last executing test programs: 12m28.043925785s ago: executing program 32 (id=220): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setrlimit(0x9, &(0x7f0000000040)={0x7, 0x67}) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @empty, 0x8}, 0x1c) r4 = memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) pwrite64(r4, &(0x7f0000000180)='q', 0x1, 0x100004) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendfile(0xffffffffffffffff, r4, 0x0, 0xd39a) 11m56.235288046s ago: executing program 33 (id=512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a8001600200003401c000200035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="ffede4b1b4a52070ac9c8801b49a974ce7da4a2fbe967397439d213431aba9704abbaf13e92ded9caa305625f8f7572c90f2902f180514161d2f017881cc0c738915ca7064fb20f2621e051ee49447b21da17ca0b56789a84ff1f4aebde69d820e4688a72f34ff3fa890b893a2bfd95abe37ab7161068280a5272c2f9f5f3687a727357680e723f374496a6840c99d7dc4cf3024a1c5f032bfcc17ff5a4c9626cc6ae218d1d809e24d91c358529a8ac3a8f0bdc086b4d6d251b18fc0f5fa6088286fb4988fd73794f2f5e23dc9890d9ee98fcc38b22255ead29741fd00"], 0x1c}}, 0x240040d5) 11m22.823135687s ago: executing program 34 (id=775): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000a000000070000000200000604000000070000000000000001000000810000000061f49a87c6005f2e"], 0x0, 0x3e}, 0x28) socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="010003007f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000001a00010029bd70000000000002202000000000000020000006001c004e23000008000300", @ANYRES32, @ANYBLOB="08000b00bd470000080001006401010008000700e000000108000200ffffffff080001000a0101020800060005000000080019"], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 11m1.44127155s ago: executing program 35 (id=963): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x4, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x5d49, &(0x7f0000000180)={0x0, 0x2882, 0x800, 0x0, 0x3d0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x14}, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x25, &(0x7f0000000000)="01", 0x1) r2 = socket$kcm(0x2b, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000000), 0x4) lsetxattr$trusted_overlay_origin(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000200), 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000740)) r4 = socket(0x8, 0x80005, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r6}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x2000e8, 0x4) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000095c0)=[{0x0, 0xdd12}, {0x0}], 0x2}, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') fchdir(r7) capset(&(0x7f0000000080)={0x20071027}, &(0x7f0000000040)={0x200000, 0x200011, 0xfffffffe, 0x3fe, 0x3, 0x9}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x101}, 0x8) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004010}, 0x0) write$tun(r8, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8) sendto(r3, &(0x7f0000000600)="2fe2a7857325fa51b9766393ac847f25ce53eb28c70f5602fc858d9a657200c683cbeb531e33cbd6284285e4bebb5a3345d30a9800445f66a8cae06c55b9aa2ad13a95ae1a8200fa6b36523db20bc44c7541891c7d4ef1cebc4c5ccb425a70e3bd0be9e2e6b6ea7ee3bcf2be4eafc28713eb59e96032efd17c894282ef2e613557b2b8b6fb34ab81a81e80f8601e0d5690866cb65d", 0x95, 0x4000000, &(0x7f00000006c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYRES8=r2, @ANYBLOB="36ac66ea46951c38200394de61ac05f058d6228406830bc48eb7dff0e577444606b72df25ebf505e4419d29bcc097fdf663e498cd3da8a2e783a551753f67262da27b0129e2c0b2c8aa7ae828eceea34ede9cf8206223f94d4ae8b703223dd83db45e43fc6cba4040441cd521ecce1", @ANYBLOB="d5b40000000000001800128008000100677265000c000280080004000d0064766d72703000000000000000000000d4707d90736e35b88ea2ab5bec676b1c8d136b8a79817c784369ff27b3be6b097aace952544f42129c983eda42e137df349515c43a5e2f2efc5638c70e93b51f807be906dbf6ca895a68f8bf71a3055e71918519b167e11e1468795e9caa26f26289bb9091cb026bdbaf13afc060e1488600bda304c4def055de870ba353087085de0918415c91996a208dee14d684b1b41ca6d98b78df0365430be8104fa25779b459b686ee5773cc1fd0ab3fb09f4fa3312b4814453c9fc750346e7f5163a39c416adc48f21abd45555494862238e4423aaa50e3a04e59dd2fc7f76601d774068a94422fd234fe8a3fbd52baea5ae3b70ac304e5a58a6945807671d4026cf22796b9efc1ffcb84d8494024a0103b668a167dcea29bfed841ddd6829e259dbbc82099e80a66fb0000005df4b1afe200ede6a358988b04f56318e4d78fc24f10d3e85647e1a457728847358c6117cb1da51b9ffd7f6d3cbb98062bef50660e24c9c44a4dbf00544c"], 0x4c}}, 0x880) 10m36.697000335s ago: executing program 36 (id=1204): getresuid(0x0, &(0x7f0000000040), &(0x7f0000000080)) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r0, 0xfffd, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd603cf72f4496880020010000000000000000001100000002fe8000000000000000000000000000aa000000", @ANYRES32=0x41424344], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) modify_ldt$write2(0x11, &(0x7f0000000580)={0x3, 0x100000, 0x1000, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x3, 0xfff1}, {0x4, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) socket$netlink(0x10, 0x3, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket(0x25, 0x800, 0x2) r3 = socket(0x40000000015, 0x5, 0x0) open$dir(&(0x7f0000000540)='./file1\x00', 0x8000, 0x2) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 10m4.775312133s ago: executing program 37 (id=1481): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffff) mkdirat(0xffffffffffffff9c, 0x0, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000540)={0xc, 0x6, 0x42, 0x0, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x125) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x43, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000000)={0x0, 0x0, 0x30, 0x8, 0x1, r0, 0x0, 0x0, 0xfffffffffffffbff}]) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x78}, 0x1, 0xffffffff00000003}, 0x0) listen(0xffffffffffffffff, 0x0) socket(0x28, 0x5, 0x0) 9m25.588235353s ago: executing program 38 (id=1763): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r3, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="980000000000000001"], 0x98}, 0x440e0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0x4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x0, 0xcb}, 0xc) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x939, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d72288275}, 0x200048c4) 8m43.901076704s ago: executing program 39 (id=1921): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fadvise64(r0, 0x2, 0x22, 0x2) 8m33.889195953s ago: executing program 40 (id=1985): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0x70bd26, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1}}}}, 0x30}}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r6, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r4, &(0x7f0000002ec0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @dev={0xac, 0x14, 0x14, 0x29}}}}], 0x20}}], 0x1, 0x40800) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0) move_pages(0x0, 0x90249c01dd736e4b, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000040), 0x0) 8m29.612611138s ago: executing program 41 (id=2001): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1922f76db294688c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, &(0x7f0000000940)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x10902, 0x0, 0x1000, 0x1, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[], 0x1, 0x2bc, &(0x7f00000015c0)="$eJzs3U9rY1UUAPDz0uQ1QxftwpUIvsUs3Fims3VhBqkgdqVk4R/QwZmBoQkDDQRGxTArP4ELF34Pd+4FN34DwYVLdw5SuPLeS5NMkkmmHdMO5ffb9HLuOe/em3fbFMK7+fKN/vG9R4MHT779I9rtLBqd6MTTLPaiEWfSWAAA18LTlOLvC72/NxubmhMAsFkz7/+t56RsL4be3fS0AIAN+viTTz+8c3R0+FFRtCP63w+7WdQ/6/47D+Jh9OJ+3IrdOJ1+FpBS3X7/g6PDaBalvbjZHw27ZWX/i98mqXlU9QexG3vL6w+K2kz9aNis/vPIsoiHnXIit2M3XluoL/sPby+pj24eb7XHiyzH34/d+P2reBS9uFd9pjEd/7s8ivfSD/9881mZXNZno2F3u8qbSluXfW8AAAAAAAAAAAAAAAAAAAAAALi+9ouJvbjZL0P1+TvdrdOqf/+Z/up8nUbVX9dnEXnVmDsfaJTip7PzdW4VRZGyOn9yvs+NZrzejOaVLRwAAAAAAAAAAAAAAAAAAABeIYPHXx/f7fXun/wvjfFD/pPH+i96nc5M5M1Ynbx9rrFia5xeznU+5+DXz/uTSLmIi0x+2CoiVs25tRC5Uc5n/ZX/TSmlLIt4udvUepGx1jR2VueUL/AvP+68fXw3W/cats9u3M+zXXmcDB7P3dPIVg96+kwknWv75Sty8vGOeaHr7LzkL9E7f9aDjSPZmlW0ZiKtcSOet/3a59rPl/c3CAAAAAAAAAAAAAAAAAAAqE0f+l3S+WRlaWNjkwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASzb9/v9pIxYic41R/FUVL89JKY0mkTxOBle9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK6//wIAAP//qWdtxQ==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a442, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r4, 0x0) fsync(r4) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r5 = syz_open_pts(r2, 0x141601) fcntl$setstatus(r5, 0x4, 0x102800) write(r5, &(0x7f0000000000), 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x0) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xe7c) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e24, 0x2, @mcast2, 0x9}}, [0x4, 0xd2db, 0x9, 0x1, 0xfffffffffffffffd, 0x293, 0x5, 0x7fffffffffffffff, 0x5, 0x7fffffffffffffff, 0xffffffff, 0x5, 0x40, 0x6, 0x80000000]}, &(0x7f0000000680)=0x100) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000006c0)={r7, 0x2}, &(0x7f0000000700)=0x8) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 8m18.861701539s ago: executing program 42 (id=2053): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000085000000000000001200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000004008549590086000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000003000000850000002a00003b1f974bafe14c2be00d34b600b7000000"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100}, 0x94) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xfffffffffffffea7, 0x0, &(0x7f0000000680)="c3ee7f670000ec6f83b4241544b50000000000000000000000000033a42c9550f50aaab05450dc23d925bde6a1b56f320fed50c64390b611b0cc67e2e658d909c57270d30b39d3050b381d000000000000000000", 0x0, 0xa0000010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x401}, 0x50) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x101003) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x8, &(0x7f00000000c0)="bd", 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_opts(r2, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000000)=0x32) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) r3 = socket(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f0000000400)=[{{&(0x7f0000000180)=@tipc=@id, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)=""/80, 0x50}, {&(0x7f0000000280)=""/173, 0xad}], 0x2, &(0x7f0000000380)=""/75, 0x4b}, 0x65d64cf}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000001800df8d29bd70000000000002140000000000060010000008001e00030000000c0016"], 0x60}}, 0x80) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 8m11.034549118s ago: executing program 43 (id=2123): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mbind(&(0x7f000001a000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x8, 0x2) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) (async) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 8m8.162706595s ago: executing program 44 (id=2135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000001300000000000000000a20000000000a05000000000000000000050002000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a30000000004c000000060a010400000000000000000500000008000b400000000024000480200001800d00010073796e70726f7879000000000c0002800800034000000005090001"], 0xc0}, 0x1, 0x0, 0x0, 0x20020014}, 0x0) 7m57.64399676s ago: executing program 45 (id=2195): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xaa, 0x8, 0x0, 0x0, 0x0, 0x5, 0x100c4, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa, 0x4, @perf_bp={0x0, 0x2}, 0x244c, 0x4, 0x100, 0x5, 0xb8bf, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0719, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_bp={0x0}, 0xa822, 0x4005, 0xb, 0x3, 0x6, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6(0xa, 0x3, 0x2) socket$kcm(0x29, 0x5, 0x0) socket(0x40000000015, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x2c, 0x13, 0x821, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x6, 0x0, 0x0, 0x0, @str='!\xa5'}, @typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}]}, 0x2c}], 0x1}, 0x0) 7m52.524537793s ago: executing program 46 (id=2222): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5603, 0x10000000000004) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x10d) close(r1) syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x182) close(r2) r3 = socket$pptp(0x18, 0x1, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000040)) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) 7m49.551754128s ago: executing program 47 (id=2227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640200000000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904022008f110000000040000a118000200e01d000e00000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x24048890) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="4800028044000100240001006d6f646500000000000000000000000000000000000000000000000000000000050003050500000011"], 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$netlink(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = syz_pidfd_open(r5, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0xff01, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, 0x0, 0x0}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x2, 0x4}}, 0xe) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r9 = dup2(r0, r1) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r9, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1600000050921e0697fa332baee917e4216692cfeab3203dc681581d8756e10f5dc3269cb97530e48df3773a5e5593667dbba8722d8d7073e80164f4fa7e56ab34d80e9ddd9970f340eaf679f56610e262ead8b24b03c18cc61aa6fac57707460aaecf19fb76d91002ebe262b9fff92d0504bada2514cad7a3d21956021dd4622b89d9148c22142caa16ba7bcd07000000000000005f3969f46ea6d15d0cc39020560f31e483ce37431a194b6dd05bf6f3fa5ae6374c4a1cdfafb4709a3e", @ANYRES16=r10, @ANYBLOB="040025bd7000fedbdf250b000000080031000e00000005002a000100000008003c0000010000"], 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x10) 7m44.630598547s ago: executing program 48 (id=2256): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 7m37.18223702s ago: executing program 49 (id=2284): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r0], 0x24}}, 0x0) 7m19.601306531s ago: executing program 50 (id=2352): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x8802, 0x2e, 0x43a1bd76, 0x7, 0x9, 0x6, 0x8, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="000000000000000800000000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r2, @ANYRES32=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000500)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0xb, 0xffffffff9673e35d]}}) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000880)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x1006, 0x1011, &(0x7f00000011c0)=""/4113, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf0000000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000380)=ANY=[], 0x1, 0x254, &(0x7f0000000a00)="$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") syz_emit_ethernet(0x45, &(0x7f0000000100)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0809450000370000000004019078ac140000000000000009907800010001b0aa00c1e4f04d156a3bff8984c8bf4438f5fe970ac0cd32a7a722"], 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r7, &(0x7f00000000c0)={0x1, @write_sc_support={{0xc7a, 0x1}}}, 0x6) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, 0x0) mount(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x189, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="67d564672bcc34b9bc64f3d443eea9fa13243f573cdd2495e2da82c0c6eecee25b8beabf2e41aaae81bbb86d024af37a9c88b59de746c71092bc46833cc6149b99f3ac9f425b8d15a0abe3cc9b8259dcd744b6f499d52e693ed2682e084005451966be9d8a66933f3ef5babc663cc99ca8ab85844c7f3a4aa72be3a6f878175271c269f5bb88cbccdc18e6605680d2d80ac316900643012f91849f9384962b981dded08885acd01086a153ff7196912dede0bd9b4811b5b2815837747c", @ANYRESOCT=r5], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r8) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000000000)={'netdevsim0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 6m55.21985983s ago: executing program 51 (id=2828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 5m33.90773691s ago: executing program 52 (id=3230): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002680), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002740)={&(0x7f00000026c0)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x48000) 4m30.04180476s ago: executing program 1 (id=4033): openat$tun(0xffffffffffffff9c, 0x0, 0x48080, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1020802, &(0x7f00000001c0)=ANY=[], 0x1, 0x25a, &(0x7f0000001040)="$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") syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000001000)='./file1\x00', 0x8000, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0], 0x3, 0x7be, &(0x7f00000005c0)="$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") setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) r1 = syz_clone(0xa8200780, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) getsockopt$MRT(r2, 0x0, 0xd1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f6c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000950000000000000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x6e, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x13bb711e) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r6 = syz_open_procfs(r1, &(0x7f0000000040)='status\x00') pread64(r6, &(0x7f0000000140)=""/25, 0x19, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1c, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2b3e4000}, 0x94) 4m29.626717799s ago: executing program 1 (id=4035): unshare(0x6a040000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@grpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3c}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470040", 0x14) 4m28.960013415s ago: executing program 1 (id=4040): socket$nl_xfrm(0x10, 0x3, 0x6) socket$can_bcm(0x1d, 0x2, 0x2) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvfrom(r0, &(0x7f0000000040)=""/8, 0x8, 0x40008040, &(0x7f0000000280)=@in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb000000000000001c0000001c00000009000000050000000000001102000000ffffffff0700000000000008000000000000302e5f6130b336000000"], 0x0, 0x3d, 0x0, 0x1}, 0x28) 4m28.913536457s ago: executing program 1 (id=4042): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000180)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@bh}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000000500)="$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") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setregid(0xee00, 0xee00) ptrace(0x10, r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x3f015764) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r2, 0x1, 0x2, 0x0, 0x48) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) 4m28.241178104s ago: executing program 1 (id=4047): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f0000000180)="a7", 0x34000, 0x48d8, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xe5f}, 0x1c) 4m27.944078094s ago: executing program 1 (id=4051): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0x2, 0x6, 0x2e}) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x7}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) unshare(0x2040400) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0xf) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r4 = socket(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000780)={'gretap0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1a, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r6, @ANYBLOB="71e79fd800000000140012800c0001006d61637674617000140002800800", @ANYRES32=r7], 0x3c}}, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000140)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="63eced8e46aa7ce5a833c9f7b942", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000ff7f1d000000000000000085000000310000009500000000000000b58d6e791300"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x7, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x94) 4m27.889428598s ago: executing program 53 (id=4051): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0x2, 0x6, 0x2e}) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x7}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) unshare(0x2040400) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0xf) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r4 = socket(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000780)={'gretap0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1a, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r6, @ANYBLOB="71e79fd800000000140012800c0001006d61637674617000140002800800", @ANYRES32=r7], 0x3c}}, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000140)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="63eced8e46aa7ce5a833c9f7b942", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000ff7f1d000000000000000085000000310000009500000000000000b58d6e791300"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x7, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x94) 3m40.719325197s ago: executing program 8 (id=4484): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@block_validity}, {@minixdf}, {@noblock_validity}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='usefree,nodots,check=relaxed,dots,nodots,nodots,gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c6e6f646f74732c646f733178666c6f7070792c636865636b3d7374726963742c6e6f646f74732c646f74732c6e6f646f74732c6e66733d7374616c655f72752c646f74732c7379735f696d6d757461626c652c6e6f646f74732c74696d655f6f66667365743d3078303030303030303030303030303363642c73686f77657865632c646f74732c646d61736b3d30313737373737373736373737373737983737373737342c6e6f646f74732c00"], 0x1, 0x20e, &(0x7f0000000400)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') sched_setaffinity(0x0, 0x0, 0x0) lseek(r0, 0xfffd, 0x0) unshare(0x22020600) keyctl$clear(0x3, 0xfffffffffffffffd) 3m39.328187253s ago: executing program 8 (id=4488): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) write(r2, &(0x7f00000008c0)="bae2bf808214ff98d8d00b4e4aa5b63a86342a471feaedd023fe0d23081a02d33e4a469ab9d700b98dbc637a1ab17ee404dfa6c5d5a144ee59221d4b94680ba508343a208a525cff39a2733191ec729e1ed6ee89970d901cdde9274de2a14d16d4b60efff4a823051100a4766a36baa70307cd088fcc9e7146a60c52282f525d113a20c411358bfa0b288791cc9dba6ba75a160cb7beda4a2a7f1a2fa5c565ff344c6b7550c85aeec24195055e0cb2b5ed37875be4e627ef1027ef44c76edb024b67d2dd316c9025880d70300e9ac5abae459e1de4d6868facadaf5c07042ba04768b47d542ef67510bc6a31e1c671cd366d1060843996078b8bceab4299a1fd7ff0318b010dfc8a95b9163505bdde7f92bccfb94a227d620c7fbf355564d75dadaeb40bfa148575d175ba6b276dd1f08de275305c679ed2ca319a0d0ea310eee868429deb863319197812d62a2961765536e8b81edabf419b3ee6c60e17b9c61353366cb3e11572e94b996053feb7854704a86cd638976f8373557ca455e43463252bff8f4835f05ac57cc3e29031d648a942c4f83823378367ff5ff6157e59ccb6b7236eeca6a5f962d3f79b677fa1d2b8baa374f5aab9ecabd7f024941d73db13ba01090a7544d51c2e1ffc35d383b355c359568623715caadca70f1125419af0a5ec9832a5885c29ac40b3fe2f9f173934bb57eef3c9ab71d1b747554fb403d22cd39f98d2ac6df121c75ea827d1790db6fc7c21f601f75bc9b7d5facd83cf77e4b666e3257fb81ac213d2afccd3cc5e2bab7db075d051cd5c9f860f421e672e6d3c2ffce5f51b45e24a1dcf27de17e47ad0d34fa1ead3fc3892593f29f94f26413603c490f9c7d0682de6f9048ae911615975cee4e8b1349133192bfe71130368238688b67b74631a1a524699d28d86427694f753daf88e009c4d34ed310fea1c7356e5abc256595589f704a69b36b6dd05060f3abd79af70d2eb438b85b3d35d300eabaf51bdf479e07ff1338eba821f0c2a395cd355103df33032c1cd8edcdc5425f4418f18b7c1e85fceeb6f41fbaed2573052cf087659520618fe64ec82ae8484b2ddb50a41762fc3f90b3ceb8b2d10bac688e2d35d35e93639ab72384bebe7690c467f0f678bd7", 