bridge_slave_1) entered disabled state [ 1399.222770][ T28] audit: type=1400 audit(1399.198:29192): avc: denied { write } for pid=23047 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1399.266877][ T28] audit: type=1400 audit(1399.238:29193): avc: denied { write } for pid=23061 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1399.290097][ T3020] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1399.343163][T22904] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1399.361196][T22904] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1399.383824][T22904] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1399.444103][T22904] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1399.461286][T22904] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1399.506845][ T28] audit: type=1400 audit(1399.478:29194): avc: denied { create } for pid=23073 comm="syz.2.5604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1399.545051][ T28] audit: type=1400 audit(1399.498:29195): avc: denied { write } for pid=23073 comm="syz.2.5604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1399.621188][T22904] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1400.284106][T22904] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1400.307896][T22904] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1400.432409][T23105] syzkaller0: entered promiscuous mode [ 1400.438541][T23105] syzkaller0: entered allmulticast mode [ 1400.440639][ T28] audit: type=1400 audit(1400.408:29196): avc: denied { ioctl } for pid=23099 comm="syz.2.5612" path="socket:[81964]" dev="sockfs" ino=81964 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1400.516692][T23116] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5618'. [ 1400.517013][T23113] netlink: 279 bytes leftover after parsing attributes in process `syz.3.5617'. [ 1400.565494][T22904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1400.598335][T22904] 8021q: adding VLAN 0 to HW filter on device team0 [ 1400.607431][T23120] netlink: 'syz.5.5620': attribute type 10 has an invalid length. [ 1400.618263][ T28] audit: type=1400 audit(1400.588:29197): avc: denied { setopt } for pid=23118 comm="syz.5.5620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1400.650147][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 1400.657249][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1400.673849][ T28] audit: type=1400 audit(1400.628:29198): avc: denied { write } for pid=23122 comm="syz.4.5622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1400.694196][ T28] audit: type=1400 audit(1400.638:29199): avc: denied { create } for pid=23123 comm="syz.3.5621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1400.728739][ T4112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1400.735885][ T4112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1400.875606][ T28] audit: type=1400 audit(1400.848:29200): avc: denied { create } for pid=23128 comm="syz.5.5624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1400.987494][T22904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1401.105140][T22904] veth0_vlan: entered promiscuous mode [ 1401.114450][T22904] veth1_vlan: entered promiscuous mode [ 1401.137132][T22904] veth0_macvtap: entered promiscuous mode [ 1401.145149][T22904] veth1_macvtap: entered promiscuous mode [ 1401.156380][T22904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1401.167280][T22904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1401.178146][ T4120] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.187420][ T4120] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.199238][ T4120] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.208575][ T4120] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.879058][T23173] FAULT_INJECTION: forcing a failure. [ 1401.879058][T23173] name failslab, interval 1, probability 0, space 0, times 0 [ 1401.913863][T23173] CPU: 1 UID: 0 PID: 23173 Comm: syz.7.5564 Tainted: G W syzkaller #0 PREEMPT(full) [ 1401.913901][T23173] Tainted: [W]=WARN [ 1401.913988][T23173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1401.914002][T23173] Call Trace: [ 1401.914009][T23173] [ 1401.914016][T23173] __dump_stack+0x1d/0x30 [ 1401.914044][T23173] dump_stack_lvl+0x95/0xd0 [ 1401.914068][T23173] dump_stack+0x15/0x1b [ 1401.914087][T23173] should_fail_ex+0x263/0x280 [ 1401.914162][T23173] should_failslab+0x8c/0xb0 [ 1401.914265][T23173] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 1401.914300][T23173] ? __alloc_skb+0x2d6/0x690 [ 1401.914393][T23173] __alloc_skb+0x2d6/0x690 [ 1401.914414][T23173] ? __alloc_skb+0x200/0x690 [ 1401.914434][T23173] netlink_alloc_large_skb+0xbf/0xf0 [ 1401.914458][T23173] netlink_sendmsg+0x40c/0x6f0 [ 1401.914542][T23173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1401.914643][T23173] ____sys_sendmsg+0x563/0x5b0 [ 1401.914667][T23173] ___sys_sendmsg+0x195/0x1e0 [ 1401.914749][T23173] __x64_sys_sendmsg+0xd4/0x160 [ 1401.914780][T23173] x64_sys_call+0x194c/0x3020 [ 1401.914808][T23173] do_syscall_64+0x12c/0x3b0 [ 1401.914858][T23173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.914879][T23173] RIP: 0033:0x7fa39a3fcdd9 [ 1401.914924][T23173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1401.914995][T23173] RSP: 002b:00007fa398e4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1401.915015][T23173] RAX: ffffffffffffffda RBX: 00007fa39a675fa0 RCX: 00007fa39a3fcdd9 [ 1401.915028][T23173] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1401.915041][T23173] RBP: 00007fa398e4f090 R08: 0000000000000000 R09: 0000000000000000 [ 1401.915053][T23173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1401.915065][T23173] R13: 00007fa39a676038 R14: 00007fa39a675fa0 R15: 00007ffeafba08c8 [ 1401.915125][T23173] [ 1403.126914][T23212] netlink: 'syz.5.5644': attribute type 29 has an invalid length. [ 1403.152421][T23204] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5642'. [ 1403.174583][T23212] Ÿë: port 1(gretap0) entered blocking state [ 1403.185941][T23212] Ÿë: port 1(gretap0) entered disabled state [ 1403.193331][T23212] gretap0: entered allmulticast mode [ 1403.201682][T23212] gretap0: entered promiscuous mode [ 1403.218682][T23204] netlink: 3074 bytes leftover after parsing attributes in process `syz.3.5642'. [ 1404.157642][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 1404.157655][ T28] audit: type=1400 audit(1404.128:29210): avc: denied { create } for pid=23252 comm="syz.2.5663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1404.663057][T23256] syzkaller0: entered promiscuous mode [ 1404.678884][T23256] syzkaller0: entered allmulticast mode [ 1404.679379][ T28] audit: type=1400 audit(1404.648:29211): avc: denied { tracepoint } for pid=23264 comm="syz.7.5667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1404.878186][ T28] audit: type=1400 audit(1404.848:29212): avc: denied { ioctl } for pid=23270 comm="syz.3.5670" path="socket:[83039]" dev="sockfs" ino=83039 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1405.357285][T23265] sit0: entered allmulticast mode [ 1405.379954][T23275] sit0: entered promiscuous mode [ 1405.483847][T23284] syzkaller0: entered promiscuous mode [ 1405.489352][T23284] syzkaller0: entered allmulticast mode [ 1405.596642][T23298] netlink: 'syz.2.5676': attribute type 10 has an invalid length. [ 1405.622440][T23298] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5676'. [ 1405.637409][T23298] bond0: entered promiscuous mode [ 1405.643013][T23298] bond_slave_0: entered promiscuous mode [ 1405.649194][T23298] bond_slave_1: entered promiscuous mode [ 1405.663148][T23294] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.5679'. [ 1405.678395][T23298] bridge0: port 3(bond0) entered blocking state [ 1405.685091][T23298] bridge0: port 3(bond0) entered disabled state [ 1405.691776][T23298] bond0: entered allmulticast mode [ 1405.697096][T23298] bond_slave_0: entered allmulticast mode [ 1405.702941][T23298] bond_slave_1: entered allmulticast mode [ 1405.713297][T23298] bridge0: port 3(bond0) entered blocking state [ 1405.719584][T23298] bridge0: port 3(bond0) entered forwarding state [ 1405.745888][T23310] netlink: 'syz.5.5685': attribute type 21 has an invalid length. [ 1405.774814][T23310] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5685'. [ 1405.797950][ T28] audit: type=1400 audit(1405.768:29213): avc: denied { read } for pid=23312 comm="syz.3.5686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1405.818161][ T28] audit: type=1400 audit(1405.788:29214): avc: denied { write } for pid=23312 comm="syz.3.5686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1405.838975][T23313] netlink: 'syz.3.5686': attribute type 10 has an invalid length. [ 1405.855355][T23317] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1405.869748][T23317] syzkaller0: entered promiscuous mode [ 1405.875502][T23317] syzkaller0: entered allmulticast mode [ 1405.875948][T23321] netlink: 'syz.5.5689': attribute type 10 has an invalid length. [ 1406.057957][ T28] audit: type=1400 audit(1406.028:29215): avc: denied { write } for pid=23337 comm="syz.4.5696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1406.078018][T23350] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5701'. [ 1406.095968][T23351] netlink: 'syz.3.5697': attribute type 10 has an invalid length. [ 1406.268135][T23351] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1406.284949][T23351] team0: Port device netdevsim1 added [ 1406.307141][T23360] netlink: 16182 bytes leftover after parsing attributes in process `syz.2.5704'. [ 1406.325788][T23360] netlink: 'syz.2.5704': attribute type 10 has an invalid length. [ 1406.334428][T23360] veth0_macvtap: left promiscuous mode [ 1406.348267][T23365] netlink: 'syz.7.5706': attribute type 39 has an invalid length. [ 1406.365266][T23365] hsr_slave_0 (unregistering): left promiscuous mode [ 1406.465644][ T28] audit: type=1400 audit(1406.438:29216): avc: denied { create } for pid=23370 comm="syz.2.5709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1406.485847][ T28] audit: type=1400 audit(1406.438:29217): avc: denied { ioctl } for pid=23370 comm="syz.2.5709" path="socket:[83172]" dev="sockfs" ino=83172 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1406.620649][T23375] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.5711'. [ 1407.069019][T23395] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1407.078784][T23395] syzkaller0: entered promiscuous mode [ 1407.078986][ T28] audit: type=1400 audit(1407.058:29218): avc: denied { create } for pid=23396 comm="syz.5.5722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1407.093704][T23395] syzkaller0: entered allmulticast mode [ 1407.149139][ T28] audit: type=1400 audit(1407.118:29219): avc: denied { create } for pid=23400 comm="syz.5.5723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1407.222549][T23409] netlink: 'syz.7.5726': attribute type 21 has an invalid