last executing test programs: 3m58.177576123s ago: executing program 32 (id=22): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x300, &(0x7f0000000100)=[{&(0x7f0000000200)="1c000000210081044e81f782db44b9040200000000806c0100001500", 0x1c}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x1, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7fffffff}}, @NFCTH_TUPLE={0x40, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x6a1d}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008010}, 0x80) socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003e40)={0x14, 0x1e, 0x301, 0x20000002, 0x0, {0x19}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x50, 0x0, 0x9, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xfffffff7}}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000800}, 0x4040040) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f40000200000000000008000000000000000001"], 0xfc}}, 0x0) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000004000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x10}, 0x104247, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f0000000180)={&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x9, @loopback={0x0, 0xac14140c}, 0x0, 0x2}, 0x80, &(0x7f00000000c0), 0x2, 0x0, 0x0, 0x900}, 0x60) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x4040) 3m49.579387758s ago: executing program 33 (id=239): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) 3m47.731615732s ago: executing program 34 (id=287): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x20048800) 3m44.332618713s ago: executing program 35 (id=379): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000680)={&(0x7f0000001e40)={0xa, 0x4e23, 0x0, @mcast1, 0x6}, 0x1c, 0x0, 0x0, 0x0, 0x5b0}, 0x20008001) sendmsg$inet6(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="fc6fe200", 0x4}], 0x1}, 0x4000001) 3m43.92018485s ago: executing program 36 (id=392): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x22, 0x2, 0x22, &(0x7f00000006c0)) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0xfcc9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a00)=@generic={&(0x7f00000009c0)='./file0\x00'}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x10, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6486}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x0, 0x6, 0x6, 0x5, 0x6, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='GPL\x00', 0x4, 0xd7, &(0x7f0000000840)=""/215, 0x66950fcbd24d15ca, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000a40), &(0x7f0000000a80)=[{0x3, 0x3, 0xa, 0x6}, {0x1, 0x1, 0x5, 0x7}], 0x10, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r3, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r4, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r5, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x70}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x5, 0x14, 0x0, &(0x7f00000001c0)="2e9a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3m43.598391493s ago: executing program 37 (id=401): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x9) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20004086) socket$inet6(0xa, 0x1, 0x100) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0x6e, 0x0}, 0x10001) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x2, 0x9, 0x10, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) 3m32.257046234s ago: executing program 38 (id=870): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}]}, 0x7c}}, 0x0) 3m29.6223967s ago: executing program 39 (id=971): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x5, 0x98, 0x7, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000080), 0x1003, r4}, 0x38) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r5, &(0x7f0000000180), 0x0}, 0x20) 3m27.52880518s ago: executing program 40 (id=1066): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@delpolicy={0x50, 0x14, 0x1, 0x70bd2c, 0x25dfdbfd, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0x64010102, 0x4e21, 0x401, 0x4e24, 0x5, 0xa, 0xa0, 0x20, 0x88}, 0x6e6bc0}}, 0x50}, 0x1, 0x0, 0x0, 0x40c1}, 0x40) 3m27.118916108s ago: executing program 41 (id=1078): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newsa={0x170, 0x1a, 0x633, 0x2, 0x25dfdbfd, {{@in=@dev={0xac, 0x14, 0x14, 0x42}, @in=@multicast2, 0x0, 0x4000, 0x4e23, 0x8001, 0x0, 0x20}, {@in=@local, 0x0, 0x32}, @in=@empty, {0x323, 0x0, 0x0, 0xfffffffffffffffd, 0x9, 0x92be}, {0x0, 0x40000, 0x0, 0x3}, {0xfffffffb, 0x0, 0xca09}, 0x70bd28, 0x3502, 0x2, 0x0, 0x0, 0x10}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@empty}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e21, 0xfffc, @in6=@rand_addr=' \x01\x00'}}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x34, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 3m27.100985965s ago: executing program 0 (id=1083): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2800000002000000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x500, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x5, 0x0, 0x4, 0x0, 0x2, 0xc2dfc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x6, 0x10}, 0x2, 0x2, 0x6, 0x7, 0x81, 0x25, 0x3, 0x0, 0xfffffffd, 0x0, 0x400000000002}, 0x0, 0xe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, 0x0) 3m27.011008789s ago: executing program 0 (id=1085): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7c, 0x4}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0xa00000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socket$nl_generic(0x10, 0x3, 0x10) 3m26.864117593s ago: executing program 0 (id=1091): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0) 3m26.733684601s ago: executing program 42 (id=1095): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114815, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r3 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) recvmsg(0xffffffffffffffff, 0x0, 0x23) 3m25.831884301s ago: executing program 0 (id=1097): mkdir(&(0x7f0000001a80)='./file0\x00', 0xb33328a401cad7d9) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 3m25.815910889s ago: executing program 0 (id=1098): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x94}}, 0x8000) 3m25.679786635s ago: executing program 0 (id=1101): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x3000c861) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x9, &(0x7f0000000200)=r3, 0x19) 3m25.679407875s ago: executing program 43 (id=1101): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x3000c861) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x9, &(0x7f0000000200)=r3, 0x19) 3m23.182368695s ago: executing program 6 (id=1096): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="38f40000000101010000000000000000020000022400018014000180"], 0x38}, 0x1, 0x0, 0x0, 0x4004881}, 0x200088a0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1303000056000528707b528e9a93a5"], 0xfe33) 3m23.166883712s ago: executing program 6 (id=1134): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000200ffff400004803c0001800b00010065787468647200002c00"], 0x94}}, 0x8000) 3m23.136443486s ago: executing program 6 (id=1135): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[], &(0x7f0000000680)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000006c0)="e0b9547ed387dbb816d48283bb26", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m23.115801713s ago: executing program 6 (id=1136): mkdir(&(0x7f0000001a80)='./file0\x00', 0xb33328a401cad7d9) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 3m23.092346709s ago: executing program 6 (id=1138): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@ifindex, r0, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)={@cgroup=r0, r0, 0x2f, 0x2038, 0x4}, 0x20) 3m22.998818572s ago: executing program 6 (id=1142): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m22.998404632s ago: executing program 44 (id=1142): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m22.98488671s ago: executing program 5 (id=1145): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000002e40)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008080000b704000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec00c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 3m22.93123313s ago: executing program 5 (id=1146): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[], &(0x7f0000000680)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000006c0)="e0b9547ed387dbb816d48283bb26", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m22.878490091s ago: executing program 5 (id=1147): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000190a01040000000000000000020000000c00034000000000000000020900020073797a32000000000900010073797a30"], 0x38}, 0x1, 0x0, 0x0, 0x44044}, 0x4004) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r5) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x6, 0x5, 0xfc, 0x4, 0x0, 0x3, 0x10104, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x800, 0x4, @perf_bp={0x0, 0x1}, 0x84, 0x6, 0x4, 0x2, 0x0, 0xb, 0x6, 0x0, 0x3, 0x0, 0x8e}, r5, 0x10, r3, 0x1) sendmsg$kcm(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) socket$kcm(0x29, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0xf, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x4) close(r6) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x1, 0x8, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 3m22.877722621s ago: executing program 5 (id=1148): mkdir(&(0x7f0000001a80)='./file0\x00', 0xb33328a401cad7d9) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 3m22.864825059s ago: executing program 5 (id=1149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}]}]}], {0x14, 0x10}}, 0xd0}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) 3m22.711103251s ago: executing program 5 (id=1150): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3m22.710773851s ago: executing program 45 (id=1150): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) 18.110654642s ago: executing program 7 (id=4378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x6, 0x24, &(0x7f0000000400)=ANY=[], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) ioctl$EVIOCRMFF(r1, 0xc0085504, &(0x7f0000000000)=0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x30, 0x2, 0x3, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x4}}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x1d}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008840}, 0x4800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1, 0x84}}}, 0x48}}, 0x0) 17.421534191s ago: executing program 7 (id=4387): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0x2, 0xfffc}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x25dfdbff, {0x3}, [@NHA_ID={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) close(r2) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f00008dc000/0x1000)=nil, &(0x7f00001e2000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000059000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@local, @initdev, 0x0}, &(0x7f0000000280)=0xc) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r9) mq_open(&(0x7f00000003c0)='ttl\x00', 0x40, 0x16, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000400)={0x4, [0x2, 0x9, 0x4, 0x0]}, 0xc) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), 0x200043, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB="2c6ecd2ec30b7fcdcc149c3fa421bf12778137fe88fae04118c032305c66646e6f3d49997055cff6b42dbb3220", @ANYRESHEX=r10, @ANYBLOB=',\x00']) ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x41, 0x5, 0x0, 0x4, 0x54, 0x2, 0x5, 0x1, 0x57, 0x8, 0xfffffffd, 0x2, 0x8, 0xff, 0x0, 0x45, [0x3]}}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r4) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000600)={&(0x7f0000000440), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r11, 0x10, 0x70bd25, 0x3, {{}, {@val={0x8}, @val={0xc, 0x99, {0xcdc, 0x45}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc5b392eb0e023dbe}, 0x44850) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="b12f8f15e79dbd83584b9ccd3c0d449a73ec0678c0578b039973f3bf89371013a4ef5ee5370e4b4fab30c29f0c96a396444490978db6ab67488fb46109561c68b0f99d4771a16fae155ca72b20cb87377658acc7efddd8360d78b512e171f863707ce2c7e68da74cb3d773ec5ab8d59ccc6f3d48998c4f005eb75d9b92b072b34efd83ef5485298c0901cc43d2dd8157df8d5f76fbe8c4af84650434ae00984dd7bb000ebc8f795e4d", 0xa9}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1100000000000000000000000100000077000000000000001c000000000000000000000008000000", @ANYRES32=r7, @ANYBLOB="e0000001ac1414bb000000001100000000000000000000000100000009000000000000009c0000000000000000000000070000004408291000000003440c419000000001fffffffd4434d313e0000002000000070a01010200000003e000000100000007ac1414aa00000003ffffffff00000000e00000020000000801830906463e8d9efd2f070f4c64010100ac1414bbffffffff44e90090000000060000000600000006000000020000000600008001830fe00a010102ac1e0001ffffffff00000000"], 0xf0}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) r12 = socket(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f0000000000), 0x400000000000235, 0x0) 16.575793112s ago: executing program 7 (id=4394): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 16.494991657s ago: executing program 7 (id=4395): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@fsname={'fsname', 0x3d, '.'}}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0xd680, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x1f3) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) write$qrtrtun(r1, &(0x7f0000000340)="66bb0b760dc0f4ff", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) syz_clone(0x48411, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000240)={0x1, {{0xa, 0x0, 0xfffffffe, @mcast1, 0x1}}, {{0xa, 0x4e21, 0xca, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, 0x8}}}, 0x108) getdents(r0, 0x0, 0x0) 16.371148286s ago: executing program 7 (id=4399): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010026bd700000020000020000df0b00010001"], 0x20}}, 0x0) r1 = add_key(&(0x7f0000000300)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000200)='u', 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r1) creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = socket(0x2b, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0x5}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0x4}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}]}, 0x40}}, 0x20000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="70000000080601080000000000000000070000000900020073797a3200000000050001000700000009000200f8797a3200000000050001000700000005000100070000000900020073797a30000000000900020073797a320000000005007d640d8c70b248ee12626b4d32fc63010007"], 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x40890) 15.970194475s ago: executing program 7 (id=4402): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000080), 0x1, 0x48b, &(0x7f0000000f40)="$eJzs3MtvVNUfAPDvvZ2WlscPfogPCGgVjMRHS8tDFiZGowkLjUZdYFzVaSFIAQM1EUIUXWCMC0Pi3rg08S9wpRujrkx0iXtDQgwb0NWYO/fePoaZtkMHpjCfT3KZc+6Dc75z7rk999zbBtCzhrN/koj1EXE5IjZGRKVxh+H848a189V/rp2vJlGrvfl3kh0W16+drxb/RX3JrMtX1GpFfk2Tci++EzExPT11usiPzpx4f/TM2XPPHDsxcXTq6NTJ8YMH9+3dMXBgfH9H4sziur7to1Pbtx56+9Kr1cOX3v3lu6y+64vtZRydNJx/u0093unCumzDvHRS6WJFaEvWbv3FcjlqfX0xNLttY7z8aVcrB9xulWY/nwsXasA9LBuoA72o/EGf3f+Wy1LjhQ6OPbru6gt5RFncN4ol31KJtNinv+H+tpMGI+LwhX+/zpa4TfMQAADz/ZCNf55uNv5L44F5+/2veIayKSL+HxGbI+K+iNgSEfdH1Pd9MCIearP8xickN49/0isLsrW+NktYXDb+e654trVw/FeO/mJTX5HbUI+/PzlybHpqT/Gd7I7+NVl+bMEhC/340u9fNq77ophmH543/suWrPyFEaZXGifoJidmJlYeee7qJxHbKs3iT2YH+klEbI2IbbdYxrEnv93ealuz+Mux8JI6cCdS+ybiibz9L0RD/KWk5fPJsWcPjO8fHYzpqT2j5Vlxs19/u/h6q/JXFH8HZO2/tun5n8ef3SMmgxFnzp47Xn9ee+YWCvnzs2rSYtOWIv7+lvHffP5Xd0UMJG/V0wPlXsXnQPJK9jFUrv9wYmbm9PjcsWW+/jmWx79751z8EzHX/zfnt2eR/PHG7PE7IuLhiHikaLtHI+KxiNi5SPg/v7jrvVbbWrf/IrPyHZTFP7lI+2eXvCw11/7tJ/qO//R9q/JrS57/Wfvvq6d2F2uWc/1bbgVX8t0BAADA3SKtvwOfpCOz6TQdGcnf4d8Sa9NKRDx15NQHJyfzd+U3RX9aznRtnDcfOlbMDZf58Yb83mLe+Ku+oXp+pHpqerLbwUOPW9ei/2f+6uyjFmA1uqfe6APaov9D79L/oXfp/9C7nu92BYDuGGi++uM7XQ+gK9of/w/elnoAd577f+hd+j/0Lv0felLL341PV/Qr/3drorI6qtE0MbQ6qlEmIl1yn3SVVHV5idc+z7vEaqlPmags+49Z3GJiTdNNTS8Xh9bf2csTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiv0XAAD//1ub24E=") (async) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0xf8, 0x1, 0xa, 0x201, 0x0, 0x0, {0x8, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0x9e, 0x6, "f6ec8258379913876790f62a4d5b974de05a7cb4940594a9f18ea0f5b1fb7bec5782bfee64ff20fb56dbda827238c8d7df26bba0299742414d6b51b8efa001535ba465f3c3e7aaf4deb158f8c263df18208a0459e84e960ec292fcd2196b9af901eeb26b18de7aa8468642108f23166f4ca968ac81980c48d019205cc334afa344fccb5c69f8f504763f70f513b7778ae85884f575e22c0abf82"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, 0xf8}, 0x1, 0x0, 0x0, 0x880}, 0x4054) (async) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 15.969974555s ago: executing program 46 (id=4402): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000080), 0x1, 0x48b, &(0x7f0000000f40)="$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") (async) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0xf8, 0x1, 0xa, 0x201, 0x0, 0x0, {0x8, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0x9e, 0x6, "f6ec8258379913876790f62a4d5b974de05a7cb4940594a9f18ea0f5b1fb7bec5782bfee64ff20fb56dbda827238c8d7df26bba0299742414d6b51b8efa001535ba465f3c3e7aaf4deb158f8c263df18208a0459e84e960ec292fcd2196b9af901eeb26b18de7aa8468642108f23166f4ca968ac81980c48d019205cc334afa344fccb5c69f8f504763f70f513b7778ae85884f575e22c0abf82"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, 