0x32c) 3m39.243471349s ago: executing program 6 (id=4491): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000880)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_io_uring_setup(0x109, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="140000000400000004000000090000a1fe000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_emit_ethernet(0x5e, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60000000002806ff00000000000000000000000000000000fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a010000690780000050001fe04f9890000060900000000000400000019338bd7a88cd010751bdd01613a7e6464ed165935366c17f7ef67ce6ad8fa919ebece7d4f042b5adc7699fd299463b07fc829520570"], 0x0) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xe55b, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_config_ext={0x1, 0x1}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x62000000, 0x0, 0xc0}, 0x0, 0x7, 0xffffffffffffffff, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) unshare(0x60000600) r4 = socket(0x28, 0x3, 0x0) bind$vsock_stream(r4, 0x0, 0x0) socket(0x1f, 0x5, 0xfffffff7) connect(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x4e23, @private=0xa010101}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x24, 0x0, 0x0, 0x1f00, 0x40, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYRES64=r0, @ANYRES16=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x30040042}, 0x80) 3m39.23180716s ago: executing program 8 (id=4492): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000cc0)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES64, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYRESDEC, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000100), 0x12) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000007c0)=[0x5], 0x0, 0x0, 0x4c}}, 0xa3) (fail_nth: 1) 3m38.456093033s ago: executing program 8 (id=4499): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0xbb79caa8b3279486) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x20000000, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001900)={r1, 0x1, 0x6, @local}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf25010000003a000400", @ANYRESOCT=r3, @ANYRESDEC], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x2000c080) setsockopt$packet_rx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000380)=0x2, 0x4) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x0, @local}, 0x10) 3m38.285396065s ago: executing program 8 (id=4500): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) socket$inet6(0xa, 0x2, 0x3a) getresuid(0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x1000) (fail_nth: 3) 3m37.962174587s ago: executing program 8 (id=4502): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000000004, 0x511, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x2, 0x10000, 0x0, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) fchown(0xffffffffffffffff, 0x0, 0xee01) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r0], 0x1000f) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f0000000180)={[{@resuid}, {@grpjquota}]}, 0x41, 0x534, &(0x7f0000000f00)="$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") r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x101) capset(0x0, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) 3m37.465976051s ago: executing program 6 (id=4504): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="b800000010000100080000000000000000007fff", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000900016806c0001800c0003000100000006000100280001"], 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3m37.33622169s ago: executing program 6 (id=4506): socket$can_raw(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fcffff00000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3m35.59293568s ago: executing program 6 (id=4511): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001000010800000000000000000000000026259628c72a3c24287dfc133d262274ddc0568b071e341b5c35183b0d98e1976ab815d96706cf8802b7631e4b54409c", @ANYRES32=0x0, @ANYBLOB="00000000e3000200180016801400018010000200feffffff670f00000300000008001b0000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20040004}, 0x24044000) syz_emit_ethernet(0x26, &(0x7f00000001c0)=ANY=[@ANYBLOB="0380c2000000bbbbbb9dbbbb080046060018006700000200007800000000000000008303e80145219f08c96f1641ae614f7595a1fbdd609d7b469e761414f707ed3f9169f806fe98108a25a6351c268a0a12f7017e74f7e11b2b1c2be7b3"], 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@barrier}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xa, 0x8}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r6, r5, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000300)={@local, @random="facfff00716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x26, 0x24, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3}}}}}}}, 0x0) r7 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r7, &(0x7f0000004200)='ns/net\x00') r8 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f00000005c0)={0x88000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000340), {0x3d}, &(0x7f0000000440)=""/113, 0x71, &(0x7f0000000500)=""/62, &(0x7f0000000540)=[r7, r8], 0x2, {r9}}, 0x58) recvmmsg(r4, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) read(r4, &(0x7f00000000c0)=""/74, 0x4a) sendfile(r3, r3, &(0x7f0000000100)=0x1ff, 0xfff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getxattr(0x0, &(0x7f0000000240)=@known='user.syz\x00', 0x0, 0x0) r10 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fsetxattr$trusted_overlay_redirect(r10, &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x1) 3m35.087869685s ago: executing program 6 (id=4516): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x100) unlink(&(0x7f0000000280)='./file1\x00') 3m34.632183406s ago: executing program 6 (id=4518): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40c, &(0x7f00000015c0)={[{@init_itable}, {@norecovery}, {@abort}, {@resgid}, {@orlov}, {@jqfmt_vfsold}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100}}, {@bsdgroups}, {@bsdgroups}]}, 0xfd, 0x501, &(0x7f0000000e80)="$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") r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) clock_gettime(0x0, &(0x7f00000044c0)) recvmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x43}], 0x2, 0x10002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000801, 0x0, &(0x7f0000000340)={0x800, 0x5, 0x0, 0xffffffffffffffff, 0x3, 0x8, 0x2, 0x9, 0x2d7}) pselect6(0x40, &(0x7f0000000000)={0x6, 0x7fff, 0x0, 0x401, 0x7, 0xf, 0x3d6}, &(0x7f00000000c0)={0x1000, 0x2, 0x5, 0x3, 0xc, 0x6, 0x9, 0x1}, &(0x7f0000000140)={0xa8, 0x8, 0xc6, 0x1, 0x1, 0x400000000000, 0xc6d2, 0x201f}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x1]}, 0x8}) 3m34.631824286s ago: executing program 54 (id=4518): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40c, &(0x7f00000015c0)={[{@init_itable}, {@norecovery}, {@abort}, {@resgid}, {@orlov}, {@jqfmt_vfsold}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100}}, {@bsdgroups}, {@bsdgroups}]}, 0xfd, 0x501, &(0x7f0000000e80)="$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") r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) clock_gettime(0x0, &(0x7f00000044c0)) recvmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x43}], 0x2, 0x10002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000801, 0x0, &(0x7f0000000340)={0x800, 0x5, 0x0, 0xffffffffffffffff, 0x3, 0x8, 0x2, 0x9, 0x2d7}) pselect6(0x40, &(0x7f0000000000)={0x6, 0x7fff, 0x0, 0x401, 0x7, 0xf, 0x3d6}, &(0x7f00000000c0)={0x1000, 0x2, 0x5, 0x3, 0xc, 0x6, 0x9, 0x1}, &(0x7f0000000140)={0xa8, 0x8, 0xc6, 0x1, 0x1, 0x400000000000, 0xc6d2, 0x201f}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x1]}, 0x8}) 3m22.732837596s ago: executing program 55 (id=4502): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000000004, 0x511, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x2, 0x10000, 0x0, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) fchown(0xffffffffffffffff, 0x0, 0xee01) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r0], 0x1000f) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f0000000180)={[{@resuid}, {@grpjquota}]}, 0x41, 0x534, &(0x7f0000000f00)="$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") r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x101) capset(0x0, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) 2m5.14391457s ago: executing program 0 (id=5217): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d00000000"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x28000000}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x158) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0), 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$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") r4 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mount$tmpfs(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) 2m4.105751362s ago: executing program 0 (id=5224): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bd23, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0x24048844}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, 0x0) 2m3.832129791s ago: executing program 0 (id=5226): socket$igmp6(0xa, 0x3, 0x2) socket$kcm(0x11, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x4) socket$can_j1939(0x1d, 0x2, 0x7) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf8c, 0x510, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x80000000, 0xfffffffb, 0x1, 0xabca, 0x85, 0xff, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="64000000100003040000000000000000000ffe00", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0003001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2m3.670573491s ago: executing program 0 (id=5227): mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x10, 0xffffffffffffffff, 0x3dc8d000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f00000000c0)="f5c89e1e", 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x4, 0xefd, 0x3, 0x8, 0x6, 0x6, 0x20000001000, 0xf64, 0xfffffffd}) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100)) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) mremap(&(0x7f0000678000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000841000/0x2000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0xd) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r1) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c000100", @ANYRES16=r2, @ANYBLOB="010000000000ffdbdf253d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e00820000000000"], 0x3c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mknod(&(0x7f0000000340)='./bus\x00', 0x8, 0x2000008) rename(&(0x7f0000000080)='./bus\x00', &(0x7f00000001c0)='./file1\x00') connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2, @local, 0x9}, 0x1c) setresgid(0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0x2, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="433fe23c7bf48c7ad30116a99c0000000050930200000000000000"], 0x10) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f00000002c0)=@get={0x1, &(0x7f0000002240)=""/4109, 0x2}) 2m3.375286402s ago: executing program 0 (id=5230): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x484c0, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x1}, 0x50) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={'veth1_to_bridge\x00', {0x2, 0x4e20, @broadcast}}) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m2.868208687s ago: executing program 0 (id=5239): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r0, 0x604ae000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x1000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0, 0x2a}, &(0x7f0000000380)=0x40) 2m2.868128867s ago: executing program 56 (id=5239): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r0, 0x604ae000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x1000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0, 0x2a}, &(0x7f0000000380)=0x40) 1m49.691500425s ago: executing program 2 (id=5372): prctl$PR_SVE_GET_VL(0x33, 0x17d64) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x1, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x204, 0x8, 0x43a1bd76, 0x7, 0xc, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000009cc0)=@newtfilter={0x508, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x4dc, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_ACT={0x4}, @TCA_FW_ACT={0x4d0, 0x4, [@m_xt={0x18c, 0x18, 0x0, 0x0, {{0x7}, {0xd8, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x3d, 0x6, {0xd, 'security\x00', 0xff, 0x1b, "3901bae1b2c90dec01349be3ac5bab1aa98106"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0xb}, @TCA_IPT_INDEX={0x8, 0x3, 0x3ff}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}]}, {0x8d, 0x6, "c62e9a687eed868051eb651c24304d274e8629de1b50d16051064435fc24ec70771d17f6fcdc9e9ee75e25d0f91438203e64eefedecde132008eeb0431ab391ca0bf5a7765d9d88867fb095fac2a9c7739fdc611b922111ed0c5abbfcc78d191c3703f0604da38e930080de9aa271e5f8e9da2c50a80ed7034f68c77939dbe86fb46c18e845a89f584"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0xc4, 0x13, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x7f, 0x5, 0x10001, 0x6}}]}, {0x7d, 0x6, "7c0a1851060342436687049aaca83c87334c4d9cf996bff1b72efe3eb55f6b006dbd0e1c0bd78373b86981d3f1c87ebe53beca47c54b14ae9193d84be9fe799163951c5c233b691617e5508ea3f9b14b8a84941b72dac877ea437941f785a1c09929108fa47ec3420933e77185f8c50d8140dd015231cd6cec"}, {0xc, 0x7, {0xb07c3f3708729d04}}, {0xc, 0x8, {0x3}}}}, @m_pedit={0x27c, 0x4, 0x0, 0x0, {{0xa}, {0x250, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x1bc, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x337b561b573d7d9c}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}, @TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_KEYS_EX={0x4c, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x508}}, 0x0) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x280002, 0x0) r4 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0xb}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5f8, 0x140, 0x230, 0x230, 0x430, 0x430, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @common=@hl={{0x28}, {0x1, 0x80}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa010102, @ipv4=@empty, 0xd, 0x0, 0x6}}}, {{@ipv6={@empty, @empty, [0xff000000, 0xffffffff, 0xffffffff, 0xffffff00], [0xffffff00, 0xff000000, 0xff, 0xff], 'geneve0\x00', 'erspan0\x00', {0xff}, {}, 0x8, 0x2, 0x2, 0x2}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4=@multicast1, 0x5, 0x3, 0x3e}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv4=@loopback, 0x0, 0x2b, 0x3}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xffffff00], 'team0\x00', 'macvlan1\x00', {}, {}, 0x2e, 0x5, 0x4, 0x40}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0x80, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e21}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) unlink(0x0) 1m49.255314145s ago: executing program 2 (id=5374): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002bc0)=ANY=[@ANYBLOB="5000000002060103000000000000000001000007090002000005000500010000000500edff010000"], 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x8080) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="8000260b0a00020001"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f0000002c80)=@gcm_128={{0x304}, '\x00', "362574ad5924c0c5aedd72261081b10f", "0700d871", "d97ab19fbd9a8e17"}, 0x28) write$binfmt_aout(r9, 0x0, 0xfdef) sendto$inet6(r9, &(0x7f00000002c0)="d26a73ebcca96c4283ae924458b7898a7e34", 0x3fff, 0x8040, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3005002, &(0x7f00000000c0)={[{@nodelalloc}]}, 0x0, 0x53c, &(0x7f0000000680)="$eJzs3X9rJGcdAPDvzGbvkrvUpCpSC7bFVu6K3u6lsW0s0lYQBaGg1v/PmOyFcJtsyG7qJRRN8QUIIir4AvxH8AUI0pcgQkH/FxVFNKf/CNqR2Z3VJLubLJdN9rr5fGAyzzPzzHyfZ8jMzo+HmQAurWci4vWIKEXE8xExV0xPiyH2O0Ne7sHB2yv5kESWvfm3JJJiWnddeX4qIq4Xi01HxNe/HPGtpDduc3fv3nK9Xtsu8tXWxla1ubt3a31jea22VttcXFx4aenlpReXbmeFM7VzPiJe/eKffvT9n33p1V995tu/v/OXm9/Jq/X5j3XqHRErZwowQGfd5fa26Mq30fZ5BBuTvD3l0rhrAQDAMPJz/A9HxCfb5/9zUWqfzQEAAACTJHttNv6dRGQAAADAxEojYjaStFL0BZiNNK1UOn14PxrX0nqj2fr03cbO5mo+L2I+yund9XrtdtFXeD7KSZ5fKPrYdvMvHMsvRsTjEfHDuZl2vrLSqK+O++YHAAAAXBLXnz56/f/PubSdBgAAACbM/MAMAAAAMClc8gMAAMDkc/0PAAAAE+2rb7yRD1n3O96rb+3u3Gu8dWu11rxX2dhZqaw0trcqa43GWvudfRunra/eaGx9NjZ37ldbtWar2tzdu7PR2Nls3Vk/8glsAAAA4AI9/vS7v0siYv+Vf5X3X5lpT0vHXSngwswMW/CP51sP4GKVxl0BYGymxl0BYGzKp5ZwhIBJl5wyv7fzTnHX4NfnUx8AAGD0bny8+/x/JrrP/68U806/NwB8kOnrAwCXj6d7cHmVH7YH4BOjrgkwLh/qjK4Omj/w5R1DPP/v3GPIsoeqGAAAMDKz7SFJK8V5+mykaaUS8Vj7swDl5O56vXa7uD747Vz5ap5faC+ZnNpnGAAAAAAAAAAAAAAAAAAAAAAAAADoyLIkMgAAAGCiRaR/Ttpv84+4Mffc7NG7A8e++vXTN398f7nV2l6IuJL8fS6fdCUiWj8ppr+Q+SQAAAAAPAI61+nFeGHctQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg0jw4eHulO1xk3L9+ISLm+8Wfiun2eDrKEXHtH0lMHVouiYjSCOLvvxMRT/SLn8T7WZbNF7XoF3/mnOPPtzdNb/zsakQaEddHEB8us3fz48/r/fa/NJ5pj/vv/1PFcFaDj3/p/45/pQHHn8eO5Qd58r1fVAfGfyfiyan+x59u/KQT/0iIPPPskG385jf29vrOOLTKBwflOB7/cKxqa2Or2tzdu7W+sbxWW6ttLi4uvLT08tKLS7erd9frteJv3zA/+MQv3z+p/df6/v51jr+H2t+z/Z8bqvVZ/Oe9+wcf6WTK/eLffLZP/K9cLUr0xk+L375PFel8/o1uer+TPuypn//mqZPavzqg/dOntP/mUO2Pzz3/te/9oe+cnq0BAFyE5u7eveV6vbZ9QmJ6iDIXnHjt0ajGCBPxaFRjVIn8XHTowtO17ey7nf/Hs0U/4+I9iewsi0/FCKpxpWc/LcWRMqWhduF2IonYz9fVt0zS8w8JAABMmP+f9J/0BAkAAAAAAAAAAAAAAAAAAAA4Tw/5WrLpiBi68PGY++NpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4bAAD//4qTz40=") 1m48.520665156s ago: executing program 2 (id=5385): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1ffffc54, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x100000, 0x0, 0x0, 0x41000, 0x40}, 0x94) memfd_create(&(0x7f0000000080)=',\xea\x02', 0x4) r0 = semget$private(0x0, 0x4000000009, 0x42a) semop(r0, &(0x7f00000002c0)=[{0x4, 0xff, 0x800}, {0x4, 0x1e}, {0x4, 0x23ea}, {0x0, 0x8}, {0x0, 0xfff}], 0x5) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xfff9, 0x1000}], 0x1, 0x0) semctl$GETZCNT(r0, 0x0, 0xf, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0xc, 0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x2000008, 0x9, 0xfffffffe, 0x18, 0xb, 0x2a, 0x2, 0x2000009, {0x10002, 0x7fff, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x9, 0x7, 0xa9, 0x1, 0x1}}, {0x4}}]}]}, 0x9c}, 0xffffffffc0000000, 0x0, 0x0, 0x40840}, 0x800) 1m48.439817721s ago: executing program 2 (id=5387): perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x33, 0x6, 0x0, 0x20, 0x0, 0x7fffffff, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000100)}, 0x28, 0x9, 0x0, 0x0, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xc89c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x2, 0x400) openat$procfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, 0x0, &(0x7f0000000080)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x7, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) sysinfo(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x40) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x12d8) 1m46.720244039s ago: executing program 2 (id=5401): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) socket$inet6(0xa, 0x2, 0x3a) getresuid(0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x10fe) 1m46.593843458s ago: executing program 2 (id=5405): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) socket$inet6(0xa, 0x2, 0x3a) getresuid(0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x1000) (fail_nth: 5) 1m31.194517239s ago: executing program 57 (id=5405): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) socket$inet6(0xa, 0x2, 0x3a) getresuid(0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x1000) (fail_nth: 5) 20.642292568s ago: executing program 3 (id=5994): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001000000000000000400e9ffffffffff0f000700000000002000020000000000"], 0x24, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb) capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000340)={0x6, 0x200003, 0x801, 0x4, 0x3, 0x80000000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) msgget(0x2, 0x28c) msgget(0x2, 0x80) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={&(0x7f00000005c0)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/241, 0x13c}], 0x1}, 0x1f00) r1 = io_uring_setup(0x115c, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs$pagemap(0x0, &(0x7f0000000300)) syz_clone(0x40082200, 0x0, 0x0, 0x0, 0x0, 0x0) 17.800680694s ago: executing program 3 (id=6010): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e0000002c000280080008000600000008000300000000000800060000010000"], 0x40}}, 0x44000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x80000, 0x42, 0x4}, 0x18) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x50, r4, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xc24f}]}, 0x50}, 0x1, 0x0, 0x0, 0x90}, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x28, 0x64, 0x0, 0x9, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x2, 0x0, 0xe7}}}}}}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='map=off,check=relaxed\x00mode=0x0000000000000001,map=off,session=0x0000000000000062,uid=', @ANYRESHEX=0x0, @ANYBLOB='Amap=acorn,iocharset=macgaelic,session=0x0000000000000058,mode=0xffffffffffffffff,map=off,check=strict,uid>', @ANYRES64=0x0, @ANYBLOB=',cont%|t=user_u,\b'], 0xfa, 