length. [ 1407.245839][T23409] netlink: 156 bytes leftover after parsing attributes in process `syz.7.5726'. [ 1407.319456][T23422] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5732'. [ 1407.332055][T23416] netlink: 'syz.5.5729': attribute type 3 has an invalid length. [ 1407.350886][T23416] netlink: 16066 bytes leftover after parsing attributes in process `syz.5.5729'. [ 1407.657559][T23443] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5736'. [ 1408.454426][T23510] netlink: 'syz.5.5768': attribute type 10 has an invalid length. [ 1408.479740][T23510] team0: Port device veth1_to_hsr added [ 1408.507013][T23514] netlink: 'syz.3.5770': attribute type 10 has an invalid length. [ 1408.583013][T23520] can: request_module (can-proto-0) failed. [ 1409.072111][T23535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1409.082491][T23535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1409.648341][T23539] loop2: detected capacity change from 0 to 128 [ 1409.666535][T23539] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1409.681819][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 1409.681832][ T28] audit: type=1400 audit(1409.658:29239): avc: denied { write } for pid=23538 comm="syz.2.5781" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1409.740587][ T28] audit: type=1400 audit(1409.658:29240): avc: denied { read open } for pid=23538 comm="syz.2.5781" path="/74/file0/bus" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1409.780598][ T28] audit: type=1400 audit(1409.658:29241): avc: denied { write } for pid=23538 comm="syz.2.5781" name="bus" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1410.591681][T22200] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1410.678617][ T28] audit: type=1400 audit(1410.648:29242): avc: denied { name_bind } for pid=23549 comm="syz.7.5784" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1410.716496][T23557] __nla_validate_parse: 3 callbacks suppressed [ 1410.716539][T23557] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5785'. [ 1410.757002][ T28] audit: type=1400 audit(1410.728:29243): avc: denied { name_bind } for pid=23566 comm="syz.5.5789" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1410.799856][ T28] audit: type=1400 audit(1410.768:29244): avc: denied { write } for pid=23543 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1410.858713][ T28] audit: type=1400 audit(1410.798:29245): avc: denied { bind } for pid=23573 comm="syz.5.5791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1410.929068][ T28] audit: type=1400 audit(1410.798:29246): avc: denied { write } for pid=23573 comm="syz.5.5791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1410.993923][ T28] audit: type=1400 audit(1410.818:29247): avc: denied { write } for pid=23576 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1411.125183][ T28] audit: type=1400 audit(1411.098:29248): avc: denied { write } for pid=23591 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1411.197072][T23605] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5798'. [ 1411.231803][T23605] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5798'. [ 1411.278801][ T4120] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1411.279972][T23605] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5798'. [ 1411.302773][ T4120] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1411.334607][T23605] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5798'. [ 1411.338793][ T4120] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1411.371974][T23617] loop5: detected capacity change from 0 to 512 [ 1411.381915][ T4120] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1411.423634][T23617] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1411.802325][T17359] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1411.971370][T23653] netlink: 'syz.7.5811': attribute type 5 has an invalid length. [ 1412.095407][T23674] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5815'. [ 1413.001691][T23697] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1413.435008][T23710] xt_hashlimit: size too large, truncated to 1048576 [ 1413.776077][T23738] loop3: detected capacity change from 0 to 4096 [ 1413.789524][T23738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1413.885096][T22498] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1413.960759][T23748] dvmrp6: entered allmulticast mode [ 1413.969245][T23750] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5847'. [ 1414.140454][T23770] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 1414.151584][ T3384] IPVS: starting estimator thread 0... [ 1414.185538][T23774] netlink: 'syz.7.5854': attribute type 29 has an invalid length. [ 1414.260655][T23773] IPVS: using max 2688 ests per chain, 134400 per kthread [ 1414.465117][T23789] can: request_module (can-proto-0) failed. [ 1414.473208][T23791] loop3: detected capacity change from 0 to 4096 [ 1414.499113][T23789] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5861'. [ 1414.499614][T23791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1414.588234][T22498] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1414.686260][T23820] loop3: detected capacity change from 0 to 1024 [ 1414.697081][T23820] EXT4-fs: Ignoring removed bh option [ 1414.713053][T23820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1414.728345][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 1414.728358][ T28] audit: type=1400 audit(1414.708:29266): avc: denied { write } for pid=23819 comm="syz.3.5876" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1414.755975][ T28] audit: type=1400 audit(1414.718:29267): avc: denied { map } for pid=23819 comm="syz.3.5876" path="/67/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1414.781094][ T28] audit: type=1400 audit(1414.718:29268): avc: denied { execute } for pid=23819 comm="syz.3.5876" path="/67/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1415.289240][T23831] can: request_module (can-proto-0) failed. [ 1415.297192][T23831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5881'. [ 1415.889571][T23844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5887'. [ 1415.902971][T22498] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1416.579979][T23857] netlink: 'syz.4.5892': attribute type 10 has an invalid length. [ 1416.895336][T23905] loop3: detected capacity change from 0 to 512 [ 1416.916966][T23905] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1416.958409][T23905] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #17: comm syz.3.5915: inode has both inline data and extents flags [ 1416.980603][T23905] loop3: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 1416.987445][T23905] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.5915: couldn't read orphan inode 17 (err -117) [ 1416.996714][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1416.996740][ C1] EXT4-fs (loop3): initial error at time 1416: ext4_orphan_get:1397: inode 17 [ 1416.996765][ C1] EXT4-fs (loop3): last error at time 1416: ext4_orphan_get:1397: inode 17 [ 1417.010073][T23920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1417.015680][T23905] loop3: lost filesystem error report for type 5 error -117 [ 1417.042229][T23920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1417.057686][T23905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1417.102819][T23926] loop2: detected capacity change from 0 to 1024 [ 1417.115047][T23926] EXT4-fs: Ignoring removed bh option [ 1417.125288][T22498] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1417.137031][T23926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1417.165967][ T28] audit: type=1400 audit(1417.138:29269): avc: denied { write } for pid=23924 comm="syz.2.5923" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1417.207704][ T28] audit: type=1400 audit(1417.168:29270): avc: denied { append } for pid=23924 comm="syz.2.5923" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1417.252313][ T28] audit: type=1400 audit(1417.168:29271): avc: denied { ioctl } for pid=23931 comm="syz.3.5924" path="socket:[84993]" dev="sockfs" ino=84993 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1417.343400][T22200] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1417.497001][T23961] netlink: 'syz.2.5938': attribute type 29 has an invalid length. [ 1418.103951][T23994] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.111244][T23994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.165599][T23994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1418.174557][T23994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1418.228431][ T3374] xfrm0 speed is unknown, defaulting to 1000 [ 1418.231685][ T4112] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.246959][ T3374] syz0: Port: 1 Link DOWN [ 1418.274421][ T4112] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.291805][T24006] loop7: detected capacity change from 0 to 2048 [ 1418.299647][ T10] xfrm0 speed is unknown, defaulting to 1000 [ 1418.305696][ T4112] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.324785][ T4112] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.342582][T24013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5962'. [ 1418.373167][T24006] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 1418.394498][T24006] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 1418.433323][T22904] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 1418.458072][T24027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5968'. [ 1418.467266][T24028] loop5: detected capacity change from 0 to 512 [ 1418.474197][T24028] EXT4-fs: test_dummy_encryption option not supported [ 1418.588572][T24046] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5976'. [ 1418.609847][T24048] loop3: detected capacity change from 0 to 2048 [ 1418.622681][T24048] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1418.632596][T24048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 1418.655362][T22498] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 1418.709011][ T28] audit: type=1400 audit(1418.678:29272): avc: denied { append } for pid=24057 comm="syz.5.5981" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1418.748700][T24062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5982'. [ 1418.828469][ T28] audit: type=1400 audit(1418.798:29273): avc: denied { read } for pid=24071 comm="syz.5.5987" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1418.855653][ T28] audit: type=1400 audit(1418.798:29274): avc: denied { open } for pid=24071 comm="syz.5.5987" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1418.934114][T24086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5994'. [ 1419.032399][T24099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6000'. [ 1419.049594][T24099] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6000'. [ 1419.059950][T24099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6000'. [ 