0xf8}, 0x1, 0x0, 0x0, 0x880}, 0x4054) (async) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 8.174926191s ago: executing program 1 (id=4498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) (fail_nth: 3) 7.806845876s ago: executing program 1 (id=4501): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) 7.66304184s ago: executing program 1 (id=4502): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2d, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x5}, 0x108400, 0x2, 0x0, 0x0, 0xffff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b700000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688884787", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 7.620215183s ago: executing program 1 (id=4504): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x101, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x9}, @in={0x2, 0x4e24, @rand_addr=0x64010100}], 0x2c) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f0000000380)=ANY=[], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) ftruncate(r0, 0x7) syz_clone(0x20008200, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x718e, 0x80, 0x1, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) 7.439838781s ago: executing program 1 (id=4505): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa8, 0x2, 0x0, 0x0, 0x0, 0x1, 0x400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x5}, 0x1a2d, 0x0, 0x7fa, 0x8, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0x3, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8000}, 0x9805, 0x0, 0x9af, 0x3, 0x69}, 0x0, 0xffbfffdfffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x7fffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'ip6gre0\x00', 0x4}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x3b8, 0x268, 0x1000000, 0xffffffff, 0x268, 0xffffffff, 0x320, 0xffffffff, 0xffffffff, 0x320, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x800006, 0x0, 0x3b, 0x0, 0x0, 0x80000000, 0x5, 0x3}, {0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0x0, 0x0, 0x8, 0x0, 0x2, 0x4, 0x4023}, {0xfffffffffffffffd}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x4, 0x4, 0x7, 'snmp_trap\x00', {0x1}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x3, 0x400, 0x7ff, 0x200, 'netbios-ns\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x418) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 7.100213791s ago: executing program 1 (id=4511): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x5, 0x2, 0xfffff271, 0x1, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x6, 0x9}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800001000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x40}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)={r2}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 7.03608558s ago: executing program 47 (id=4511): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x5, 0x2, 0xfffff271, 0x1, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x6, 0x9}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800001000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x40}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)={r2}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 3.734887768s ago: executing program 3 (id=4564): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioprio_set$pid(0x2, r0, 0x6000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x7, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xa5}, 0x106200, 0x10004, 0x20da, 0x5, 0x1000000000000a, 0x0, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x400, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x1000, 0x0) write$binfmt_misc(r5, &(0x7f00000000c0), 0xfdef) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00<', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r11, r10, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r11}, &(0x7f0000000000), &(0x7f0000000080)=r8}, 0x20) sendmsg$inet(r9, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x200000000000000) r12 = socket$unix(0x1, 0x5, 0x0) dup2(r12, 0xffffffffffffffff) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) 2.940578288s ago: executing program 2 (id=4573): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYBLOB="b19b439ebf79f34d7065836c192d0242601ea9bc50f964bb96", @ANYBLOB="000002000255000008001d00ca0e00000a0001"], 0x3c}, 0x1, 0x0, 0x0, 0x4005}, 0x0) 2.907077572s ago: executing program 2 (id=4574): r0 = socket$inet(0x2, 0x3, 0x1) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r1 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) 2.84019733s ago: executing program 3 (id=4580): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) futex_waitv(&(0x7f0000000a80)=[{0x6, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000000cc0), 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r1, 0x8080583a, &(0x7f00000003c0)={0x1, 0x9c76, 0x8, 0x9, 0x9, 0x0, 0x2}) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xb, 0x1, 0x0, &(0x7f0000048000), 0x0) r2 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcc, 0x400, 0x2, 0x24e}, &(0x7f00000000c0)=0x0, &(0x7f0000000380)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f00000001c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r7, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xb}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x50}, 0x20080080) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x20, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x100}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x43c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x80000001, 0x8001, 0x3, 0x0, 0x6, 0x4, 0x8, 0x9, 0x401, 0xfffffffc, 0x6, 0xfffffff7, 0x3, 0x3, 0x4, 0x3, 0x100, 0x8, 0xff, 0x80, 0x100, 0x8003, 0x80, 0x7, 0x101, 0xa46, 0xeb, 0x7ff, 0x7, 0x10001, 0x9, 0x6, 0x9c01, 0x7, 0x4, 0x0, 0xfaa, 0xc88, 0x6, 0x8d1, 0x1ff, 0x2, 0x1, 0x80000000, 0x6a, 0xffffffff, 0x7, 0x4, 0x3, 0x6, 0x0, 0x100, 0x4, 0x9, 0x8, 0x3, 0xd, 0x14574, 0x0, 0x7f, 0x7, 0x1, 0x314, 0x7, 0xe, 0xfccf, 0x2, 0x45, 0x7, 0x4, 0x2, 0x8, 0x5, 0x3, 0x1, 0x4, 0x1, 0x40, 0xb, 0x3ff, 0xfffffff9, 0x6, 0x9, 0x8, 0x80, 0x59b, 0x1, 0x2, 0x6, 0xc, 0x0, 0xfffffffa, 0x4, 0xba65, 0x4, 0x0, 0x70e, 0x9, 0xd, 0x1, 0x0, 0x7fffffff, 0x7fff, 0xfff, 0x4, 0x4, 0xac1, 0x5, 0x4, 0x9, 0x5, 0x9, 0x7, 0x5371, 0x709d7f5b, 0xa09a, 0xfffffffe, 0x4b8a, 0x9, 0x7, 0x4, 0x3, 0x8a9, 0x6, 0x4, 0x10001, 0xc0000000, 0x4, 0x7, 0xf, 0x86, 0x7, 0x3, 0x9, 0x9, 0x663, 0xfffffffd, 0xe2, 0x0, 0x4, 0x4, 0x6, 0xfc, 0x1, 0x9, 0x8, 0x7, 0x8001, 0x0, 0x4, 0x5, 0xfd, 0x90, 0xffff, 0x5, 0xfffeffff, 0x7, 0x9, 0x8e0e, 0x1, 0xe, 0x8, 0x1, 0x2, 0x5, 0x0, 0xb, 0x6, 0x4, 0x9, 0x9, 0x0, 0xc, 0xaa8, 0xcb1a, 0x1, 0xffffffff, 0x9, 0x2, 0x81, 0x9, 0x280, 0x0, 0x8, 0x9, 0x8, 0xfffffff9, 0x800, 0x18e, 0x5, 0x5, 0x1, 0x32, 0x6, 0x4f, 0x8, 0xfffffff9, 0x1, 0x0, 0x6, 0x1, 0x7, 0x8001, 0x7, 0x53f, 0x4, 0xd13b, 0xb, 0x6, 0xb, 0x100, 0x7, 0x5, 0x6, 0x1, 0x10001, 0x6, 0x4, 0x7, 0x82, 0xf0, 0x4, 0x3, 0x6, 0x4, 0xcd0, 0x400, 0x0, 0x0, 0x1000, 0x6, 0xc, 0x2, 0x1, 0x3, 0xc, 0x8, 0x80000001, 0x8, 0xa4eb, 0x7, 0x4, 0xffffffff, 0x1ff, 0x3ff, 0x3, 0x80, 0x3, 0x8001, 0x1, 0x8, 0xe1, 0xc, 0x5, 0x3, 0x95]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) syz_emit_ethernet(0xa1, &(0x7f0000000900)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x6b, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x6, {0x6, 0x6, "b290c7", 0x8, 0x33, 0xff, @loopback, @mcast1, [@fragment={0x4, 0x0, 0x0, 0x0, 0x0, 0x18, 0x66}], "501e7141f5e76c0059063c3a272fd84c41fb35b1c38681f52a8577cc204935e3f8e42705f681d87bb74bb11e057a54fe80b888"}}}}}}}, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{0x0, 0x0, &(0x7f0000000100)}}], 0x1, 0x48800) r8 = syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) process_mrelease(r9, 0x700000000000000) clock_adjtime(0x0, &(0x7f0000000000)={0x8000000000000000, 0x0, 0x1, 0x40000c, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x400000000, 0xc159, 0xc, 0x4, 0x400000000000000, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x40000000c, 0x2, 0x3, 0x101, 0x8, 0x200, 0xffffffffffffffff}) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0xfffffffffffffd7e, './file0'}}, 0xfffffdab) 2.375922129s ago: executing program 4 (id=4590): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYRES32, @ANYRES16, @ANYRES32], 0x1, 0xa08, &(0x7f0000008280)="$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") syz_create_resource$binfmt(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x10044, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (fail_nth: 5) 2.03957424s ago: executing program 4 (id=4592): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioprio_set$pid(0x2, r0, 0x6000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x7, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xa5}, 0x106200, 0x10004, 0x20da, 0x5, 0x1000000000000a, 0x0, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x400, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x1000, 0x0) write$binfmt_misc(r5, &(0x7f00000000c0), 0xfdef) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00<', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r11, r10, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r11}, &(0x7f0000000000), &(0x7f0000000080)=r8}, 0x20) sendmsg$inet(r9, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x200000000000000) r12 = socket$unix(0x1, 0x5, 0x0) dup2(r12, 0xffffffffffffffff) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) 1.964992306s ago: executing program 3 (id=4593): r0 = socket$can_raw(0x1d, 0x3, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x4, 0x1}, {0x0, 0x1}}], 0x10) 1.899969095s ago: executing program 8 (id=4594): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="141c86dd0700100000001400000060ec97000fc82c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 1.812377039s ago: executing program 3 (id=4597): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FIGETBSZ(r0, 0x2, 0x0) write$binfmt_script(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r3, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='syscall\x00') mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x146, &(0x7f0000000240)={0xfffffffffffffff9, 0x1, 0x5b, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x9, 0x0, 0x7, 0x2000, 0xffffffffffffffff, 0x26e, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0xb}, 0x50) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) r5 = syz_pidfd_open(0x0, 0x0) r6 = dup(r5) fsetxattr$trusted_overlay_upper(r6, &(0x7f0000000000), 0x0, 0x0, 0x2) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="2b6d656d6f7279202b70696473202d626c6b696b202b637075736574202d6e6574202d6e65748a636c73202b637075736574202a626c202d726c696d697420"], 0x49) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) fdatasync(r7) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x55430000) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 1.812081689s ago: executing program 9 (id=4598): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FIGETBSZ(r0, 0x2, 0x0) write$binfmt_script(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r3, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='syscall\x00') mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x146, &(0x7f0000000240)={0xfffffffffffffff9, 0x1, 0x5b, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x9, 0x0, 0x7, 0x2000, 0xffffffffffffffff, 0x26e, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0xb}, 0x50) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) r5 = syz_pidfd_open(0x0, 0x0) r6 = dup(r5) fsetxattr$trusted_overlay_upper(r6, &(0x7f0000000000), 0x0, 0x0, 0x2) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="2b6d656d6f7279202b70696473202d626c6b696b202b637075736574202d6e6574202d6e65748a636c73202b637075736574202a626c202d726c696d697420"], 0x49) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) fdatasync(r7) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x55430000) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 1.799136957s ago: executing program 8 (id=4599): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newtfilter={0x68, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x34, 0x2, [@TCA_MATCHALL_ACT={0x30, 0x2, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) (fail_nth: 5) 1.453162336s ago: executing program 8 (id=4600): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_getres(0x6, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$802154_dgram(0xffffffffffffffff, &(0x7f00000000c0)={0x24, @none={0x0, 0xffff}}, 0x14) set_mempolicy(0x3, &(0x7f0000000380)=0x3, 0x9) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000280)={0x84, @private=0xa010101, 0x4e23, 0x0, 'lblc\x00', 0x11, 0x1, 0x7f}, 0x2c) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000000000)=0x0) timer_settime(r3, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_delete(0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'dummy0\x00', 0x2}, 0x18) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x10080, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x20, 0x3, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20080) 1.095092293s ago: executing program 4 (id=4601): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x230}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000580)="1bf91073b76dc5c6fcba66812f23c0c60ec892ae3009f81865b169f3f9e54f4884f8bca28c9587e2a9e4239e36326c738674d8a2cc7159647a1636e2c73b54c2b0b0dd55062858c57cd91226357f09a224cf495f59e59aded86fd8fd3e042dd171826db071e97e30edf732b6d39d0cd0d1f21ed13ff7f7623214d236198c1c7baed808936a26e808c83887cbab9f06edd61869469ca5da9f668375c0cac9537f211ecf4a57f2c15ef2d5b02d946a36c9153ac575b4c532d06b62ee2fa20c89e09b3c70a048d0da6472508814cd61e1d712ef3b33aeec8ca6e36c9a1ff8e315baa97ec5af82cece395c0e40fc3fdfb2e084", 0x800, r0}, 0x38) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000001100)={0x0, &(0x7f0000001180)=""/127, &(0x7f0000001200), &(0x7f0000000580), 0x6e, r0}, 0x38) 928.261033ms ago: executing program 4 (id=4602): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) socket(0x28, 0x5, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(0x3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fcntl$dupfd(r4, 0x406, r1) 869.836753ms ago: executing program 4 (id=4603): mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000080)={0x100014, 0x100004, 0x60000}, 0x20) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40442, 0x1) syz_clone(0x81090000, &(0x7f00000003c0)="cc50586cbc945a388ebd9116b889fc29a6cffc3ea5ad8f6e1b2225d7bd046a66415db3ec1977ee94f4d4c2311a15ed9fe55a", 0x32, &(0x7f0000000400), &(0x7f0000000440), &(0x7f00000005c0)="bb80c001a5dce1bb851d5c08e4cccad4e0a934b140dc290ab0ed4537ed410d663b99700c4dc98f3fe3b180cc6e3c6b77bad0b4af4781f72de6ba90b4c595d02ef7eaf11392ac9531c27b347e27374f0e4e0a6495230f27d0798e45ae261206a41cef3820a1a58894c7015836114f18fbf50bfd118ac7ca369d7b3e8da5221ae0f2a405625a8e39fd3169efdc74401bb8971c5b55e4c29d0d91d61c664b331cfc8a10") r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10}}}, 0x84) close(r0) r2 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x800000}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000dc0)=0x1c, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000000000000000000000000000711241000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0xe, {0x2, 0x4e22, @empty}}, 0x24) setfsgid(r5) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x1000000000000, 0x2, 0x0, &(0x7f0000ffa000/0x4000)=nil) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000000380)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00'/15, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=fscache,loose,version=9p2000,access=any,aname=\x00,dfltgid=', @ANYRESHEX=r5, @ANYBLOB=',ignoreqv,msize=0x0000000000003109,fowner<', @ANYRESDEC=r8, @ANYBLOB=',\x00']) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="8580f83288e1aaaaaaaaaa1c08004515001c00670000000290780a010102e000000111819078e0000001d04d82187269a14bc6e448755f85f8937bee5d1cd6a629d144a02c20dd71f0e977f0a8c48db569f7f85f851a469f51b0fb1c5cb9287d50b658dcadf73792de7061ddf7482e92da7bcef8b133ef04bb622ccac05eeb33e832d80080ab3bace1be5baa7faea2953fb1bba2d7a822a0bc81a1c453641cc0d0dd3eb87d5c78da5226097587de65db5933faac3507720c7ce6d6b25d0dd6eeaab334d921edf39c8496c85060a5201d85a0b515c692c63e3fa1c4f03b5a9839bc192ddc9e1250e258b98e8ac8be303ca8ba17819e6a284d059cd50b6ebd734d2f18011bb6b0fa964033672535b0393a2e51177dd1efcc1271bb3c29365c26efa95438cb2db3a720f56b7238a4c310d97e658cc228466d"], 0x0) 869.343403ms ago: executing program 8 (id=4604): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1, 0x7ff}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000060000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000000000950000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r4) r5 = socket$kcm(0x2, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvmsg(r5, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000002c0)=""/34, 0x56}], 0x1}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00', 0xfffffffd}], 0x1c) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1200) r9 = gettid() rt_sigqueueinfo(r9, 0x21, &(0x7f0000000000)) fcntl$setownex(r8, 0xf, &(0x7f0000000280)={0x1, r9}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r7, &(0x7f0000000440)}, 0x20) syz_emit_ethernet(0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaa608c46ae5e286036e89884701018bd3d9e40000"], 