0x6bb, &(0x7f00000015c0)="$eJzs3c1v2/Ydx/EP5SfZ3YJiG4IgyMMvyQo4WKZIcuPAyICWoyibmyQKpDzYwIAia+wiiJxuSQcsvnS+7AHogJ1362WH3fYPDOi5GPY/7LYBxXYbsB00kBRlPVGyGsdN2vdLSESRX/5+X5IKv6Et/iQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACDLqRSLJUs1r7G9Y7I5lcCvT1ietLagm8nEzan9Slb0R/m8LiSzLnzrePH56K/rupS8uqR89JTX4WvnX7/3zflcuv6EhD4Pzdrg02eHj+6323tPThA7p5mb/yIpd4KgTbfhhb5Xtzdd44W+2VhfL97eqoam6tXccDdsuXXjBG6u5Qdm1blpShsba8Yt7Prbjc2KXXPTmXe/Wy4W180PlpIDLakQOltereY1NuOYaHEUc9d89OMkwLXrxuw/bO+tTUsyCiplLcz1BZWntVQulsulUrlcWr+zcedusTg/MqMYsYo9Gok49TctXjGnd/IGnlMuqv9/t6Sa8mpoWzsyYx+OKgrkq568/lu0cv/yrrT+v3Hbndhvf/1Pq/wF6a3u4ouK6/+V5NWVrPqfkauRyQ/nlz6s/vkHf+32l9lOxmMhzsjoqZ7pUI90X221tacnM7c09nH1VFo5g8emXDXkKZQvT3XZ8RzTnWO0oXWtq6h3tKWqQhlV5akmV6F2FaolN35HOQrkylZLvgIZrcrRTRmVtKENrcnIVUG78rWthjZVka3/dDqdfT2M9/vahByVBpUyApb6g8oTWsqq/z/5MHkXdet/cVz9/7qo/19+yftgKXn6dFIM8BLodK//p1gcen31xWUEAAAAAABOmxX/9N2Kf3d/WVJHVa/mFrNXGP5JAAAAAAAAeOlZ6izpkqzo+l/SZVlTrv8BAAAAAMArx4rvsbMkrcQf6reO74Q6yQ8B5s4gRQAAAAAA8JziO/+vLEqdeNCKq7Jmuv4HAAAAAACvgN/0jbE/n46x20l/rZ+TFDaXrL/8a0nBgnXU3Pm2dWBHS+yDuVwcMvIJgFb1ohX+PhmoNx6vd1FS/MpxL1nd3rqDYPbGHfxsf9pY/1YwlMDiXH8DQwmc665tRT2vz3df6SNde2sg9sFhTvGSpJeVqldzC45fu1eSbZ/Ltdyd1s8fP/yFFPS2c/9he6/w7vvtB3EuR9Gso4Mojw/TdP682N11g7nET71c/tdJSJfHbvGyqmmXv23UV6y432K6/XOyD3LHxyhz+wf71K90PTlm11eS2JXD3oj70fbno+0vFeJDNrD1wYJ1nEVpeMvHHYiMLPJxFjeSmBurN5KnNL+onZyV/86cVC6MHoOBLMr9WUzfF9a/R/bFpCy6+2ItyuKTqKGMLNZmy2LkiADAF2U/HvUnvvMvHsR8pO6m5SE9qX2uujO9ur89WN0/+ENUGZP/Xsx3fzcxsZe8ojP6qhXXoUXFJ9b5iyNn9HRr7HN5ZZzRi89R3aK+/nT8HUjdtEey+G+n07lXivv93VBV/Tha4ePMfsNasttvf3Dw03gA/Mh7e+/tPS6X19aLbxaLd8paiDej+zQnag8AYMT079iZGmG9qWtJxLUH/3wjmRqoeN/ofaSgoHf1vtp6oIX0KwSujm91pe9jCLeSq1b1XbWa86/fW5aGY0u6lXlVF9fSvthyL3ZB6SqDlfo4du0FHwUAAM7W9Sl1eHz9zw/U/1taTSJWk2vK4evuwVrevTruXdJnxZamJ//2Ke8MAAC+ItzgM2ul9WsrCLzmO6WNjZLd2nJN4Ds/NIFX2XSN12i5gbNlNzZd0wz8lu/4NdMMtORV3NCE282mH7RM1Q9M0w+9nfib3033q99Dt243Wp4TNmuuHbrG8Rst22mZihc6prn9/ZoXbrlBvHLYdB2v6jl2y/MbJvS3A8ctGBO6bl+gV3EbLa/qRZMN0wy8uh3smh/5te26aypu6ARes+UnDaZ9eY2qH9TjZgvqTP2iQwAAvgqePjt8dL/d3nsyPLEcXZonc46UETM6sTimQcYIAgDgJXNcrmdYKd+b+qTzQrICAAAAAAAAAAAAAAAAAAAAAAD9pt/SN+PEwribBaXenJ+d687RL3V8i+FIO5ZOO7FZJnKzrpXeEnH46NMJwcu9Oenu7485eiGbk96r0b/oH1+TXotjlMyZH7d6Prtla3rvyxMO7gkn5qIddNLg7+0n25kZM7wTehNLvWMxf/r/HKKJx3/MWNTpdDqTV18a3IeLkzZwcGJe0pPF5zgEZ3seAnD2/h8AAP//qqs6YA==") file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x18, 0x100) socket(0x2, 0x80805, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) geteuid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000080)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x15, 0x3, 'lblcr\x00', 0x30, 0x5, 0x72}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@gettaction={0x18, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e22, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x44) 17.363929104s ago: executing program 3 (id=6014): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)}, &(0x7f0000000140)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000100)=0xffdfffff) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa520, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xa, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40) io_uring_setup(0x689d, &(0x7f0000000040)={0x0, 0xca73, 0xc000, 0x0, 0x2e8}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) socket$inet(0x2, 0x80000, 0xfffffffe) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 15.453329715s ago: executing program 3 (id=6021): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001000000000000000400e9ffffffffff0f000700000000002000020000000000"], 0x24, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb) capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000340)={0x6, 0x200003, 0x801, 0x4, 0x3, 0x80000000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) msgget(0x2, 0x28c) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={&(0x7f00000005c0)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/241, 0x13c}], 0x1}, 0x1f00) r1 = io_uring_setup(0x115c, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs$pagemap(0x0, &(0x7f0000000300)) syz_clone(0x40082200, 0x0, 0x0, 0x0, 0x0, 0x0) 14.038782223s ago: executing program 3 (id=6032): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40c, &(0x7f00000015c0)={[{@init_itable}, {@norecovery}, {@abort}, {@resgid}, {@orlov}, {@jqfmt_vfsold}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a}}, {@bsdgroups}]}, 0xfd, 0x501, &(0x7f0000000e80)="$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") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file1\x00') r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r4}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xd, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x200000800}, 0x0, 0x400006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getresuid(&(0x7f00000001c0), &(0x7f00000002c0)=0x0, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000801, r7, 0x0) syz_io_uring_setup(0x7cc, &(0x7f00000003c0)={0x0, 0x9a43, 0x80, 0x1, 0x2f3, 0x0, r5}, 0x0, 0x0, &(0x7f0000000700)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_RESETEP(r2, 0x80045503, &(0x7f0000000240)={0x5}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r8) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) pwrite64(r3, &(0x7f0000000140)='2', 0xff10, 0x8000c61) read$msr(r3, &(0x7f0000001200)=""/244, 0xfffffc9c) 13.836191767s ago: executing program 3 (id=6033): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[], 0x60}}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.957788366s ago: executing program 9 (id=6147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.918268579s ago: executing program 9 (id=6150): perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x7, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7ffffffe, 0xc44c}, 0x0, 0x0, 0x0, 0x4, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000200), 0x6, 0x5af, &(0x7f0000000dc0)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8, 0x103) r0 = open(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000000020301010000002e00004ddb020010010900090000000007010000000800010001"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x8000, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYRES64=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000303050000000000000021000a000001"], 0x20}, 0x1, 0x1000000, 0x0, 0x20000004}, 0x404) quotactl_fd$Q_SYNC(r2, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d800000018", 0x5}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r0], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x30, r4, 0x701, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x9, 0x75}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x30}}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) 2.812039897s ago: executing program 9 (id=6152): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) lseek(r1, 0x0, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r2, 0x8001}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000001b00)=""/4050, &(0x7f0000000000)=0xfd2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x22004006, &(0x7f0000000f40)={[{@jqfmt_vfsold}, {@noblock_validity}, {@nodioread_nolock}, {@stripe={'stripe', 0x3d, 0xffff}}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x47b, &(0x7f0000001680)="$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") r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000080)='./file0\x00', 0x2000775) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) unshare(0x28000600) r4 = socket(0x1f, 0x3, 0xfffffffc) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r8, @ANYBLOB="050427bd7000fcdbdf250100010008000100", @ANYRES32=r9, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000010038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004"], 0xd0}, 0x1, 0x0, 0x0, 0x48894}, 0x20004080) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0022001800090200000000ffdbdf250200006fce278a9cbce5fa80"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r12 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r12, 0x107, 0x8, 0x0, &(0x7f00000000c0)) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0x4}, {0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x67}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000050}, 0x200040c4) 2.683896155s ago: executing program 9 (id=6154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040041}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7fffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @multicast}, 0x14) socket$inet_udp(0x2, 0x2, 0x0) r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x22a000, 0x0) ioctl$TIOCSETD(r12, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCVHANGUP(r12, 0x5437, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=r7], 0x78}, 0x1, 0x0, 0x0, 0x4004040}, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) 2.61987966s ago: executing program 4 (id=6156): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x7800, 0x0, 0x7, 0xfffffffc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast1, @rand_addr=0x64010101}}}}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x8000) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x0, &(0x7f0000000540), 0x1, 0x7a1, &(0x7f0000000f80)="$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") 2.523874796s ago: executing program 7 (id=6157): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) timerfd_create(0x1, 0x80800) close(0x3) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000780)=0x14) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x5, 0x7}, {}, {0xffff, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x810) sendmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000340)="7097d8274868833d4fe58a847fd24fab82065c4ad48cdedcda51b31a3d283d2919a40d15681c3a3aff0a", 0x2a}, {&(0x7f0000000380)="abe21ece3bbb6e4641473f74c73b71f7f275379c481a578b89417216eac468e46565045c796c355871b0bd3e", 0x2c}, {&(0x7f0000000400)="b44f7adce21929748b8dc8ad35df5adf00f3e70904c6682899e02854b58fa5edd1e079b8c5d769e6308fbaa608520d5a87bed25b527164bbfd7b9ebea9e1b144e2d15ede7a2c911584403b906da499eb5baeaa", 0x53}, {&(0x7f00000004c0)="cd17a5d67fc54ad2109473e074641b99e0c8ce2c45910d2c1eb6b9a295ffe6d23270393a940e5693fef7e8b1165b714f6e92829824adfeb913aabf6efa047604bfacc11307fe530c171947f8a26786fe629bfca42b09d5e83973a691768715c47880fa68f2bb318b47353bf9dbeb0bd25fbe1805bc3e7a22bdfc2b92ee1fec310cc39a833670077a42a9f52210fbf731d533601f98a01e36814f255a37abaeb4e4be70c1ecbc898ff26fbf1f9b80f0d19b78f66877cd73f8979a06421c0e7040e2974cd5bb3e444e1558cd7c3cd848ae3eb07d6501065789aafa1c976cc4", 0xde}, {&(0x7f00000005c0)="1c6c0aa6cd291dbb4d120a3b36bf7194c37bab46d20fc12a560a75d820b518cf8cdcb27daee044fdba960e7df7440fa1c9fd42469d60019cb474b414f8a7b0018b99022e7d7ebb057c8c740e47c4be841517386a35dfdf688a247875df8d25c0d2bdf9e6ecd6ec5d274480031885e294a9f0ea2d77aff82edecaf6cf003e8eb0a5e4a668483f3697f152111b3e5cfa85166904cdad92f678629caf36de670324bd9cbabd32f3f52d4038dba5fa17b9127731f4c070d1b481d11c2b073de014e86e5198856817c98db1662185a74287dc2d27f3ff3ba11413", 0xd8}], 0x5, &(0x7f00000007c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @private=0xa010102, @private=0xa010102}}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x8f, 0x1, 0xd, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa}, {@private=0xa010101}, {@rand_addr=0x64010102, 0x1}, {@remote, 0x100}]}, @timestamp={0x44, 0x8, 0x9d, 0x0, 0x1, [0x5]}, @cipso={0x86, 0x37, 0x3, [{0x7, 0x9, "28798190b6f713"}, {0x7, 0xd, "f00c1e3a4412f98954906f"}, {0x6, 0xe, "52fa397f70af784abf8da2bf"}, {0x6, 0xd, "d1293876755eec5094e811"}]}, @noop, @rr={0x7, 0x27, 0xf5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0x2f}, @private=0xa010102, @loopback, @dev={0xac, 0x14, 0x14, 0x2b}, @local]}, @timestamp={0x44, 0xc, 0xe4, 0x0, 0x4, [0x8000, 0x6]}, @lsrr={0x83, 0x7, 0x7f, [@local]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @remote}}}, @ip_retopts={{0x104, 0x0, 0x7, {[@noop, @generic={0x89, 0xd, "00718aebed2d823a1936b4"}, @end, @ssrr={0x89, 0x17, 0xdd, [@loopback, @local, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x2d}]}, @timestamp_prespec={0x44, 0x34, 0x7, 0x3, 0x3, [{@remote, 0xff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@loopback, 0x5d8}, {@private=0xa010100, 0x4}, {@broadcast, 0x6}, {@multicast2, 0x5}]}, @timestamp={0x44, 0x8, 0x74, 0x0, 0xb, [0xffffffff]}, @noop, @ssrr={0x89, 0x17, 0x2b, [@empty, @rand_addr=0x64010101, @broadcast, @multicast1, @broadcast]}, @timestamp_addr={0x44, 0x2c, 0x17, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@private=0xa010101, 0x2}, {@rand_addr=0x64010100, 0x3}, {@local, 0x9}, {@multicast2, 0x8}]}, @cipso={0x86, 0x4c, 0x3, [{0x6, 0x2}, {0x0, 0x8, "4fbaeef8e307"}, {0x0, 0xc, "594c2fcbde397067aef6"}, {0x1, 0xe, "5df00b45bbede67de765e405"}, {0x7, 0xf, "e96c6f35565e029c8b82c4341c"}, {0x5, 0x6, "43efdc5d"}, {0x5, 0xd, "0f1fd2bda2157b69a21d5c"}]}]}}}], 0x1f8}, 0x64faf6f929f003e7) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={0x0}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socket$key(0xf, 0x3, 0x2) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2.417293604s ago: executing program 4 (id=6158): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64], 0xff, 0x1f5, &(0x7f0000000600)="$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") capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) (fail_nth: 5) 2.401047214s ago: executing program 7 (id=6159): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) get_robust_list(0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x20000010, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000010004b0429bd7000faffffff7affa100", @ANYRES32=0x0, @ANYBLOB="08b0010006820000400012800b0001006272696467650000300002800c002200000000040000000005002400010000000600080088a80000080005000100000005002b00050000000a000100aa"], 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) 2.166362721s ago: executing program 4 (id=6160): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001b1401"], 0x38}, 0x1, 0x0, 0x0, 0x844}, 0x4840) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4044810) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) (async) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) (async) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 1.985186093s ago: executing program 5 (id=6161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xeb}, @NFULA_CFG_MODE={0xa, 0x2, {0x5, 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x35}, 0x20048808) 1.969420284s ago: executing program 5 (id=6162): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x49108}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40481ff}, 0x0) 1.832069994s ago: executing program 5 (id=6163): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000600)=ANY=[], 0x210) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000380)=ANY=[@ANYRES8], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', r0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) kexec_load(0x3, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x116094000, 0x41000300}], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRES64=r0, @ANYRESDEC], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@bsdgroups}, {@noload}, {@abort}, {@auto_da_alloc}]}, 0xff, 0x459, &(0x7f00000004c0)="$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") sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x38, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071119900000000008510000002000000850000000500000095000000000000009500"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) 1.831948564s ago: executing program 4 (id=6164): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x500, &(0x7f0000003c40)="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"}) 1.796833726s ago: executing program 5 (id=6165): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080)=0xffffffad, 0x4) (async) sendto$inet6(r0, &(0x7f00000000c0)="1a", 0x1e91b, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7fffffff}, 0x0) (async, rerun: 32) r1 = getpid() (rerun: 32) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) (async) futex(&(0x7f000000cffc)=0x1, 0x0, 0x0, 0x0, 0x0, 0x1) syz_clone(0xc0054000, &(0x7f0000000240)="b3133d2792de8492678a44857646851da24244b09be8979c48ea70c271bb009fbc94b73298883441132c179db3ba23e19ad0e858f5f1a0592db073bd7a8059e2d0e51e946180726756ece97ed022338eda3624a229af4c68e834b7e58ba6ff3d7cdb9461532862b3e986be021d30ceac4ee14db3b5ed4210a18d54fd95ed60048740a83e114b700a21b741306f115380d6f5ddf10c3e34b5878ef3df44fefb4756f9fe3b1d", 0xa5, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="17c4c6e6b18254658a65405aabe9378e751034a664ff08364c47eeca45036c") futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) (async) futex(&(0x7f000000cffc), 0x5, 0x800000, 0x0, &(0x7f0000048000)=0xfffffffd, 0x1f) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x6, 0x9, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dff, 0x15}) (async, rerun: 32) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) (async, rerun: 32) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0xd, "0062007d82000000000000002240f7ffffff00"}) (async) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000200)=0x17) syz_open_dev$MSR(&(0x7f00000000c0), 0xffffffffffff4f30, 0x0) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) listen(r2, 0x0) (rerun: 64) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB='enc=o'], 0x0, 0x0) (async) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000040)={0x8, 0x9, 0x0, 0x6, 0x100, 0x4}) (async) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000080)={0x60, 0x0, 0x4, 0xe, 0x7d}) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000ffffffe04e000000000000005fa00000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe}, 0x94) (rerun: 64) 1.773954028s ago: executing program 7 (id=6166): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) 1.692028243s ago: executing program 4 (id=6167): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x101500, 0x0) preadv2(r0, &(0x7f0000000180), 0x0, 0x4, 0xfffffffe, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() recvmsg(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x10040) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000024c0)=ANY=[@ANYBLOB="04010000180011077000fddbdf2500000000000000000000000000000001fe8000000000000000000000000000bb4e2300004e2200000a0020303a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffff00000000000004d36c0000007f00000100000000000000000000000071faffffffffffff8172000000000000f7ffffffffffffff0c00000000000000000000000000008009000000000000000000000000000000080000000000000005000000000000000100000000000000ffffffffffffffff06000000000000000600000003000000050000002abd7000043500000a000007050000000000000005000000000000000c0015005d07350000000000"], 0x104}, 0x1, 0x0, 0x0, 0x3fb4c4e46942352c}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e20, 0x2a62b372, @mcast2, 0x1009}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000400)='./file2\x00', &(0x7f0000000340), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x84, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x16b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x63}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xffffff00}]}, 0x84}}, 0x4850) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x68, 0x0, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x9, 0x0, 0x4, 0xee, 0xf}}) socket$nl_generic(0x10, 0x3, 0x10) 1.691865954s ago: executing program 5 (id=6168): socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x800000200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfe, 0x7, 0x7ffc0001}]}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000480)={r5, 0x961c, 0x2}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000580)={{r2}, r3, 0x14, @inherit={0x70, &(0x7f0000000140)={0x1, 0x5, 0x800, 0x7fe0000, {0x2c, 0xcc, 0x32, 0x1, 0x9}, [0x0, 0x4, 0x5c6b, 0x6, 0xd6]}}, @devid=r5}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mlockall(0x3) 1.564951812s ago: executing program 9 (id=6169): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x7800, 0x0, 0x7, 0xfffffffc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast1, @rand_addr=0x64010101}}}}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x8000) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x0, &(0x7f0000000540), 0x1, 0x7a1, &(0x7f0000000f80)="$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") 1.000059921s ago: executing program 9 (id=6170): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f00000036c0)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)='v', 0x1}], 0x1}}], 0x2, 0x48000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x5, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r4], 0x24}}, 0x0) 936.154766ms ago: executing program 7 (id=6171): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") r1 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './file1'}, 0xb) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) quotactl_fd$Q_QUOTAON(r0, 0x0, r3, &(0x7f0000000240)='./file1/file0\x00') 936.040895ms ago: executing program 7 (id=6172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xeb}, @NFULA_CFG_MODE={0xa, 0x2, {0x5, 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x35}, 0x20048808) 908.431228ms ago: executing program 7 (id=6173): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001000000000000000400e9ffffffffff0f000700000000002000020000000000"], 0x24, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb) capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000340)={0x6, 0x200003, 0x801, 0x4, 0x3, 0x80000000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) msgget(0x2, 0x80) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={&(0x7f00000005c0)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/241, 0x13c}], 0x1}, 0x1f00) r1 = io_uring_setup(0x115c, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs$pagemap(0x0, &(0x7f0000000300)) syz_clone(0x40082200, 0x0, 0x0, 0x0, 0x0, 0x0) 762.114638ms ago: executing program 4 (id=6174): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = gettid() timer_create(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRESOCT=r2], 0x20}}, 0x0) socket$phonet(0x23, 0x2, 0x1) prlimit64(0xffffffffffffffff, 0x7, 0x0, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000d40)=@ethtool_eeprom={0xc, 0xba3, 0x7}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x3) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x40, 0xffffffff, 0x9}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r9) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYRES64=0x0], 0x1, 0x24a, &(0x7f0000000ac0)="$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") open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) r10 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r10, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0xeffdffff, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) 0s ago: executing program 5 (id=6175): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000700)="89000000120081ae08060c40928505007f03e3f70000000500e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaee0c7a6ec08123d000200080001070400c46b9bbc7a46e3988285dcdf12f21308f8", 0x67}], 0x1}, 0x20000010) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB='\x00:\x00\x00\x00\x00\x00\x00\b\x00%\x00\x00\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES64=r2, @ANYBLOB="00000000000001ffdf2511000000", @ANYRES16=r5], 0x14}, 0x1, 0x0, 0x0, 0x24040880}, 0x4048cc4) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001340)=@newtaction={0x10a8, 0x30, 0xb, 0x0, 0x0, {}, [{0x1094, 0x1, [@m_bpf={0x0, 0xa, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x0, 0x4, [{0x10, 0x0, 0xfb, 0x4}, {0xd53a, 0x6, 0x9, 0x3b}]}, @TCA_ACT_BPF_OPS={0x0, 0x4, [{0x8a, 0xb, 0x4b, 0x2}, {0xc7, 0xd, 0x81, 0xffffffff}, {0x5, 0x1, 0xd3, 0x6}, {0x62, 0x7, 0xb, 0x339ee235}, {0xd, 0xc, 0x7, 0xe2}]}, @TCA_ACT_BPF_PARMS={0x0, 0x2, {0x3, 0x7, 0x4, 0x40, 0x5c2}}, @TCA_ACT_BPF_OPS={0x0, 0x4, [{0x800, 0x7, 0x7, 0x2}, {0x6, 0x6, 0x7, 0xe8}, {0x9, 0x7b, 0xfc, 0x8}, {0x200, 0x4, 0x4, 0x3}]}, @TCA_ACT_BPF_PARMS={0x0, 0x2, {0x4, 0x2, 0x1, 0xa2b1, 0x3060}}]}, {0x0, 0x6, "7fe1ac658a2c4024864aa51c023bdf55532994f4cca5b39b5fba744b4858c89ff07641d9474f084623525addd9ccc9b41d17"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x2, 0x1}}}}]}]}, 0x10a8}}, 0x4048000) cachestat(r3, &(0x7f0000000040)={0x7f, 0x20000000000006}, &(0x7f000009de80), 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffffb, &(0x7f0000000340)={0x0}}, 0x11) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x40005}, 0x20000000) r9 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r10 = fsmount(r9, 0x0, 0x1) fchdir(r10) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) r12 = inotify_init1(0x0) inotify_add_watch(r12, &(0x7f0000000000)='.