1419.069391][T24099] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6000'. [ 1419.146419][T24112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1419.155355][T24112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1419.161406][ T28] audit: type=1400 audit(1419.138:29275): avc: denied { bind } for pid=24107 comm="syz.5.6004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1419.191124][T24114] loop5: detected capacity change from 0 to 256 [ 1419.197986][T24114] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1419.211463][T24114] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1419.261028][T24116] netlink: 'syz.5.6008': attribute type 29 has an invalid length. [ 1419.605357][T24170] loop7: detected capacity change from 0 to 2048 [ 1419.631764][T24170] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 1419.663228][T24170] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 1419.689569][T22904] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 1419.872488][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1419.872504][ T28] audit: type=1400 audit(1419.848:29278): avc: denied { shutdown } for pid=24212 comm="syz.5.6049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1419.919452][ T28] audit: type=1400 audit(1419.848:29279): avc: denied { read } for pid=24214 comm="syz.2.6050" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1419.958898][ T28] audit: type=1400 audit(1419.848:29280): avc: denied { open } for pid=24214 comm="syz.2.6050" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1419.995213][ T28] audit: type=1400 audit(1419.858:29281): avc: denied { ioctl } for pid=24214 comm="syz.2.6050" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1420.020880][ T28] audit: type=1400 audit(1419.868:29282): avc: denied { connect } for pid=24212 comm="syz.5.6049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1420.040719][ T28] audit: type=1400 audit(1419.868:29283): avc: denied { write } for pid=24212 comm="syz.5.6049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1420.106597][T24241] loop7: detected capacity change from 0 to 512 [ 1420.129332][T24246] loop3: detected capacity change from 0 to 512 [ 1420.141003][T24241] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1420.155280][T24246] EXT4-fs (loop3): 1 orphan inode deleted [ 1420.161440][T24246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1420.178862][T24246] EXT4-fs (loop3): shut down requested (2) [ 1420.187112][ T28] audit: type=1400 audit(1420.168:29284): avc: denied { read } for pid=2962 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1420.214310][T22498] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1420.217593][ T28] audit: type=1400 audit(1420.168:29285): avc: denied { search } for pid=2962 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1420.232541][T24241] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #17: comm syz.7.6061: inode has both inline data and extents flags [ 1420.244888][ T28] audit: type=1400 audit(1420.168:29286): avc: denied { write search } for pid=2962 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1420.279730][ T28] audit: type=1400 audit(1420.168:29287): avc: denied { add_name } for pid=2962 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1420.316611][T24241] loop7: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 1420.316908][T24241] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.6061: couldn't read orphan inode 17 (err -117) [ 1420.326098][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1420.326122][ C1] EXT4-fs (loop7): initial error at time 1420: ext4_orphan_get:1397: inode 17 [ 1420.326152][ C1] EXT4-fs (loop7): last error at time 1420: ext4_orphan_get:1397: inode 17 [ 1420.362715][T24241] loop7: lost filesystem error report for type 5 error -117 [ 1420.363304][T24241] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1420.418951][T22904] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1420.501717][T24277] netlink: 'syz.4.6077': attribute type 10 has an invalid length. [ 1420.522866][T24279] netlink: 'syz.3.6078': attribute type 29 has an invalid length. [ 1420.568176][T24277] team0: Port device veth1_to_hsr added [ 1420.717040][T24295] Ÿë: port 1(gretap0) entered blocking state [ 1420.729955][T24295] Ÿë: port 1(gretap0) entered disabled state [ 1420.763595][T24295] gretap0: entered allmulticast mode [ 1420.770491][T24295] gretap0: entered promiscuous mode [ 1421.085213][T24304] 9p: Bad value for 'source' [ 1421.166402][T24323] __nla_validate_parse: 4 callbacks suppressed [ 1421.166423][T24323] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6096'. [ 1421.205594][T24326] netlink: 'syz.3.6097': attribute type 29 has an invalid length. [ 1421.286608][T24341] loop3: detected capacity change from 0 to 512 [ 1421.298588][T24341] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1421.312314][T24341] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #17: comm syz.3.6104: inode has both inline data and extents flags [ 1421.325530][T24341] loop3: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 1421.326015][T24341] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.6104: couldn't read orphan inode 17 (err -117) [ 1421.335217][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1421.335240][ C0] EXT4-fs (loop3): initial error at time 1421: ext4_orphan_get:1397: inode 17 [ 1421.335272][ C0] EXT4-fs (loop3): last error at time 1421: ext4_orphan_get:1397: inode 17 [ 1421.378061][T24341] loop3: lost filesystem error report for type 5 error -117 [ 1421.378808][T24341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1421.382348][T24346] 9p: Bad value for 'source' [ 1421.431178][T22498] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1421.458580][T24352] random: crng reseeded on system resumption [ 1421.544113][T24369] loop5: detected capacity change from 0 to 128 [ 1421.575195][T24374] 9p: Bad value for 'source' [ 1422.004726][T24425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6143'. [ 1422.038777][T24435] netlink: 'syz.4.6147': attribute type 10 has an invalid length. [ 1422.160249][T24452] loop3: detected capacity change from 0 to 2048 [ 1422.185805][T24452] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1422.202229][T24462] netlink: 'syz.2.6158': attribute type 29 has an invalid length. [ 1422.230023][T24452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 1422.254217][T24462] Ÿë: port 1(gretap0) entered blocking state [ 1422.260408][T24462] Ÿë: port 1(gretap0) entered disabled state [ 1422.266634][T24462] gretap0: entered allmulticast mode [ 1422.272573][T24462] gretap0: entered promiscuous mode [ 1422.290821][T22498] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 1422.808271][T24514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6183'. [ 1422.940682][T24527] 9p: Bad value for 'source' [ 1422.962520][T24530] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6191'. [ 1422.971577][T24530] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6191'. [ 1422.981339][T24530] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6191'. [ 1423.024750][T24530] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6191'. [ 1423.449548][T24552] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1424.144638][T24556] 9p: Bad value for 'source' [ 1424.288107][T24562] loop2: detected capacity change from 0 to 512 [ 1424.297573][T24562] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1424.331830][T24562] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #17: comm syz.2.6204: inode has both inline data and extents flags [ 1424.378445][T24562] loop2: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 1424.378760][T24562] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.6204: couldn't read orphan inode 17 (err -117) [ 1424.388001][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1424.388023][ C0] EXT4-fs (loop2): initial error at time 1424: ext4_orphan_get:1397: inode 17 [ 1424.388058][ C0] EXT4-fs (loop2): last error at time 1424: ext4_orphan_get:1397: inode 17 [ 1424.570234][T24562] loop2: lost filesystem error report for type 5 error -117 [ 1424.571663][T24562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1424.594910][T24584] syzkaller0: entered promiscuous mode [ 1424.600855][T24584] syzkaller0: entered allmulticast mode [ 1424.734408][T22200] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1425.012181][T24607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1425.240884][T24607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1425.264605][T24613] can: request_module (can-proto-0) failed. [ 1425.481648][T24618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6219'. [ 1425.557405][T24623] loop3: detected capacity change from 0 to 512 [ 1425.569744][T24623] EXT4-fs (loop3): 1 orphan inode deleted [ 1425.577608][T24623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1425.609695][T22498] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1425.673694][T24637] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6234'. [ 1425.841489][T24645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6238'. [ 1425.889938][T24657] loop4: detected capacity change from 0 to 512 [ 1425.920691][T24657] EXT4-fs (loop4): 1 orphan inode deleted [ 1425.934514][T24657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1425.960118][T22000] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1425.985583][T24653] bridge0: port 2(bridge_slave_1) entered disabled state [ 1425.992798][T24653] bridge0: port 1(bridge_slave_0) entered disabled state [ 1426.043982][T24653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1426.054601][T24653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1426.117477][ T4112] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1426.127193][ T4112] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.136763][T24678] syzkaller0: entered promiscuous mode [ 1426.142472][T24678] syzkaller0: entered allmulticast mode [ 1426.156977][ T4112] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1426.169937][T24683] netlink: 'syz.7.6252': attribute type 10 has an invalid length. [ 1426.170588][ T4112] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.195879][T24687] __nla_validate_parse: 1 callbacks suppressed [ 1426.195897][T24687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6254'. [ 1426.212665][ T4112] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1426.231562][ T4112] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.241461][ T4112] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1426.257294][ T4112] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.325793][T24702] 9p: Bad value for 'source' [ 1426.351990][T24704] loop4: detected capacity change from 0 to 256 [ 1426.371487][T24704] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1426.405032][T24704] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1426.537094][T24727] loop3: detected capacity change from 0 to 128 [ 