0x0) 868.995813ms ago: executing program 4 (id=4605): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2111093, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b145b, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = socket(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000dc0)="d8000000180081084e81f783db4cb9040a10080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fec0ffff000000fd035c0461c1d67f6f94007134cf6efb800189b316277ce06bbaceac3c2fb14c2ee5a7cef4090f00201f373f7b9555da25364c3b10b7b91b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e003640fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1, 0x0, 0x0, 0x4788}, 0x8004) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="01000000000000000000"], 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000440)=ANY=[@ANYRESOCT=r0], &(0x7f00000001c0)='syzkaller\x00', 0x5a70, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="1b4607e8c51f991bb91e0cc0c5dd99d0b45b2345b4f241abc6685d0220ba161a074823d34e8a43b551a477ec04f2e31a1fcac0aa4a616cd84bf535ce50cc0715ddea22430d9da48d7e8fd9b2ffccb9b168eb48451ef12205ab48c247352270a29d141c177a7367ceaf1fef2cb1d8d6c048031e976bd1888c5a36790ee9b67e1d5a1ad6bbb810fc480eaecd56cb340479cdcefcff5d34ac6e87eb", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="2f0000000800000004000000", @ANYRES32, @ANYRES64=r6, @ANYRES64=0x0], 0x20) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f00000020c0)={&(0x7f0000000640)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000102c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x6}, {0x0}, &(0x7f0000010280)=[{0x0}], 0x1, 0x40, 0x9}}], 0x48, 0x20008011}, 0x0) sendfile(r5, r3, 0x0, 0x40001) sendfile(r5, r4, 0x0, 0x7ffff000) socketpair$unix(0x1, 0x5, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x38d84b, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000100)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() 617.106179ms ago: executing program 3 (id=4606): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002540)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa8}, 0x2160) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 574.037361ms ago: executing program 2 (id=4607): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a31000000001500"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040007}, 0x0) (fail_nth: 3) 572.357141ms ago: executing program 9 (id=4608): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getresgid(&(0x7f0000000080), &(0x7f0000000000), &(0x7f00000000c0)) unshare(0x22020400) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) pipe2$9p(&(0x7f00000011c0)={0xffffffffffffffff}, 0x4000) r3 = geteuid() ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000001200)=0x0) fstat(r0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000001140)='./file0\x00', &(0x7f0000001180), 0x4, &(0x7f0000001300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noxattr}], [{@fowner_lt={'fowner<', r3}}, {@appraise}, {@subj_role={'subj_role', 0x3d, '%'}}, {@fowner_lt={'fowner<', r4}}, {@permit_directio}, {@dont_hash}, {@euid_lt={'euid<', r5}}]}}) r6 = openat$cgroup_ro(r1, &(0x7f0000001100)='cpu.stat\x00', 0x5000000, 0x0) readv(r6, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) 490.042486ms ago: executing program 2 (id=4609): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc82c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) (fail_nth: 5) 257.595445ms ago: executing program 3 (id=4610): r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xe, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x6, 0x1, 0xfffffffffffffffd, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x6, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x9, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) futex(&(0x7f0000000000)=0x1, 0x6, 0x2, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, r0, 0x2, 0x70bd25, 0x100, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r5, 0xa9525000) unlink(&(0x7f0000000140)='./cgroup\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 166.761319ms ago: executing program 9 (id=4611): unshare(0x20040600) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) semop(0x0, 0x0, 0x0) unshare(0x62040200) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x2, 0x0, 0x1, 0x40, 0x4}, 0x0, 0x0) 106.277499ms ago: executing program 9 (id=4612): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x54, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x220005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x33}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@empty, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x40000000809ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b70300001a000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r6}, &(0x7f0000000400), &(0x7f0000000500)=r7}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010000040000fedbdf25fe8000000000000000000000000000bbe000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 106.086539ms ago: executing program 2 (id=4613): socket$inet6(0xa, 0x2, 0x0) socket(0x28, 0x5, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(0x3) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fcntl$dupfd(r3, 0x406, r0) 105.338289ms ago: executing program 9 (id=4614): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 51.078289ms ago: executing program 2 (id=4615): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) setreuid(0xee01, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x20240, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f00000005c0)={[{@delalloc}, {@data_err_abort}, {@bsdgroups}, {@nodioread_nolock}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x642f}}, {@minixdf}, {@nouid32}, {@quota}, {@i_version}, {@stripe={'stripe', 0x3d, 0x9}}, {@dioread_nolock}], [{@flag='ro'}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1182, 0x9b) write(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x295, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="b80000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0100000000000000000000000000010c00028005000100000000003c0002800c00028000018014000300000000000000000000f2db3b989da7a5d0fe8000000000000000000000000000aa090007400000000024000d8014000400fe80000000000000000000000000002e0c000380060002004e2200"/184], 0xb8}}, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, 0x0, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0x2, 0x100006, 0xed34, 0x400ff7, 0xb4, "20cde7b23a5cf0b4a5a300000400", 0x1e, 0xdb25}) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) sendfile(r2, r1, 0x0, 0x3ffff) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f0000000200)=0x7, 0x4) ioprio_get$uid(0x3, 0xee01) 45.133268ms ago: executing program 9 (id=4616): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x8, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x4}, 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 42.180527ms ago: executing program 8 (id=4617): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10}}, 0xb0}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) 0s ago: executing program 8 (id=4618): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="d4df37ded0da270009000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0700147ea64e21160af3650ab68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030106000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01"], 0x0, 0xfffffffffffffe3d}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a2, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024"], 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a2, &(0x7f0000000080)) kernel console output (not intermixed with test programs): lsm=selinux res=1 [ 219.510435][ T28] audit: type=1400 audit(1772850839.589:509): avc: denied { create } for pid=14674 comm="syz.7.4147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 219.510923][T14675] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.4147: invalid block [ 219.544545][ T28] audit: type=1400 audit(1772850839.589:510): avc: denied { prog_load } for pid=14674 comm="syz.7.4147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 219.588804][T14675] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 219.592025][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 219.607746][ C1] EXT4-fs (loop7): initial error at time 1772850840: ext4_get_branch:178: inode 11: block 4294967295 [ 219.618855][ C1] EXT4-fs (loop7): last error at time 1772850840: ext4_get_branch:178: inode 11: block 4294967295 [ 219.634260][ T28] audit: type=1400 audit(1772850839.589:511): avc: denied { bpf } for pid=14674 comm="syz.7.4147" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 219.655851][T14675] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.4147: invalid indirect mapped block 4294967295 (level 1) [ 219.670286][T14675] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 219.670439][T14675] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.4147: invalid indirect mapped block 4294967295 (level 1) [ 219.694116][ T28] audit: type=1400 audit(1772850839.589:512): avc: denied { write } for pid=14674 comm="syz.7.4147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 219.794398][T14675] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 219.794830][T14675] EXT4-fs (loop7): 2 truncates cleaned up [ 219.852441][T14675] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.974761][T13805] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.562475][T13015] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 220.968488][T14707] netlink: 'syz.7.4156': attribute type 4 has an invalid length. [ 221.229717][T14716] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4155'. [ 221.786306][T14705] loop3: detected capacity change from 0 to 256 [ 222.033558][T14708] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.041410][T14708] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.062025][ T28] kauditd_printk_skb: 4813 callbacks suppressed [ 222.062041][ T28] audit: type=1326 audit(1772850842.709:5326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14693 comm="syz.1.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1e2e84db19 code=0x7ffc0000 [ 222.112156][ T28] audit: type=1326 audit(1772850842.749:5327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14693 comm="syz.1.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1e2e8a6517 code=0x7ffc0000 [ 222.138401][ T28] audit: type=1326 audit(1772850842.749:5328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14693 comm="syz.1.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1e2e84db19 code=0x7ffc0000 [ 222.182560][T14708] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.193554][T14708] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.202261][ T28] audit: type=1326 audit(1772850842.749:5329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14693 comm="syz.1.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1e2e8a6517 code=0x7ffc0000 [ 222.244700][ T28] audit: type=1326 audit(1772850842.749:5330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14693 comm="syz.1.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1e2e84db19 code=0x7ffc0000 [ 222.274927][ T28] audit: type=1326 audit(1772850842.749:5331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14693 comm="syz.1.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1e2e8a6517 code=0x7ffc0000 [ 222.384061][T14732] team0: Device gtp0 is of different type [ 222.418386][T14735] loop8: detected capacity change from 0 to 128 [ 222.465783][ T28] audit: type=1326 audit(1772850842.749:5332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14693 comm="syz.1.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1e2e84db19 code=0x7ffc0000 [ 222.501406][ T28] audit: type=1326 audit(1772850842.749:5333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14693 comm="syz.1.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1e2e8a6517 code=0x7ffc0000 [ 222.525519][ T28] audit: type=1326 audit(1772850842.749:5334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14693 comm="syz.1.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1e2e84db19 code=0x7ffc0000 [ 222.527963][T14735] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 222.551020][ T28] audit: type=1326 audit(1772850842.749:5335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14693 comm="syz.1.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1e2e8a6517 code=0x7ffc0000 [ 222.596225][T14735] ext4 filesystem being mounted at /550/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.647909][T14759] loop1: detected capacity change from 0 to 128 [ 223.874371][T14761] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4168'. [ 224.297849][ T7032] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 224.413408][T14776] loop8: detected capacity change from 0 to 128 [ 224.420903][T14776] msdos: Bad value for 'uid' [ 224.425772][T14776] msdos: Bad value for 'uid' [ 224.456655][T14776] FAULT_INJECTION: forcing a failure. [ 224.456655][T14776] name failslab, interval 1, probability 0, space 0, times 0 [ 224.456930][T14778] netlink: 'syz.4.4175': attribute type 13 has an invalid length. [ 224.478520][T14778] lo: entered promiscuous mode [ 224.483704][T14778] lo: entered allmulticast mode [ 224.487259][T14776] CPU: 1 UID: 0 PID: 14776 Comm: syz.8.4174 Not tainted syzkaller #0 PREEMPT(full) [ 224.487306][T14776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 224.487320][T14776] Call Trace: [ 224.487326][T14776] [ 224.487334][T14776] __dump_stack+0x1d/0x30 [ 224.487398][T14776] dump_stack_lvl+0x95/0xd0 [ 224.487421][T14776] dump_stack+0x15/0x1b [ 224.487443][T14776] should_fail_ex+0x263/0x280 [ 224.487466][T14776] should_failslab+0x8c/0xb0 [ 224.487547][T14776] kmem_cache_alloc_noprof+0x66/0x400 [ 224.487569][T14776] ? prepare_creds+0x38/0x540 [ 224.487593][T14776] ? get_random_u64+0x13f/0x1f0 [ 224.487621][T14776] prepare_creds+0x38/0x540 [ 224.487693][T14776] copy_creds+0x8f/0x340 [ 224.487715][T14776] ? dup_task_struct+0x60b/0x940 [ 224.487739][T14776] copy_process+0x62f/0x20d0 [ 224.487767][T14776] kernel_clone+0x16b/0x5d0 [ 224.487837][T14776] ? vfs_write+0x86e/0x9f0 [ 224.487868][T14776] __x64_sys_clone+0x143/0x180 [ 224.488008][T14776] x64_sys_call+0x1222/0x3020 [ 224.488033][T14776] do_syscall_64+0x12c/0x370 [ 224.488136][T14776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.488159][T14776] RIP: 0033:0x7f183c74c799 [ 224.488175][T14776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.488194][T14776] RSP: 002b:00007f183b1a6fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 224.488214][T14776] RAX: ffffffffffffffda RBX: 00007f183c9c5fa0 RCX: 00007f183c74c799 [ 224.488267][T14776] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 224.488280][T14776] RBP: 00007f183b1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 224.488304][T14776] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 224.488317][T14776] R13: 00007f183c9c6038 R14: 00007f183c9c5fa0 R15: 00007ffc00aa1178 [ 224.488337][T14776] [ 224.608245][T14789] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4173'. [ 224.650181][T14778] tunl0: entered promiscuous mode [ 224.693036][T14778] tunl0: entered allmulticast mode [ 224.699169][T14778] gre0: entered promiscuous mode [ 224.707209][T14778] gre0: entered allmulticast mode [ 224.838798][T14778] erspan0: entered promiscuous mode [ 224.844275][T14778] erspan0: entered allmulticast mode [ 224.860622][T14778] ip_vti0: entered promiscuous mode [ 224.866956][T14778] ip_vti0: entered allmulticast mode [ 224.874141][T14778] ip6_vti0: entered promiscuous mode [ 224.879615][T14778] ip6_vti0: entered allmulticast mode [ 224.894624][T14795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4178'. [ 224.901467][T14778] sit0: entered promiscuous mode [ 224.908954][T14778] sit0: entered allmulticast mode [ 224.915626][T14778] ip6tnl0: entered promiscuous mode [ 224.920933][T14778] ip6tnl0: entered allmulticast mode [ 224.927763][T14778] ip6gre0: entered promiscuous mode [ 224.936571][T14778] ip6gre0: entered allmulticast mode [ 224.950780][T14778] ip6gretap0: entered promiscuous mode [ 224.956575][T14778] ip6gretap0: entered allmulticast mode [ 224.963198][T14799] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=14799 comm=syz.1.4178 [ 224.977742][T14778] bridge0: entered promiscuous mode [ 224.984008][T14797] loop3: detected capacity change from 0 to 512 [ 224.984196][T14778] bridge0: entered allmulticast mode [ 224.999124][T14778] vcan0: entered promiscuous mode [ 224.999195][T14797] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 225.004517][T14778] vcan0: entered allmulticast mode [ 225.006932][T14778] team0: entered promiscuous mode [ 225.026685][T14797] EXT4-fs (loop3): 1 truncate cleaned up [ 225.028595][T14778] team_slave_0: entered promiscuous mode [ 225.039078][T14778] team_slave_1: entered promiscuous mode [ 225.042490][T14797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.045529][T14778] team0: entered allmulticast mode [ 225.063464][T14778] team_slave_0: entered allmulticast mode [ 225.069884][T14778] team_slave_1: entered allmulticast mode [ 225.077604][T14778] dummy0: entered promiscuous mode [ 225.082858][T14778] dummy0: entered allmulticast mode [ 225.089097][T14778] nlmon0: entered promiscuous mode [ 225.094506][T14778] nlmon0: entered allmulticast mode [ 225.101475][T14778] caif0: entered promiscuous mode [ 225.106997][T14778] caif0: entered allmulticast mode [ 225.112321][T14778] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 225.129072][T14795] syz_tun: refused to change device tx_queue_len [ 225.206042][T14803] loop8: detected capacity change from 0 to 128 [ 225.217529][T14803] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 225.231313][T14803] ext4 filesystem being mounted at /554/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.597563][T14817] loop1: detected capacity change from 0 to 512 [ 225.684225][T14817] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 225.763962][T14817] EXT4-fs (loop1): 1 truncate cleaned up [ 225.796859][T14817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.980691][T13015] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.882540][T14835] loop4: detected capacity change from 0 to 256 [ 226.929105][ T7032] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 227.034159][T11323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.595480][T14847] loop7: detected capacity change from 0 to 512 [ 227.644304][T14847] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 227.805945][T14847] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 227.857779][T14847] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4193: Corrupt directory, running e2fsck is recommended [ 227.919561][T14847] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 228.038402][T14847] EXT4-fs error (device loop7): ext4_iget_extra_inode:5025: inode #15: comm syz.7.4193: corrupted in-inode xattr: invalid ea_ino [ 228.069389][ T28] kauditd_printk_skb: 3675 callbacks suppressed [ 228.069403][ T28] audit: type=1400 audit(1772850848.719:9011): avc: denied { setattr } for pid=14866 comm="syz.3.4200" name="tun" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 228.104090][T14865] xt_CT: You must specify a L4 protocol and not use inversions on it [ 228.170681][T14847] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 228.171965][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 228.188321][ C1] EXT4-fs (loop7): initial error at time 1772850848: ext4_iget_extra_inode:5025: inode 15 [ 228.198242][ C1] EXT4-fs (loop7): last error at time 1772850848: ext4_iget_extra_inode:5025: inode 15 [ 228.208366][T14847] EXT4-fs (loop7): Remounting filesystem read-only [ 228.214987][ T28] audit: type=1400 audit(1772850848.769:9012): avc: denied { create } for pid=14863 comm="syz.1.4199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 228.237756][T14847] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.253388][ T28] audit: type=1400 audit(1772850848.819:9013): avc: denied { ioctl } for pid=14866 comm="syz.3.4200" path="socket:[48240]" dev="sockfs" ino=48240 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 228.281820][T14847] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 228.297645][T14847] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 228.308134][T14847] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4193: Corrupt directory, running e2fsck is recommended [ 228.328128][T14878] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 228.335696][T14880] FAULT_INJECTION: forcing a failure. [ 228.335696][T14880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.352931][T14880] CPU: 1 UID: 0 PID: 14880 Comm: syz.3.4203 Not tainted syzkaller #0 PREEMPT(full) [ 228.352987][T14880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 228.353001][T14880] Call Trace: [ 228.353083][T14880] [ 228.353091][T14880] __dump_stack+0x1d/0x30 [ 228.353118][T14880] dump_stack_lvl+0x95/0xd0 [ 228.353158][T14880] dump_stack+0x15/0x1b [ 228.353226][T14880] should_fail_ex+0x263/0x280 [ 228.353250][T14880] should_fail+0xb/0x20 [ 228.353275][T14880] should_fail_usercopy+0x1a/0x20 [ 228.353300][T14880] _copy_from_iter+0xcf/0xea0 [ 228.353325][T14880] ? __alloc_skb+0x4f6/0x690 [ 228.353386][T14880] ? __alloc_skb+0x200/0x690 [ 228.353411][T14880] netlink_sendmsg+0x4ae/0x6f0 [ 228.353443][T14880] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.353471][T14880] ____sys_sendmsg+0x563/0x5b0 [ 228.353521][T14880] ___sys_sendmsg+0x195/0x1e0 [ 228.353564][T14880] ? path_openat+0x1b01/0x2050 [ 228.353606][T14880] __sys_sendmmsg+0x185/0x320 [ 228.353642][T14880] __x64_sys_sendmmsg+0x57/0x70 [ 228.353749][T14880] x64_sys_call+0x27aa/0x3020 [ 228.353775][T14880] do_syscall_64+0x12c/0x370 [ 228.353810][T14880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.353875][T14880] RIP: 0033:0x7f5981dcc799 [ 228.353890][T14880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.353914][T14880] RSP: 002b:00007f598081f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 228.353932][T14880] RAX: ffffffffffffffda RBX: 00007f5982045fa0 RCX: 00007f5981dcc799 [ 228.354029][T14880] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 228.354043][T14880] RBP: 00007f598081f090 R08: 0000000000000000 R09: 0000000000000000 [ 228.354056][T14880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.354068][T14880] R13: 00007f5982046038 R14: 00007f5982045fa0 R15: 00007ffc3bcd2338 [ 228.354085][T14880] [ 228.562963][T14878] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 228.574499][T14878] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4193: Corrupt directory, running e2fsck is recommended [ 228.587943][T14847] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 228.601143][T14847] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 228.619425][T14847] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4193: Corrupt directory, running e2fsck is recommended [ 228.633066][T14878] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 228.690087][T13805] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.734843][T14895] loop7: detected capacity change from 0 to 512 [ 228.751793][T14895] EXT4-fs: Ignoring removed mblk_io_submit option [ 228.761649][T14895] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 228.774576][ T28] audit: type=1400 audit(1772850849.429:9014): avc: denied { accept } for pid=14886 comm="syz.3.4206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 228.802545][T14895] EXT4-fs (loop7): group descriptors corrupted! [ 228.931995][ T28] audit: type=1400 audit(1772850849.579:9015): avc: denied { create } for pid=14905 comm="syz.3.4211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 229.191756][T14914] loop7: detected capacity change from 0 to 512 [ 229.243429][T14914] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 229.304082][T14914] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.4212: bg 0: block 104: invalid block bitmap [ 229.371669][T14914] loop7: lost filesystem error report for type 5 error -117 [ 229.371964][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 229.386229][ C0] EXT4-fs (loop7): initial error at time 1772850850: ext4_validate_block_bitmap:432 [ 229.389767][ T28] audit: type=1400 audit(1772850849.579:9016): avc: denied { bind } for pid=14905 comm="syz.3.4211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 229.395826][ C0] EXT4-fs (loop7): last error at time 1772850850: ext4_validate_block_bitmap:432 [ 229.423827][T14921] loop1: detected capacity change from 0 to 512 [ 229.431477][ T28] audit: type=1400 audit(1772850849.579:9017): avc: denied { listen } for pid=14905 comm="syz.3.4211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 229.452607][ T28] audit: type=1400 audit(1772850849.639:9018): avc: denied { create } for pid=14899 comm="syz.8.4209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 229.473962][ T28] audit: type=1400 audit(1772850850.109:9019): avc: denied { remount } for pid=14912 comm="syz.1.4213" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 229.484724][T14914] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 229.507630][T14914] loop7: lost filesystem error report for type 5 error -117 [ 229.516008][T14914] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.4212: invalid indirect mapped block 1 (level 1) [ 229.537314][T14914] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 229.537813][T14914] EXT4-fs (loop7): 1 truncate cleaned up [ 229.553625][T14914] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.569372][ T28] audit: type=1400 audit(1772850850.219:9020): avc: denied { write } for pid=14907 comm="syz.7.4212" path="/60/file0/file1" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 229.579564][T14914] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4212'. [ 229.616909][T14914] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14914 comm=syz.7.4212 [ 229.636550][T14923] loop4: detected capacity change from 0 to 512 [ 229.742314][T13805] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.991779][T14953] loop7: detected capacity change from 0 to 512 [ 230.019270][T14953] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 230.042656][T14953] EXT4-fs (loop7): 1 truncate cleaned up [ 230.065967][T14953] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.208078][T14962] loop8: detected capacity change from 0 to 128 [ 230.240266][T14962] msdos: Bad value for 'uid' [ 230.263101][T14962] msdos: Bad value for 'uid' [ 230.618176][T14973] FAULT_INJECTION: forcing a failure. [ 230.618176][T14973] name failslab, interval 1, probability 0, space 0, times 0 [ 230.633753][T14973] CPU: 0 UID: 0 PID: 14973 Comm: syz.4.4231 Not tainted syzkaller #0 PREEMPT(full) [ 230.633783][T14973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 230.633795][T14973] Call Trace: [ 230.633801][T14973] [ 230.633810][T14973] __dump_stack+0x1d/0x30 [ 230.633877][T14973] dump_stack_lvl+0x95/0xd0 [ 230.634009][T14973] dump_stack+0x15/0x1b [ 230.634028][T14973] should_fail_ex+0x263/0x280 [ 230.634112][T14973] should_failslab+0x8c/0xb0 [ 230.634136][T14973] kmem_cache_alloc_noprof+0x66/0x400 [ 230.634164][T14973] ? skb_clone+0x151/0x1f0 [ 230.634203][T14973] skb_clone+0x151/0x1f0 [ 230.634232][T14973] __netlink_deliver_tap+0x2c9/0x500 [ 230.634335][T14973] netlink_unicast+0x66b/0x690 [ 230.634362][T14973] netlink_sendmsg+0x5c8/0x6f0 [ 230.634460][T14973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.634490][T14973] ____sys_sendmsg+0x563/0x5b0 [ 230.634529][T14973] ___sys_sendmsg+0x195/0x1e0 [ 230.634563][T14973] __x64_sys_sendmsg+0xd4/0x160 [ 230.634593][T14973] x64_sys_call+0x194c/0x3020 [ 230.634652][T14973] do_syscall_64+0x12c/0x370 [ 230.634671][T14973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.634692][T14973] RIP: 0033:0x7f7cb286c799 [ 230.634709][T14973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.634727][T14973] RSP: 002b:00007f7cb12bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.634751][T14973] RAX: ffffffffffffffda RBX: 00007f7cb2ae5fa0 RCX: 00007f7cb286c799 [ 230.634830][T14973] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 230.634845][T14973] RBP: 00007f7cb12bf090 R08: 0000000000000000 R09: 0000000000000000 [ 230.634859][T14973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.634871][T14973] R13: 00007f7cb2ae6038 R14: 00007f7cb2ae5fa0 R15: 00007fff797fcca8 [ 230.634955][T14973] [ 230.634991][T14973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4231'. [ 230.766830][T14978] FAULT_INJECTION: forcing a failure. [ 230.766830][T14978] name failslab, interval 1, probability 0, space 0, times 0 [ 230.870393][T14978] CPU: 1 UID: 0 PID: 14978 Comm: syz.1.4233 Not tainted syzkaller #0 PREEMPT(full) [ 230.870421][T14978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 230.870436][T14978] Call Trace: [ 230.870442][T14978] [ 230.870448][T14978] __dump_stack+0x1d/0x30 [ 230.870473][T14978] dump_stack_lvl+0x95/0xd0 [ 230.870632][T14978] dump_stack+0x15/0x1b [ 230.870652][T14978] should_fail_ex+0x263/0x280 [ 230.870677][T14978] should_failslab+0x8c/0xb0 [ 230.870738][T14978] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 230.870760][T14978] ? __d_alloc+0x37/0x340 [ 230.870799][T14978] __d_alloc+0x37/0x340 [ 230.870825][T14978] d_alloc+0x2e/0x100 [ 230.870848][T14978] lookup_one_qstr_excl+0x99/0x250 [ 230.870927][T14978] filename_create+0x155/0x220 [ 230.870958][T14978] filename_symlinkat+0x94/0x2b0 [ 230.870993][T14978] __se_sys_symlinkat+0x43/0x1b0 [ 230.871012][T14978] __x64_sys_symlinkat+0x43/0x50 [ 230.871031][T14978] x64_sys_call+0x2b7d/0x3020 [ 230.871056][T14978] do_syscall_64+0x12c/0x370 [ 230.871079][T14978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.871100][T14978] RIP: 0033:0x7f1e2e8ac799 [ 230.871139][T14978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.871155][T14978] RSP: 002b:00007f1e2d2ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 230.871180][T14978] RAX: ffffffffffffffda RBX: 00007f1e2eb25fa0 RCX: 00007f1e2e8ac799 [ 230.871193][T14978] RDX: 0000200000000080 RSI: ffffffffffffff9c RDI: 0000200000000000 [ 230.871207][T14978] RBP: 00007f1e2d2ff090 R08: 0000000000000000 R09: 0000000000000000 [ 230.871236][T14978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.871318][T14978] R13: 00007f1e2eb26038 R14: 00007f1e2eb25fa0 R15: 00007ffe130548d8 [ 230.871337][T14978] [ 231.088757][T14981] sctp: [Deprecated]: syz.8.4234 (pid 14981) Use of int in maxseg socket option. [ 231.088757][T14981] Use struct sctp_assoc_value instead [ 231.162555][T13805] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.219712][T14994] loop3: detected capacity change from 0 to 128 [ 231.244421][T14994] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 231.267875][T15000] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4239'. [ 231.284600][T14994] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.320411][T14987] pimreg: entered allmulticast mode [ 231.604442][T14986] pimreg: left allmulticast mode [ 231.940093][T15028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4249'. [ 231.971111][T15028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4249'. [ 232.824874][T15061] loop4: detected capacity change from 0 to 512 [ 232.895626][T15061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.912483][T13015] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 233.041173][T15073] team0: No ports can be present during mode change [ 233.058712][ T7049] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.131349][T15084] netlink: 'syz.7.4266': attribute type 1 has an invalid length. [ 233.183837][T15085] syzkaller0: entered promiscuous mode [ 233.191371][T15085] syzkaller0: entered allmulticast mode [ 233.237882][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 233.237896][ T28] audit: type=1400 audit(1772850853.889:9051): avc: denied { relabelfrom } for pid=15083 comm="syz.1.4269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 233.277422][ T28] audit: type=1400 audit(1772850853.889:9052): avc: denied { relabelto } for pid=15083 comm="syz.1.4269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 233.281924][T15090] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4266'. [ 233.390130][T15094] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4270'. [ 233.413992][ T28] audit: type=1400 audit(1772850854.069:9053): avc: denied { create } for pid=15096 comm="syz.8.4272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 233.440778][ T28] audit: type=1400 audit(1772850854.089:9054): avc: denied { name_bind } for pid=15096 comm="syz.8.4272" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 233.499943][T15097] loop8: detected capacity change from 0 to 736 [ 233.511605][T15097] iso9660: Unknown parameter '0x0000000000000008^`-¬ò^Ü+ …Yn/2vpP÷MWHñÐô™Ãz¾»^ƒˆÈCyݽq”¥\Á‹' [ 233.548148][ T28] audit: type=1400 audit(1772850854.159:9055): avc: denied { mounton } for pid=15096 comm="syz.8.4272" path="/573/file0" dev="tmpfs" ino=2976 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 233.601132][T15100] loop1: detected capacity change from 0 to 128 [ 233.720400][T15100] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 233.786407][T15100] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.892889][T15076] loop7: detected capacity change from 0 to 8192 [ 235.030631][ T28] audit: type=1326 audit(1772850855.679:9056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15075 comm="syz.7.4266" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e4525c799 code=0x0 [ 235.985976][T15116] FAULT_INJECTION: forcing a failure. [ 235.985976][T15116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.999185][T15116] CPU: 1 UID: 0 PID: 15116 Comm: syz.4.4278 Not tainted syzkaller #0 PREEMPT(full) [ 235.999214][T15116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 235.999227][T15116] Call Trace: [ 235.999235][T15116] [ 235.999242][T15116] __dump_stack+0x1d/0x30 [ 235.999283][T15116] dump_stack_lvl+0x95/0xd0 [ 235.999306][T15116] dump_stack+0x15/0x1b [ 235.999352][T15116] should_fail_ex+0x263/0x280 [ 235.999375][T15116] should_fail+0xb/0x20 [ 235.999425][T15116] should_fail_usercopy+0x1a/0x20 [ 235.999446][T15116] _copy_from_user+0x1c/0xb0 [ 235.999539][T15116] __copy_msghdr+0x244/0x300 [ 235.999563][T15116] ___sys_sendmsg+0x10c/0x1e0 [ 235.999624][T15116] __x64_sys_sendmsg+0xd4/0x160 [ 235.999658][T15116] x64_sys_call+0x194c/0x3020 [ 235.999685][T15116] do_syscall_64+0x12c/0x370 [ 235.999773][T15116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.999797][T15116] RIP: 0033:0x7f7cb286c799 [ 235.999813][T15116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.999852][T15116] RSP: 002b:00007f7cb12bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.999869][T15116] RAX: ffffffffffffffda