\x00', 0x52000775) lseek(r11, 0x100, 0x0) getdents(r11, 0x0, 0x0) kernel console output (not intermixed with test programs): 00 audit(2000000061.419:22820): avc: denied { bind } for pid=29465 comm="syz.9.5540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 727.566902][ T28] audit: type=1400 audit(2000000061.449:22821): avc: denied { name_bind } for pid=29465 comm="syz.9.5540" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 727.697566][ T28] audit: type=1400 audit(2000000061.449:22822): avc: denied { node_bind } for pid=29465 comm="syz.9.5540" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 727.832912][ T28] audit: type=1400 audit(2000000061.459:22823): avc: denied { write } for pid=29465 comm="syz.9.5540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 727.877054][ T28] audit: type=1400 audit(2000000061.459:22824): avc: denied { connect } for pid=29465 comm="syz.9.5540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 727.898970][ T28] audit: type=1400 audit(2000000061.459:22825): avc: denied { name_connect } for pid=29465 comm="syz.9.5540" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 727.934111][ T28] audit: type=1400 audit(2000000061.469:22826): avc: denied { bind } for pid=29465 comm="syz.9.5540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 727.977677][ T28] audit: type=1400 audit(2000000061.719:22827): avc: denied { bind } for pid=29483 comm="syz.5.5545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 728.044147][T29498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=29498 comm=syz.7.5550 [ 728.191551][T29508] netlink: 80 bytes leftover after parsing attributes in process `syz.7.5555'. [ 728.528204][T29519] netlink: 'syz.5.5558': attribute type 15 has an invalid length. [ 728.612424][T29522] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5557'. [ 728.769748][T29534] loop5: detected capacity change from 0 to 1024 [ 728.785096][T29534] EXT4-fs: test_dummy_encryption option not supported [ 729.137958][T29542] loop5: detected capacity change from 0 to 512 [ 729.200819][T29542] EXT4-fs (loop5): 1 orphan inode deleted [ 729.215596][T29542] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 729.245593][ T7196] EXT4-fs error (device loop5): ext4_release_dquot:7062: comm kworker/u8:21: Failed to release dquot type 1 [ 729.263130][T29542] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 729.350761][T29543] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 729.786324][ T7259] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.914069][ T7259] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.936866][T29562] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 729.982687][T29555] lo speed is unknown, defaulting to 1000 [ 730.014403][ T7259] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.096337][ T7259] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.157636][T29555] lo speed is unknown, defaulting to 1000 [ 730.307720][T29578] netlink: 'syz.7.5574': attribute type 21 has an invalid length. [ 730.348181][T29578] netlink: 'syz.7.5574': attribute type 4 has an invalid length. [ 730.483821][T29582] FAULT_INJECTION: forcing a failure. [ 730.483821][T29582] name failslab, interval 1, probability 0, space 0, times 0 [ 730.515778][T29555] chnl_net:caif_netlink_parms(): no params data found [ 730.545654][T29582] CPU: 0 UID: 0 PID: 29582 Comm: syz.7.5575 Tainted: G W syzkaller #0 PREEMPT(full) [ 730.545729][T29582] Tainted: [W]=WARN [ 730.545736][T29582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 730.545747][T29582] Call Trace: [ 730.545754][T29582] [ 730.545761][T29582] __dump_stack+0x1d/0x30 [ 730.545785][T29582] dump_stack_lvl+0x95/0xd0 [ 730.545808][T29582] dump_stack+0x15/0x1b [ 730.545835][T29582] should_fail_ex+0x263/0x280 [ 730.545866][T29582] should_failslab+0x8c/0xb0 [ 730.545939][T29582] kmem_cache_alloc_noprof+0x66/0x400 [ 730.545965][T29582] ? alloc_empty_file+0x76/0x200 [ 730.546021][T29582] alloc_empty_file+0x76/0x200 [ 730.546108][T29582] path_openat+0x65/0x2050 [ 730.546125][T29582] ? _parse_integer_limit+0x170/0x190 [ 730.546153][T29582] ? _parse_integer+0x27/0x40 [ 730.546254][T29582] ? kstrtoull+0x111/0x140 [ 730.546277][T29582] ? kstrtouint+0x76/0xc0 [ 730.546307][T29582] do_file_open+0x16c/0x290 [ 730.546367][T29582] do_sys_openat2+0x94/0x130 [ 730.546397][T29582] __x64_sys_open+0xe6/0x110 [ 730.546426][T29582] x64_sys_call+0x14b9/0x3020 [ 730.546527][T29582] do_syscall_64+0x12c/0x370 [ 730.546677][T29582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.546699][T29582] RIP: 0033:0x7f3e439ec819 [ 730.546790][T29582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 730.546805][T29582] RSP: 002b:00007f3e42447028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 730.546823][T29582] RAX: ffffffffffffffda RBX: 00007f3e43c65fa0 RCX: 00007f3e439ec819 [ 730.546839][T29582] RDX: 00000000000000dc RSI: 000000000004827e RDI: 0000200000000200 [ 730.546911][T29582] RBP: 00007f3e42447090 R08: 0000000000000000 R09: 0000000000000000 [ 730.546925][T29582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 730.546939][T29582] R13: 00007f3e43c66038 R14: 00007f3e43c65fa0 R15: 00007fff2dcd5108 [ 730.546960][T29582] [ 730.794396][T27479] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.873735][ T7259] bridge_slave_1: left allmulticast mode [ 730.881859][ T7259] bridge_slave_1: left promiscuous mode [ 730.889625][ T7259] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.923277][ T7259] bridge_slave_0: left allmulticast mode [ 730.930142][ T7259] bridge_slave_0: left promiscuous mode [ 730.940415][ T7259] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.089308][ T7259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 731.101023][ T7259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 731.113874][ T7259] bond0 (unregistering): Released all slaves [ 731.162582][T29593] lo speed is unknown, defaulting to 1000 [ 731.207176][T29593] lo speed is unknown, defaulting to 1000 [ 731.260132][T29609] netlink: 112 bytes leftover after parsing attributes in process `syz.3.5580'. [ 731.405792][ T7259] hsr_slave_0: left promiscuous mode [ 731.415596][ T7259] hsr_slave_1: left promiscuous mode [ 731.423724][ T7259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 731.431633][ T7259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.507656][ T7259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 731.515388][ T7259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 731.527310][ T7259] veth1_macvtap: left promiscuous mode [ 731.534466][ T7259] veth0_macvtap: left promiscuous mode [ 731.540412][ T7259] veth1_vlan: left promiscuous mode [ 731.546430][ T7259] veth0_vlan: left promiscuous mode [ 731.788312][ T7259] team0 (unregistering): Port device team_slave_1 removed [ 731.802550][T29639] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5588'. [ 731.818997][ T7259] team0 (unregistering): Port device team_slave_0 removed [ 731.880568][T29640] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5588'. [ 731.901188][T29555] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.914944][T29555] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.925354][T29555] bridge_slave_0: entered allmulticast mode [ 731.932593][T29555] bridge_slave_0: entered promiscuous mode [ 731.941775][T29631] FAULT_INJECTION: forcing a failure. [ 731.941775][T29631] name failslab, interval 1, probability 0, space 0, times 0 [ 731.960484][T29641] loop5: detected capacity change from 0 to 512 [ 731.987381][T29631] CPU: 1 UID: 0 PID: 29631 Comm: syz.3.5584 Tainted: G W syzkaller #0 PREEMPT(full) [ 731.987424][T29631] Tainted: [W]=WARN [ 731.987432][T29631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 731.987445][T29631] Call Trace: [ 731.987452][T29631] [ 731.987460][T29631] __dump_stack+0x1d/0x30 [ 731.987485][T29631] dump_stack_lvl+0x95/0xd0 [ 731.987523][T29631] dump_stack+0x15/0x1b [ 731.987558][T29631] should_fail_ex+0x263/0x280 [ 731.987587][T29631] ? inet6_dump_fib+0x19d/0x6f0 [ 731.987610][T29631] should_failslab+0x8c/0xb0 [ 731.987702][T29631] __kmalloc_cache_noprof+0x5f/0x410 [ 731.987731][T29631] inet6_dump_fib+0x19d/0x6f0 [ 731.987765][T29631] ? __mutex_lock+0xa4c/0xed0 [ 731.987789][T29631] ? __pfx_inet6_dump_fib+0x10/0x10 [ 731.987815][T29631] rtnl_dump_all+0x19c/0x230 [ 731.987841][T29631] ? __pfx_rtnl_dump_all+0x10/0x10 [ 731.988002][T29631] rtnl_dumpit+0x71/0x140 [ 731.988024][T29631] netlink_dump+0x455/0x8a0 [ 731.988052][T29631] ? obj_cgroup_charge_account+0xba/0x1a0 [ 731.988168][T29631] __netlink_dump_start+0x43e/0x520 [ 731.988201][T29631] ? __pfx_rtnl_dump_all+0x10/0x10 [ 731.988298][T29631] rtnetlink_rcv_msg+0x59f/0x720 [ 731.988319][T29631] ? __pfx_rtnl_dump_all+0x10/0x10 [ 731.988339][T29631] ? __pfx_rtnl_dumpit+0x10/0x10 [ 731.988359][T29631] ? __pfx_rtnl_dump_all+0x10/0x10 [ 731.988537][T29631] netlink_rcv_skb+0x123/0x220 [ 731.988568][T29631] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 731.988595][T29631] rtnetlink_rcv+0x1c/0x30 [ 731.988616][T29631] netlink_unicast+0x5c0/0x690 [ 731.988717][T29631] netlink_sendmsg+0x5c8/0x6f0 [ 731.988739][T29631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 731.988788][T29631] sock_write_iter+0x2e8/0x320 [ 731.988811][T29631] ? __pfx_sock_write_iter+0x10/0x10 [ 731.988829][T29631] vfs_write+0x5a6/0x9f0 [ 731.988850][T29631] ksys_write+0xdc/0x1a0 [ 731.988891][T29631] __x64_sys_write+0x40/0x50 [ 731.988912][T29631] x64_sys_call+0x27e1/0x3020 [ 731.988941][T29631] do_syscall_64+0x12c/0x370 [ 731.988968][T29631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.988998][T29631] RIP: 0033:0x7fee4d60c819 [ 731.989012][T29631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.989032][T29631] RSP: 002b:00007fee4c05f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 731.989054][T29631] RAX: ffffffffffffffda RBX: 00007fee4d885fa0 RCX: 00007fee4d60c819 [ 731.989070][T29631] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000003 [ 731.989084][T29631] RBP: 00007fee4c05f090 R08: 0000000000000000 R09: 0000000000000000 [ 731.989161][T29631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 731.989175][T29631] R13: 00007fee4d886038 R14: 00007fee4d885fa0 R15: 00007ffdb175d9f8 [ 731.989194][T29631] [ 732.364961][T29555] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.375392][T29647] netlink: 14 bytes leftover after parsing attributes in process `syz.7.5591'. [ 732.385325][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 732.385343][ T28] audit: type=1400 audit(2000000066.369:22851): avc: denied { unmount } for pid=27479 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 732.407190][T29555] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.420236][T29555] bridge_slave_1: entered allmulticast mode [ 732.434743][T29555] bridge_slave_1: entered promiscuous mode [ 732.448594][ T28] audit: type=1400 audit(2000000066.429:22852): avc: denied { create } for pid=29648 comm="syz.3.5593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 732.500138][T29555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.538117][T29555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.565082][ T28] audit: type=1400 audit(2000000066.549:22853): avc: denied { relabelfrom } for pid=29648 comm="syz.3.5593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 732.606263][T29659] loop5: detected capacity change from 0 to 164 [ 732.618429][T29555] team0: Port device team_slave_0 added [ 732.651291][T29555] team0: Port device team_slave_1 added [ 732.664046][ T28] audit: type=1400 audit(2000000066.549:22854): avc: denied { relabelto } for pid=29648 comm="syz.3.5593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 732.709946][T29555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.718673][T29663] netlink: 204 bytes leftover after parsing attributes in process `syz.7.5597'. [ 732.729383][T29555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.744708][ T28] audit: type=1326 audit(2000000066.599:22855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29656 comm="syz.7.5597" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e439ec819 code=0x0 [ 732.812503][T29555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.832646][ T7259] IPVS: stop unused estimator thread 0... [ 732.840287][T29555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.853906][T29555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.884895][T29555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 733.008286][T29555] hsr_slave_0: entered promiscuous mode [ 733.017220][T29555] hsr_slave_1: entered promiscuous mode [ 733.128871][T29687] tipc: Enabling of bearer rejected, failed to enable media [ 733.142502][ T28] audit: type=1400 audit(2000000067.109:22856): avc: denied { getopt } for pid=29684 comm="syz.9.5601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 733.507642][T29555] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 733.515733][T29744] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5613'. [ 733.531108][ T28] audit: type=1400 audit(2000000067.509:22857): avc: denied { read } for pid=29745 comm="syz.3.5615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 733.559685][T29555] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 733.571148][T29555] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 733.589497][ T28] audit: type=1400 audit(2000000067.559:22858): avc: denied { write } for pid=29745 comm="syz.3.5615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 733.631891][ T28] audit: type=1400 audit(2000000067.609:22859): avc: denied { create } for pid=29753 comm="syz.5.5617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 733.632149][T29744] gtp1: entered promiscuous mode [ 733.729233][ T28] audit: type=1400 audit(2000000067.639:22860): avc: denied { bind } for pid=29753 comm="syz.5.5617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 733.741182][T29744] gtp1: entered allmulticast mode [ 733.760936][T29555] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 733.909692][T29775] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 733.949118][T29555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.986346][T29784] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5621'. [ 734.017514][T29784] 8021q: adding VLAN 0 to HW filter on device bond3 [ 734.054636][T29555] 8021q: adding VLAN 0 to HW filter on device team0 [ 734.107377][ T7218] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.114936][ T7218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.294020][T29555] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 734.305113][T29555] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 734.318311][T29792] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5622'. [ 734.329449][T29792] tipc: Started in network mode [ 734.345780][T29792] tipc: Node identity 2, cluster identity 6 [ 734.355619][T29792] tipc: Node number set to 2 [ 734.364047][ T7259] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.372152][ T7259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 734.574194][T29555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.736129][T29758] syz.5.5618 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 734.841906][T29866] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 734.862187][T29758] CPU: 1 UID: 0 PID: 29758 Comm: syz.5.5618 Tainted: G W syzkaller #0 PREEMPT(full) [ 734.862221][T29758] Tainted: [W]=WARN [ 734.862228][T29758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 734.862275][T29758] Call Trace: [ 734.862282][T29758] [ 734.862291][T29758] __dump_stack+0x1d/0x30 [ 734.862319][T29758] dump_stack_lvl+0x95/0xd0 [ 734.862398][T29758] dump_stack+0x15/0x1b [ 734.862420][T29758] dump_header+0x80/0x240 [ 734.862443][T29758] oom_kill_process+0x295/0x350 [ 734.862574][T29758] out_of_memory+0x97d/0xb80 [ 734.862598][T29758] try_charge_memcg+0x62e/0xa10 [ 734.862636][T29758] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 734.862718][T29758] __swap_cache_prepare_and_add+0x67/0x460 [ 734.862748][T29758] ? alloc_pages_mpol+0x217/0x260 [ 734.862778][T29758] swap_cache_alloc_folio+0xa2/0x120 [ 734.862901][T29758] swap_cluster_readahead+0x26e/0x3d0 [ 734.862995][T29758] swapin_readahead+0xde/0x840 [ 734.863023][T29758] ? _raw_spin_unlock+0x9/0x30 [ 734.863106][T29758] ? swap_put_entries_cluster+0x385/0x3a0 [ 734.863162][T29758] ? swap_put_entries_cluster+0x161/0x3a0 [ 734.863189][T29758] ? __rcu_read_unlock+0x4e/0x70 [ 734.863212][T29758] ? swap_cache_get_folio+0x26f/0x280 [ 734.863279][T29758] do_swap_page+0x2fe/0x21e0 [ 734.863380][T29758] ? css_rstat_updated+0xbb/0x280 [ 734.863398][T29758] ? __rcu_read_lock+0x36/0x50 [ 734.863419][T29758] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 734.863451][T29758] handle_mm_fault+0xb46/0x3020 [ 734.863561][T29758] ? vma_start_read+0x1c7/0x2c0 [ 734.863668][T29758] do_user_addr_fault+0x62f/0x1050 [ 734.863741][T29758] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 734.863766][T29758] ? trace_page_fault_user+0x1f/0xe0 [ 734.863871][T29758] exc_page_fault+0x62/0xa0 [ 734.863893][T29758] asm_exc_page_fault+0x26/0x30 [ 734.863912][T29758] RIP: 0033:0x7f0eacf4797e [ 734.863929][T29758] Code: 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 <59> 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 [ 734.863947][T29758] RSP: 002b:00007fff7f0aa320 EFLAGS: 00010246 [ 734.864047][T29758] RAX: 0000000000000000 RBX: 0000555585b46500 RCX: 00007f0eacf4d04e [ 734.864062][T29758] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 734.864081][T29758] RBP: 00007f0ead207da0 R08: 0000000000000000 R09: 0000000000000000 [ 734.864091][T29758] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000b3568 [ 734.864104][T29758] R13: 00007f0ead20609c R14: 00000000000b333b R15: 00007f0ead206090 [ 734.864121][T29758] [ 735.142147][T29758] memory: usage 307200kB, limit 307200kB, failcnt 2590 [ 735.151757][T29758] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 735.160298][T29758] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 735.167874][T29758] Memory cgroup stats for /syz5: [ 735.168313][T29758] cache 0 [ 735.176787][T29758] rss 0 [ 735.179652][T29758] shmem 0 [ 735.182566][T29758] mapped_file 0 [ 735.186689][T29758] dirty 0 [ 735.189998][T29758] writeback 0 [ 735.193369][T29758] workingset_refault_anon 1359 [ 735.198192][T29758] workingset_refault_file 2020 [ 735.203261][T29758] swap 204800 [ 735.207133][T29758] swapcached 31342592 [ 735.211487][T29758] pgpgin 436710 [ 735.215626][T29758] pgpgout 436702 [ 735.219176][T29758] pgfault 490983 [ 735.222842][T29758] pgmajfault 419 [ 735.226723][T29758] inactive_anon 0 [ 735.230466][T29758] active_anon 8192 [ 735.234417][T29758] inactive_file 0 [ 735.238424][T29758] active_file 24576 [ 735.242225][T29758] unevictable 0 [ 735.246635][T29758] hierarchical_memory_limit 314572800 [ 735.252189][T29758] hierarchical_memsw_limit 9223372036854771712 [ 735.260312][T29758] total_cache 0 [ 735.265216][T29758] total_rss 0 [ 735.268560][T29758] total_shmem 0 [ 735.272208][T29758] total_mapped_file 0 [ 735.278503][T29758] total_dirty 0 [ 735.282049][T29758] total_writeback 0 [ 735.287337][T29758] total_workingset_refault_anon 1359 [ 735.355024][T29758] total_workingset_refault_file 2020 [ 735.360874][T29758] total_swap 204800 [ 735.391498][T29758] total_swapcached 31342592 [ 735.402477][T29758] total_pgpgin 436710 [ 735.410992][T29758] total_pgpgout 436702 [ 735.418828][T29758] total_pgfault 490983 [ 735.429691][T29758] total_pgmajfault 419 [ 735.442808][T29758] total_inactive_anon 0 [ 735.451528][T29758] total_active_anon 8192 [ 735.465355][T29758] total_inactive_file 0 [ 735.477842][T29758] total_active_file 24576 [ 735.485484][T29895] FAULT_INJECTION: forcing a failure. [ 735.485484][T29895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 735.502157][T29758] total_unevictable 0 [ 735.509026][T29895] CPU: 0 UID: 0 PID: 29895 Comm: syz.3.5641 Tainted: G W syzkaller #0 PREEMPT(full) [ 735.509088][T29895] Tainted: [W]=WARN [ 735.509096][T29895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 735.509149][T29895] Call Trace: [ 735.509157][T29895] [ 735.509164][T29895] __dump_stack+0x1d/0x30 [ 735.509188][T29895] dump_stack_lvl+0x95/0xd0 [ 735.509207][T29895] dump_stack+0x15/0x1b [ 735.509298][T29895] should_fail_ex+0x263/0x280 [ 735.509322][T29895] should_fail+0xb/0x20 [ 735.509341][T29895] should_fail_usercopy+0x1a/0x20 [ 735.509368][T29895] _copy_from_user+0x1c/0xb0 [ 735.509423][T29895] memdup_user+0x5e/0xd0 [ 735.509444][T29895] strndup_user+0x68/0xb0 [ 735.509464][T29895] __se_sys_mount+0x4d/0x2e0 [ 735.509484][T29895] ? fput+0x8f/0xc0 [ 735.509507][T29895] ? ksys_write+0x194/0x1a0 [ 735.509590][T29895] __x64_sys_mount+0x67/0x80 [ 735.509610][T29895] x64_sys_call+0x2d61/0x3020 [ 735.509695][T29895] do_syscall_64+0x12c/0x370 [ 735.509719][T29895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.509817][T29895] RIP: 0033:0x7fee4d60c819 [ 735.509834][T29895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.509851][T29895] RSP: 002b:00007fee4c01d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 735.509873][T29895] RAX: ffffffffffffffda RBX: 00007fee4d886180 RCX: 00007fee4d60c819 [ 735.510080][T29895] RDX: 0000200000000300 RSI: 00002000000001c0 RDI: 0000200000000180 [ 735.510113][T29895] RBP: 00007fee4c01d090 R08: 0000200000000500 R09: 0000000000000000 [ 735.510126][T29895] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 735.510138][T29895] R13: 00007fee4d886218 R14: 00007fee4d886180 R15: 00007ffdb175d9f8 [ 735.510169][T29895] [ 735.511405][T29758] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.5618,pid=29758,uid=0 [ 735.771271][T29758] Memory cgroup out of memory: Killed process 29758 (syz.5.5618) total-vm:96344kB, anon-rss:1224kB, file-rss:22276kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 736.006277][T29555] veth0_vlan: entered promiscuous mode [ 736.015214][T29555] veth1_vlan: entered promiscuous mode [ 736.154413][T29555] veth0_macvtap: entered promiscuous mode [ 736.180474][T29914] openvswitch: netlink: Message has 4 unknown bytes. [ 736.194923][T29555] veth1_macvtap: entered promiscuous mode [ 736.232771][T29555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 736.275396][T29555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 