1426.562429][T24732] 9p: Bad value for 'source' [ 1426.674410][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 1426.674464][ T28] audit: type=1400 audit(1426.648:29298): avc: denied { bind } for pid=24738 comm="syz.4.6280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1426.705966][T24741] loop5: detected capacity change from 0 to 256 [ 1426.716278][ T28] audit: type=1400 audit(1426.688:29299): avc: denied { read } for pid=24738 comm="syz.4.6280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1426.739563][T24741] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1426.773204][T24741] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1427.271426][T24757] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6287'. [ 1427.300578][T24763] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6288'. [ 1427.384912][T24769] loop5: detected capacity change from 0 to 256 [ 1427.392641][T24769] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1427.424627][T24769] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1427.474458][T24776] tipc: Enabled bearer , priority 0 [ 1427.482235][T24776] syzkaller0: entered promiscuous mode [ 1427.487761][T24776] syzkaller0: entered allmulticast mode [ 1427.497267][T24776] tipc: Resetting bearer [ 1427.503780][T24775] tipc: Resetting bearer [ 1427.517872][T24775] tipc: Disabling bearer [ 1427.543088][T24785] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6299'. [ 1427.625094][T24797] loop5: detected capacity change from 0 to 256 [ 1427.632121][T24797] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1427.665692][T24797] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1427.673548][T24803] loop3: detected capacity change from 0 to 256 [ 1427.701789][T24803] FAT-fs (loop3): codepage cp862 not found [ 1427.795132][ T28] audit: type=1400 audit(1427.768:29300): avc: denied { connect } for pid=24813 comm="syz.3.6312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1427.814817][ T28] audit: type=1400 audit(1427.768:29301): avc: denied { write } for pid=24813 comm="syz.3.6312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1428.508087][ T28] audit: type=1400 audit(1428.478:29302): avc: denied { getopt } for pid=24828 comm="syz.3.6318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1428.530032][T24829] loop7: detected capacity change from 0 to 16384 [ 1428.712065][T24845] netlink: 'syz.5.6324': attribute type 29 has an invalid length. [ 1428.772091][T24841] loop7: detected capacity change from 16384 to 0 [ 1429.231389][T24853] FAT-fs (loop7): codepage cp1250 not found [ 1429.392690][T24878] netlink: 'syz.4.6337': attribute type 29 has an invalid length. [ 1429.409405][T24878] Ÿë: port 1(gretap0) entered blocking state [ 1429.415577][T24878] Ÿë: port 1(gretap0) entered disabled state [ 1429.421946][T24878] gretap0: entered allmulticast mode [ 1429.438032][T24878] gretap0: entered promiscuous mode [ 1429.442217][T24880] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6338'. [ 1429.500994][T24884] can: request_module (can-proto-0) failed. [ 1429.534672][T24884] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6340'. [ 1429.614083][T24902] EXT4-fs (loop4): 1 orphan inode deleted [ 1429.620855][T24902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1429.656492][T22000] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1429.673590][T24906] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1429.691286][T24905] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1429.779571][T24924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1429.788643][T24924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1429.870075][T24929] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1429.895865][ T28] audit: type=1400 audit(1429.868:29303): avc: denied { mounton } for pid=24928 comm="syz.3.6358" path="/173/file1" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 1430.235639][T24968] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1430.259475][T24968] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1430.402543][T24988] tipc: Started in network mode [ 1430.409354][T24988] tipc: Node identity a641b763d66a, cluster identity 4711 [ 1430.426890][T24988] tipc: Enabled bearer , priority 0 [ 1430.444160][T24988] syzkaller0: entered promiscuous mode [ 1430.456072][T24999] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1430.467005][T24988] syzkaller0: entered allmulticast mode [ 1430.485353][T24999] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1430.506019][T24988] tipc: Resetting bearer [ 1430.520015][T24987] tipc: Resetting bearer [ 1430.527600][T25007] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6392'. [ 1430.537396][T24987] tipc: Disabling bearer [ 1430.587777][T25008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6393'. [ 1430.688035][T25021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.695342][T25021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1430.695372][T25031] set_capacity_and_notify: 5 callbacks suppressed [ 1430.695386][T25031] loop4: detected capacity change from 0 to 256 [ 1430.743841][T25031] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1430.765260][T25031] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1430.827365][T25021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1430.838438][T25021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1430.929709][T25032] netlink: 'syz.5.6400': attribute type 29 has an invalid length. [ 1430.948558][ T229] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.958252][ T229] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.977355][ T229] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1431.005144][ T229] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1431.022655][T25070] loop4: detected capacity change from 0 to 512 [ 1431.040924][T25070] EXT4-fs (loop4): 1 orphan inode deleted [ 1431.060149][T25070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1431.141978][T25070] EXT4-fs (loop4): shut down requested (2) [ 1431.154151][ T28] audit: type=1400 audit(1431.128:29304): avc: denied { map } for pid=25078 comm="syz.2.6416" path="socket:[87867]" dev="sockfs" ino=87867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1431.219621][T22000] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1431.303337][T25093] random: crng reseeded on system resumption [ 1431.327844][T25093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1431.348949][T25093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1431.362704][T25099] netlink: 'syz.5.6425': attribute type 29 has an invalid length. [ 1431.482916][T25110] loop5: detected capacity change from 0 to 256 [ 1431.491845][T25110] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1431.515127][T25110] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1431.564066][T25116] loop5: detected capacity change from 0 to 512 [ 1431.598660][T25116] EXT4-fs (loop5): 1 orphan inode deleted [ 1431.606389][T25116] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1431.621899][T25116] EXT4-fs (loop5): shut down requested (2) [ 1431.658085][T17359] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1431.926470][T25154] loop2: detected capacity change from 0 to 512 [ 1431.946760][T25150] loop4: detected capacity change from 0 to 8192 [ 1431.954453][T25150] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1431.977160][T25154] EXT4-fs (loop2): 1 orphan inode deleted [ 1431.988593][T25154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1432.002429][T25154] EXT4-fs (loop2): shut down requested (2) [ 1432.008369][ T28] audit: type=1400 audit(1431.978:29305): avc: denied { bind } for pid=25157 comm="syz.3.6447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1432.029002][ T28] audit: type=1400 audit(1431.978:29306): avc: denied { setopt } for pid=25157 comm="syz.3.6447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1432.048335][ T28] audit: type=1400 audit(1431.978:29307): avc: denied { write } for pid=25157 comm="syz.3.6447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1432.058274][T25160] tipc: Enabled bearer , priority 0 [ 1432.079174][T22200] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1432.096606][T25160] syzkaller0: entered promiscuous mode [ 1432.105520][T25160] syzkaller0: entered allmulticast mode [ 1432.117762][T25160] tipc: Resetting bearer [ 1432.125265][T25159] tipc: Resetting bearer [ 1432.131595][T25159] tipc: Disabling bearer [ 1432.203919][T25171] netlink: 'syz.3.6453': attribute type 29 has an invalid length. [ 1432.269455][T25176] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6455'. [ 1432.331262][T25184] loop4: detected capacity change from 0 to 512 [ 1432.341082][T25184] EXT4-fs (loop4): 1 orphan inode deleted [ 1432.347712][T25184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1432.361176][T25184] EXT4-fs (loop4): shut down requested (2) [ 1432.375536][T22000] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1432.431583][T25191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6462'. [ 1432.440506][T25191] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6462'. [ 1432.449838][T25191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6462'. [ 1432.458873][T25191] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6462'. [ 1432.512736][T25197] netlink: 'syz.4.6465': attribute type 29 has an invalid length. [ 1432.605929][T25201] loop4: detected capacity change from 0 to 512 [ 1432.620928][T25201] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1432.645095][T25201] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #17: comm syz.4.6467: inode has both inline data and extents flags [ 1432.658566][T25201] loop4: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 1432.658761][T25201] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.6467: couldn't read orphan inode 17 (err -117) [ 1432.660559][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1432.668563][T25201] loop4: lost filesystem error report for type 5 error -117 [ 1432.679741][ C0] EXT4-fs (loop4): initial error at time 1432: ext4_orphan_get:1397: inode 17 [ 1432.687490][T25201] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1432.693571][ C0] EXT4-fs (loop4): last error at time 1432: ext4_orphan_get:1402 [ 1432.722863][T25209] loop5: detected capacity change from 0 to 128 [ 1432.755778][T22000] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1432.796191][ T28] audit: type=1400 audit(1432.768:29308): avc: denied { mounton } for pid=25207 comm="syz.5.6470" path="/484/file0/bus" dev="loop5" ino=1345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 1432.819414][T25215] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6473'. [ 1432.821575][T25212] Trying to write to read-only block-device loop5 [ 1432.842194][T25215] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6473'. [ 1432.847502][T25212] syz.5.6470: attempt to access beyond end of device [ 1432.847502][T25212] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 