RBX: 00007f7cb2ae5fa0 RCX: 00007f7cb286c799 [ 235.999881][T15116] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 235.999893][T15116] RBP: 00007f7cb12bf090 R08: 0000000000000000 R09: 0000000000000000 [ 235.999950][T15116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.999964][T15116] R13: 00007f7cb2ae6038 R14: 00007f7cb2ae5fa0 R15: 00007fff797fcca8 [ 235.999980][T15116] [ 236.237633][T15122] FAULT_INJECTION: forcing a failure. [ 236.237633][T15122] name failslab, interval 1, probability 0, space 0, times 0 [ 236.278408][ T28] audit: type=1400 audit(1772850856.909:9058): avc: denied { watch } for pid=15119 comm="syz.3.4280" path="/" dev="ramfs" ino=48668 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 236.319298][T15122] CPU: 1 UID: 0 PID: 15122 Comm: syz.7.4277 Not tainted syzkaller #0 PREEMPT(full) [ 236.319398][T15122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 236.319417][T15122] Call Trace: [ 236.319422][T15122] [ 236.319429][T15122] __dump_stack+0x1d/0x30 [ 236.319454][T15122] dump_stack_lvl+0x95/0xd0 [ 236.319476][T15122] dump_stack+0x15/0x1b [ 236.319564][T15122] should_fail_ex+0x263/0x280 [ 236.319586][T15122] should_failslab+0x8c/0xb0 [ 236.319606][T15122] __kmalloc_node_track_caller_noprof+0xc3/0x560 [ 236.319702][T15122] ? sidtab_sid2str_get+0xa0/0x130 [ 236.319725][T15122] kmemdup_noprof+0x2b/0x70 [ 236.319742][T15122] sidtab_sid2str_get+0xa0/0x130 [ 236.319763][T15122] security_sid_to_context_core+0x1eb/0x2e0 [ 236.319820][T15122] security_sid_to_context+0x27/0x40 [ 236.319838][T15122] avc_audit_post_callback+0x9d/0x540 [ 236.319991][T15122] ? audit_log_lsm_data+0x789/0xbb0 [ 236.320022][T15122] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 236.320045][T15122] common_lsm_audit+0x1ba/0x230 [ 236.320082][T15122] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 236.320106][T15122] slow_avc_audit+0x14c/0x190 [ 236.320129][T15122] cred_has_capability+0x1c1/0x2a0 [ 236.320165][T15122] selinux_capable+0x31/0x40 [ 236.320190][T15122] security_capable+0x7b/0x90 [ 236.320253][T15122] capable+0x4b/0xb0 [ 236.320269][T15122] do_epoll_ctl+0x108/0x8a0 [ 236.320298][T15122] ? should_fail_ex+0xd9/0x280 [ 236.320321][T15122] __x64_sys_epoll_ctl+0xcb/0x100 [ 236.320349][T15122] x64_sys_call+0x2a8b/0x3020 [ 236.320427][T15122] do_syscall_64+0x12c/0x370 [ 236.320466][T15122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.320492][T15122] RIP: 0033:0x7f5e4525c799 [ 236.320541][T15122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.320559][T15122] RSP: 002b:00007f5e43caf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 236.320579][T15122] RAX: ffffffffffffffda RBX: 00007f5e454d5fa0 RCX: 00007f5e4525c799 [ 236.320593][T15122] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 236.320604][T15122] RBP: 00007f5e43caf090 R08: 0000000000000000 R09: 0000000000000000 [ 236.320615][T15122] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 236.320626][T15122] R13: 00007f5e454d6038 R14: 00007f5e454d5fa0 R15: 00007fff56801de8 [ 236.320711][T15122] [ 236.353141][ T28] audit: type=1400 audit(1772850856.889:9057): avc: denied { block_suspend } for pid=15121 comm="syz.7.4277" capability=36 ssid=137 tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 236.582127][ T28] audit: type=1400 audit(1772850856.999:9059): avc: denied { mounton } for pid=15126 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 236.621182][T11323] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 236.636720][T15137] loop3: detected capacity change from 0 to 164 [ 236.683662][ T28] audit: type=1400 audit(1772850857.319:9060): avc: denied { mounton } for pid=15119 comm="syz.3.4280" path="/file0" dev="ramfs" ino=48673 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 236.721563][T15144] netlink: 'syz.7.4286': attribute type 1 has an invalid length. [ 236.745356][T15145] loop1: detected capacity change from 0 to 128 [ 236.763208][T15145] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 236.885015][T15145] ext4 filesystem being mounted at /260/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.020956][T15152] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4287'. [ 238.807190][T15126] chnl_net:caif_netlink_parms(): no params data found [ 239.438039][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 239.438055][ T28] audit: type=1400 audit(1772850860.089:9062): avc: denied { write } for pid=15159 comm="syz.3.4289" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 239.441631][T15160] FAULT_INJECTION: forcing a failure. [ 239.441631][T15160] name failslab, interval 1, probability 0, space 0, times 0 [ 239.444239][ T28] audit: type=1400 audit(1772850860.089:9063): avc: denied { open } for pid=15159 comm="syz.3.4289" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 239.503747][T11323] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 239.504094][T15160] CPU: 0 UID: 0 PID: 15160 Comm: syz.3.4289 Not tainted syzkaller #0 PREEMPT(full) [ 239.504119][T15160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 239.504131][T15160] Call Trace: [ 239.504137][T15160] [ 239.504221][T15160] __dump_stack+0x1d/0x30 [ 239.504322][T15160] dump_stack_lvl+0x95/0xd0 [ 239.504400][T15160] dump_stack+0x15/0x1b [ 239.504421][T15160] should_fail_ex+0x263/0x280 [ 239.504444][T15160] should_failslab+0x8c/0xb0 [ 239.504524][T15160] kmem_cache_alloc_noprof+0x66/0x400 [ 239.504545][T15160] ? ep_insert+0x13c/0xe00 [ 239.504605][T15160] ep_insert+0x13c/0xe00 [ 239.504632][T15160] ? __rcu_read_unlock+0x4e/0x70 [ 239.504655][T15160] do_epoll_ctl+0x686/0x8a0 [ 239.504683][T15160] __x64_sys_epoll_ctl+0xcb/0x100 [ 239.504806][T15160] x64_sys_call+0x2a8b/0x3020 [ 239.504870][T15160] do_syscall_64+0x12c/0x370 [ 239.504890][T15160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.504912][T15160] RIP: 0033:0x7f5981dcc799 [ 239.504928][T15160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.504945][T15160] RSP: 002b:00007f598081f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 239.504974][T15160] RAX: ffffffffffffffda RBX: 00007f5982045fa0 RCX: 00007f5981dcc799 [ 239.504988][T15160] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 239.505000][T15160] RBP: 00007f598081f090 R08: 0000000000000000 R09: 0000000000000000 [ 239.505013][T15160] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 239.505025][T15160] R13: 00007f5982046038 R14: 00007f5982045fa0 R15: 00007ffc3bcd2338 [ 239.505044][T15160] [ 239.565229][T15126] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.721435][T15126] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.739476][T15126] bridge_slave_0: entered allmulticast mode [ 239.746343][T15126] bridge_slave_0: entered promiscuous mode [ 239.753580][T15126] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.761045][T15126] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.771831][T15126] bridge_slave_1: entered allmulticast mode [ 239.778867][T15126] bridge_slave_1: entered promiscuous mode [ 239.781242][T15172] loop1: detected capacity change from 0 to 128 [ 239.832991][T15126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.852644][T15126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.873194][T15172] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 239.898930][T15172] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.907431][T15126] team0: Port device team_slave_0 added [ 239.928238][T15126] team0: Port device team_slave_1 added [ 240.004740][T15126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.026100][T15126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.054586][T15126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.066401][T15126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.073610][T15126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.152457][T15126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.447661][T15126] hsr_slave_0: entered promiscuous mode [ 240.470336][T15126] hsr_slave_1: entered promiscuous mode [ 240.494418][T15126] debugfs: 'hsr0' already exists in 'hsr' [ 240.513703][T15126] Cannot create hsr debugfs directory [ 240.775857][T15126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.810994][T15126] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.832705][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.839795][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.869639][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.876871][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.016344][T15126] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 241.027177][T15126] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 241.533638][T15206] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4298'. [ 241.606547][T11323] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 241.656605][T15126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.856100][T15126] veth0_vlan: entered promiscuous mode [ 241.864676][T15126] veth1_vlan: entered promiscuous mode [ 241.885835][T15126] veth0_macvtap: entered promiscuous mode [ 241.894832][T15126] veth1_macvtap: entered promiscuous mode [ 241.907242][T15126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.921197][T15126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.952876][ T28] audit: type=1400 audit(1772850862.599:9064): avc: denied { mounton } for pid=15126 comm="syz-executor" path="/root/syzkaller.8s8cNv/syz-tmp" dev="sda1" ino=2085 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 241.982688][ T28] audit: type=1400 audit(1772850862.599:9065): avc: denied { mount } for pid=15126 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 242.044272][ T28] audit: type=1400 audit(1772850862.599:9066): avc: denied { mount } for pid=15126 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 242.092444][ T28] audit: type=1400 audit(1772850862.599:9067): avc: denied { mounton } for pid=15126 comm="syz-executor" path="/root/syzkaller.8s8cNv/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 242.225946][T15227] loop4: detected capacity change from 0 to 512 [ 242.241183][ T28] audit: type=1400 audit(1772850862.599:9068): avc: denied { mounton } for pid=15126 comm="syz-executor" path="/root/syzkaller.8s8cNv/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=49084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 242.303171][T15227] EXT4-fs: Ignoring removed mblk_io_submit option [ 242.360558][ T28] audit: type=1400 audit(1772850862.639:9069): avc: denied { mounton } for pid=15126 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 242.395453][T15227] EXT4-fs (loop4): orphan cleanup on readonly fs [ 242.404362][T15227] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 242.430413][ T28] audit: type=1400 audit(1772850862.639:9070): avc: denied { mount } for pid=15126 comm="syz-executor" name="/" dev="gadgetfs" ino=4518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 242.462679][T15227] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.4300: attempt to clear invalid blocks 2 len 1 [ 242.500262][T15227] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 242.502078][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 242.518480][ C1] EXT4-fs (loop4): initial error at time 1772850863: ext4_clear_blocks:876: inode 13 [ 242.528792][ C1] EXT4-fs (loop4): last error at time 1772850863: ext4_clear_blocks:876: inode 13 [ 242.545035][ T28] audit: type=1400 audit(1772850862.819:9071): avc: denied { create } for pid=15228 comm="syz.1.4299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 242.604273][T15227] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 242.622767][T15227] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.4300: invalid indirect mapped block 1819239214 (level 0) [ 242.640428][T15227] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 242.642528][T15227] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.4300: invalid indirect mapped block 1819239214 (level 1) [ 242.666679][T15227] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 242.674232][T15227] EXT4-fs (loop4): 1 truncate cleaned up [ 242.698447][T15227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 243.077638][T15126] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.222819][T15276] loop3: detected capacity change from 0 to 128 [ 243.237117][T15278] loop7: detected capacity change from 0 to 1024 [ 243.245852][T15276] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 243.261183][T15276] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.328716][T15282] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4314'. [ 243.347430][T15278] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.652454][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 244.652470][ T28] audit: type=1400 audit(1772850865.269:9076): avc: denied { create } for pid=15277 comm="syz.7.4316" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 244.690953][T15288] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.4316: Allocating blocks 497-513 which overlap fs metadata [ 244.706398][ T28] audit: type=1400 audit(1772850865.279:9077): avc: denied { read write } for pid=15277 comm="syz.7.4316" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 244.707027][T15288] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.4316: Allocating blocks 497-513 which overlap fs metadata [ 244.810057][T15277] EXT4-fs (loop7): pa ffff888107ab9310: logic 48, phys. 177, len 21 [ 244.818510][T15277] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 244.902767][ T28] audit: type=1400 audit(1772850865.279:9078): avc: denied { open } for pid=15277 comm="syz.7.4316" path="/80/file1/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 245.230424][T13015] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 245.273254][T13805] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.289980][T15295] loop4: detected capacity change from 0 to 256 [ 245.304527][T15295] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 245.407486][ T28] audit: type=1400 audit(1772850865.989:9079): avc: denied { bind } for pid=15293 comm="syz.4.4322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 245.430893][ T28] audit: type=1400 audit(1772850866.039:9080): avc: denied { setattr } for pid=15293 comm="syz.4.4322" name="" dev="pipefs" ino=48685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 245.465016][T15295] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779264) [ 245.477059][T15295] FAT-fs (loop4): Filesystem has been set read-only [ 245.532232][T15306] loop3: detected capacity change from 0 to 512 [ 245.561365][T15306] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.4325: invalid indirect mapped block 256 (level 2) [ 245.607559][T15306] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 245.607898][T15306] EXT4-fs (loop3): 2 truncates cleaned up [ 245.617085][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 245.617106][ C1] EXT4-fs (loop3): initial error at time 1772850866: ext4_free_branches:1023: inode 11 [ 245.617136][ C1] EXT4-fs (loop3): last error at time 1772850866: ext4_free_branches:1023: inode 11 [ 245.671493][T15306] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.713449][T15316] loop8: detected capacity change from 0 to 1024 [ 245.713952][T15316] EXT4-fs: Ignoring removed bh option [ 245.714047][T15316] EXT4-fs: Ignoring removed i_version option [ 245.724138][T15316] EXT4-fs (loop8): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 245.724173][T15316] EXT4-fs (loop8): can't mount with data_err=abort, fs mounted w/o journal [ 246.342155][T15323] netlink: 'syz.8.4329': attribute type 3 has an invalid length. [ 246.349979][T15323] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4329'. [ 246.359071][T15323] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4329'. [ 246.679242][ T28] audit: type=1400 audit(1772850867.329:9081): avc: denied { map } for pid=15305 comm="syz.3.4325" path="/127/file1/file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 247.761723][T15335] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4331'. [ 247.815356][T13015] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.829161][T15337] netlink: 'syz.7.4333': attribute type 2 has an invalid length. [ 248.108880][T15343] FAULT_INJECTION: forcing a failure. [ 248.108880][T15343] name failslab, interval 1, probability 0, space 0, times 0 [ 248.157682][T15343] CPU: 1 UID: 0 PID: 15343 Comm: syz.7.4335 Not tainted syzkaller #0 PREEMPT(full) [ 248.157749][T15343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 248.157770][T15343] Call Trace: [ 248.157776][T15343] [ 248.157783][T15343] __dump_stack+0x1d/0x30 [ 248.157806][T15343] dump_stack_lvl+0x95/0xd0 [ 248.157862][T15343] dump_stack+0x15/0x1b [ 248.157884][T15343] should_fail_ex+0x263/0x280 [ 248.157937][T15343] should_failslab+0x8c/0xb0 [ 248.157956][T15343] __kvmalloc_node_noprof+0x155/0x650 [ 248.158066][T15343] ? should_fail+0xb/0x20 [ 248.158083][T15343] ? __se_sys_add_key+0x1f8/0x360 [ 248.158115][T15343] __se_sys_add_key+0x1f8/0x360 [ 248.158140][T15343] __x64_sys_add_key+0x67/0x80 [ 248.158162][T15343] x64_sys_call+0xb39/0x3020 [ 248.158184][T15343] do_syscall_64+0x12c/0x370 [ 248.158241][T15343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.158268][T15343] RIP: 0033:0x7f5e4525c799 [ 248.158338][T15343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.158356][T15343] RSP: 002b:00007f5e43caf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 248.158376][T15343] RAX: ffffffffffffffda RBX: 00007f5e454d5fa0 RCX: 00007f5e4525c799 [ 248.158392][T15343] RDX: 00002000000004c0 RSI: 0000000000000000 RDI: 0000200000000000 [ 248.158406][T15343] RBP: 00007f5e43caf090 R08: 00000000367d3d0c R09: 0000000000000000 [ 248.158418][T15343] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000001 [ 248.158431][T15343] R13: 00007f5e454d6038 R14: 00007f5e454d5fa0 R15: 00007fff56801de8 [ 248.158447][T15343] [ 248.601239][T15345] bridge0: entered allmulticast mode [ 248.617411][T15345] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4336'. [ 248.643743][T15345] bridge_slave_1: left allmulticast mode [ 248.661111][T15345] bridge_slave_1: left promiscuous mode [ 248.677742][T15345] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.881089][T15345] bridge_slave_0: left allmulticast mode [ 248.886994][T15345] bridge_slave_0: left promiscuous mode [ 248.893125][T15345] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.902622][T15345] bridge0 (unregistering): left allmulticast mode [ 248.926566][T15349] loop8: detected capacity change from 0 to 128 [ 248.948976][T15349] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 248.978894][T15349] ext4 filesystem being mounted at /590/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.053309][T15357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4340'. [ 249.090222][T15357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4340'. [ 249.136104][T15366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4345'. [ 249.259048][ T28] audit: type=1400 audit(1772850869.789:9082): avc: denied { write } for pid=15365 comm="syz.3.4345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 249.828364][T15383] syzkaller0: entered promiscuous mode [ 249.828450][T15383] syzkaller0: entered allmulticast mode [ 250.633175][T15393] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4350'. [ 250.673074][ T7032] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 251.618656][T15398] FAULT_INJECTION: forcing a failure. [ 251.618656][T15398] name failslab, interval 1, probability 0, space 0, times 0 [ 251.632002][T15398] CPU: 0 UID: 0 PID: 15398 Comm: syz.4.4353 Not tainted syzkaller #0 PREEMPT(full) [ 251.632079][T15398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 251.632091][T15398] Call Trace: [ 251.632096][T15398] [ 251.632103][T15398] __dump_stack+0x1d/0x30 [ 251.632128][T15398] dump_stack_lvl+0x95/0xd0 [ 251.632167][T15398] dump_stack+0x15/0x1b [ 251.632185][T15398] should_fail_ex+0x263/0x280 [ 251.632221][T15398] should_failslab+0x8c/0xb0 [ 251.632242][T15398] kmem_cache_alloc_noprof+0x66/0x400 [ 251.632263][T15398] ? skb_clone+0x151/0x1f0 [ 251.632292][T15398] skb_clone+0x151/0x1f0 [ 251.632399][T15398] nfnetlink_rcv+0x316/0x1720 [ 251.632431][T15398] ? nlmon_xmit+0x4f/0x60 [ 251.632482][T15398] ? consume_skb+0x4b/0x160 [ 251.632557][T15398] ? nlmon_xmit+0x4f/0x60 [ 251.632584][T15398] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 251.632608][T15398] ? __dev_queue_xmit+0x136c/0x1f20 [ 251.632636][T15398] ? __dev_queue_xmit+0x148/0x1f20 [ 251.632717][T15398] ? ref_tracker_free+0x37d/0x3e0 [ 251.632813][T15398] netlink_unicast+0x5c0/0x690 [ 251.632837][T15398] netlink_sendmsg+0x5c8/0x6f0 [ 251.632865][T15398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.632888][T15398] ____sys_sendmsg+0x563/0x5b0 [ 251.632933][T15398] ___sys_sendmsg+0x195/0x1e0 [ 251.632973][T15398] __x64_sys_sendmsg+0xd4/0x160 [ 251.633005][T15398] x64_sys_call+0x194c/0x3020 [ 251.633032][T15398] do_syscall_64+0x12c/0x370 [ 251.633131][T15398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.633152][T15398] RIP: 0033:0x7ff157a7c799 [ 251.633166][T15398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.633243][T15398] RSP: 002b:00007ff1564d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.633354][T15398] RAX: ffffffffffffffda RBX: 00007ff157cf5fa0 RCX: 00007ff157a7c799 [ 251.633373][T15398] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 251.633385][T15398] RBP: 00007ff1564d7090 R08: 0000000000000000 R09: 0000000000000000 [ 251.633395][T15398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.633407][T15398] R13: 00007ff157cf6038 R14: 00007ff157cf5fa0 R15: 00007ffc370f0328 [ 251.633446][T15398] [ 251.891110][T15413] loop4: detected capacity change from 0 to 128 [ 251.913089][T15413] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 251.925668][T15413] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 251.964624][ T28] audit: type=1400 audit(1772850872.619:9083): avc: denied { setattr } for pid=15412 comm="syz.4.4359" path="/13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 252.019012][T15126] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 252.055037][T15419] syzkaller0: entered promiscuous mode [ 252.060664][T15419] syzkaller0: entered allmulticast mode [ 252.089457][ T28] audit: type=1400 audit(1772850872.739:9084): avc: denied { append } for pid=15421 comm="syz.4.4361" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 252.114675][ T28] audit: type=1400 audit(1772850872.769:9085): avc: denied { read } for pid=15421 comm="syz.4.4361" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 252.150973][ T28] audit: type=1400 audit(1772850872.769:9086): avc: denied { open } for pid=15421 comm="syz.4.4361" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 252.177471][ T28] audit: type=1400 audit(1772850872.769:9087): avc: denied { ioctl } for pid=15421 comm="syz.4.4361" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x4b41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 252.207967][T15427] loop3: detected capacity change from 0 to 128 [ 252.214907][T15428] syzkaller1: entered promiscuous mode [ 252.214987][ T28] audit: type=1400 audit(1772850872.869:9088): avc: denied { ioctl } for pid=15426 comm="syz.4.4363" path="socket:[50554]" dev="sockfs" ino=50554 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 252.223454][T15428] syzkaller1: entered allmulticast mode [ 252.632949][T15446] loop4: detected capacity change from 0 to 1024 [ 252.719266][T15446] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.733554][T15456] FAULT_INJECTION: forcing a failure. [ 252.733554][T15456] name failslab, interval 1, probability 0, space 0, times 0 [ 252.832215][T15456] CPU: 0 UID: 0 PID: 15456 Comm: syz.8.4373 Not tainted syzkaller #0 PREEMPT(full) [ 252.832300][T15456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 252.832313][T15456] Call Trace: [ 252.832319][T15456] [ 252.832327][T15456] __dump_stack+0x1d/0x30 [ 252.832412][T15456] dump_stack_lvl+0x95/0xd0 [ 252.832435][T15456] dump_stack+0x15/0x1b [ 252.832528][T15456] should_fail_ex+0x263/0x280 [ 252.832552][T15456] should_failslab+0x8c/0xb0 [ 252.832572][T15456] kmem_cache_alloc_noprof+0x66/0x400 [ 252.832603][T15456] ? skb_clone+0x151/0x1f0 [ 252.832628][T15456] skb_clone+0x151/0x1f0 [ 252.832650][T15456] __netlink_deliver_tap+0x2c9/0x500 [ 252.832742][T15456] netlink_unicast+0x66b/0x690 [ 252.832764][T15456] netlink_sendmsg+0x5c8/0x6f0 [ 252.832847][T15456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.832930][T15456] ____sys_sendmsg+0x563/0x5b0 [ 252.832960][T15456] ___sys_sendmsg+0x195/0x1e0 [ 252.833000][T15456] __x64_sys_sendmsg+0xd4/0x160 [ 252.833026][T15456] x64_sys_call+0x194c/0x3020 [ 252.833048][T15456] do_syscall_64+0x12c/0x370 [ 252.833070][T15456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.833141][T15456] RIP: 0033:0x7f183c74c799 [ 252.833158][T15456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.833173][T15456] RSP: 002b:00007f183b1a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.833192][T15456] RAX: ffffffffffffffda RBX: 00007f183c9c5fa0 RCX: 00007f183c74c799 [ 252.833207][T15456] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 252.833225][T15456] RBP: 00007f183b1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 252.833236][T15456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.833253][T15456] R13: 00007f183c9c6038 R14: 00007f183c9c5fa0 R15: 00007ffc00aa1178 [ 252.833271][T15456] [ 253.080859][T15126] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.340335][ T28] audit: type=1400 audit(1772850873.989:9089): avc: denied { read } for pid=15466 comm="syz.7.4378" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 253.448914][ T28] audit: type=1400 audit(1772850873.989:9090): avc: denied { open } for pid=15466 comm="syz.7.4378" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 253.514355][T15471] syzkaller0: entered promiscuous mode [ 253.528076][T15471] syzkaller0: entered allmulticast mode [ 253.782884][T15489] loop4: detected capacity change from 0 to 1024 [ 253.806453][T15489] EXT4-fs: Ignoring removed bh option [ 253.816050][ T1705] bridge_slave_1: left allmulticast mode [ 253.821834][ T1705] bridge_slave_1: left promiscuous mode [ 253.842244][T15489] EXT4-fs: Ignoring removed i_version option [ 253.850593][ T1705] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.861177][T15489] EXT4-fs (loop4): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 253.871561][T15489] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 253.880965][ T1705] bridge_slave_0: left allmulticast mode [ 253.886893][ T1705] bridge_slave_0: left promiscuous mode [ 253.893297][ T1705] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.054405][T15498] loop3: detected capacity change from 0 to 8192 [ 254.068940][ T1705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.080533][ T28] audit: type=1400 audit(1772850874.729:9091): avc: denied { create } for pid=15500 comm="syz.7.4387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 254.105143][ T1705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.115550][ T1705] bond0 (unregistering): Released all slaves [ 254.142000][T15502] netlink: 'syz.4.4383': attribute type 3 has an invalid length. [ 254.149791][T15502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4383'. [ 254.158961][T15502] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4383'. [ 254.175535][ T1705] bond1 (unregistering): Released all slaves [ 254.229190][ T1705] bond2 (unregistering): Released all slaves [ 254.260195][T15503] 9pnet_fd: Insufficient options for proto=fd [ 254.270061][T15503] IPv6: A: Disabled Multicast RS [ 254.288259][T15503] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4387'. [ 254.297402][T15503] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4387'. [ 254.308509][ T28] audit: type=1400 audit(1772850874.909:9092): avc: denied { create } for pid=15500 comm="syz.7.4387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 254.337439][ T1705] tipc: Left network mode [ 254.345149][T15503] netlink: 'syz.7.4387': attribute type 13 has an invalid length. [ 254.368434][T15503] netlink: 'syz.7.4387': attribute type 11 has an invalid length. [ 254.446725][ T1705] hsr_slave_0: left promiscuous mode [ 254.452827][ T1705] hsr_slave_1: left promiscuous mode [ 254.466298][ T1705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.473865][ T1705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.488361][ T1705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.495876][T15505] loop3: detected capacity change from 0 to 8192 [ 254.505173][T15505] FAULT_INJECTION: forcing a failure. [ 254.505173][T15505] name failslab, interval 1, probability 0, space 0, times 0 [ 254.519274][T15505] CPU: 1 UID: 0 PID: 15505 Comm: syz.3.4388 Not tainted syzkaller #0 PREEMPT(full) [ 254.519301][T15505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 254.519313][T15505] Call Trace: [ 254.519318][T15505] [ 254.519326][T15505] __dump_stack+0x1d/0x30 [ 254.519412][T15505] dump_stack_lvl+0x95/0xd0 [ 254.519436][T15505] dump_stack+0x15/0x1b [ 254.519458][T15505] should_fail_ex+0x263/0x280 [ 254.519509][T15505] should_failslab+0x8c/0xb0 [ 254.519530][T15505] kmem_cache_alloc_noprof+0x66/0x400 [ 254.519552][T15505] ? do_getname+0x2e/0x1c0 [ 254.519646][T15505] do_getname+0x2e/0x1c0 [ 254.519665][T15505] getname_flags+0x1d/0x30 [ 254.519683][T15505] do_sys_openat2+0x60/0x130 [ 254.519711][T15505] __x64_sys_openat+0xf2/0x120 [ 254.519807][T15505] x64_sys_call+0x1e39/0x3020 [ 254.519829][T15505] do_syscall_64+0x12c/0x370 [ 254.519917][T15505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.519942][T15505] RIP: 0033:0x7f5981dcc799 [ 254.519957][T15505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.520009][T15505] RSP: 002b:00007f598081f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 254.520029][T15505] RAX: ffffffffffffffda RBX: 00007f5982045fa0 RCX: 00007f5981dcc799 [ 254.520043][T15505] RDX: 000000000000275a RSI: 0000200000000100 RDI: ffffffffffffff9c [ 254.520057][T15505] RBP: 00007f598081f090 R08: 0000000000000000 R09: 0000000000000000 [ 254.520070][T15505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.520131][T15505] R13: 00007f5982046038 R14: 00007f5982045fa0 R15: 00007ffc3bcd2338 [ 254.520148][T15505] [ 254.520451][ T1705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.555853][T15507] loop1: detected capacity change from 0 to 1024 [ 254.726832][ T1705] veth1_macvtap: left promiscuous mode [ 254.732519][ T1705] veth0_macvtap: left promiscuous mode [ 254.738187][ T1705] veth1_vlan: left promiscuous mode [ 254.743809][ T1705] veth0_vlan: left promiscuous mode [ 254.756184][T15507] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.831502][ T1705] team0 (unregistering): Port device team_slave_1 removed [ 254.846198][ T1705] team0 (unregistering): Port device team_slave_0 removed [ 254.936077][T15514] syzkaller0: entered promiscuous mode [ 254.941633][T15514] syzkaller0: entered allmulticast mode [ 254.953762][T15533] loop7: detected capacity change from 0 to 1024 [ 254.964148][T11323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.005535][T15533] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.024788][T15540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4397'. [ 255.083430][T15483] chnl_net:caif_netlink_parms(): no params data found [ 255.135427][T13805] EXT4-fs error (device loop7): ext4_empty_dir:3107: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 255.161586][T15483] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.171702][T13805] EXT4-fs (loop7): Remounting filesystem read-only [ 255.178353][T15483] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.190046][T15483] bridge_slave_0: entered allmulticast mode [ 255.196796][T15483] bridge_slave_0: entered promiscuous mode [ 255.207303][T15554] FAULT_INJECTION: forcing a failure. [ 255.207303][T15554] name failslab, interval 1, probability 0, space 0, times 0 [ 255.224505][T15554] CPU: 1 UID: 0 PID: 15554 Comm: syz.3.4401 Not tainted syzkaller #0 PREEMPT(full) [ 255.224540][T15554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 255.224554][T15554] Call Trace: [ 255.224561][T15554] [ 255.224569][T15554] __dump_stack+0x1d/0x30 [ 255.224631][T15554] dump_stack_lvl+0x95/0xd0 [ 255.224672][T15554] dump_stack+0x15/0x1b [ 255.224695][T15554] should_fail_ex+0x263/0x280 [ 255.224790][T15554] should_failslab+0x8c/0xb0 [ 255.224813][T15554] kmem_cache_alloc_noprof+0x66/0x400 [ 255.224838][T15554] ? skb_clone+0x151/0x1f0 [ 255.224879][T15554] skb_clone+0x151/0x1f0 [ 255.224909][T15554] __netlink_deliver_tap+0x2c9/0x500 [ 255.224943][T15554] netlink_unicast+0x66b/0x690 [ 255.225041][T15554] netlink_sendmsg+0x5c8/0x6f0 [ 255.225073][T15554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.225102][T15554] ____sys_sendmsg+0x563/0x5b0 [ 255.225211][T15554] ___sys_sendmsg+0x195/0x1e0 [ 255.225298][T15554] __x64_sys_sendmsg+0xd4/0x160 [ 255.225466][T15554] x64_sys_call+0x194c/0x3020 [ 255.225544][T15554] do_syscall_64+0x12c/0x370 [ 255.225559][T15554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.225573][T15554] RIP: 0033:0x7f5981dcc799 [ 255.225584][T15554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.225616][T15554] RSP: 002b:00007f598081f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.225629][T15554] RAX: ffffffffffffffda RBX: 00007f5982045fa0 RCX: 00007f5981dcc799 [ 255.225664][T15554] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004 [ 255.225672][T15554] RBP: 00007f598081f090 R08: 0000000000000000 R09: 0000000000000000 [ 255.225679][T15554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.225686][T15554] R13: 00007f5982046038 R14: 00007f5982045fa0 R15: 00007ffc3bcd2338 [ 255.225698][T15554] [ 255.227715][T15544] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.425823][T15483] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.432980][T15483] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.440230][T15483] bridge_slave_1: entered allmulticast mode [ 255.446753][T15483] bridge_slave_1: entered promiscuous mode [ 255.467263][T15483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.480757][T15483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.500121][T15483] team0: Port device team_slave_0 added [ 255.507153][T15483] team0: Port device team_slave_1 added [ 255.532801][T15483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.546638][T15483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.573226][T15483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.585076][T15483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.592324][T15483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.618922][T15483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.656975][T15483] hsr_slave_0: entered promiscuous