736.305974][T29949] FAULT_INJECTION: forcing a failure. [ 736.305974][T29949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 736.326720][ T7218] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.349481][T29949] CPU: 1 UID: 0 PID: 29949 Comm: syz.3.5650 Tainted: G W syzkaller #0 PREEMPT(full) [ 736.349563][T29949] Tainted: [W]=WARN [ 736.349570][T29949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 736.349581][T29949] Call Trace: [ 736.349588][T29949] [ 736.349595][T29949] __dump_stack+0x1d/0x30 [ 736.349619][T29949] dump_stack_lvl+0x95/0xd0 [ 736.349717][T29949] dump_stack+0x15/0x1b [ 736.349801][T29949] should_fail_ex+0x263/0x280 [ 736.349827][T29949] should_fail+0xb/0x20 [ 736.349851][T29949] should_fail_usercopy+0x1a/0x20 [ 736.349955][T29949] _copy_from_user+0x1c/0xb0 [ 736.350025][T29949] do_ip_vs_set_ctl+0x1a4/0xa60 [ 736.350055][T29949] ? do_ip_setsockopt+0x1af1/0x2290 [ 736.350144][T29949] nf_setsockopt+0x199/0x1b0 [ 736.350177][T29949] ip_setsockopt+0x102/0x110 [ 736.350223][T29949] sctp_setsockopt+0x126/0xea0 [ 736.350269][T29949] sock_common_setsockopt+0x69/0x80 [ 736.350293][T29949] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 736.350315][T29949] __sys_setsockopt+0x184/0x200 [ 736.350341][T29949] __x64_sys_setsockopt+0x64/0x80 [ 736.350435][T29949] x64_sys_call+0x2327/0x3020 [ 736.350459][T29949] do_syscall_64+0x12c/0x370 [ 736.350483][T29949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.350525][T29949] RIP: 0033:0x7fee4d60c819 [ 736.350543][T29949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.350561][T29949] RSP: 002b:00007fee4c05f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 736.350583][T29949] RAX: ffffffffffffffda RBX: 00007fee4d885fa0 RCX: 00007fee4d60c819 [ 736.350598][T29949] RDX: 0000000000000485 RSI: 0000000000000000 RDI: 0000000000000003 [ 736.350611][T29949] RBP: 00007fee4c05f090 R08: 0000000000000000 R09: 0000000000000000 [ 736.350728][T29949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.350742][T29949] R13: 00007fee4d886038 R14: 00007fee4d885fa0 R15: 00007ffdb175d9f8 [ 736.350764][T29949] [ 736.582408][ T7218] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.593395][T29954] netlink: 'syz.3.5651': attribute type 1 has an invalid length. [ 736.601595][ T7218] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.631087][T29954] 8021q: adding VLAN 0 to HW filter on device bond1 [ 736.648061][ T7218] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.714535][T29954] bond1: (slave veth3): Enslaving as an active interface with a down link [ 736.745778][T29963] bond1: (slave dummy0): making interface the new active one [ 736.756720][T29963] dummy0: entered promiscuous mode [ 736.762021][T29963] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 736.808894][T29954] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5651'. [ 736.865077][T29954] bond1: (slave dummy0): Releasing active interface [ 736.879250][T29954] dummy0 (unregistering): left promiscuous mode [ 736.999830][T29986] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 737.024297][T29988] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5655'. [ 737.093749][T29993] loop3: detected capacity change from 0 to 1024 [ 737.573280][ T28] kauditd_printk_skb: 208 callbacks suppressed [ 737.573297][ T28] audit: type=1400 audit(2000000071.549:23069): avc: denied { getopt } for pid=30005 comm="syz.3.5657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 737.726116][T30026] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5659'. [ 737.843614][T30026] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 737.846388][ T28] audit: type=1400 audit(2000000071.809:23070): avc: denied { setopt } for pid=30031 comm="syz.7.5663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 738.210910][T30059] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 738.290086][T30075] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5666'. [ 738.335184][ T28] audit: type=1400 audit(2000000072.319:23071): avc: denied { create } for pid=30076 comm="syz.9.5667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 738.338526][ T28] audit: type=1400 audit(2000000072.319:23072): avc: denied { setopt } for pid=30076 comm="syz.9.5667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 738.379928][ T28] audit: type=1400 audit(2000000072.319:23073): avc: denied { ioctl } for pid=30076 comm="syz.9.5667" path="socket:[90102]" dev="sockfs" ino=90102 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 738.379956][ T28] audit: type=1400 audit(2000000072.319:23074): avc: denied { read append } for pid=30076 comm="syz.9.5667" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 738.380058][ T28] audit: type=1400 audit(2000000072.319:23075): avc: denied { open } for pid=30076 comm="syz.9.5667" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 738.492723][ T28] audit: type=1400 audit(2000000072.469:23076): avc: denied { bind } for pid=30087 comm="syz.7.5668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 738.514219][ T28] audit: type=1400 audit(2000000072.469:23077): avc: denied { setopt } for pid=30087 comm="syz.7.5668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 738.573935][ T28] audit: type=1400 audit(2000000072.559:23078): avc: denied { setopt } for pid=30096 comm="syz.5.5671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 739.191401][T30124] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5679'. [ 739.268908][T30133] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5682'. [ 739.279563][T30133] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5682'. [ 739.614113][T30156] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5689'. [ 739.659238][T30148] lo speed is unknown, defaulting to 1000 [ 739.704594][T30158] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5691'. [ 739.784170][T30148] lo speed is unknown, defaulting to 1000 [ 740.208747][T30183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.346211][T30183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.423023][T30144] syz.9.5686 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 740.459620][T30144] CPU: 0 UID: 0 PID: 30144 Comm: syz.9.5686 Tainted: G W syzkaller #0 PREEMPT(full) [ 740.459723][T30144] Tainted: [W]=WARN [ 740.459732][T30144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 740.459747][T30144] Call Trace: [ 740.459756][T30144] [ 740.459765][T30144] __dump_stack+0x1d/0x30 [ 740.459798][T30144] dump_stack_lvl+0x95/0xd0 [ 740.459870][T30144] dump_stack+0x15/0x1b [ 740.459896][T30144] dump_header+0x80/0x240 [ 740.459924][T30144] oom_kill_process+0x295/0x350 [ 740.459952][T30144] out_of_memory+0x97d/0xb80 [ 740.460022][T30144] try_charge_memcg+0x62e/0xa10 [ 740.460070][T30144] obj_cgroup_charge_pages+0x23/0xc0 [ 740.460112][T30144] __memcg_kmem_charge_page+0x9e/0x170 [ 740.460145][T30144] __alloc_frozen_pages_noprof+0x18a/0x360 [ 740.460179][T30144] alloc_pages_mpol+0xb3/0x260 [ 740.460254][T30144] alloc_pages_noprof+0x8f/0x140 [ 740.460288][T30144] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 740.460332][T30144] __kvmalloc_node_noprof+0x3d4/0x650 [ 740.460462][T30144] ? futex_hash_allocate+0x190/0x9d0 [ 740.460499][T30144] ? futex_hash_allocate+0x190/0x9d0 [ 740.460540][T30144] futex_hash_allocate+0x190/0x9d0 [ 740.460624][T30144] ? cap_task_prctl+0x13f/0x6e0 [ 740.460657][T30144] futex_hash_prctl+0xd8/0xf0 [ 740.460768][T30144] __se_sys_prctl+0xa3d/0x13f0 [ 740.460870][T30144] __x64_sys_prctl+0x67/0x80 [ 740.460902][T30144] x64_sys_call+0x2533/0x3020 [ 740.460939][T30144] do_syscall_64+0x12c/0x370 [ 740.461021][T30144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.461059][T30144] RIP: 0033:0x7f11e141c819 [ 740.461083][T30144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 740.461105][T30144] RSP: 002b:00007f11dfe6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 740.461132][T30144] RAX: ffffffffffffffda RBX: 00007f11e1695fa0 RCX: 00007f11e141c819 [ 740.461150][T30144] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 740.461227][T30144] RBP: 00007f11e14b2c91 R08: 0000000000000000 R09: 0000000000000000 [ 740.461286][T30144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 740.461377][T30144] R13: 00007f11e1696038 R14: 00007f11e1695fa0 R15: 00007fffec3f4b38 [ 740.461404][T30144] [ 740.461492][T30144] memory: usage 307200kB, limit 307200kB, failcnt 4310 [ 740.706117][T30185] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5701'. [ 740.709161][T30144] memory+swap: usage 322724kB, limit 9007199254740988kB, failcnt 0 [ 740.716903][T30185] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5701'. [ 740.725073][T30144] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 740.750975][T30144] Memory cgroup stats for /syz9: [ 740.751257][T30144] cache 4096 [ 740.761594][T30144] rss 0 [ 740.769375][T30144] shmem 0 [ 740.772849][T30144] mapped_file 0 [ 740.779383][T30144] dirty 0 [ 740.783171][T30144] writeback 0 [ 740.786898][T30144] workingset_refault_anon 454 [ 740.793591][T30144] workingset_refault_file 5313 [ 740.801942][T30144] swap 15896576 [ 740.805883][T30144] swapcached 43814912 [ 740.812520][T30192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5704'. [ 740.813001][T30144] pgpgin 450689 [ 740.824277][T30144] pgpgout 450680 [ 740.832444][T30144] pgfault 342006 [ 740.836389][T30144] pgmajfault 267 [ 740.845761][T30144] inactive_anon 20480 [ 740.845807][T30192] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 740.849965][T30192] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 740.859590][T30192] vhci_hcd vhci_hcd.0: Device attached [ 740.869245][T30144] active_anon 8192 [ 740.877836][T30144] inactive_file 8192 [ 740.882019][T30144] active_file 0 [ 740.888781][T30144] unevictable 0 [ 740.898829][T30144] hierarchical_memory_limit 314572800 [ 740.917412][T30194] vhci_hcd: connection closed [ 740.917631][T30144] hierarchical_memsw_limit 9223372036854771712 [ 740.917719][ T7259] vhci_hcd vhci_hcd.3: stop threads [ 740.923063][T30144] total_cache 4096 [ 740.932007][ T7259] vhci_hcd vhci_hcd.3: release socket [ 740.935623][T30144] total_rss 0 [ 740.949349][ T7259] vhci_hcd vhci_hcd.3: disconnect device [ 740.955840][T30144] total_shmem 0 [ 740.959602][T30144] total_mapped_file 0 [ 740.964094][T30144] total_dirty 0 [ 740.973949][T30144] total_writeback 0 [ 740.978420][T30144] total_workingset_refault_anon 454 [ 740.985286][T30144] total_workingset_refault_file 5313 [ 740.991427][T30144] total_swap 15896576 [ 740.997752][T30144] total_swapcached 43814912 [ 741.004954][T30144] total_pgpgin 450689 [ 741.015774][T30144] total_pgpgout 450680 [ 741.020710][T30144] total_pgfault 342006 [ 741.021471][T30205] ip6tnl1: entered promiscuous mode [ 741.027965][T30144] total_pgmajfault 267 [ 741.031246][T30205] ip6tnl1: entered allmulticast mode [ 741.036285][T30144] total_inactive_anon 20480 [ 741.048507][ T7259] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 741.060405][T30144] total_active_anon 8192 [ 741.064788][T30144] total_inactive_file 8192 [ 741.072786][T30144] total_active_file 0 [ 741.079828][T30144] total_unevictable 0 [ 741.092391][T30144] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.5686,pid=30166,uid=0 [ 741.109772][T30144] Memory cgroup out of memory: Killed process 30166 (syz.9.5686) total-vm:96344kB, anon-rss:1232kB, file-rss:35776kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 741.151061][T30212] netlink: 'syz.4.5710': attribute type 13 has an invalid length. [ 741.192600][T30144] syz.9.5686 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 741.213434][T30144] CPU: 1 UID: 0 PID: 30144 Comm: syz.9.5686 Tainted: G W syzkaller #0 PREEMPT(full) [ 741.213648][T30144] Tainted: [W]=WARN [ 741.213661][T30144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 741.213674][T30144] Call Trace: [ 741.213682][T30144] [ 741.213693][T30144] __dump_stack+0x1d/0x30 [ 741.213725][T30144] dump_stack_lvl+0x95/0xd0 [ 741.213752][T30144] dump_stack+0x15/0x1b [ 741.213841][T30144] dump_header+0x80/0x240 [ 741.213879][T30144] oom_kill_process+0x295/0x350 [ 741.213904][T30144] out_of_memory+0x97d/0xb80 [ 741.213929][T30144] try_charge_memcg+0x62e/0xa10 [ 741.214085][T30144] obj_cgroup_charge_pages+0x23/0xc0 [ 741.214121][T30144] __memcg_kmem_charge_page+0x9e/0x170 [ 741.214157][T30144] __alloc_frozen_pages_noprof+0x18a/0x360 [ 741.214305][T30144] alloc_pages_mpol+0xb3/0x260 [ 741.214345][T30144] alloc_pages_noprof+0x8f/0x140 [ 741.214382][T30144] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 741.214482][T30144] __kvmalloc_node_noprof+0x3d4/0x650 [ 741.214517][T30144] ? futex_hash_allocate+0x190/0x9d0 [ 741.214561][T30144] ? futex_hash_allocate+0x190/0x9d0 [ 741.214665][T30144] futex_hash_allocate+0x190/0x9d0 [ 741.214706][T30144] ? cap_task_prctl+0x13f/0x6e0 [ 741.214742][T30144] futex_hash_prctl+0xd8/0xf0 [ 741.214807][T30144] __se_sys_prctl+0xa3d/0x13f0 [ 741.214863][T30144] __x64_sys_prctl+0x67/0x80 [ 741.214898][T30144] x64_sys_call+0x2533/0x3020 [ 741.214934][T30144] do_syscall_64+0x12c/0x370 [ 741.215015][T30144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.215042][T30144] RIP: 0033:0x7f11e141c819 [ 741.215066][T30144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.215084][T30144] RSP: 002b:00007f11dfe6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 741.215111][T30144] RAX: ffffffffffffffda RBX: 00007f11e1695fa0 RCX: 00007f11e141c819 [ 741.215155][T30144] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 741.215171][T30144] RBP: 00007f11e14b2c91 R08: 0000000000000000 R09: 0000000000000000 [ 741.215188][T30144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.215204][T30144] R13: 00007f11e1696038 R14: 00007f11e1695fa0 R15: 00007fffec3f4b38 [ 741.215265][T30144] [ 741.480806][T30144] memory: usage 307200kB, limit 307200kB, failcnt 4411 [ 741.490797][T30144] memory+swap: usage 322524kB, limit 9007199254740988kB, failcnt 0 [ 741.502710][T30144] kmem: usage 306956kB, limit 9007199254740988kB, failcnt 0 [ 741.517642][T30144] Memory cgroup stats for /syz9: [ 741.518104][T30144] cache 4096 [ 741.531839][T30144] rss 0 [ 741.534945][T30144] shmem 0 [ 741.554827][T30144] mapped_file 0 [ 741.560138][T30144] dirty 0 [ 741.564197][T30144] writeback 0 [ 741.567841][T30144] workingset_refault_anon 454 [ 741.573919][T30144] workingset_refault_file 5313 [ 741.581180][T30144] swap 15691776 [ 741.584861][T30144] swapcached 43814912 [ 741.589124][T30144] pgpgin 450689 [ 741.594211][T30144] pgpgout 450687 [ 741.598034][T30144] pgfault 342006 [ 741.603433][T30144] pgmajfault 267 [ 741.607254][T30144] inactive_anon 0 [ 741.613706][T30144] active_anon 0 [ 741.617439][T30144] inactive_file 0 [ 741.622415][T30144] active_file 8192 [ 741.626414][T30144] unevictable 0 [ 741.630061][T30144] hierarchical_memory_limit 314572800 [ 741.636316][T30144] hierarchical_memsw_limit 9223372036854771712 [ 741.642674][T30144] total_cache 4096 [ 741.647267][T30144] total_rss 0 [ 741.650880][T30144] total_shmem 0 [ 741.655658][T30144] total_mapped_file 0 [ 741.659747][T30144] total_dirty 0 [ 741.663728][T30144] total_writeback 0 [ 741.669236][T30144] total_workingset_refault_anon 454 [ 741.676827][T30144] total_workingset_refault_file 5313 [ 741.682583][T30144] total_swap 15691776 [ 741.688783][T30144] total_swapcached 43814912 [ 741.693613][T30144] total_pgpgin 450689 [ 741.699080][T30144] total_pgpgout 450687 [ 741.703565][T30144] total_pgfault 342006 [ 741.710491][T30144] total_pgmajfault 267 [ 741.715135][T30144] total_inactive_anon 0 [ 741.720909][T30144] total_active_anon 0 [ 741.725699][T30144] total_inactive_file 0 [ 741.732126][T30144] total_active_file 8192 [ 741.738254][T30144] total_unevictable 0 [ 741.745323][T30144] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.5686,pid=30143,uid=0 [ 741.763691][T30144] Memory cgroup out of memory: Killed process 30143 (syz.9.5686) total-vm:96344kB, anon-rss:1232kB, file-rss:22624kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 741.866182][T25135] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 741.889951][T25135] CPU: 1 UID: 0 PID: 25135 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 741.890007][T25135] Tainted: [W]=WARN [ 741.890014][T25135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 741.890028][T25135] Call Trace: [ 741.890037][T25135] [ 741.890046][T25135] __dump_stack+0x1d/0x30 [ 741.890147][T25135] dump_stack_lvl+0x95/0xd0 [ 741.890167][T25135] dump_stack+0x15/0x1b [ 741.890269][T25135] dump_header+0x80/0x240 [ 741.890290][T25135] oom_kill_process+0x295/0x350 [ 741.890314][T25135] out_of_memory+0x97d/0xb80 [ 741.890358][T25135] try_charge_memcg+0x62e/0xa10 [ 741.890401][T25135] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 741.890441][T25135] __swap_cache_prepare_and_add+0x67/0x460 [ 741.890469][T25135] ? alloc_pages_mpol+0x217/0x260 [ 741.890497][T25135] swap_cache_alloc_folio+0xa2/0x120 [ 741.890593][T25135] swap_cluster_readahead+0x36b/0x3d0 [ 741.890622][T25135] swapin_readahead+0xde/0x840 [ 741.890718][T25135] ? __rcu_read_unlock+0x4e/0x70 [ 741.890742][T25135] ? __perf_event_task_sched_in+0xa65/0xad0 [ 741.890766][T25135] ? __list_add_valid_or_report+0x38/0xe0 [ 741.890815][T25135] ? xfd_validate_state+0x45/0xf0 [ 741.890844][T25135] ? __rcu_read_unlock+0x4e/0x70 [ 741.890915][T25135] ? swap_cache_get_folio+0x26f/0x280 [ 741.890945][T25135] do_swap_page+0x2fe/0x21e0 [ 741.890970][T25135] ? __schedule+0x93c/0xd40 [ 741.891057][T25135] ? __rcu_read_lock+0x36/0x50 [ 741.891075][T25135] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 741.891098][T25135] handle_mm_fault+0xb46/0x3020 [ 741.891211][T25135] ? vma_start_read+0x1c7/0x2c0 [ 741.891239][T25135] do_user_addr_fault+0x62f/0x1050 [ 741.891313][T25135] ? trace_page_fault_user+0x1f/0xe0 [ 741.891338][T25135] exc_page_fault+0x62/0xa0 [ 741.891390][T25135] asm_exc_page_fault+0x26/0x30 [ 741.891409][T25135] RIP: 0033:0x7fee4d5c7997 [ 741.891497][T25135] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 741.891513][T25135] RSP: 002b:00007ffdb175dcf0 EFLAGS: 00010202 [ 741.891530][T25135] RAX: 0000000000000000 RBX: 00005555649b2500 RCX: 00007fee4d5c7997 [ 741.891545][T25135] RDX: 00007ffdb175dd30 RSI: 0000000000000000 RDI: 0000000000000000 [ 741.891559][T25135] RBP: 00007ffdb175dd9c R08: 0000000000000000 R09: 0000000000000000 [ 741.891635][T25135] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 741.891650][T25135] R13: 00000000000927c0 R14: 00000000000b5057 R15: 00007ffdb175ddf0 [ 741.891677][T25135] [ 741.891720][T25135] memory: usage 307200kB, limit 307200kB, failcnt 906 [ 742.021662][T30228] lo speed is unknown, defaulting to 1000 [ 742.161967][T25135] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 742.161988][T25135] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 742.162001][T25135] Memory cgroup stats for /syz3: [ 742.162212][T25135] cache 0 [ 742.162220][T25135] rss 0 [ 742.162227][T25135] shmem 0 [ 742.162235][T25135] mapped_file 0 [ 742.162243][T25135] dirty 0 [ 742.162250][T25135] writeback 0 [ 742.162258][T25135] workingset_refault_anon 545 [ 742.162267][T25135] workingset_refault_file 626 [ 742.162275][T25135] swap 208896 [ 742.162283][T25135] swapcached 18501632 [ 742.162332][T25135] pgpgin 274268 [ 742.162339][T25135] pgpgout 274267 [ 742.162346][T25135] pgfault 269689 [ 742.162352][T25135] pgmajfault 183 [ 742.162358][T25135] inactive_anon 0 [ 742.162365][T25135] active_anon 0 [ 742.162387][T25135] inactive_file 0 [ 742.162394][T25135] active_file 4096 [ 742.162479][T25135] unevictable 0 [ 742.162485][T25135] hierarchical_memory_limit 314572800 [ 742.162495][T25135] hierarchical_memsw_limit 9223372036854771712 [ 742.162504][T25135] total_cache 0 [ 742.162512][T25135] total_rss 0 [ 742.162531][T25135] total_shmem 0 [ 742.162539][T25135] total_mapped_file 0 [ 742.162564][T25135] total_dirty 0 [ 742.162571][T25135] total_writeback 0 [ 742.162579][T25135] total_workingset_refault_anon 545 [ 742.162589][T25135] total_workingset_refault_file 626 [ 742.162598][T25135] total_swap 208896 [ 742.162605][T25135] total_swapcached 18501632 [ 742.162614][T25135] total_pgpgin 274268 [ 742.162622][T25135] total_pgpgout 274267 [ 742.162702][T25135] total_pgfault 269690 [ 742.162710][T25135] total_pgmajfault 183 [ 742.162719][T25135] total_inactive_anon 0 [ 742.162727][T25135] total_active_anon 0 [ 742.162735][T25135] total_inactive_file 0 [ 742.162744][T25135] total_active_file 4096 [ 742.162752][T25135] total_unevictable 0 [ 742.162761][T25135] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.5713,pid=30217,uid=0 [ 742.162903][T25135] Memory cgroup out of memory: Killed process 30217 (syz.3.5713) total-vm:96344kB, anon-rss:1232kB, file-rss:22236kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 742.496157][T30228] lo speed is unknown, defaulting to 1000 [ 742.529861][T30231] lo speed is unknown, defaulting to 1000 [ 742.709193][T30231] lo speed is unknown, defaulting to 1000 [ 742.856381][ T28] kauditd_printk_skb: 80 callbacks suppressed [ 742.856427][ T28] audit: type=1400 audit(2000000076.601:23159): avc: denied { bind } for pid=30250 comm="syz.7.5723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 742.913337][T30262] netlink: 'syz.3.5725': attribute type 1 has an invalid length. [ 743.008946][T30262] 8021q: adding VLAN 0 to HW filter on device bond2 [ 743.080338][T30270] bond2: (slave veth5): Enslaving as an active interface with a down link [ 743.111150][T30262] __nla_validate_parse: 6 callbacks suppressed [ 743.111168][T30262] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5725'. [ 743.228812][ T28] audit: type=1400 audit(2000000076.948:23160): avc: denied { bind } for pid=30274 comm="syz.3.5728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 743.280502][ T28] audit: type=1400 audit(2000000076.948:23161): avc: denied { listen } for pid=30274 comm="syz.3.5728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 743.313266][ T28] audit: type=1400 audit(2000000076.948:23162): avc: denied { connect } for pid=30274 comm="syz.3.5728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 743.344209][ T28] audit: type=1400 audit(2000000076.948:23163): avc: denied { write } for pid=30274 comm="syz.3.5728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 743.659108][ T28] audit: type=1400 audit(2000000077.350:23164): avc: denied { mount } for pid=30282 comm="syz.4.5730" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 743.709217][ T28] audit: type=1400 audit(2000000077.350:23165): avc: denied { watch watch_reads } for pid=30282 comm="syz.4.5730" path="/bus" dev="sysfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 745.299273][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 746.012735][T30251] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 746.075590][ T28] audit: type=1400 audit(2000000079.604:23166): avc: denied { sqpoll } for pid=30308 comm="syz.4.5732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 746.135866][T30323] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5736'. [ 746.137802][ T28] audit: type=1326 