1432.870655][T25215] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6473'. [ 1432.871172][ T28] audit: type=1400 audit(1432.798:29309): avc: denied { append } for pid=25207 comm="syz.5.6470" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1432.896087][T25215] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6473'. [ 1432.912622][T25212] syz.5.6470: attempt to access beyond end of device [ 1432.912622][T25212] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 1432.933599][T25212] syz.5.6470: attempt to access beyond end of device [ 1432.933599][T25212] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 1432.933712][T25222] netlink: 'syz.4.6476': attribute type 29 has an invalid length. [ 1432.971623][T25212] syz.5.6470: attempt to access beyond end of device [ 1432.971623][T25212] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 1432.987286][T25212] syz.5.6470: attempt to access beyond end of device [ 1432.987286][T25212] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 1433.016418][T25212] syz.5.6470: attempt to access beyond end of device [ 1433.016418][T25212] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 1433.026980][T25230] loop7: detected capacity change from 0 to 512 [ 1433.031514][T25212] syz.5.6470: attempt to access beyond end of device [ 1433.031514][T25212] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 1433.050076][T25230] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1433.063975][T25232] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6481'. [ 1433.082138][T25230] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.6480: bad orphan inode 131083 [ 1433.085446][T25212] syz.5.6470: attempt to access beyond end of device [ 1433.085446][T25212] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 1433.098129][T25230] loop7: lost filesystem error report for type 5 error -117 [ 1433.115535][T25230] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1433.127278][T25212] syz.5.6470: attempt to access beyond end of device [ 1433.127278][T25212] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 1433.150649][T25212] syz.5.6470: attempt to access beyond end of device [ 1433.150649][T25212] loop5: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 1433.249333][ T28] audit: type=1400 audit(1433.218:29310): avc: denied { unmount } for pid=17359 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1433.253115][T17359] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1433.299768][T25254] netlink: 'syz.2.6493': attribute type 10 has an invalid length. [ 1433.301216][T17359] FAT-fs (loop5): Filesystem has been set read-only [ 1433.308468][T25230] EXT4-fs error (device loop7): ext4_find_dest_de:2050: inode #2: block 13: comm syz.7.6480: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 1433.315086][ T28] audit: type=1400 audit(1433.288:29311): avc: denied { write } for pid=25229 comm="syz.7.6480" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1433.380209][T22904] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1433.457562][ T28] audit: type=1400 audit(1433.428:29312): avc: denied { create } for pid=25273 comm="syz.7.6500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1434.311322][T25322] FAT-fs (loop3): codepage cp866 not found [ 1434.362463][T25319] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1434.545322][ T229] Bluetooth: hci0: Frame reassembly failed (-84) [ 1434.554483][ T28] audit: type=1400 audit(1434.528:29313): avc: denied { bind } for pid=25345 comm="syz.4.6526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1434.734536][T25349] netlink: 'syz.5.6533': attribute type 29 has an invalid length. [ 1434.843513][T25364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1434.864362][T25364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1434.886118][T25366] EXT4-fs: Ignoring removed i_version option [ 1434.922950][T25366] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1434.953579][T22200] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1435.204878][T25389] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1435.224203][T25389] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #17: comm syz.2.6552: inode has both inline data and extents flags [ 1435.237459][T25389] loop2: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 1435.237664][T25389] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.6552: couldn't read orphan inode 17 (err -117) [ 1435.246814][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1435.246833][ C0] EXT4-fs (loop2): initial error at time 1435: ext4_orphan_get:1397: inode 17 [ 1435.246866][ C0] EXT4-fs (loop2): last error at time 1435: ext4_orphan_get:1397: inode 17 [ 1435.282743][T25389] loop2: lost filesystem error report for type 5 error -117 [ 1435.283466][T25389] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1435.334014][T22200] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1435.496277][ T28] audit: type=1400 audit(1435.468:29314): avc: denied { write } for pid=25413 comm="syz.3.6563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1435.619486][T25433] 9pnet_virtio: no channels available for device 0:0002 00 [ 1435.688196][T25438] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1435.818116][T25456] set_capacity_and_notify: 10 callbacks suppressed [ 1435.818136][T25456] loop5: detected capacity change from 0 to 512 [ 1435.906110][T25463] loop2: detected capacity change from 0 to 8192 [ 1435.921999][T25463] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1435.954947][T25471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1435.997408][T25471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1436.007941][T25471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1436.039819][ T4112] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.050327][ T4112] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.070947][ T4112] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.083610][ T4112] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.134719][T25488] loop5: detected capacity change from 0 to 512 [ 1436.243671][T25497] loop5: detected capacity change from 0 to 8192 [ 1436.359988][T25514] loop2: detected capacity change from 0 to 512 [ 1436.369783][T25514] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1436.385795][T25514] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #17: comm syz.2.6611: inode has both inline data and extents flags [ 1436.401136][T25514] loop2: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 1436.403740][T25514] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.6611: couldn't read orphan inode 17 (err -117) [ 1436.413012][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1436.413039][ C1] EXT4-fs (loop2): initial error at time 1436: ext4_orphan_get:1397: inode 17 [ 1436.413087][ C1] EXT4-fs (loop2): last error at time 1436: ext4_orphan_get:1397: inode 17 [ 1436.449803][T25514] loop2: lost filesystem error report for type 5 error -117 [ 1436.451518][T25514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1436.475089][T25522] loop7: detected capacity change from 0 to 16384 [ 1436.534338][T22200] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1436.610674][T18545] Bluetooth: hci0: command 0x1003 tx timeout [ 1436.610734][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1436.670856][T25523] loop7: detected capacity change from 16384 to 0 [ 1436.677394][ C0] I/O error, dev loop7, sector 15872 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2 [ 1436.680916][T25530] loop3: detected capacity change from 0 to 8192 [ 1436.709796][T25533] loop4: detected capacity change from 0 to 128 [ 1436.717749][T25530] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1436.790716][T25538] Trying to write to read-only block-device loop4 [ 1436.853417][ T4112] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1436.885942][ T4112] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1436.916009][ T4112] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1436.935047][ T4112] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1436.990810][T25549] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1437.021870][ T4120] team0: Port device netdevsim1 removed [ 1437.056831][T25558] loop5: detected capacity change from 0 to 8192 [ 1437.066196][T22000] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1437.087659][T22000] FAT-fs (loop4): Filesystem has been set read-only [ 1437.123694][T25561] bridge0: port 3(bond0) entered disabled state [ 1437.130237][T25561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.137496][T25561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.205315][T25561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1437.214729][T25561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1437.271850][ T229] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1437.296073][ T229] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1437.322141][ T229] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1437.324229][T25589] netlink: 'syz.5.6643': attribute type 10 has an invalid length. [ 1437.355014][ T229] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1437.376240][ T4120] bond0: (slave netdevsim0): Releasing backup interface [ 1437.410513][ T229] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1437.427393][ T229] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1437.436671][ T229] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1437.459964][ T229] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1437.481661][T25550] xfrm0 speed is unknown, defaulting to 1000 [ 1437.518137][T25606] syz.4.6650 (25606) used obsolete PPPIOCDETACH ioctl [ 1437.599548][ T4120] bridge_slave_1: left allmulticast mode [ 1437.616081][ T4120] bridge_slave_1: left promiscuous mode [ 1437.629710][T25625] __nla_validate_parse: 23 callbacks suppressed [ 1437.629736][T25625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6657'. [ 1437.630029][ T4120] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.666052][ T4120] bridge_slave_0: left allmulticast mode [ 1437.676528][ T4120] bridge_slave_0: left promiscuous mode [ 1437.682486][ T4120] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.693929][ T4120] gretap0: left allmulticast mode [ 1437.699043][ T4120] gretap0: left promiscuous mode [ 1437.704819][ T4120] Ÿë: port 1(gretap0) entered disabled state [ 1437.842296][ T4120] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1437.851835][ T4120] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1437.861321][ T4120] bond0 (unregistering): Released all slaves [ 1437.956858][T25550] bridge0: port 1(bridge_slave_0) entered blocking state [ 1437.960272][ T28] audit: type=1400 audit(1437.928:29315): avc: denied { write } for pid=25653 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1437.970269][T25550] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.994219][T25550] bridge_slave_0: entered allmulticast