mode [ 255.663408][T15483] hsr_slave_1: entered promiscuous mode [ 255.751232][T15580] loop3: detected capacity change from 0 to 512 [ 255.762731][T15580] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4409'. [ 255.770205][T15483] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.778908][T15483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.786342][T15483] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.793486][T15483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.842252][T15483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.851718][T15558] chnl_net:caif_netlink_parms(): no params data found [ 255.904247][T15589] syzkaller0: entered promiscuous mode [ 255.910150][T15589] syzkaller0: entered allmulticast mode [ 255.955186][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.963065][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.023015][T15483] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.040790][ T1705] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.047912][ T1705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.052835][T15601] loop4: detected capacity change from 0 to 8192 [ 256.061920][T15558] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.070111][T15558] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.079139][T15603] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 256.087069][T15558] bridge_slave_0: entered allmulticast mode [ 256.087650][T15603] FAT-fs (loop4): Filesystem has been set read-only [ 256.093633][T15558] bridge_slave_0: entered promiscuous mode [ 256.116536][T15483] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 256.127021][T15483] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 256.139772][ T1705] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.146862][ T1705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.162783][T15558] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.169923][T15558] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.177263][T15558] bridge_slave_1: entered allmulticast mode [ 256.184337][T15558] bridge_slave_1: entered promiscuous mode [ 256.234205][T15558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.259596][T15558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.289623][T15558] team0: Port device team_slave_0 added [ 256.296814][T15558] team0: Port device team_slave_1 added [ 256.312840][T15558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.319987][T15558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.346417][T15558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.358020][T15558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.365029][T15558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.391352][T15558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.404763][T15483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.440578][T15558] hsr_slave_0: entered promiscuous mode [ 256.446860][T15558] hsr_slave_1: entered promiscuous mode [ 256.457896][T15558] debugfs: 'hsr0' already exists in 'hsr' [ 256.464260][T15558] Cannot create hsr debugfs directory [ 256.565952][T15558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.584149][T15558] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.597840][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.604948][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.619491][ T1705] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.626639][ T1705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.636574][T15483] veth0_vlan: entered promiscuous mode [ 256.651500][T15483] veth1_vlan: entered promiscuous mode [ 256.679453][T15483] veth0_macvtap: entered promiscuous mode [ 256.687560][T15483] veth1_macvtap: entered promiscuous mode [ 256.701299][T15483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.716261][T15483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.744305][T15558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.862961][T15662] syzkaller0: entered promiscuous mode [ 256.873336][T15662] syzkaller0: entered allmulticast mode [ 256.884568][T15667] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.900154][T15667] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.956138][T15558] veth0_vlan: entered promiscuous mode [ 256.966159][T15558] veth1_vlan: entered promiscuous mode [ 256.984424][T15558] veth0_macvtap: entered promiscuous mode [ 256.993649][T15558] veth1_macvtap: entered promiscuous mode [ 257.006085][T15558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.015277][T15679] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4428'. [ 257.026579][T15558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.032625][T15679] unsupported nlmsg_type 40 [ 257.050649][T15483] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.099039][T15684] netlink: 'syz.2.4403': attribute type 1 has an invalid length. [ 257.107442][T15684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4403'. [ 257.202749][T15690] set_capacity_and_notify: 1 callbacks suppressed [ 257.202805][T15690] loop4: detected capacity change from 0 to 512 [ 257.227467][T15690] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 257.250506][T15693] loop2: detected capacity change from 0 to 512 [ 257.262575][T15690] EXT4-fs (loop4): 1 truncate cleaned up [ 257.271660][T15693] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 257.287647][T15690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.322995][T15693] EXT4-fs (loop2): 1 truncate cleaned up [ 257.349572][T15693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.539606][T15706] syzkaller0: entered promiscuous mode [ 257.551998][T15706] syzkaller0: entered allmulticast mode [ 257.683799][T15713] loop3: detected capacity change from 0 to 512 [ 257.705144][T15713] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.4438: invalid indirect mapped block 256 (level 2) [ 257.753687][T15713] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 257.756944][T15713] EXT4-fs (loop3): 2 truncates cleaned up [ 257.771959][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 257.778406][ C1] EXT4-fs (loop3): initial error at time 1772850878: ext4_free_branches:1023: inode 11 [ 257.788080][ C1] EXT4-fs (loop3): last error at time 1772850878: ext4_free_branches:1023: inode 11 [ 257.792790][T15713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.101841][T15558] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.113721][T15126] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.093173][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 259.093187][ T28] audit: type=1400 audit(1772850879.749:9110): avc: denied { setattr } for pid=15732 comm="syz.2.4444" name="NETLINK" dev="sockfs" ino=51439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 259.358249][T15742] syzkaller0: entered promiscuous mode [ 259.363829][T15742] syzkaller0: entered allmulticast mode [ 259.410909][T13015] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.459146][T15750] loop1: detected capacity change from 0 to 1024 [ 259.466055][T15750] EXT4-fs: inline encryption not supported [ 259.484075][T15750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.505783][T15750] EXT4-fs error (device loop1): mb_free_blocks:2047: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 259.521194][T15750] EXT4-fs (loop1): Remounting filesystem read-only [ 259.547176][T11323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.557288][ T28] audit: type=1400 audit(1772850880.179:9111): avc: denied { ioctl } for pid=15748 comm="syz.1.4451" path="/290/file1/file1" dev="loop1" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 259.702615][T15763] loop1: detected capacity change from 0 to 512 [ 259.713020][ T28] audit: type=1400 audit(1772850880.349:9112): avc: denied { create } for pid=15762 comm="syz.1.4455" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 259.734286][ T28] audit: type=1400 audit(1772850880.349:9113): avc: denied { write } for pid=15762 comm="syz.1.4455" name="file0" dev="tmpfs" ino=1545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 259.759646][ T28] audit: type=1400 audit(1772850880.349:9114): avc: denied { open } for pid=15762 comm="syz.1.4455" path="/292/file0" dev="tmpfs" ino=1545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 259.798234][T15763] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 259.835348][T15763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.848614][T15763] ext4 filesystem being mounted at /292/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 259.873920][ T28] audit: type=1400 audit(1772850880.529:9115): avc: denied { read } for pid=15762 comm="syz.1.4455" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 259.901627][T15763] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4455'. [ 259.938646][T15763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4455'. [ 259.953848][T15769] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4456'. [ 259.963488][T15763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4455'. [ 259.977444][ T28] audit: type=1400 audit(1772850880.589:9116): avc: denied { write } for pid=15762 comm="syz.1.4455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 260.016611][T15763] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4455'. [ 260.028100][T15763] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 260.059252][T15772] FAULT_INJECTION: forcing a failure. [ 260.059252][T15772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.073271][T15772] CPU: 1 UID: 0 PID: 15772 Comm: syz.4.4457 Not tainted syzkaller #0 PREEMPT(full) [ 260.073296][T15772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 260.073309][T15772] Call Trace: [ 260.073315][T15772] [ 260.073321][T15772] __dump_stack+0x1d/0x30 [ 260.073345][T15772] dump_stack_lvl+0x95/0xd0 [ 260.073447][T15772] dump_stack+0x15/0x1b [ 260.073466][T15772] should_fail_ex+0x263/0x280 [ 260.073488][T15772] should_fail+0xb/0x20 [ 260.073531][T15772] should_fail_usercopy+0x1a/0x20 [ 260.073550][T15772] _copy_from_user+0x1c/0xb0 [ 260.073578][T15772] ___sys_sendmsg+0xc1/0x1e0 [ 260.073607][T15772] __x64_sys_sendmsg+0xd4/0x160 [ 260.073639][T15772] x64_sys_call+0x194c/0x3020 [ 260.073662][T15772] do_syscall_64+0x12c/0x370 [ 260.073680][T15772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.073703][T15772] RIP: 0033:0x7ff157a7c799 [ 260.073740][T15772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.073760][T15772] RSP: 002b:00007ff1564d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.073781][T15772] RAX: ffffffffffffffda RBX: 00007ff157cf5fa0 RCX: 00007ff157a7c799 [ 260.073796][T15772] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 260.073810][T15772] RBP: 00007ff1564d7090 R08: 0000000000000000 R09: 0000000000000000 [ 260.073823][T15772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.073835][T15772] R13: 00007ff157cf6038 R14: 00007ff157cf5fa0 R15: 00007ffc370f0328 [ 260.073934][T15772] [ 260.073975][ T28] audit: type=1400 audit(1772850880.729:9117): avc: denied { ioctl } for pid=15762 comm="syz.1.4455" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 260.257944][ T28] audit: type=1400 audit(1772850880.809:9118): avc: denied { listen } for pid=15775 comm="syz.4.4459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 260.277608][ T28] audit: type=1400 audit(1772850880.809:9119): avc: denied { read } for pid=15775 comm="syz.4.4459" path="socket:[51553]" dev="sockfs" ino=51553 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 260.330330][T11323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.441055][T15789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4464'. [ 260.454627][T15782] syzkaller0: entered promiscuous mode [ 260.460127][T15782] syzkaller0: entered allmulticast mode [ 260.564632][T15799] loop1: detected capacity change from 0 to 128 [ 260.615012][T15799] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 260.627689][T15799] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.641320][T15817] loop3: detected capacity change from 0 to 128 [ 261.710747][T15817] loop3: detected capacity change from 0 to 512 [ 261.721395][T15817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4473'. [ 261.730668][T15817] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4473'. [ 262.354851][T11323] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 262.368354][T15846] FAULT_INJECTION: forcing a failure. [ 262.368354][T15846] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 262.394462][ T12] bond0: (slave bond_slave_0): interface is now down [ 262.409329][ T12] bond0: (slave bond_slave_1): interface is now down [ 262.418067][ T12] bond0: now running without any active interface! [ 262.426906][T15848] loop2: detected capacity change from 0 to 128 [ 262.452811][T15846] CPU: 1 UID: 0 PID: 15846 Comm: syz.8.4483 Not tainted syzkaller #0 PREEMPT(full) [ 262.452836][T15846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 262.452848][T15846] Call Trace: [ 262.452884][T15846] [ 262.452892][T15846] __dump_stack+0x1d/0x30 [ 262.452918][T15846] dump_stack_lvl+0x95/0xd0 [ 262.452941][T15846] dump_stack+0x15/0x1b [ 262.452999][T15846] should_fail_ex+0x263/0x280 [ 262.453023][T15846] should_fail_alloc_page+0xf2/0x100 [ 262.453046][T15846] __alloc_frozen_pages_noprof+0x108/0x360 [ 262.453076][T15846] alloc_pages_mpol+0xb3/0x260 [ 262.453159][T15846] alloc_pages_noprof+0x8f/0x130 [ 262.453183][T15846] __pmd_alloc+0x47/0x480 [ 262.453227][T15846] handle_mm_fault+0x1ecf/0x3020 [ 262.453258][T15846] ? mt_find+0x291/0x3d0 [ 262.453284][T15846] ? lock_mm_and_find_vma+0x8b/0x440 [ 262.453308][T15846] do_user_addr_fault+0x3fd/0x1050 [ 262.453393][T15846] ? lockref_put_return+0xf7/0x130 [ 262.453507][T15846] exc_page_fault+0x62/0xa0 [ 262.453567][T15846] asm_exc_page_fault+0x26/0x30 [ 262.453589][T15846] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 262.453637][T15846] Code: c4 10 c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd 19 02 00 66 2e [ 262.453733][T15846] RSP: 0018:ffffc90001697c38 EFLAGS: 00050202 [ 262.453750][T15846] RAX: ffff888104f45e78 RBX: 0000000000000004 RCX: 0000000000000004 [ 262.453763][T15846] RDX: 0000000000000001 RSI: 0000200000000e40 RDI: ffffc90001697cc4 [ 262.453775][T15846] RBP: 0000000000000001 R08: 000000000000033d R09: 0000000000000000 [ 262.453786][T15846] R10: 0001c90001697cc4 R11: 0001c90001697cc7 R12: 0000200000000e40 [ 262.453799][T15846] R13: 0000000000000040 R14: ffffc90001697cc4 R15: 0000200000000e40 [ 262.453875][T15846] _copy_from_user+0x6f/0xb0 [ 262.453901][T15846] do_ipv6_setsockopt+0x124/0x21d0 [ 262.453928][T15846] ? kstrtoull+0x111/0x140 [ 262.453945][T15846] ? avc_has_perm_noaudit+0xab/0x130 [ 262.454012][T15846] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 262.454048][T15846] ipv6_setsockopt+0x59/0x130 [ 262.454071][T15846] udpv6_setsockopt+0x99/0xb0 [ 262.454181][T15846] sock_common_setsockopt+0x69/0x80 [ 262.454199][T15846] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 262.454217][T15846] __sys_setsockopt+0x184/0x200 [ 262.454244][T15846] __x64_sys_setsockopt+0x64/0x80 [ 262.454339][T15846] x64_sys_call+0x2327/0x3020 [ 262.454363][T15846] do_syscall_64+0x12c/0x370 [ 262.454381][T15846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.454446][T15846] RIP: 0033:0x7f011cadc799 [ 262.454462][T15846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.454477][T15846] RSP: 002b:00007f011b52f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 262.454500][T15846] RAX: ffffffffffffffda RBX: 00007f011cd55fa0 RCX: 00007f011cadc799 [ 262.454514][T15846] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 262.454527][T15846] RBP: 00007f011b52f090 R08: 00000000000002f0 R09: 0000000000000000 [ 262.454580][T15846] R10: 0000200000000e40 R11: 0000000000000246 R12: 0000000000000001 [ 262.454591][T15846] R13: 00007f011cd56038 R14: 00007f011cd55fa0 R15: 00007ffc33ce4058 [ 262.454608][T15846] [ 262.809745][T15859] loop2: detected capacity change from 0 to 512 [ 262.842199][T15865] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4490'. [ 262.862655][T15859] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4487: invalid indirect mapped block 256 (level 2) [ 262.876098][T15865] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4490'. [ 262.901050][T15859] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 262.901352][T15859] EXT4-fs (loop2): 2 truncates cleaned up [ 262.910498][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 262.910517][ C0] EXT4-fs (loop2): initial error at time 1772850883: ext4_free_branches:1023: inode 11 [ 262.910549][ C0] EXT4-fs (loop2): last error at time 1772850883: ext4_free_branches:1023: inode 11 [ 262.932232][T15871] loop4: detected capacity change from 0 to 128 [ 262.932785][T15859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.009089][T15871] syz.4.4493: attempt to access beyond end of device [ 263.009089][T15871] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 263.023872][T15871] syz.4.4493: attempt to access beyond end of device [ 263.023872][T15871] loop4: rw=8390657, sector=138, nr_sectors = 2 limit=128 [ 263.038405][T15871] Buffer I/O error on dev loop4, logical block 69, lost async page write [ 263.047139][T15871] FAULT_INJECTION: forcing a failure. [ 263.047139][T15871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.060331][T15871] CPU: 1 UID: 0 PID: 15871 Comm: syz.4.4493 Not tainted syzkaller #0 PREEMPT(full) [ 