audit(2000000079.670:23167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30318 comm="syz.5.5737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eacf8c819 code=0x7ffc0000 [ 746.148023][T30320] netlink: 'syz.3.5738': attribute type 1 has an invalid length. [ 746.176975][T30322] netlink: 'syz.5.5737': attribute type 1 has an invalid length. [ 746.181554][T30324] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5736'. [ 746.223707][ T28] audit: type=1326 audit(2000000079.670:23168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30318 comm="syz.5.5737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eacf8c819 code=0x7ffc0000 [ 746.279115][T30320] 8021q: adding VLAN 0 to HW filter on device bond3 [ 746.337861][T30315] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5735'. [ 746.351065][T30329] bond3: (slave veth7): Enslaving as an active interface with a down link [ 746.362288][T30315] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5735'. [ 746.385381][T30323] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5736'. [ 746.448256][T30320] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5738'. [ 746.644919][T30356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 746.789354][T30377] netlink: 'syz.5.5752': attribute type 1 has an invalid length. [ 746.801717][T30379] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5753'. [ 746.812223][T30359] lo speed is unknown, defaulting to 1000 [ 746.830980][T30377] 8021q: adding VLAN 0 to HW filter on device bond2 [ 746.853701][T30377] bond2: (slave veth3): Enslaving as an active interface with a down link [ 746.863781][T30359] lo speed is unknown, defaulting to 1000 [ 746.869089][T30377] bond2: (slave dummy0): making interface the new active one [ 746.881890][T30377] dummy0: entered promiscuous mode [ 746.887324][T30377] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 746.900605][T30377] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5752'. [ 746.929186][T30377] bond2: (slave dummy0): Releasing active interface [ 746.936580][T30377] dummy0 (unregistering): left promiscuous mode [ 747.111210][T30359] chnl_net:caif_netlink_parms(): no params data found [ 747.257571][ T7196] bridge_slave_1: left allmulticast mode [ 747.268260][ T7196] bridge_slave_1: left promiscuous mode [ 747.289018][ T7196] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.400997][ T7196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 747.436253][ T7196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 747.457237][T30436] netlink: 'syz.3.5764': attribute type 1 has an invalid length. [ 747.471345][ T7196] bond0 (unregistering): Released all slaves [ 747.485213][ T7196] bond1 (unregistering): Released all slaves [ 747.542762][T30436] 8021q: adding VLAN 0 to HW filter on device bond4 [ 747.595079][T30436] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5764'. [ 747.624639][T30359] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.644507][T30359] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.657733][T30359] bridge_slave_0: entered allmulticast mode [ 747.675022][T30359] bridge_slave_0: entered promiscuous mode [ 747.689318][T30359] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.710505][T30359] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.734046][T30359] bridge_slave_1: entered allmulticast mode [ 747.760620][T30359] bridge_slave_1: entered promiscuous mode [ 747.813024][T30476] FAULT_INJECTION: forcing a failure. [ 747.813024][T30476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 747.852482][ T7196] hsr_slave_0: left promiscuous mode [ 747.867615][T30476] CPU: 0 UID: 0 PID: 30476 Comm: syz.3.5765 Tainted: G W syzkaller #0 PREEMPT(full) [ 747.867649][T30476] Tainted: [W]=WARN [ 747.867657][T30476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 747.867671][T30476] Call Trace: [ 747.867677][T30476] [ 747.867686][T30476] __dump_stack+0x1d/0x30 [ 747.867752][T30476] dump_stack_lvl+0x95/0xd0 [ 747.867795][T30476] dump_stack+0x15/0x1b [ 747.867817][T30476] should_fail_ex+0x263/0x280 [ 747.867843][T30476] should_fail+0xb/0x20 [ 747.867919][T30476] should_fail_usercopy+0x1a/0x20 [ 747.867943][T30476] _copy_from_user+0x1c/0xb0 [ 747.867972][T30476] kstrtouint_from_user+0x69/0xf0 [ 747.868002][T30476] proc_fail_nth_write+0x50/0x160 [ 747.868032][T30476] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 747.868105][T30476] vfs_write+0x269/0x9f0 [ 747.868122][T30476] ? __rcu_read_unlock+0x4e/0x70 [ 747.868140][T30476] ? __fget_files+0x184/0x1c0 [ 747.868161][T30476] ? mutex_lock+0x57/0x90 [ 747.868229][T30476] ksys_write+0xdc/0x1a0 [ 747.868250][T30476] __x64_sys_write+0x40/0x50 [ 747.868311][T30476] x64_sys_call+0x27e1/0x3020 [ 747.868336][T30476] do_syscall_64+0x12c/0x370 [ 747.868365][T30476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.868507][T30476] RIP: 0033:0x7fee4d5cd04e [ 747.868524][T30476] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 747.868543][T30476] RSP: 002b:00007fee4c05efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 747.868601][T30476] RAX: ffffffffffffffda RBX: 00007fee4c05f6c0 RCX: 00007fee4d5cd04e [ 747.868616][T30476] RDX: 0000000000000001 RSI: 00007fee4c05f0a0 RDI: 0000000000000004 [ 747.868630][T30476] RBP: 00007fee4c05f090 R08: 0000000000000000 R09: 0000000000000000 [ 747.868642][T30476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 747.868687][T30476] R13: 00007fee4d886038 R14: 00007fee4d885fa0 R15: 00007ffdb175d9f8 [ 747.868703][T30476] [ 747.869020][ T7196] hsr_slave_1: left promiscuous mode [ 748.220366][T30532] FAULT_INJECTION: forcing a failure. [ 748.220366][T30532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 748.236153][T30532] CPU: 0 UID: 0 PID: 30532 Comm: syz.4.5768 Tainted: G W syzkaller #0 PREEMPT(full) [ 748.236240][T30532] Tainted: [W]=WARN [ 748.236247][T30532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 748.236258][T30532] Call Trace: [ 748.236264][T30532] [ 748.236271][T30532] __dump_stack+0x1d/0x30 [ 748.236347][T30532] dump_stack_lvl+0x95/0xd0 [ 748.236372][T30532] dump_stack+0x15/0x1b [ 748.236394][T30532] should_fail_ex+0x263/0x280 [ 748.236422][T30532] should_fail+0xb/0x20 [ 748.236446][T30532] should_fail_usercopy+0x1a/0x20 [ 748.236527][T30532] _copy_from_user+0x1c/0xb0 [ 748.236557][T30532] btf_new_fd+0x223/0x730 [ 748.236645][T30532] ? ns_capable+0x7c/0xb0 [ 748.236720][T30532] bpf_btf_load+0x112/0x130 [ 748.236805][T30532] __sys_bpf+0x3d8/0x7e0 [ 748.236832][T30532] __x64_sys_bpf+0x41/0x50 [ 748.236851][T30532] x64_sys_call+0x10cb/0x3020 [ 748.236907][T30532] do_syscall_64+0x12c/0x370 [ 748.236931][T30532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.236950][T30532] RIP: 0033:0x7f6e58b3c819 [ 748.236965][T30532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.237021][T30532] RSP: 002b:00007f6e57597028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 748.237042][T30532] RAX: ffffffffffffffda RBX: 00007f6e58db5fa0 RCX: 00007f6e58b3c819 [ 748.237055][T30532] RDX: 0000000000000028 RSI: 0000200000000200 RDI: 0000000000000012 [ 748.237145][T30532] RBP: 00007f6e57597090 R08: 0000000000000000 R09: 0000000000000000 [ 748.237161][T30532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.237174][T30532] R13: 00007f6e58db6038 R14: 00007f6e58db5fa0 R15: 00007ffce5059a98 [ 748.237203][T30532] [ 748.490041][ T7196] team0 (unregistering): Port device team_slave_1 removed [ 748.511594][ T7196] team0 (unregistering): Port device team_slave_0 removed [ 748.582909][ T6323] smc: removing ib device syU× [ 749.610505][T30359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.690985][T30359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 749.792042][T30359] team0: Port device team_slave_0 added [ 749.799099][T30359] team0: Port device team_slave_1 added [ 749.897967][T30359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.929614][T30359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.000101][T30359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 750.055360][T30359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 750.069532][T30359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.132565][T30359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 750.178792][ T7196] IPVS: stop unused estimator thread 0... [ 750.257050][T30359] hsr_slave_0: entered promiscuous mode [ 750.275670][T30359] hsr_slave_1: entered promiscuous mode [ 750.293298][T30359] debugfs: 'hsr0' already exists in 'hsr' [ 750.304253][T30359] Cannot create hsr debugfs directory [ 750.562013][T30495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5767'. [ 750.573224][T30495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5767'. [ 750.747658][T30359] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 750.772509][T30589] lo speed is unknown, defaulting to 1000 [ 750.784572][T30359] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 750.798516][T30359] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 750.883756][T30359] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 751.014778][T30359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.046612][T30359] 8021q: adding VLAN 0 to HW filter on device team0 [ 751.068693][ T7218] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.076115][ T7218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 751.123072][ T7218] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.131793][ T7218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.311679][T30359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.568786][T30359] veth0_vlan: entered promiscuous mode [ 751.590944][T30359] veth1_vlan: entered promiscuous mode [ 751.665772][T30359] veth0_macvtap: entered promiscuous mode [ 751.696511][T30359] veth1_macvtap: entered promiscuous mode [ 751.718860][T30359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.752531][T30359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.825611][ T7226] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.861752][ T7226] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.891526][T30646] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5782'. [ 751.932126][ T7226] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.943207][ T7226] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.018584][ T28] kauditd_printk_skb: 95 callbacks suppressed [ 752.018601][ T28] audit: type=1400 audit(2000000085.170:23264): avc: denied { bind } for pid=30651 comm="syz.3.5783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 752.473806][ T28] audit: type=1400 audit(2000000085.506:23265): avc: denied { setopt } for pid=30651 comm="syz.3.5783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 754.316858][ T28] audit: type=1400 audit(2000000087.321:23266): avc: denied { setopt } for pid=30685 comm="syz.4.5785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 754.621342][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 755.482981][T30694] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5787'. [ 755.901742][T30734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.917450][T30734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.920565][T30729] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5799'. [ 755.944025][T30737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5802'. [ 755.954049][T30737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5802'. [ 755.954108][T30737] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5802'. [ 755.974724][T30725] loop3: detected capacity change from 0 to 136 [ 755.992328][T30725] Attempt to read inode for relocated directory [ 755.996630][ T28] audit: type=1400 audit(2000000088.883:23267): avc: denied { mounton } for pid=30723 comm="syz.3.5797" path="/266/file0/file0" dev="loop3" ino=1536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=dir permissive=1 [ 756.486247][T30750] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=30750 comm=syz.5.5806 [ 757.387955][T30771] batman_adv: batadv0: Adding interface: veth3 [ 757.430178][T30771] batman_adv: batadv0: The MTU of interface veth3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.528103][T30771] batman_adv: batadv0: Not using interface veth3 (retrying later): interface not active [ 757.573659][T30776] batman_adv: batadv0: Adding interface: dummy0 [ 757.591102][T30776] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.637569][T30782] netlink: 14 bytes leftover after parsing attributes in process `syz.7.5814'. [ 757.669427][T30776] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 757.689338][T30782] batman_adv: batadv0: Removing interface: dummy0 [ 757.738106][ T28] audit: type=1326 audit(2000000090.520:23268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30774 comm="syz.3.5816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4d60c819 code=0x7ffc0000 [ 757.817430][ T28] audit: type=1326 audit(2000000090.520:23269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30774 comm="syz.3.5816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fee4d60c819 code=0x7ffc0000 [ 757.938347][ T28] audit: type=1326 audit(2000000090.520:23270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30774 comm="syz.3.5816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4d60c819 code=0x7ffc0000 [ 757.980095][ T28] audit: type=1326 audit(2000000090.520:23271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30774 comm="syz.3.5816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4d60c819 code=0x7ffc0000 [ 758.243635][ T6323] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 758.253993][ T6323] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 758.270857][ T6323] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 758.300533][ T6323] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 758.547268][ T28] audit: type=1326 audit(2000000091.269:23272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30805 comm="syz.4.5825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e58b3c819 code=0x7ffc0000 [ 758.597418][ T28] audit: type=1326 audit(2000000091.269:23273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30805 comm="syz.4.5825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e58b3c819 code=0x7ffc0000 [ 758.642595][ T28] audit: type=1326 audit(2000000091.269:23274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30805 comm="syz.4.5825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e58b3c819 code=0x7ffc0000 [ 758.689637][ T28] audit: type=1326 audit(2000000091.269:23275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30805 comm="syz.4.5825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e58b3c819 code=0x7ffc0000 [ 758.745325][ T28] audit: type=1326 audit(2000000091.269:23276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30805 comm="syz.4.5825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6e58b3c819 code=0x7ffc0000 [ 758.785518][ T28] audit: type=1326 audit(2000000091.269:23277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30805 comm="syz.4.5825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e58b3c819 code=0x7ffc0000 [ 758.846031][ T9] IPVS: starting estimator thread 0... [ 758.951185][T30815] IPVS: using max 2448 ests per chain, 122400 per kthread [ 759.024987][T30824] syzkaller0: entered promiscuous mode [ 759.035270][T30824] syzkaller0: entered allmulticast mode [ 759.306890][T30839] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5837'. [ 759.320025][T30839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5837'. [ 759.736469][T30860] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5840'. [ 759.773131][T30860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 759.791201][T30862] random: crng reseeded on system resumption [ 759.855758][T30860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 759.924759][T30860] bond0 (unregistering): Released all slaves [ 759.971350][T30859] lo speed is unknown, defaulting to 1000 [ 760.219223][T30874] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 760.584410][T30876] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.5849'. [ 760.658491][T30876] tipc: Enabling of bearer rejected, failed to enable media [ 760.668585][T30878] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5850'. [ 760.970757][T30901] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 761.114561][T30908] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 761.419712][T30915] netlink: 'syz.9.5864': attribute type 1 has an invalid length. [ 762.201708][T30937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=30937 comm=syz.9.5866 [ 762.349511][T30931] __nla_validate_parse: 2 callbacks suppressed [ 762.349537][T30931] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5868'. [ 762.386792][T30920] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.394619][T30920] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.763408][T30855] loop3: detected capacity change from 0 to 8192 [ 763.012980][T30920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 763.030324][T30920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 763.171851][T30953] loop3: detected capacity change from 0 to 512 [ 763.236342][T30953] EXT4-fs error (device loop3): ext4_free_inode:354: comm syz.3.5873: bit already cleared for inode 11 [ 763.256854][T30953] loop3: lost filesystem error report for type 5 error -117 [ 763.258339][T30953] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 763.267366][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 763.267392][ C1] EXT4-fs (loop3): initial error at time 2000000095: ext4_free_inode:354 [ 763.267417][ C1] EXT4-fs (loop3): last error at time 2000000095: ext4_free_inode:354 [ 763.333803][T30953] loop3: lost filesystem error report for type 5 error -117 [ 763.344529][T30953] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 763.379115][T30953] loop3: lost filesystem error report for type 5 error -117 [ 763.380131][T30953] EXT4-fs (loop3): 1 orphan inode deleted [ 763.415563][T30953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 763.555398][T30943] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5868'. [ 763.581522][ T7226] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.590616][ T7226] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.643993][ T7226] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.658552][ T7226] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.670177][T25135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.813994][T30973] syzkaller0: entered promiscuous mode [ 763.877432][T30973] syzkaller0: entered allmulticast mode [ 763.948442][T30976] lo speed is unknown, defaulting to 1000 [ 763.963049][T30973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=30973 comm=syz.3.5879 [ 764.157360][T30978] lo speed is unknown, defaulting to 1000 [ 764.169821][ T28] kauditd_printk_skb: 150 callbacks suppressed [ 764.169840][ T28] audit: type=1400 audit(2000000096.535:23428): avc: denied { ioctl } for pid=30987 comm="syz.7.5884" path="socket:[94237]" dev="sockfs" ino=94237 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 764.273430][T30950] IPVS: starting estimator thread 0... [ 764.564786][T30995] IPVS: using max 2544 ests per chain, 127200 per kthread [ 764.611427][ T28] audit: type=1400 audit(2000000096.946:23429): avc: denied { watch_reads } for pid=30997 comm="syz.7.5885" path="/22" dev="tmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 764.944526][ T28] audit: type=1400 audit(2000000097.255:23430): avc: denied { read write } for pid=31012 comm="syz.3.5891" name="loop3" dev="devtmpfs" ino=3462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 764.944726][T31025] loop3: detected capacity change from 0 to 164 [ 765.033964][ T28] audit: type=1400 audit(2000000097.255:23431): avc: denied { open } for pid=31012 comm="syz.3.5891" path="/dev/loop3" dev="devtmpfs" ino=3462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 765.102595][ T28] audit: type=1400 audit(2000000097.255:23432): avc: denied { ioctl } for pid=31012 comm="syz.3.5891" path="/dev/loop3" dev="devtmpfs" ino=3462 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 765.187247][ T28] audit: type=1400 audit(2000000097.377:23433): avc: denied { create } for pid=31028 comm="syz.7.5895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 765.503594][ T28] audit: type=1400 audit(2000000097.573:23434): avc: denied { connect } for pid=31028 comm="syz.7.5895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 765.610170][T31036] lo speed is unknown, defaulting to 1000 [ 765.695480][ T28] audit: type=1400 audit(2000000097.573:23435): avc: denied { write } for pid=31028 comm="syz.7.5895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 765.761747][T31035] lo speed is unknown, defaulting to 1000 [ 765.828437][ T28] audit: type=1326 audit(2000000098.088:23436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31039 comm="syz.4.5897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e58b3c819 code=0x7ffc0000 [ 765.886548][ T28] audit: type=1326 audit(2000000098.088:23437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31039 comm="syz.4.5897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e58b3c819 code=0x7ffc0000 [ 766.019051][ T6323] Bluetooth: hci0: Frame reassembly failed (-84) [ 766.320173][T31056] netlink: 'syz.7.5901': attribute type 1 has an invalid length. [ 766.334625][T31055] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 766.439224][T31060] lo speed is unknown, defaulting to 1000 [ 767.188097][T31082] netlink: 'syz.9.5911': attribute type 21 has an invalid length. [ 767.217927][T31082] netlink: 'syz.9.5911': attribute type 4 has an invalid length. [ 767.284630][T31093] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5912'. [ 767.422419][T31093] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5912'. [ 767.577737][T31103] netlink: 'syz.9.5913': attribute type 32 has an invalid length. [ 767.648131][T31093] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5912'. [ 767.807623][T31099] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5912'. [ 767.902879][T31112] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 767.904649][T31112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=31112 comm=syz.3.5915 [ 767.905852][T31112] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5915'. [ 767.965918][T31115] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5915'. [ 768.220878][T22150] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 768.221627][ T4792] Bluetooth: hci0: command 0x1003 tx timeout [ 768.264388][T31093] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5912'. [ 768.908434][T31189] lo speed is unknown, defaulting to 1000 [ 769.765449][T31205] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5922'. [ 769.867785][T31210] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5923'. [ 769.902843][T31200] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 769.960536][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 769.960550][ T28] audit: type=1400 audit(2000000101.951:23489): avc: denied { connect } for pid=31215 comm="syz.7.5926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 