mode [ 1438.000965][T25550] bridge_slave_0: entered promiscuous mode [ 1438.014328][T25550] bridge0: port 2(bridge_slave_1) entered blocking state [ 1438.024101][T25550] bridge0: port 2(bridge_slave_1) entered disabled state [ 1438.027907][ T28] audit: type=1400 audit(1437.998:29316): avc: denied { write } for pid=25670 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1438.038587][T25550] bridge_slave_1: entered allmulticast mode [ 1438.059331][T25550] bridge_slave_1: entered promiscuous mode [ 1438.071259][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1438.118730][ T4120] hsr_slave_0: left promiscuous mode [ 1438.135539][ T4120] hsr_slave_1: left promiscuous mode [ 1438.145568][ T4120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1438.156152][ T4120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1438.157267][T25684] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6667'. [ 1438.219489][ T4120] team0 (unregistering): Port device team_slave_1 removed [ 1438.230501][ T4120] team0 (unregistering): Port device team_slave_0 removed [ 1438.263746][T25694] bridge_slave_1: left allmulticast mode [ 1438.269446][T25694] bridge_slave_1: left promiscuous mode [ 1438.275303][T25694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1438.290840][T25694] bridge_slave_0: left allmulticast mode [ 1438.297822][T25694] bridge_slave_0: left promiscuous mode [ 1438.303704][T25694] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.333225][T25550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1438.343607][T25550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1438.352903][T25678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6664'. [ 1438.362956][T25678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6664'. [ 1438.375047][T25550] team0: Port device team_slave_0 added [ 1438.385359][T25678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6664'. [ 1438.394649][T25678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6664'. [ 1438.397096][T25687] xfrm0 speed is unknown, defaulting to 1000 [ 1438.410921][T25550] team0: Port device team_slave_1 added [ 1438.422321][ T4112] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1438.436299][ T4112] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1438.468785][T25550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1438.476130][T25550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1438.502382][T25550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1438.513117][ T4112] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1438.522535][ T4112] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1438.535059][T25550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1438.542240][T25550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1438.568961][T25550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1438.615563][ T28] audit: type=1400 audit(1438.588:29317): avc: denied { write } for pid=25705 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1438.664629][ T28] audit: type=1400 audit(1438.638:29318): avc: denied { write } for pid=25716 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1438.676411][T25550] hsr_slave_0: entered promiscuous mode [ 1438.721269][T25550] hsr_slave_1: entered promiscuous mode [ 1438.738948][T25550] debugfs: 'hsr0' already exists in 'hsr' [ 1438.749957][T25550] Cannot create hsr debugfs directory [ 1438.762293][ T3020] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1438.788043][ T4120] IPVS: stop unused estimator thread 0... [ 1438.807181][T25730] xfrm0 speed is unknown, defaulting to 1000 [ 1438.962996][ T28] audit: type=1400 audit(1438.938:29319): avc: denied { write } for pid=25737 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1439.009896][ T28] audit: type=1400 audit(1438.978:29320): avc: denied { write } for pid=25758 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1439.047075][T25550] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1439.063906][T25550] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1439.087046][T25550] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1439.099362][T25550] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1439.110341][T25550] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1439.119458][T25550] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1439.137990][ T3020] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1439.148258][T25550] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1439.157423][T25550] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1439.275041][T25550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1439.309717][T25550] 8021q: adding VLAN 0 to HW filter on device team0 [ 1439.330081][T12740] bridge0: port 1(bridge_slave_0) entered blocking state [ 1439.337197][T12740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1439.352028][T25798] binfmt_misc: register: failed to install interpreter file ./file0 [ 1439.386032][ T28] audit: type=1400 audit(1439.358:29321): avc: denied { write } for pid=25783 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1439.432828][T12740] bridge0: port 2(bridge_slave_1) entered blocking state [ 1439.439987][T12740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1439.451559][ T28] audit: type=1400 audit(1439.428:29322): avc: denied { write } for pid=25804 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1439.514028][ T3020] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1439.582573][T25814] xfrm0 speed is unknown, defaulting to 1000 [ 1439.727891][T25550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1440.008374][T25550] veth0_vlan: entered promiscuous mode [ 1440.030399][T25550] veth1_vlan: entered promiscuous mode [ 1440.066852][T25550] veth0_macvtap: entered promiscuous mode [ 1440.081727][T25550] veth1_macvtap: entered promiscuous mode [ 1440.100005][T25550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1440.111727][T25550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1440.123008][ T310] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.152933][ T310] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.174865][ T310] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.190625][ T310] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.679514][T25951] xfrm0 speed is unknown, defaulting to 1000 [ 1440.968125][T25979] xfrm0 speed is unknown, defaulting to 1000 [ 1441.227479][T25998] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6744'. [ 1441.249604][T25998] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6744'. [ 1441.408712][T25996] ------------[ cut here ]------------ [ 1441.414222][T25996] WARNING: kernel/signal.c:2174 at do_notify_parent+0x5c3/0x600, CPU#0: syz.4.6737/25996 [ 1441.424098][T25996] Modules linked in: [ 1441.427980][T25996] CPU: 0 UID: 0 PID: 25996 Comm: syz.4.6737 Tainted: G W syzkaller #0 PREEMPT(full) [ 1441.438904][T25996] Tainted: [W]=WARN [ 1441.442702][T25996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1441.452839][T25996] RIP: 0010:do_notify_parent+0x5c3/0x600 [ 1441.458556][T25996] Code: 8b 05 f1 79 f6 07 48 3b 44 24 48 75 41 44 89 f0 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d4 d8 5e 04 cc e8 1e 18 1e 00 90 <0f> 0b 90 45 31 f6 eb cc e8 10 18 1e 00 90 0f 0b 90 e9 af fa ff ff [ 1441.478169][T25996] RSP: 0018:ffffc90002757dd8 EFLAGS: 00010093 [ 1441.484284][T25996] RAX: ffffffff813b1652 RBX: ffff888105424400 RCX: ffff888105424400 [ 1441.492272][T25996] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 1441.500236][T25996] RBP: 0000000000000080 R08: ffff888105424ef8 R09: 0000000000000000 [ 1441.508225][T25996] R10: ffffc90002757df0 R11: 0001c90002757df0 R12: ffff888105424400 [ 1441.516184][T25996] R13: ffff888105424c28 R14: ffff88810511d210 R15: 0000000000000080 [ 1441.524150][T25996] FS: 0000000000000000(0000) GS:ffff8882ae8fb000(0000) knlGS:0000000000000000 [ 1441.533149][T25996] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1441.539811][T25996] CR2: 0000200000002880 CR3: 0000000006c32000 CR4: 00000000003506f0 [ 1441.547831][T25996] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1441.555786][T25996] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1441.563768][T25996] Call Trace: [ 1441.567030][T25996] [ 1441.569945][T25996] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 1441.575326][T25996] ? __list_add_valid_or_report+0x38/0xe0 [ 1441.581036][T25996] do_exit+0xc13/0x1530 [ 1441.585183][T25996] ? switch_fpu_return+0xe7/0x1b0 [ 1441.590203][T25996] __x64_sys_exit+0x1f/0x20 [ 1441.594762][T25996] x64_sys_call+0x301d/0x3020 [ 1441.599453][T25996] do_syscall_64+0x12c/0x3b0 [ 1441.604044][T25996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.609935][T25996] RIP: 0033:0x7fb2405ccdd9 [ 1441.614336][T25996] Code: Unable to access opcode bytes at 0x7fb2405ccdaf. [ 1441.621335][T25996] RSP: 002b:00007fb23f026fd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 1441.629786][T25996] RAX: ffffffffffffffda RBX: 00007fb240845fa0 RCX: 00007fb2405ccdd9 [ 1441.637762][T25996] RDX: 00007fb23f0279c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 1441.645795][T25996] RBP: 00007fb240662d69 R08: 0000000000000000 R09: 0000000000000000 [ 1441.653753][T25996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1441.661710][T25996] R13: 00007fb240846038 R14: 00007fb240845fa0 R15: 00007ffcd6901848 [ 1441.669732][T25996] [ 1441.672734][T25996] ---[ end trace 0000000000000000 ]--- [ 1441.775998][T26030] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6759'. [ 1441.836526][T26030] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6759'. [ 1442.180435][ T28] audit: type=1400 audit(1442.148:29323): avc: denied { create } for pid=26054 comm="syz.7.6767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1442.298084][T26066] xfrm0 speed is unknown, defaulting to 1000 [ 1443.089001][T26097] set_capacity_and_notify: 2 callbacks suppressed [ 1443.089018][T26097] loop7: detected capacity change from 0 to 16384 [ 1443.333007][T26106] loop7: detected capacity change from 16384 to 0 [ 1443.344622][T26116] netlink: 'syz.8.6792': attribute type 10 has an invalid length. [ 1443.359228][ C0] I/O error, dev loop7, sector 7936 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 1443.394632][T26121] loop5: detected capacity change from 0 to 128 [ 1443.668255][T26139] loop2: detected capacity change from 0 to 8192 [ 1443.677586][T26139] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1443.951594][T26161] loop7: detected capacity change from 0 to 128 [ 1444.072960][T26176] tipc: Enabled bearer , priority 0 [ 1444.090665][T26176] syzkaller0: entered promiscuous mode [ 1444.107471][T26176] syzkaller0: entered allmulticast mode [ 1444.124064][T26176] tipc: Resetting bearer [ 1444.141279][T26175] tipc: Resetting bearer [ 1444.149395][T26175] tipc: Disabling bearer [ 1444.177750][T22904] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1444.186476][T22904] FAT-fs (loop7): Filesystem has been set read-only [ 1444.194101][T22904] Trying to write to read-only block-device loop7 [ 1444.248015][T26192] xfrm0 speed is unknown, defaulting to 1000 [ 1444.332943][T26190] xfrm0 speed is unknown, defaulting to 1000 [ 1444.391295][T26202] wg2: entered promiscuous mode [ 1444.396185][T26202] wg2: entered allmulticast mode [ 1444.512590][T26205] xfrm0 speed is unknown, defaulting to 1000 [ 1444.581116][T26219] loop7: detected capacity change from 0 to 16384 [ 1444.650671][T26219] loop7: detected capacity change from 16384 to 0 [ 1444.657228][ C0] I/O error, dev loop7, sector 16120 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1444.893915][T26238] netlink: 'syz.7.6843': attribute type 29 has an invalid length. [ 1444.912542][T26238] Ÿë: port 1(gretap0) entered blocking state [ 1444.919018][T26238] Ÿë: port 1(gretap0) entered disabled state [ 1444.925748][T26238] gretap0: entered allmulticast mode [ 1444.933383][T26238] gretap0: entered promiscuous mode [ 1445.091423][T26251] netlink: 'syz.7.6849': attribute type 10 has an invalid length. [ 1445.573801][T26305] syzkaller0: entered promiscuous mode [ 1445.580719][T26305] syzkaller0: entered allmulticast mode [ 1445.604593][ T28] audit: type=1400 audit(1445.578:29324): avc: denied { relabelfrom } for pid=26304 comm="syz.5.6867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1445.624172][ T28] audit: type=1400 audit(1445.578:29325): avc: denied { relabelto } for pid=26304 comm="syz.5.6867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1445.797354][T26323] syzkaller0: entered promiscuous mode [ 1445.803108][T26323] syzkaller0: entered allmulticast mode [ 1446.269915][T26388] __nla_validate_parse: 3 callbacks suppressed [ 1446.269977][T26388] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6890'. [ 1446.705311][T26406] xfrm0 speed is unknown, defaulting to 1000 [ 1446.929058][T26431] netlink: 'syz.8.6912': attribute type 29 has an invalid length. [ 1446.982347][T26431] Ÿë: port 1(gretap0) entered blocking state [ 1446.988520][T26431] Ÿë: port 1(gretap0) entered disabled state [ 1447.004363][T26431] gretap0: entered allmulticast mode [ 1447.010360][T26431] gretap0: entered promiscuous mode [ 1447.321691][T26460] syzkaller0: entered promiscuous mode [ 1447.330785][T26460] syzkaller0: entered allmulticast mode [ 1447.380788][T26467] tipc: Enabled bearer , priority 0 [ 1447.392914][T26467] syzkaller0: entered promiscuous mode [ 1447.398409][T26467] syzkaller0: entered allmulticast mode [ 1447.452588][T26466] tipc: Resetting bearer [ 1447.468622][T26475] loop8: detected capacity change from 0 to 128 [ 1447.481473][T26466] tipc: Disabling bearer [ 1447.563276][T26481] bio_check_eod: 248 callbacks suppressed [ 1447.563291][T26481] syz.8.6929: attempt to access beyond end of device [ 1447.563291][T26481] loop8: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 1447.644259][T26481] syz.8.6929: attempt to access beyond end of device [ 1447.644259][T26481] loop8: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 1447.709286][T26502] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6939'. [ 1447.737986][T26481] syz.8.6929: attempt to access beyond end of device [ 1447.737986][T26481] loop8: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 1447.749396][T26502] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6939'. [ 1447.768961][T26507] netlink: 'syz.5.6941': attribute type 29 has an invalid length. [ 1447.785711][T26481] syz.8.6929: attempt to access beyond end of device [ 1447.785711][T26481] loop8: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 1447.827750][T26481] syz.8.6929: attempt to access beyond end of device [ 1447.827750][T26481] loop8: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 1447.846346][T26481] syz.8.6929: attempt to access beyond end of device [ 1447.846346][T26481] loop8: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 1447.881603][T26516] tipc: Enabled bearer , priority 0 [ 1447.897238][T26481] syz.8.6929: attempt to access beyond end of device [ 1447.897238][T26481] loop8: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 1447.910959][T26481] syz.8.6929: attempt to access beyond end of device [ 1447.910959][T26481] loop8: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 1447.913811][T26516] syzkaller0: entered promiscuous mode [ 1447.925290][T26481] syz.8.6929: attempt to access beyond end of device [ 1447.925290][T26481] loop8: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 1447.943609][T26481] syz.8.6929: attempt to access beyond end of device [ 1447.943609][T26481] loop8: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 1447.958447][T26516] syzkaller0: entered allmulticast mode [ 1447.980327][T26515] tipc: Resetting bearer [ 1448.026382][T26515] tipc: Disabling bearer [ 1448.130278][T26540] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6954'. [ 1448.155872][T26540] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6954'. [ 1448.207968][T26551] loop7: detected capacity change from 0 to 16384 [ 1448.260804][T26551] loop7: detected capacity change from 16384 to 0 [ 1448.260842][ C1] I/O error, dev loop7, sector 16376 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1448.314569][T26554] loop5: detected capacity change from 0 to 8192 [ 1448.349653][T26564] tipc: Started in network mode [ 1448.358968][T26564] tipc: Node identity 4611814d0382, cluster identity 4711 [ 1448.378107][T26564] tipc: Enabled bearer , priority 0 [ 1448.389682][T26564] syzkaller0: entered promiscuous mode [ 1448.407930][T26564] syzkaller0: entered allmulticast mode [ 1448.449015][T26562] tipc: Resetting bearer [ 1448.469383][T26562] tipc: Disabling bearer [ 1448.493472][T26577] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6970'. [ 1448.508712][T26577] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6970'. [ 1448.645529][T26590] loop8: detected capacity change from 0 to 8192 [ 1448.687576][T26590] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1448.705498][T26602] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6980'. [ 1448.773981][T26611] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6985'. [ 1448.798244][T26611] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6985'. [ 1449.058095][T26629] netlink: 'syz.2.6994': attribute type 10 has an invalid length. [ 1449.090378][T26631] wg2: entered promiscuous mode [ 1449.096302][T26631] wg2: entered allmulticast mode [ 1449.200657][T26646] tipc: Enabled bearer , priority 0 [ 1449.218267][T26646] tipc: Resetting bearer [ 1449.226361][T26645] tipc: Disabling bearer [ 1449.453458][T26675] xfrm0 speed is unknown, defaulting to 1000 [ 1449.519516][T26684] syzkaller0: entered promiscuous mode [ 1449.525157][T26684] syzkaller0: entered allmulticast mode [ 1449.551502][T26655] xfrm0 speed is unknown, defaulting to 1000 [ 1449.637627][T26693] tipc: Enabled bearer , priority 0 [ 1449.666933][T26693] tipc: Resetting bearer [ 1449.675544][T26692] tipc: Disabling bearer [ 1449.753272][T26655] bridge0: port 1(bridge_slave_0) entered blocking state [ 1449.760425][T26655] bridge0: port 1(bridge_slave_0) entered disabled state [ 1449.768261][T26655] bridge_slave_0: entered allmulticast mode [ 1449.775033][T26655] bridge_slave_0: entered promiscuous mode [ 1449.783199][T26655] bridge0: port 2(bridge_slave_1) entered blocking state [ 1449.798379][T26655] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.805795][T26655] bridge_slave_1: entered allmulticast mode [ 1449.814945][T26655] bridge_slave_1: entered promiscuous mode [ 1449.835869][T26655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1449.846679][T26655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1449.870200][ T28] audit: type=1400 audit(1449.838:29326): avc: denied { watch watch_reads } for pid=26718 comm="syz.4.7024" path="/301/file0" dev="tmpfs" ino=1566 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1449.922257][ T4120] Bluetooth: hci0: Frame reassembly failed (-84) [ 1449.981031][T26655] team0: Port device team_slave_0 added [ 1449.993552][T26655] team0: Port device team_slave_1 added [ 1450.030160][T26655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1450.054678][T26655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1450.055858][ T28] audit: type=1400 audit(1450.028:29327): avc: denied { write } for pid=26715 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1450.085853][T26655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1450.144158][T26655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1450.151369][T26655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1450.164517][ T28] audit: type=1400 audit(1450.108:29328): avc: denied { write } for pid=26744 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1450.207039][T26655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1450.269885][T26655] hsr_slave_0: entered promiscuous mode [ 1450.279923][T26655] hsr_slave_1: entered promiscuous mode [ 1450.286678][T26655] debugfs: 'hsr0' already exists in 'hsr' [ 1450.298520][T26655] Cannot create hsr debugfs directory [ 1450.307634][T26755] syzkaller1: entered promiscuous mode [ 1450.313283][T26755] syzkaller1: entered allmulticast mode [ 1450.420081][ T28] audit: type=1400 audit(1450.388:29329): avc: denied { view } for pid=26762 comm="syz.4.7035" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1450.489849][T26772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1450.499406][T26772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1450.567394][T26655] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1450.581645][T26655] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1450.589324][T26781] loop8: detected capacity change from 0 to 128 [ 1450.589644][T26655] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1450.606668][T26655] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1450.614608][T26655] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1450.623447][T26655] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1450.631299][T26655] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1450.639924][T26655] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1450.677071][T26655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1450.691880][T26655] 8021q: adding VLAN 0 to HW filter on device team0 [ 1450.701010][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 1450.708085][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1450.720085][ T4120] bridge0: port 2(bridge_slave_1) entered blocking state [ 1450.727160][ T4120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1450.773923][T26795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1450.784172][T26795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1450.837241][T26655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1450.926381][T26655] veth0_vlan: entered promiscuous mode [ 1450.934192][T26655] veth1_vlan: entered promiscuous mode [ 1450.948225][T26655] veth0_macvtap: entered