769.968358][ T28] audit: type=1400 audit(2000000101.960:23490): avc: denied { read } for pid=31215 comm="syz.7.5926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 770.030149][T31218] loop3: detected capacity change from 0 to 2048 [ 770.075571][T31218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 770.190939][T31228] debugfs: Bad value for 'uid' [ 770.203216][T31228] debugfs: Bad value for 'uid' [ 770.259188][T25135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.261036][ T28] audit: type=1400 audit(2000000102.213:23491): avc: denied { setopt } for pid=31227 comm="syz.5.5929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 770.392975][T31242] Cannot find del_set index 0 as target [ 770.408358][T31245] FAULT_INJECTION: forcing a failure. [ 770.408358][T31245] name failslab, interval 1, probability 0, space 0, times 0 [ 770.429728][T31245] CPU: 1 UID: 0 PID: 31245 Comm: syz.9.5935 Tainted: G W syzkaller #0 PREEMPT(full) [ 770.429802][T31245] Tainted: [W]=WARN [ 770.429808][T31245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 770.429820][T31245] Call Trace: [ 770.429825][T31245] [ 770.429832][T31245] __dump_stack+0x1d/0x30 [ 770.429860][T31245] dump_stack_lvl+0x95/0xd0 [ 770.429887][T31245] dump_stack+0x15/0x1b [ 770.429906][T31245] should_fail_ex+0x263/0x280 [ 770.429969][T31245] should_failslab+0x8c/0xb0 [ 770.429988][T31245] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 770.430011][T31245] ? __d_alloc+0x37/0x340 [ 770.430037][T31245] __d_alloc+0x37/0x340 [ 770.430061][T31245] d_alloc_parallel+0x54/0xce0 [ 770.430088][T31245] ? __rcu_read_unlock+0x4e/0x70 [ 770.430106][T31245] ? __d_lookup+0x316/0x340 [ 770.430183][T31245] path_openat+0x8b9/0x2050 [ 770.430241][T31245] do_file_open+0x16c/0x290 [ 770.430322][T31245] do_sys_openat2+0x94/0x130 [ 770.430350][T31245] __x64_sys_openat+0xf2/0x120 [ 770.430400][T31245] x64_sys_call+0x1e39/0x3020 [ 770.430423][T31245] do_syscall_64+0x12c/0x370 [ 770.430452][T31245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.430529][T31245] RIP: 0033:0x7f11e141c819 [ 770.430554][T31245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.430573][T31245] RSP: 002b:00007f11dfe6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 770.430590][T31245] RAX: ffffffffffffffda RBX: 00007f11e1695fa0 RCX: 00007f11e141c819 [ 770.430603][T31245] RDX: 0000000000000441 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 770.430616][T31245] RBP: 00007f11dfe6f090 R08: 0000000000000000 R09: 0000000000000000 [ 770.430684][T31245] R10: 0000000000000104 R11: 0000000000000246 R12: 0000000000000001 [ 770.430698][T31245] R13: 00007f11e1696038 R14: 00007f11e1695fa0 R15: 00007fffec3f4b38 [ 770.430755][T31245] [ 770.853845][T31247] lo speed is unknown, defaulting to 1000 [ 770.920916][T31265] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5941'. [ 771.591386][ T28] audit: type=1400 audit(2000002682.476:23492): avc: denied { ioctl } for pid=31278 comm="syz.3.5946" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=94810 ioctlcmd=0x128a scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 771.657357][T31277] lo speed is unknown, defaulting to 1000 [ 771.684434][ T28] audit: type=1400 audit(2000002682.561:23493): avc: denied { getopt } for pid=31283 comm="syz.3.5948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 771.804883][T31292] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 771.967034][T31296] lo speed is unknown, defaulting to 1000 [ 772.770010][T31285] syz.4.5949 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 772.844167][T31285] CPU: 1 UID: 0 PID: 31285 Comm: syz.4.5949 Tainted: G W syzkaller #0 PREEMPT(full) [ 772.844201][T31285] Tainted: [W]=WARN [ 772.844209][T31285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 772.844221][T31285] Call Trace: [ 772.844289][T31285] [ 772.844297][T31285] __dump_stack+0x1d/0x30 [ 772.844326][T31285] dump_stack_lvl+0x95/0xd0 [ 772.844351][T31285] dump_stack+0x15/0x1b [ 772.844372][T31285] dump_header+0x80/0x240 [ 772.844439][T31285] oom_kill_process+0x295/0x350 [ 772.844550][T31285] out_of_memory+0x97d/0xb80 [ 772.844650][T31285] try_charge_memcg+0x62e/0xa10 [ 772.844691][T31285] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 772.844726][T31285] __swap_cache_prepare_and_add+0x67/0x460 [ 772.844835][T31285] ? alloc_pages_mpol+0x217/0x260 [ 772.844866][T31285] swap_cache_alloc_folio+0xa2/0x120 [ 772.844916][T31285] swap_cluster_readahead+0x26e/0x3d0 [ 772.844953][T31285] swapin_readahead+0xde/0x840 [ 772.845001][T31285] ? _raw_spin_unlock+0x9/0x30 [ 772.845128][T31285] ? swap_put_entries_cluster+0x385/0x3a0 [ 772.845161][T31285] ? swap_put_entries_cluster+0x161/0x3a0 [ 772.845238][T31285] ? __rcu_read_unlock+0x4e/0x70 [ 772.845261][T31285] ? swap_cache_get_folio+0x26f/0x280 [ 772.845338][T31285] do_swap_page+0x2fe/0x21e0 [ 772.845370][T31285] ? css_rstat_updated+0xbb/0x280 [ 772.845393][T31285] ? __rcu_read_lock+0x36/0x50 [ 772.845511][T31285] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 772.845542][T31285] handle_mm_fault+0xb46/0x3020 [ 772.845611][T31285] ? vma_start_read+0x1c7/0x2c0 [ 772.845639][T31285] do_user_addr_fault+0x62f/0x1050 [ 772.845670][T31285] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 772.845700][T31285] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 772.845790][T31285] ? trace_page_fault_user+0x1f/0xe0 [ 772.845852][T31285] exc_page_fault+0x62/0xa0 [ 772.845875][T31285] asm_exc_page_fault+0x26/0x30 [ 772.845896][T31285] RIP: 0033:0x7f6e58a10ef0 [ 772.845917][T31285] Code: 83 f8 04 75 ec 31 f6 80 7c 24 0e 00 74 70 40 88 74 24 0e 8b 7c 24 08 48 89 de e8 bb f8 fd ff 84 c0 75 5b 80 7c 24 0f 00 75 0d <80> 3d 91 11 3a 00 00 0f 85 a3 01 00 00 49 83 7f 68 07 77 08 49 c7 [ 772.846060][T31285] RSP: 002b:00007ffce5059b30 EFLAGS: 00010246 [ 772.846078][T31285] RAX: 0000000000000000 RBX: ffffffff81fb2087 RCX: ffffffff85990087 [ 772.846093][T31285] RDX: 0000000000000087 RSI: ffffffff81fb2087 RDI: 000000000000000c [ 772.846166][T31285] RBP: 0000000000000000 R08: 00007f6e58da0000 R09: 00007f6e58da2000 [ 772.846181][T31285] R10: 0000000081fb208b R11: 000000000000000c R12: 00007f6e58db6128 [ 772.846203][T31285] R13: 000000000000000f R14: ffffffff81fb2bdd R15: 00007f6e598e5720 [ 772.846218][T31285] ? __import_iovec+0x3bd/0x530 [ 772.846276][T31285] ? iov_iter_npages+0xb7/0x150 [ 772.846308][T31285] ? trace_event_raw_event_ma_op+0x1b7/0x1d0 [ 772.846403][T31285] ? iov_iter_npages+0xb7/0x150 [ 772.846471][T31285] [ 772.848456][T31285] memory: usage 307200kB, limit 307200kB, failcnt 2191 [ 773.095998][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 773.263514][T31303] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 773.334013][T31285] memory+swap: usage 315556kB, limit 9007199254740988kB, failcnt 0 [ 773.345206][T31285] kmem: usage 307120kB, limit 9007199254740988kB, failcnt 0 [ 773.357024][T31285] Memory cgroup stats for /syz4: [ 773.357322][T31285] cache 0 [ 773.370969][T31285] rss 8192 [ 773.376195][T31285] shmem 0 [ 773.379964][T31285] mapped_file 0 [ 773.386713][T31285] dirty 0 [ 773.390349][T31285] writeback 4096 [ 773.396601][T31285] workingset_refault_anon 302 [ 773.402729][T31285] workingset_refault_file 341 [ 773.412818][T31285] swap 8622080 [ 773.419034][T31285] swapcached 45170688 [ 773.424614][T31285] pgpgin 724606 [ 773.433436][T31285] pgpgout 724602 [ 773.442982][T31285] pgfault 510995 [ 773.449625][T31285] pgmajfault 141 [ 773.454547][T31285] inactive_anon 8192 [ 773.461197][T31285] active_anon 8192 [ 773.466752][T31285] inactive_file 0 [ 773.474080][T31285] active_file 0 [ 773.479118][T31285] unevictable 0 [ 773.487121][T31285] hierarchical_memory_limit 314572800 [ 773.494025][T31285] hierarchical_memsw_limit 9223372036854771712 [ 773.502381][T31285] total_cache 0 [ 773.506817][T31285] total_rss 8192 [ 773.511022][T31285] total_shmem 0 [ 773.517738][T31285] total_mapped_file 0 [ 773.523955][T31285] total_dirty 0 [ 773.528886][T31285] total_writeback 4096 [ 773.535947][T31285] total_workingset_refault_anon 302 [ 773.542618][T31285] total_workingset_refault_file 341 [ 773.550989][T31285] total_swap 8622080 [ 773.557897][T31285] total_swapcached 45170688 [ 773.563276][T31285] total_pgpgin 724606 [ 773.569301][T31285] total_pgpgout 724602 [ 773.573497][T31285] total_pgfault 510995 [ 773.580538][T31285] total_pgmajfault 141 [ 773.599284][T31285] total_inactive_anon 8192 [ 773.604546][T31285] total_active_anon 8192 [ 773.611191][T31285] total_inactive_file 0 [ 773.615785][T31285] total_active_file 0 [ 773.621214][T31285] total_unevictable 0 [ 773.626936][T31285] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.5949,pid=31301,uid=0 [ 773.647244][T31285] Memory cgroup out of memory: Killed process 31301 (syz.4.5949) total-vm:94224kB, anon-rss:1240kB, file-rss:28416kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 773.713242][T31315] netlink: 'syz.7.5956': attribute type 1 has an invalid length. [ 773.766377][T31285] syz.4.5949 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 773.782520][T31285] CPU: 1 UID: 0 PID: 31285 Comm: syz.4.5949 Tainted: G W syzkaller #0 PREEMPT(full) [ 773.782580][T31285] Tainted: [W]=WARN [ 773.782587][T31285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 773.782601][T31285] Call Trace: [ 773.782608][T31285] [ 773.782616][T31285] __dump_stack+0x1d/0x30 [ 773.782706][T31285] dump_stack_lvl+0x95/0xd0 [ 773.782791][T31285] dump_stack+0x15/0x1b [ 773.782845][T31285] dump_header+0x80/0x240 [ 773.782938][T31285] oom_kill_process+0x295/0x350 [ 773.782960][T31285] out_of_memory+0x97d/0xb80 [ 773.782979][T31285] try_charge_memcg+0x62e/0xa10 [ 773.783028][T31285] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 773.783062][T31285] __swap_cache_prepare_and_add+0x67/0x460 [ 773.783093][T31285] ? alloc_pages_mpol+0x217/0x260 [ 773.783149][T31285] swap_cache_alloc_folio+0xa2/0x120 [ 773.783222][T31285] swap_cluster_readahead+0x26e/0x3d0 [ 773.783259][T31285] swapin_readahead+0xde/0x840 [ 773.783410][T31285] ? _raw_spin_unlock+0x9/0x30 [ 773.783438][T31285] ? swap_put_entries_cluster+0x385/0x3a0 [ 773.783588][T31285] ? swap_put_entries_cluster+0x161/0x3a0 [ 773.783620][T31285] ? raw_irqentry_exit_cond_resched+0x3d/0x60 [ 773.783721][T31285] ? __rcu_read_unlock+0x4e/0x70 [ 773.783743][T31285] ? swap_cache_get_folio+0x26f/0x280 [ 773.783773][T31285] do_swap_page+0x2fe/0x21e0 [ 773.783807][T31285] ? __rcu_read_lock+0x36/0x50 [ 773.783830][T31285] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 773.783867][T31285] handle_mm_fault+0xb46/0x3020 [ 773.783976][T31285] ? vma_start_read+0x1c7/0x2c0 [ 773.784086][T31285] do_user_addr_fault+0x62f/0x1050 [ 773.784120][T31285] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 773.784144][T31285] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 773.784198][T31285] ? trace_page_fault_user+0x1f/0xe0 [ 773.784229][T31285] exc_page_fault+0x62/0xa0 [ 773.784274][T31285] asm_exc_page_fault+0x26/0x30 [ 773.784295][T31285] RIP: 0033:0x7f6e58a10f48 [ 773.784314][T31285] Code: 00 be 08 00 00 00 4c 89 ff 83 c5 01 e8 e1 93 fe ff 49 8b 47 40 41 83 47 30 08 48 8d 48 f8 49 89 4f 40 48 89 58 f8 49 83 c5 01 <45> 3b 6c 24 04 0f 82 fd fe ff ff 41 80 7f 60 00 0f 84 4a 02 00 00 [ 773.784334][T31285] RSP: 002b:00007ffce5059b30 EFLAGS: 00010206 [ 773.784432][T31285] RAX: 000000110c26c000 RBX: ffffffff81dfef8b RCX: 0000000000000001 [ 773.784447][T31285] RDX: 0000000000000f8b RSI: 0000000000003fbe RDI: 0000000000000002 [ 773.784529][T31285] RBP: 0000000000000000 R08: 00007f6e58da0000 R09: 00007f6e58da2000 [ 773.784652][T31285] R10: 0000000081dfef8f R11: 000000000000000c R12: 00007f6e58db6128 [ 773.784666][T31285] R13: 0000000000000018 R14: ffffffff81dfea22 R15: 00007f6e598e5720 [ 773.784738][T31285] ? avc_has_perm+0x32/0x190 [ 773.784831][T31285] ? avc_node_free+0x17b/0x250 [ 773.784912][T31285] [ 773.784999][T31285] memory: usage 307200kB, limit 307200kB, failcnt 2336 [ 773.867156][T31319] netlink: 14 bytes leftover after parsing attributes in process `syz.7.5956'. [ 773.869792][T31285] memory+swap: usage 315404kB, limit 9007199254740988kB, failcnt 0 [ 774.213390][T31285] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 774.226043][T31285] Memory cgroup stats for /syz4: [ 774.226582][T31285] cache 0 [ 774.241362][T31285] rss 0 [ 774.247025][T31285] shmem 0 [ 774.254843][T31285] mapped_file 0 [ 774.259276][T31285] dirty 0 [ 774.264321][T31285] writeback 4096 [ 774.271939][T31285] workingset_refault_anon 323 [ 774.279807][T31285] workingset_refault_file 341 [ 774.285514][T31285] swap 8400896 [ 774.289279][T31285] swapcached 45260800 [ 774.295436][T31285] pgpgin 724628 [ 774.299919][T31285] pgpgout 724626 [ 774.308174][T31285] pgfault 511016 [ 774.316421][T31285] pgmajfault 157 [ 774.320846][T31285] inactive_anon 8192 [ 774.327260][T31285] active_anon 0 [ 774.332714][T31285] inactive_file 0 [ 774.339472][T31285] active_file 0 [ 774.344321][T31285] unevictable 0 [ 774.349203][T31285] hierarchical_memory_limit 314572800 [ 774.357034][T31285] hierarchical_memsw_limit 9223372036854771712 [ 774.366275][T31285] total_cache 0 [ 774.372448][T31285] total_rss 0 [ 774.378714][ T28] audit: type=1400 audit(2000002685.077:23494): avc: denied { unmount } for pid=27479 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 774.388855][T31285] total_shmem 0 [ 774.418641][T31285] total_mapped_file 0 [ 774.424731][T31285] total_dirty 0 [ 774.428758][T31285] total_writeback 4096 [ 774.436264][T31285] total_workingset_refault_anon 323 [ 774.445177][T31285] total_workingset_refault_file 341 [ 774.451334][T31285] total_swap 8400896 [ 774.457360][T31285] total_swapcached 45260800 [ 774.465146][T31285] total_pgpgin 724628 [ 774.469786][T31285] total_pgpgout 724626 [ 774.475810][T31285] total_pgfault 511016 [ 774.480807][T31285] total_pgmajfault 157 [ 774.486968][T31285] total_inactive_anon 8192 [ 774.493260][T31285] total_active_anon 0 [ 774.498706][T31285] total_inactive_file 0 [ 774.503532][T31285] total_active_file 0 [ 774.508924][T31285] total_unevictable 0 [ 774.513720][T31285] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.5949,pid=31285,uid=0 [ 774.533340][T31285] Memory cgroup out of memory: Killed process 31285 (syz.4.5949) total-vm:94224kB, anon-rss:1232kB, file-rss:22552kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 795.496968][T31329] netlink: 'syz.5.5962': attribute type 4 has an invalid length. [ 795.509333][T31329] netlink: 'syz.5.5962': attribute type 4 has an invalid length. [ 795.554754][T31338] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5961'. [ 795.708123][ T28] audit: type=1326 audit(2000002705.041:23495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31330 comm="syz.7.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865e6ec819 code=0x7ffc0000 [ 795.741771][ T28] audit: type=1326 audit(2000002705.069:23496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31330 comm="syz.7.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865e6ec819 code=0x7ffc0000 [ 795.774878][ T28] audit: type=1326 audit(2000002705.069:23497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31330 comm="syz.7.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865e6ec819 code=0x7ffc0000 [ 795.803243][ T28] audit: type=1326 audit(2000002705.069:23498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31330 comm="syz.7.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865e6ec819 code=0x7ffc0000 [ 795.828689][ T28] audit: type=1326 audit(2000002705.069:23500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31330 comm="syz.7.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f865e6ec819 code=0x7ffc0000 [ 795.867150][ T28] audit: type=1326 audit(2000002705.069:23499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31330 comm="syz.7.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865e6ec819 code=0x7ffc0000 [ 795.902583][ T28] audit: type=1400 audit(2000002705.079:23501): avc: denied { associate } for pid=31341 comm="syz.5.5964" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 795.938771][ T28] audit: type=1326 audit(2000002705.125:23502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31330 comm="syz.7.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865e6ec819 code=0x7ffc0000 [ 796.037816][ T28] audit: type=1326 audit(2000002705.125:23503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31330 comm="syz.7.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f865e6ec582 code=0x7ffc0000 [ 796.072512][ T28] audit: type=1326 audit(2000002705.125:23504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31330 comm="syz.7.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f865e6ec617 code=0x7ffc0000 [ 796.230827][T31355] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5967'. [ 797.339516][T31384] lo speed is unknown, defaulting to 1000 [ 797.932047][T31403] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5981'. [ 797.951573][T31403] veth3: entered promiscuous mode [ 797.966774][T31403] veth3: entered allmulticast mode [ 798.246509][T31409] 9p: Bad value for 'wfdno' [ 798.251793][T31409] 9p: Bad value for 'wfdno' [ 798.482111][T31428] FAULT_INJECTION: forcing a failure. [ 798.482111][T31428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 798.511216][T31428] CPU: 1 UID: 0 PID: 31428 Comm: syz.4.5987 Tainted: G W syzkaller #0 PREEMPT(full) [ 798.511325][T31428] Tainted: [W]=WARN [ 798.511333][T31428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 798.511347][T31428] Call Trace: [ 798.511355][T31428] [ 798.511365][T31428] __dump_stack+0x1d/0x30 [ 798.511465][T31428] dump_stack_lvl+0x95/0xd0 [ 798.511486][T31428] dump_stack+0x15/0x1b [ 798.511508][T31428] should_fail_ex+0x263/0x280 [ 798.511537][T31428] should_fail+0xb/0x20 [ 798.511606][T31428] should_fail_usercopy+0x1a/0x20 [ 798.511684][T31428] _copy_to_user+0x20/0xa0 [ 798.511785][T31428] simple_read_from_buffer+0xb5/0x130 [ 798.511805][T31428] proc_fail_nth_read+0x10e/0x150 [ 798.511830][T31428] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 798.511855][T31428] vfs_read+0x1ab/0x7f0 [ 798.511892][T31428] ? __rcu_read_unlock+0x4e/0x70 [ 798.511911][T31428] ? __fget_files+0x184/0x1c0 [ 798.511976][T31428] ? mutex_lock+0x57/0x90 [ 798.511998][T31428] ksys_read+0xdc/0x1a0 [ 798.512019][T31428] __x64_sys_read+0x40/0x50 [ 798.512040][T31428] x64_sys_call+0x2886/0x3020 [ 798.512076][T31428] do_syscall_64+0x12c/0x370 [ 798.512098][T31428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.512173][T31428] RIP: 0033:0x7f6e58afd04e [ 798.512191][T31428] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 798.512206][T31428] RSP: 002b:00007f6e57596fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 798.512224][T31428] RAX: ffffffffffffffda RBX: 00007f6e575976c0 RCX: 00007f6e58afd04e [ 798.512293][T31428] RDX: 000000000000000f RSI: 00007f6e575970a0 RDI: 0000000000000004 [ 798.512307][T31428] RBP: 00007f6e57597090 R08: 0000000000000000 R09: 0000000000000000 [ 798.512322][T31428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 798.512336][T31428] R13: 00007f6e58db6038 R14: 00007f6e58db5fa0 R15: 00007ffce5059a98 [ 798.512352][T31428] [ 798.788375][T31431] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5986'. [ 798.810467][T31431] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5986'. [ 799.366651][T31434] FAULT_INJECTION: forcing a failure. [ 799.366651][T31434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 799.586497][T31434] CPU: 1 UID: 0 PID: 31434 Comm: syz.7.5989 Tainted: G W syzkaller #0 PREEMPT(full) [ 799.586598][T31434] Tainted: [W]=WARN [ 799.586604][T31434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 799.586616][T31434] Call Trace: [ 799.586622][T31434] [ 799.586630][T31434] __dump_stack+0x1d/0x30 [ 799.586656][T31434] dump_stack_lvl+0x95/0xd0 [ 799.586732][T31434] dump_stack+0x15/0x1b [ 799.586753][T31434] should_fail_ex+0x263/0x280 [ 799.586782][T31434] should_fail+0xb/0x20 [ 799.586845][T31434] should_fail_usercopy+0x1a/0x20 [ 799.586874][T31434] _copy_from_user+0x1c/0xb0 [ 799.586974][T31434] ___sys_sendmsg+0xc1/0x1e0 [ 799.587006][T31434] __sys_sendmmsg+0x185/0x320 [ 799.587034][T31434] __x64_sys_sendmmsg+0x57/0x70 [ 799.587105][T31434] x64_sys_call+0x27aa/0x3020 [ 799.587196][T31434] do_syscall_64+0x12c/0x370 [ 799.587238][T31434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.587257][T31434] RIP: 0033:0x7f865e6ec819 [ 799.587270][T31434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.587289][T31434] RSP: 002b:00007f865d147028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 799.587307][T31434] RAX: ffffffffffffffda RBX: 00007f865e965fa0 RCX: 00007f865e6ec819 [ 799.587320][T31434] RDX: 0000000000000001 RSI: 0000200000004840 RDI: 0000000000000003 [ 799.587344][T31434] RBP: 00007f865d147090 R08: 0000000000000000 R09: 0000000000000000 [ 799.587359][T31434] R10: 0000000000000888 R11: 0000000000000246 R12: 0000000000000001 [ 799.587371][T31434] R13: 00007f865e966038 R14: 00007f865e965fa0 R15: 00007ffc3b958488 [ 799.587387][T31434] [ 799.776982][T31437] lo: entered promiscuous mode [ 800.306935][T31463] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5997'. [ 800.351400][T31442] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.359560][T31442] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.762429][T31476] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6001'. [ 801.306064][T31442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 801.386070][T31442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 801.498927][ T28] kauditd_printk_skb: 112 callbacks suppressed [ 801.498944][ T28] audit: type=1400 audit(2000002710.458:23617): avc: denied { create } for pid=31485 comm="syz.7.6004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 801.649978][ T28] audit: type=1400 audit(2000002710.589:23618): avc: denied { setopt } for pid=31485 comm="syz.7.6004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 801.756904][ T28] audit: type=1400 audit(2000002710.589:23619): avc: denied { read } for pid=31485 comm="syz.7.6004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 802.307948][T31442] ip6tnl1: left promiscuous mode [ 802.314722][T31442] ip6tnl1: left allmulticast mode [ 802.335050][T31442] veth3: left promiscuous mode [ 802.341326][T31442] veth3: left allmulticast mode [ 802.399195][T31447] lo speed is unknown, defaulting to 1000 [ 802.401651][ T907] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.463987][ T907] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.488445][ T907] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.526895][ T907] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.546898][T31503] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6007'. [ 802.566504][T31453] lo speed is unknown, defaulting to 1000 [ 802.598997][T31501] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6005'. [ 802.808897][ T28] audit: type=1400 audit(2000002711.674:23620): avc: denied { read } for pid=31513 comm="syz.5.6011" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 802.850965][ T28] audit: type=1400 audit(2000002711.674:23621): avc: denied { open } for pid=31513 comm="syz.5.6011" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 802.915653][T31518] loop3: detected capacity change from 0 to 164 [ 803.009502][ T28] audit: type=1326 audit(2000002711.870:23622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31524 comm="syz.4.6012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e58b3c819 code=0x7ffc0000 [ 803.041188][ T28] audit: type=1326 audit(2000002711.870:23623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31524 comm="syz.4.6012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e58b3c819 code=0x7ffc0000 [ 803.073510][ T28] audit: type=1326 audit(2000002711.880:23624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31524 comm="syz.4.6012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e58b3c819 code=0x7ffc0000 [ 803.104921][ T28] audit: type=1326 audit(2000002711.880:23625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31524 comm="syz.4.6012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e58b3c819 code=0x7ffc0000 [ 803.137690][ T28] audit: type=1326 audit(2000002711.880:23626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31524 comm="syz.4.6012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e58b3c819 code=0x7ffc0000 [ 805.060418][T31545] netlink: 80 bytes leftover after parsing attributes in process `syz.7.6018'. [ 805.063315][T31546] netlink: 'syz.4.6020': attribute type 1 has an invalid length. [ 805.124085][T31546] 8021q: adding VLAN 0 to HW filter on device bond1 [ 805.193057][T31551] bond1: (slave veth5): Enslaving as an active interface with a down link [ 805.225207][T31553] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6022'. [ 805.235911][T31553] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6022'. [ 805.256148][T31563] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6025'. [ 805.275464][T31563] netlink: 'syz.7.6025': attribute type 10 has an invalid length. [ 805.294114][T31553] team0: entered promiscuous mode [ 805.299278][T31553] team_slave_0: entered promiscuous mode [ 805.332804][T31553] team_slave_1: entered promiscuous mode [ 805.340982][T31553] bond0: entered promiscuous mode [ 805.348325][T31553] bond_slave_0: entered promiscuous mode [ 805.355877][T31553] bond_slave_1: entered promiscuous mode [ 805.362662][T31553] debugfs: 'hsr1' already exists in 'hsr' [ 805.370038][T31553] Cannot create hsr debugfs directory [ 805.380271][T31553] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 805.380416][T31553] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 805.563189][T31553] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 806.022568][T31566] lo speed is unknown, defaulting to 1000 [ 806.062496][T31574] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6027'. [ 806.237834][T31572] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 806.255889][ C0] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 807.287105][T31588] IPv6: sit1: Disabled Multicast RS [ 807.479124][T31597] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 807.488379][ C1] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 807.662275][T31608] Invalid ELF header type: 2 != 1 [ 807.669634][ T28] kauditd_printk_skb: 254 callbacks suppressed [ 807.669654][ T28] audit: type=1400 audit(2000002716.221:23881): avc: denied { module_load } for pid=31607 comm="syz.4.6041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 808.085578][T31612] Invalid ELF header type: 2 != 1 [ 808.097381][ T28] audit: type=1400 audit(2000002716.623:23882): avc: denied { read } for pid=31613 comm="syz.5.6045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 808.136138][T31618] netlink: 80 bytes leftover after parsing attributes in process `syz.9.6046'. [ 808.632660][T31633] netlink: 68 bytes leftover after parsing attributes in process `syz.9.6050'. [ 808.702695][ T28] audit: type=1400 audit(2000002717.063:23883): avc: denied { create } for pid=31624 comm="syz.5.6047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 808.725590][ T28] audit: type=1400 audit(2000002717.100:23884): avc: denied { open } for pid=31624 comm="syz.5.6047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 808.752812][ T28] audit: type=1400 audit(2000002717.109:23885): avc: denied { perfmon } for pid=31624 comm="syz.5.6047" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 808.778187][ T28] audit: type=1400 audit(2000002717.109:23886): avc: denied { kernel } for pid=31624 comm="syz.5.6047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 808.819230][ T28] audit: type=1400 audit(2000002717.119:23887): avc: denied { prog_load } for pid=31632 comm="syz.9.6050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 808.842199][ T28] audit: type=1400 audit(2000002717.119:23888): avc: denied { bpf } for pid=31632 comm="syz.9.6050" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 808.866884][ T28] audit: type=1400 audit(2000002717.175:23889): avc: denied { allowed } for pid=31632 comm="syz.9.6050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 808.993849][ T28] audit: type=1400 audit(2000002717.175:23890): avc: denied { create } for pid=31632 comm="syz.9.6050" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 809.012837][T31646] netlink: 'syz.5.6054': attribute type 3 has an invalid length. [ 809.413709][T31630] pim6reg: entered allmulticast mode [ 809.510982][T31645] pim6reg: left allmulticast mode [ 811.913878][T31685] netlink: 48 bytes leftover after parsing attributes in process `syz.9.6066'. [ 811.935779][T31685] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6066'. [ 812.227460][T31702] lo speed is unknown, defaulting to 1000 [ 812.670382][T31733] FAULT_INJECTION: forcing a failure. [ 812.670382][T31733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 812.717060][T31735] netlink: 'syz.9.6085': attribute type 21 has an invalid length. [ 812.737261][T31735] netlink: 'syz.9.6085': attribute type 6 has an invalid length. [ 812.758006][T31735] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6085'. [ 812.758405][T31733] CPU: 1 UID: 0 PID: 31733 Comm: syz.4.6083 Tainted: G W syzkaller #0 PREEMPT(full) [ 812.758459][T31733] Tainted: [W]=WARN [ 812.758466][T31733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 812.758492][T31733] Call Trace: [ 812.758560][T31733] [ 812.758569][T31733] __dump_stack+0x1d/0x30 [ 812.758596][T31733] dump_stack_lvl+0x95/0xd0 [ 812.758619][T31733] dump_stack+0x15/0x1b [ 812.758681][T31733] should_fail_ex+0x263/0x280 [ 812.758716][T31733] should_fail+0xb/0x20 [ 812.758739][T31733] should_fail_usercopy+0x1a/0x20 [ 812.758766][T31733] _copy_from_user+0x1c/0xb0 [ 812.758910][T31733] __sys_bpf+0x183/0x7e0 [ 812.758936][T31733] __x64_sys_bpf+0x41/0x50 [ 812.758954][T31733] x64_sys_call+0x10cb/0x3020 [ 812.759029][T31733] do_syscall_64+0x12c/0x370 [ 812.759055][T31733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.759157][T31733] RIP: 0033:0x7f6e58b3c819 [ 812.759193][T31733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.759210][T31733] RSP: 002b:00007f6e57597028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 812.759230][T31733] RAX: ffffffffffffffda RBX: 00007f6e58db5fa0 RCX: 00007f6e58b3c819 [ 812.759244][T31733] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005 [ 812.759288][T31733] RBP: 00007f6e57597090 R08: 0000000000000000 R09: 0000000000000000 [ 812.759301][T31733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.759313][T31733] R13: 00007f6e58db6038 R14: 00007f6e58db5fa0 R15: 00007ffce5059a98 [ 812.759332][T31733] [ 812.996624][T31741] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6086'. [ 813.039524][T31750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.049941][ T28] kauditd_printk_skb: 133 callbacks suppressed [ 813.049956][ T28] audit: type=1400 audit(2000002721.244:24024): avc: denied { read write } for pid=31749 comm="syz.9.6089" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 813.082983][T31743] dvmrp2: entered allmulticast mode [ 813.105630][T31750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.139798][T31744] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6086'. [ 813.155492][T31750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.169947][ T28] audit: type=1400 audit(2000002721.244:24025): avc: denied { open } for pid=31749 comm="syz.9.6089" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 813.197503][ T28] audit: type=1400 audit(2000002721.244:24026): avc: denied { ioctl } for pid=31749 comm="syz.9.6089" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 813.226587][T31750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.235268][T31713] lo speed is unknown, defaulting to 1000 [ 813.257958][ T28] audit: type=1400 audit(2000002721.460:24027): avc: denied { create } for pid=31712 comm="syz.5.6075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 813.308727][T31720] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6075'. [ 813.379864][ T28] audit: type=1400 audit(2000002721.562:24028): avc: denied { create } for pid=31757 comm="syz.4.6092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 813.450492][ T28] audit: type=1400 audit(2000002721.600:24029): avc: denied { listen } for pid=31757 comm="syz.4.6092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 813.487159][T31750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.501103][T31760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6094'. [ 813.515737][T31750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.554996][T31750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.576279][ T28] audit: type=1400 audit(2000002721.600:24030): avc: denied { ioctl } for pid=31757 comm="syz.4.6092" path="socket:[95999]" dev="sockfs" ino=95999 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 813.587087][T31750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.640499][ T28] audit: type=1400 audit(2000002721.600:24031): avc: denied { create } for pid=31757 comm="syz.4.6092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 813.722090][T31750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.731688][ T28] audit: type=1400 audit(2000002721.600:24032): avc: denied { setopt } for pid=31757 comm="syz.4.6092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 813.753704][T31750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.800619][ T28] audit: type=1400 audit(2000002721.600:24033): avc: denied { ioctl } for pid=31757 comm="syz.4.6092" path="socket:[96002]" dev="sockfs" ino=96002 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 813.803705][T31766] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6095'. [ 813.895880][T31767] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6093'. [ 814.361351][T31773] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6097'. [ 814.523080][T31775] macvlan0: entered promiscuous mode [ 814.546863][T31775] macvlan0: entered allmulticast mode [ 814.573600][T31775] bond3: entered promiscuous mode [ 814.601726][T31775] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 814.619417][T31775] bond3: left promiscuous mode [ 814.816741][T31777] syzkaller0: entered promiscuous mode [ 814.822271][T31777] syzkaller0: entered allmulticast mode [ 814.877510][T31797] netlink: 'syz.4.6104': attribute type 21 has an invalid length. [ 814.968484][T31797] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6104'. [ 815.727612][T31826] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6113'. [ 815.749546][T31826] delete_channel: no stack [ 816.196762][T31893] netlink: 'syz.9.6124': attribute type 13 has an invalid length. [ 816.988887][T31971] FAULT_INJECTION: forcing a failure. [ 816.988887][T31971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 817.028884][T31969] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 817.050232][T31971] CPU: 1 UID: 0 PID: 31971 Comm: syz.9.6141 Tainted: G W syzkaller #0 PREEMPT(full) [ 817.050335][T31971] Tainted: [W]=WARN [ 817.050343][T31971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 817.050354][T31971] Call Trace: [ 817.050360][T31971] [ 817.050433][T31971] __dump_stack+0x1d/0x30 [ 817.050456][T31971] dump_stack_lvl+0x95/0xd0 [ 817.050539][T31971] dump_stack+0x15/0x1b [ 817.050557][T31971] should_fail_ex+0x263/0x280 [ 817.050580][T31971] should_fail+0xb/0x20 [ 817.050604][T31971] should_fail_usercopy+0x1a/0x20 [ 817.050693][T31971] _copy_from_user+0x1c/0xb0 [ 817.050722][T31971] do_tcp_getsockopt+0xc8/0x1ba0 [ 817.050758][T31971] ? __account_obj_stock+0x2cc/0x350 [ 817.050793][T31971] ? refill_obj_stock+0x23c/0x3f0 [ 817.050827][T31971] ? obj_cgroup_charge_account+0xba/0x1a0 [ 817.050851][T31971] ? mptcp_release_cb+0x6a7/0x7f0 [ 817.050931][T31971] ? __rcu_read_unlock+0x4e/0x70 [ 817.050951][T31971] ? _raw_spin_lock_bh+0x56/0xb0 [ 817.050977][T31971] tcp_getsockopt+0x6e/0xe0 [ 817.051062][T31971] mptcp_getsockopt+0x76b/0x1850 [ 817.051084][T31971] ? lockref_put_return+0xf7/0x130 [ 817.051215][T31971] ? __rcu_read_unlock+0x4e/0x70 [ 817.051238][T31971] ? terminate_walk+0x1e6/0x210 [ 817.051265][T31971] ? path_openat+0x1ab2/0x2050 [ 817.051439][T31971] ? path_openat+0x1b01/0x2050 [ 817.051455][T31971] ? _parse_integer_limit+0x170/0x190 [ 817.051553][T31971] ? _parse_integer+0x27/0x40 [ 817.051574][T31971] ? __rcu_read_unlock+0x4e/0x70 [ 817.051591][T31971] ? avc_has_perm_noaudit+0xab/0x130 [ 817.051645][T31971] ? avc_has_perm+0x101/0x190 [ 817.051670][T31971] ? selinux_socket_getsockopt+0x192/0x1c0 [ 817.051690][T31971] sock_common_getsockopt+0x60/0x70 [ 817.051714][T31971] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 817.051748][T31971] do_sock_getsockopt+0x1c4/0x210 [ 817.051783][T31971] __x64_sys_getsockopt+0x11d/0x1a0 [ 817.051853][T31971] x64_sys_call+0x2dcf/0x3020 [ 817.051875][T31971] do_syscall_64+0x12c/0x370 [ 817.051904][T31971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.051928][T31971] RIP: 0033:0x7f11e141c819 [ 817.051946][T31971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 817.051965][T31971] RSP: 002b:00007f11dfe6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 817.052067][T31971] RAX: ffffffffffffffda RBX: 00007f11e1695fa0 RCX: 00007f11e141c819 [ 817.052083][T31971] RDX: 000000000000001a RSI: 0000000000000006 RDI: 0000000000000003 [ 817.052175][T31971] RBP: 00007f11dfe6f090 R08: 00002000000000c0 R09: 0000000000000000 [ 817.052190][T31971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 817.052201][T31971] R13: 00007f11e1696038 R14: 00007f11e1695fa0 R15: 00007fffec3f4b38 [ 817.052222][T31971] [ 817.054553][T31969] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6140'. [ 817.108655][T31973] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6140'. [ 817.387607][T31976] netlink: 'syz.5.6143': attribute type 1 has an invalid length. [ 817.420913][T31977] netlink: 'syz.9.6142': attribute type 1 has an invalid length. [ 817.490279][T31979] netlink: 14 bytes leftover after parsing attributes in process `syz.9.6142'. [ 817.505278][T31980] lo speed is unknown, defaulting to 1000 [ 817.515338][T31983] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6143'. [ 817.972640][T32012] netlink: 'syz.4.6156': attribute type 1 has an invalid length. [ 817.985670][T32013] syzkaller0: entered promiscuous mode [ 817.993417][T32013] syzkaller0: entered allmulticast mode [ 818.059256][T32017] bridge2: port 1(veth0_to_bond) entered blocking state [ 818.069325][T32017] bridge2: port 1(veth0_to_bond) entered disabled state [ 818.079525][T32017] veth0_to_bond: entered allmulticast mode [ 818.088067][T32017] veth0_to_bond: entered promiscuous mode [ 818.101757][T32017] vlan2: entered allmulticast mode [ 818.109002][T32017] ip6gretap0: entered allmulticast mode [ 818.118574][T32017] bridge2: port 2(vlan2) entered blocking state [ 818.125695][T32017] bridge2: port 2(vlan2) entered disabled state [ 818.133532][T32017] vlan2: entered promiscuous mode [ 818.138695][T32017] ip6gretap0: entered promiscuous mode [ 818.177081][T32022] FAULT_INJECTION: forcing a failure. [ 818.177081][T32022] name failslab, interval 1, probability 0, space 0, times 0 [ 818.196570][T32022] CPU: 0 UID: 0 PID: 32022 Comm: syz.4.6158 Tainted: G W syzkaller #0 PREEMPT(full) [ 818.196697][T32022] Tainted: [W]=WARN [ 818.196703][T32022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 818.196734][T32022] Call Trace: [ 818.196741][T32022] [ 818.196748][T32022] __dump_stack+0x1d/0x30 [ 818.196809][T32022] dump_stack_lvl+0x95/0xd0 [ 818.196833][T32022] dump_stack+0x15/0x1b [ 818.196857][T32022] should_fail_ex+0x263/0x280 [ 818.196949][T32022] should_failslab+0x8c/0xb0 [ 818.197059][T32022] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 818.197084][T32022] ? __d_alloc+0x37/0x340 [ 818.197110][T32022] __d_alloc+0x37/0x340 [ 818.197213][T32022] d_alloc_parallel+0x54/0xce0 [ 818.197244][T32022] ? __rcu_read_unlock+0x4e/0x70 [ 818.197266][T32022] ? __d_lookup+0x316/0x340 [ 818.197301][T32022] path_openat+0x8b9/0x2050 [ 818.197421][T32022] ? _parse_integer+0x27/0x40 [ 818.197488][T32022] do_file_open+0x16c/0x290 [ 818.197591][T32022] do_sys_openat2+0x94/0x130 [ 818.197621][T32022] __x64_sys_open+0xe6/0x110 [ 818.197645][T32022] x64_sys_call+0x14b9/0x3020 [ 818.197718][T32022] do_syscall_64+0x12c/0x370 [ 818.197742][T32022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.197761][T32022] RIP: 0033:0x7f6e58b3c819 [ 818.197775][T32022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.197857][T32022] RSP: 002b:00007f6e57597028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 818.197879][T32022] RAX: ffffffffffffffda RBX: 00007f6e58db5fa0 RCX: 00007f6e58b3c819 [ 818.197895][T32022] RDX: 00000000000000dc RSI: 000000000004827e RDI: 0000200000000200 [ 818.197909][T32022] RBP: 00007f6e57597090 R08: 0000000000000000 R09: 0000000000000000 [ 818.197984][T32022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 818.197998][T32022] R13: 00007f6e58db6038 R14: 00007f6e58db5fa0 R15: 00007ffce5059a98 [ 818.198018][T32022] [ 818.408816][ T28] kauditd_printk_skb: 193 callbacks suppressed [ 818.408847][ T28] audit: type=1326 audit(2000002726.277:24227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32007 comm="syz.9.6154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f11e13dd04e code=0x7ffc0000 [ 818.444324][ T28] audit: type=1326 audit(2000002726.306:24228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32007 comm="syz.9.6154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f11e13dd04e code=0x7ffc0000 [ 818.472428][ T28] audit: type=1326 audit(2000002726.306:24229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32007 comm="syz.9.6154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f11e13dd04e code=0x7ffc0000 [ 818.473094][T32028] netlink: 'syz.4.6160': attribute type 10 has an invalid length. [ 818.509714][ T28] audit: type=1326 audit(2000002726.306:24230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32007 comm="syz.9.6154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f11e13dd04e code=0x7ffc0000 [ 818.526901][T32027] netlink: 'syz.4.6160': attribute type 10 has an invalid length. [ 818.539337][ T28] audit: type=1326 audit(2000002726.306:24231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32007 comm="syz.9.6154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f11e13dd04e code=0x7ffc0000 [ 818.560087][T32029] netlink: 'syz.4.6160': attribute type 10 has an invalid length. [ 818.607088][ T28] audit: type=1326 audit(2000002726.306:24232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32007 comm="syz.9.6154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f11e13dd04e code=0x7ffc0000 [ 818.634128][ T28] audit: type=1326 audit(2000002726.306:24233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32007 comm="syz.9.6154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f11e13dd04e code=0x7ffc0000 [ 818.661419][ T28] audit: type=1326 audit(2000002726.306:24234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32007 comm="syz.9.6154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f11e13dd04e code=0x7ffc0000 [ 818.703366][ T28] audit: type=1326 audit(2000002726.306:24235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32007 comm="syz.9.6154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f11e13dd04e code=0x7ffc0000 [ 818.733200][ T28] audit: type=1326 audit(2000002726.306:24236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32007 comm="syz.9.6154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f11e13dd04e code=0x7ffc0000 [ 819.231491][T32051] netlink: 'syz.9.6169': attribute type 1 has an invalid length. [ 819.407024][T32054] __nla_validate_parse: 7 callbacks suppressed [ 819.407038][T32054] netlink: 14 bytes leftover after parsing attributes in process `syz.9.6169'. [ 819.828940][T32066] lo speed is unknown, defaulting to 1000 [ 820.585030][T29555] ================================================================== [ 820.594011][T29555] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getattr [ 820.602100][T29555] [ 820.604614][T29555] read-write to 0xffff888154b9bf50 of 8 bytes by task 32069 on cpu 0: [ 820.612965][T29555] shmem_add_to_page_cache+0x4b2/0x5b0 [ 820.618452][T29555] shmem_get_folio_gfp+0x4f3/0xd60 [ 820.623762][T29555] shmem_write_begin+0xfc/0x1f0 [ 820.628766][T29555] generic_perform_write+0x183/0x490 [ 820.634091][T29555] shmem_file_write_iter+0xc5/0xf0 [ 820.639476][T29555] __kernel_write_iter+0x319/0x590 [ 820.644590][T29555] dump_user_range+0xa7d/0xdb0 [ 820.649364][T29555] elf_core_dump+0x21a2/0x2330 [ 820.654335][T29555] coredump_write+0xacc/0xdd0 [ 820.659221][T29555] vfs_coredump+0x26c7/0x3130 [ 820.664261][T29555] get_signal+0xd80/0xf60 [ 820.668685][T29555] arch_do_signal_or_restart+0x96/0x450 [ 820.674760][T29555] irqentry_exit+0xf7/0x520 [ 820.679323][T29555] asm_exc_page_fault+0x26/0x30 [ 820.684367][T29555] [ 820.686865][T29555] read to 0xffff888154b9bf50 of 8 bytes by task 29555 on cpu 1: [ 820.694670][T29555] shmem_getattr+0x68/0x200 [ 820.699459][T29555] vfs_getattr_nosec+0x146/0x1e0 [ 820.704435][T29555] vfs_getattr+0x48/0x60 [ 820.709028][T29555] vfs_statx_path+0x28/0x140 [ 820.714004][T29555] vfs_statx+0xc4/0x170 [ 820.718376][T29555] vfs_fstatat+0x118/0x170 [ 820.722845][T29555] __se_sys_newfstatat+0x55/0x3e0 [ 820.727995][T29555] __x64_sys_newfstatat+0x55/0x70 [ 820.733549][T29555] x64_sys_call+0x2c64/0x3020 [ 820.738332][T29555] do_syscall_64+0x12c/0x370 [ 820.743290][T29555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.749818][T29555] [ 820.752248][T29555] value changed: 0x00000000000038ff -> 0x0000000000003902 [ 820.759812][T29555] [ 820.762222][T29555] Reported by Kernel Concurrency Sanitizer on: [ 820.768372][T29555] CPU: 1 UID: 0 PID: 29555 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 820.779841][T29555] Tainted: [W]=WARN [ 820.783651][T29555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 820.794258][T29555] ================================================================== [ 821.183211][T32072] netlink: 4240 bytes leftover after parsing attributes in process `syz.5.6175'.