promiscuous mode [ 1450.955524][T26655] veth1_macvtap: entered promiscuous mode [ 1450.966755][T26655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1450.978301][T26655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1450.989152][T20812] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.004396][T20812] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.013662][T20812] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.022689][T20812] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.038109][ T28] audit: type=1400 audit(1451.008:29330): avc: denied { mount } for pid=26816 comm="syz.2.7045" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1451.082217][ T28] audit: type=1400 audit(1451.058:29331): avc: denied { unmount } for pid=22200 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1451.147428][ T28] audit: type=1400 audit(1451.118:29332): avc: denied { relabelfrom } for pid=26825 comm="syz.2.7050" name="NETLINK" dev="sockfs" ino=95605 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1451.200443][T26835] loop2: detected capacity change from 0 to 128 [ 1451.203149][ T28] audit: type=1400 audit(1451.118:29333): avc: denied { relabelto } for pid=26825 comm="syz.2.7050" name="NETLINK" dev="sockfs" ino=95605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 1451.244454][T26828] loop5: detected capacity change from 0 to 8192 [ 1451.306707][T26847] __nla_validate_parse: 17 callbacks suppressed [ 1451.306726][T26847] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7053'. [ 1451.323985][T26847] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7053'. [ 1451.333249][ T28] audit: type=1400 audit(1451.298:29334): avc: denied { write } for pid=26833 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1451.372279][T26847] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7053'. [ 1451.381462][ T28] audit: type=1400 audit(1451.348:29335): avc: denied { write } for pid=26851 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1451.403163][T26847] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7053'. [ 1451.460466][ T28] audit: type=1400 audit(1451.428:29336): avc: denied { read write } for pid=26859 comm="syz.5.7057" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1451.494314][ T28] audit: type=1400 audit(1451.428:29337): avc: denied { open } for pid=26859 comm="syz.5.7057" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1451.516258][T26863] syzkaller0: entered promiscuous mode [ 1451.522330][ T28] audit: type=1400 audit(1451.468:29338): avc: denied { ioctl } for pid=26859 comm="syz.5.7057" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1451.524916][T26863] syzkaller0: entered allmulticast mode [ 1451.791728][T26886] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7067'. [ 1451.801122][T26886] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7067'. [ 1451.833509][T26886] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7067'. [ 1451.843599][T26886] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7067'. [ 1451.879516][T26892] loop7: detected capacity change from 0 to 16384 [ 1451.920689][T26892] loop7: detected capacity change from 16384 to 0 [ 1451.970588][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1451.976761][T18545] Bluetooth: hci0: command 0x1003 tx timeout [ 1451.996438][T26894] loop4: detected capacity change from 0 to 8192 [ 1452.050610][T26910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.059198][T26910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.089048][ T28] audit: type=1400 audit(1452.058:29339): avc: denied { ioctl } for pid=26911 comm="syz.8.7078" path="socket:[96463]" dev="sockfs" ino=96463 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1452.135463][T26917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7081'. [ 1452.146411][T26917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7081'. [ 1452.224831][T26928] syzkaller0: entered promiscuous mode [ 1452.230493][T26928] syzkaller0: entered allmulticast mode [ 1452.247291][T26930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.265481][T26930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.276253][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 1452.540196][T26975] bond_slave_1: entered promiscuous mode [ 1452.546025][T26975] bond_slave_1: entered allmulticast mode [ 1452.593933][T26979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.606014][T26979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1453.305055][T26994] set_capacity_and_notify: 3 callbacks suppressed [ 1453.305074][T26994] loop7: detected capacity change from 0 to 8192 [ 1453.317640][T27003] loop8: detected capacity change from 0 to 128 [ 1453.355244][T25550] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1453.364216][T25550] FAT-fs (loop8): Filesystem has been set read-only [ 1453.417738][T27015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1453.426398][T27015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1453.604359][T27032] syzkaller1: entered promiscuous mode [ 1453.609847][T27032] syzkaller1: entered allmulticast mode [ 1453.643941][T27034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1453.652614][T27034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1453.775349][T27036] loop7: detected capacity change from 0 to 128 [ 1454.094631][T27045] loop7: detected capacity change from 0 to 16384 [ 1454.118861][T27049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1454.130600][T27045] loop7: detected capacity change from 16384 to 0 [ 1454.131591][T27049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1454.288938][T27067] random: crng reseeded on system resumption [ 1454.295152][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1455.059530][T27101] loop7: detected capacity change from 0 to 128 [ 1455.080772][T27104] loop7: detected capacity change from 0 to 16384 [ 1455.151307][T27104] loop7: detected capacity change from 16384 to 0 [ 1455.359518][T27140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1455.391542][T27140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1455.734892][T27161] syzkaller1: entered promiscuous mode [ 1455.740496][T27161] syzkaller1: entered allmulticast mode [ 1455.949204][T27171] syzkaller0: entered promiscuous mode [ 1455.957389][T27171] syzkaller0: entered allmulticast mode [ 1457.916693][T27200] netlink: 'syz.5.7190': attribute type 4 has an invalid length. [ 1457.918467][T27202] syzkaller0: entered promiscuous mode [ 1457.936349][T27202] syzkaller0: entered allmulticast mode [ 1457.957701][T27200] netlink: 'syz.5.7190': attribute type 4 has an invalid length. [ 1457.970014][T27204] netlink: 'syz.4.7193': attribute type 10 has an invalid length. [ 1457.985438][T27200] netlink: 'syz.5.7190': attribute type 4 has an invalid length. [ 1458.027579][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 1458.027594][ T28] audit: type=1400 audit(1457.998:29349): avc: denied { mount } for pid=27207 comm="syz.5.7197" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1458.077008][T27214] syzkaller1: entered promiscuous mode [ 1458.089289][T27214] syzkaller1: entered allmulticast mode [ 1458.213826][T27232] netlink: 'syz.2.7207': attribute type 10 has an invalid length. [ 1458.273863][T27242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1458.283228][T27242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1458.391126][T27254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1458.413659][T27254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1458.434997][T27256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1458.443637][T27256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1458.494951][T27263] netlink: 'syz.5.7221': attribute type 10 has an invalid length. [ 1458.535119][T27264] kernel profiling enabled (shift: 4) [ 1458.602347][T27268] __nla_validate_parse: 7 callbacks suppressed [ 1458.602362][T27268] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7223'. [ 1458.761068][T27283] ªªªªªª: renamed from vlan0 (while UP) [ 1458.794477][T27287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1458.803052][T27287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1458.843476][T27289] netlink: 'syz.2.7233': attribute type 10 has an invalid length. [ 1458.866348][T27291] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7234'. [ 1458.991265][T27305] loop2: detected capacity change from 0 to 128 [ 1459.345139][ T4120] Bluetooth: hci0: Frame reassembly failed (-84) [ 1459.366545][T27317] netlink: 'syz.8.7245': attribute type 10 has an invalid length. [ 1459.464197][T27325] loop8: detected capacity change from 0 to 128 [ 1459.491216][T25550] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1459.500179][T25550] FAT-fs (loop8): Filesystem has been set read-only [ 1459.598489][T27331] netlink: 'syz.8.7252': attribute type 4 has an invalid length. [ 1459.627210][T27333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1459.638237][T27333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1459.735871][T27309] ================================================================== [ 1459.744015][T27309] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 1459.752127][T27309] [ 1459.754445][T27309] write to 0xffff88810d2f58e0 of 8 bytes by task 27305 on cpu 1: [ 1459.762161][T27309] filemap_splice_read+0x523/0x780 [ 1459.767295][T27309] splice_direct_to_actor+0x26e/0x670 [ 1459.772693][T27309] do_splice_direct+0x119/0x1a0 [ 1459.777569][T27309] do_sendfile+0x382/0x650 [ 1459.781996][T27309] __x64_sys_sendfile64+0x105/0x150 [ 1459.787208][T27309] x64_sys_call+0x2dc4/0x3020 [ 1459.791901][T27309] do_syscall_64+0x12c/0x3b0 [ 1459.796509][T27309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1459.802416][T27309] [ 1459.804743][T27309] write to 0xffff88810d2f58e0 of 8 bytes by task 27309 on cpu 0: [ 1459.812457][T27309] filemap_splice_read+0x523/0x780 [ 1459.817598][T27309] splice_direct_to_actor+0x26e/0x670 [ 1459.822993][T27309] do_splice_direct+0x119/0x1a0 [ 1459.827862][T27309] do_sendfile+0x382/0x650 [ 1459.832288][T27309] __x64_sys_sendfile64+0x105/0x150 [ 1459.837514][T27309] x64_sys_call+0x2dc4/0x3020 [ 1459.842199][T27309] do_syscall_64+0x12c/0x3b0 [ 1459.846809][T27309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1459.852715][T27309] [ 1459.855033][T27309] value changed: 0x0000000000000c00 -> 0x0000000000000c01 [ 1459.862137][T27309] [ 1459.864455][T27309] Reported by Kernel Concurrency Sanitizer on: [ 1459.870606][T27309] CPU: 0 UID: 0 PID: 27309 Comm: syz.2.7241 Tainted: G W syzkaller #0 PREEMPT(full) [ 1459.881553][T27309] Tainted: [W]=WARN [ 1459.885353][T27309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1459.895416][T27309] ================================================================== [ 1461.410630][T18545] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1461.416746][ T42] Bluetooth: hci0: command 0x1003 tx timeout [ 1462.340913][T27315] Bluetooth: hci0: Opcode 0x0c1a failed: -4