263.060356][T15871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 263.060367][T15871] Call Trace: [ 263.060374][T15871] [ 263.060381][T15871] __dump_stack+0x1d/0x30 [ 263.060527][T15871] dump_stack_lvl+0x95/0xd0 [ 263.060546][T15871] dump_stack+0x15/0x1b [ 263.060564][T15871] should_fail_ex+0x263/0x280 [ 263.060597][T15871] should_fail+0xb/0x20 [ 263.060618][T15871] should_fail_usercopy+0x1a/0x20 [ 263.060676][T15871] _copy_to_user+0x20/0xa0 [ 263.060741][T15871] simple_read_from_buffer+0xb5/0x130 [ 263.060761][T15871] proc_fail_nth_read+0x10e/0x150 [ 263.060814][T15871] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 263.060842][T15871] vfs_read+0x1ab/0x7f0 [ 263.060873][T15871] ? __rcu_read_unlock+0x4e/0x70 [ 263.060895][T15871] ? __fget_files+0x184/0x1c0 [ 263.060972][T15871] ? sb_end_write+0x6e/0xc0 [ 263.061058][T15871] ? mutex_lock+0x57/0x90 [ 263.061148][T15871] ksys_read+0xdc/0x1a0 [ 263.061178][T15871] __x64_sys_read+0x40/0x50 [ 263.061192][T15871] x64_sys_call+0x2886/0x3020 [ 263.061269][T15871] do_syscall_64+0x12c/0x370 [ 263.061286][T15871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.061320][T15871] RIP: 0033:0x7ff157a3cfce [ 263.061333][T15871] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 263.061348][T15871] RSP: 002b:00007ff1564d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 263.061364][T15871] RAX: ffffffffffffffda RBX: 00007ff1564d76c0 RCX: 00007ff157a3cfce [ 263.061376][T15871] RDX: 000000000000000f RSI: 00007ff1564d70a0 RDI: 0000000000000005 [ 263.061443][T15871] RBP: 00007ff1564d7090 R08: 0000000000000000 R09: 0000000000000000 [ 263.061459][T15871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.061469][T15871] R13: 00007ff157cf6038 R14: 00007ff157cf5fa0 R15: 00007ffc370f0328 [ 263.061484][T15871] [ 263.324216][T15886] FAULT_INJECTION: forcing a failure. [ 263.324216][T15886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.353422][T15886] CPU: 0 UID: 0 PID: 15886 Comm: syz.1.4498 Not tainted syzkaller #0 PREEMPT(full) [ 263.353448][T15886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 263.353459][T15886] Call Trace: [ 263.353464][T15886] [ 263.353471][T15886] __dump_stack+0x1d/0x30 [ 263.353569][T15886] dump_stack_lvl+0x95/0xd0 [ 263.353589][T15886] dump_stack+0x15/0x1b [ 263.353607][T15886] should_fail_ex+0x263/0x280 [ 263.353628][T15886] should_fail+0xb/0x20 [ 263.353645][T15886] should_fail_usercopy+0x1a/0x20 [ 263.353710][T15886] _copy_from_iter+0xcf/0xea0 [ 263.353803][T15886] ? __alloc_skb+0x4f6/0x690 [ 263.353822][T15886] ? __alloc_skb+0x200/0x690 [ 263.353845][T15886] netlink_sendmsg+0x4ae/0x6f0 [ 263.353877][T15886] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.353992][T15886] ____sys_sendmsg+0x563/0x5b0 [ 263.354056][T15886] ___sys_sendmsg+0x195/0x1e0 [ 263.354091][T15886] __x64_sys_sendmsg+0xd4/0x160 [ 263.354116][T15886] x64_sys_call+0x194c/0x3020 [ 263.354171][T15886] do_syscall_64+0x12c/0x370 [ 263.354189][T15886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.354272][T15886] RIP: 0033:0x7f1e2e8ac799 [ 263.354289][T15886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.354307][T15886] RSP: 002b:00007f1e2d2ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.354350][T15886] RAX: ffffffffffffffda RBX: 00007f1e2eb25fa0 RCX: 00007f1e2e8ac799 [ 263.354363][T15886] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 263.354377][T15886] RBP: 00007f1e2d2ff090 R08: 0000000000000000 R09: 0000000000000000 [ 263.354463][T15886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.354474][T15886] R13: 00007f1e2eb26038 R14: 00007f1e2eb25fa0 R15: 00007ffe130548d8 [ 263.354564][T15886] [ 263.547172][T15670] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 263.575289][T15887] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4487: bg 0: block 5: invalid block bitmap [ 263.717911][T15887] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 117 [ 263.781378][T15887] EXT4-fs (loop2): This should not happen!! Data will be lost [ 263.781378][T15887] [ 263.829955][T15887] syz.2.4487 (15887) used greatest stack depth: 8696 bytes left [ 263.852514][T15900] netlink: 'syz.3.4503': attribute type 1 has an invalid length. [ 263.872162][T15902] loop1: detected capacity change from 0 to 128 [ 263.897791][T15902] syz.1.4504: attempt to access beyond end of device [ 263.897791][T15902] loop1: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 263.919289][T15902] syz.1.4504: attempt to access beyond end of device [ 263.919289][T15902] loop1: rw=8390657, sector=138, nr_sectors = 2 limit=128 [ 263.974970][T15902] Buffer I/O error on dev loop1, logical block 69, lost async page write [ 264.024524][T15906] 9pnet_fd: Insufficient options for proto=fd [ 264.552376][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 264.552445][ T28] audit: type=1400 audit(1772850885.209:9176): avc: denied { bind } for pid=15930 comm="syz.3.4515" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 264.597644][ T28] audit: type=1400 audit(1772850885.229:9177): avc: denied { name_bind } for pid=15930 comm="syz.3.4515" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 264.618845][ T28] audit: type=1400 audit(1772850885.229:9178): avc: denied { node_bind } for pid=15930 comm="syz.3.4515" saddr=ff02::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 264.629748][T15558] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.689092][T15943] netlink: 'syz.2.4517': attribute type 10 has an invalid length. [ 264.770722][T15928] chnl_net:caif_netlink_parms(): no params data found [ 264.773154][T15953] loop2: detected capacity change from 0 to 512 [ 264.784430][T15953] msdos: Unknown parameter 'ÿÿ' [ 264.800117][T15953] loop2: detected capacity change from 0 to 512 [ 264.808826][T15953] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4521: invalid indirect mapped block 256 (level 2) [ 264.822321][T15953] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 264.822878][T15953] EXT4-fs (loop2): 2 truncates cleaned up [ 264.828805][T15928] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.832044][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 264.832061][ C1] EXT4-fs (loop2): initial error at time 1772850885: ext4_free_branches:1023: inode 11 [ 264.838661][T15928] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.844792][ C1] [ 264.844799][ C1] EXT4-fs (loop2): last error at time 1772850885: ext4_free_branches:1023 [ 264.851643][T15928] bridge_slave_0: entered allmulticast mode [ 264.860862][ C1] : inode 11 [ 264.864701][T15953] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.886992][T15928] bridge_slave_0: entered promiscuous mode [ 264.891134][ T28] audit: type=1400 audit(1772850885.539:9179): avc: denied { lock } for pid=15952 comm="syz.2.4521" path="socket:[52665]" dev="sockfs" ino=52665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 264.902088][T15928] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.938080][T15928] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.945474][T15928] bridge_slave_1: entered allmulticast mode [ 264.952049][T15928] bridge_slave_1: entered promiscuous mode [ 264.952418][T15558] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.979796][T15928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.990815][T15928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.009550][T15928] team0: Port device team_slave_0 added [ 265.016208][T15928] team0: Port device team_slave_1 added [ 265.033822][T15928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.041140][T15928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.067475][T15928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.078918][T15928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.086018][T15928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.113775][T15928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.141335][T15928] hsr_slave_0: entered promiscuous mode [ 265.147580][T15928] hsr_slave_1: entered promiscuous mode [ 265.149523][T15965] FAULT_INJECTION: forcing a failure. [ 265.149523][T15965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.153847][T15928] debugfs: 'hsr0' already exists in 'hsr' [ 265.166653][T15965] CPU: 1 UID: 0 PID: 15965 Comm: syz.2.4524 Not tainted syzkaller #0 PREEMPT(full) [ 265.166696][T15965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 265.166709][T15965] Call Trace: [ 265.166715][T15965] [ 265.166723][T15965] __dump_stack+0x1d/0x30 [ 265.166748][T15965] dump_stack_lvl+0x95/0xd0 [ 265.166771][T15965] dump_stack+0x15/0x1b [ 265.166862][T15965] should_fail_ex+0x263/0x280 [ 265.166885][T15965] should_fail+0xb/0x20 [ 265.166904][T15965] should_fail_usercopy+0x1a/0x20 [ 265.166929][T15965] _copy_from_iter+0xcf/0xea0 [ 265.166983][T15965] ? __alloc_skb+0x4f6/0x690 [ 265.167005][T15965] ? __alloc_skb+0x200/0x690 [ 265.167079][T15965] netlink_sendmsg+0x4ae/0x6f0 [ 265.167109][T15965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.167161][T15965] ____sys_sendmsg+0x563/0x5b0 [ 265.167253][T15965] ___sys_sendmsg+0x195/0x1e0 [ 265.167290][T15965] __x64_sys_sendmsg+0xd4/0x160 [ 265.167319][T15965] x64_sys_call+0x194c/0x3020 [ 265.167413][T15965] do_syscall_64+0x12c/0x370 [ 265.167433][T15965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.167456][T15965] RIP: 0033:0x7f430ee0c799 [ 265.167477][T15965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.167495][T15965] RSP: 002b:00007f430d85f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.167615][T15965] RAX: ffffffffffffffda RBX: 00007f430f085fa0 RCX: 00007f430ee0c799 [ 265.167630][T15965] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 265.167643][T15965] RBP: 00007f430d85f090 R08: 0000000000000000 R09: 0000000000000000 [ 265.167660][T15965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.167708][T15965] R13: 00007f430f086038 R14: 00007f430f085fa0 R15: 00007fff91312228 [ 265.167727][T15965] [ 265.305644][T15969] loop8: detected capacity change from 0 to 512 [ 265.320502][T15928] Cannot create hsr debugfs directory [ 265.366533][T15969] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.4526: invalid indirect mapped block 256 (level 2) [ 265.380441][T15969] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 265.380772][T15969] EXT4-fs (loop8): 2 truncates cleaned up [ 265.390003][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 265.390037][ C1] EXT4-fs (loop8): initial error at time 1772850886: ext4_free_branches:1023: inode 11 [ 265.390094][ C1] EXT4-fs (loop8): last error at time 1772850886: ext4_free_branches:1023: inode 11 [ 265.437921][T15969] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.477534][T15928] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.484619][T15928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.492051][T15928] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.499128][T15928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.548350][T15928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.567164][T15984] loop4: detected capacity change from 0 to 512 [ 265.573585][ T157] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.591013][ T157] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.608721][T15988] __nla_validate_parse: 4 callbacks suppressed [ 265.608775][T15988] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4530'. [ 265.632016][T15984] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.4528: inode has both inline data and extents flags [ 265.645657][T15984] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 265.651982][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 265.667556][ C1] EXT4-fs (loop4): initial error at time 1772850886: ext4_orphan_get:1391: inode 15 [ 265.676998][ C1] EXT4-fs (loop4): last error at time 1772850886: ext4_orphan_get:1391: inode 15 [ 265.722078][T15991] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.4526: bg 0: block 5: invalid block bitmap [ 265.751912][T15984] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4528: couldn't read orphan inode 15 (err -117) [ 265.815589][T15991] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 265.834309][T15984] loop4: lost filesystem error report for type 5 error -117 [ 265.835368][T15984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.855286][T15991] EXT4-fs (loop8): This should not happen!! Data will be lost [ 265.855286][T15991] [ 265.881072][T15991] EXT4-fs (loop8): Total free blocks count 0 [ 265.908672][T15991] EXT4-fs (loop8): Free/Dirty block details [ 265.964090][T15991] EXT4-fs (loop8): free_blocks=0 [ 266.002261][T15991] EXT4-fs (loop8): dirty_blocks=64 [ 266.045578][T15991] EXT4-fs (loop8): Block reservation details [ 266.095258][T15991] EXT4-fs (loop8): i_reserved_data_blocks=64 [ 266.169792][T16003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16003 comm=syz.2.4533 [ 266.550264][T15126] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.632095][T16001] syzkaller0: entered promiscuous mode [ 266.637715][T16001] syzkaller0: entered allmulticast mode [ 266.679182][T15928] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.695362][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.702625][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.740703][T15928] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 266.761923][T15928] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.778165][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.785827][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.855909][T15928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.896759][T15483] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.944954][ T28] audit: type=1400 audit(1772850887.589:9180): avc: denied { map } for pid=16023 comm="syz.2.4537" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 267.072615][T15928] veth0_vlan: entered promiscuous mode [ 267.083734][T15928] veth1_vlan: entered promiscuous mode [ 267.121478][T16049] syzkaller0: entered promiscuous mode [ 267.127122][T16049] syzkaller0: entered allmulticast mode [ 267.143747][T15928] veth0_macvtap: entered promiscuous mode [ 267.151341][T15928] veth1_macvtap: entered promiscuous mode [ 267.163553][T15928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.175008][T15928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.225908][T16055] loop9: detected capacity change from 0 to 128 [ 267.245222][T16055] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 267.262698][T16055] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 267.284095][T15928] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 267.327354][T16064] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4547'. [ 267.608075][ T28] audit: type=1400 audit(1772850888.259:9181): avc: denied { read write } for pid=16096 comm="syz.4.4560" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 267.636170][ T28] audit: type=1400 audit(1772850888.259:9182): avc: denied { open } for pid=16096 comm="syz.4.4560" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 267.647052][T16088] loop2: detected capacity change from 0 to 512 [ 267.704146][T16088] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 267.728817][T16088] EXT4-fs (loop2): 1 truncate cleaned up [ 267.739722][T16088] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.845320][ T28] audit: type=1400 audit(1772850888.499:9183): avc: denied { write } for pid=16096 comm="syz.4.4560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 267.869630][T16113] loop4: detected capacity change from 0 to 512 [ 267.946957][T16113] EXT4-fs (loop4): 1 orphan inode deleted [ 267.970703][T16113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.987313][ T50] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 268.022012][ T50] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:3: Failed to release dquot type 1 [ 268.048958][ T50] loop4: lost filesystem error report for type 5 error -117 [ 268.049985][T16113] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.121900][T16123] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4567'. [ 268.372283][T16126] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5126 sclass=netlink_audit_socket pid=16126 comm=syz.8.4568 [ 268.386615][ T28] audit: type=1400 audit(1772850889.019:9184): avc: denied { ioctl } for pid=16125 comm="syz.8.4568" path="socket:[53287]" dev="sockfs" ino=53287 ioctlcmd=0x671f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 268.478163][T15558] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.500574][T15126] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.651872][T16149] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4579'. [ 268.679406][ T5816] Process accounting resumed [ 268.684713][T16148] process 'syz.9.4578' launched './file0' with NULL argv: empty string added [ 268.757465][T16163] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4584'. [ 268.834201][T16166] netlink: 14601 bytes leftover after parsing attributes in process `syz.9.4585'. [ 269.139785][T16186] loop4: detected capacity change from 0 to 1764 [ 269.203602][T16186] FAULT_INJECTION: forcing a failure. [ 269.203602][T16186] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 269.217206][T16186] CPU: 0 UID: 0 PID: 16186 Comm: syz.4.4590 Not tainted syzkaller #0 PREEMPT(full) [ 269.217299][T16186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 269.217311][T16186] Call Trace: [ 269.217320][T16186] [ 269.217328][T16186] __dump_stack+0x1d/0x30 [ 269.217366][T16186] dump_stack_lvl+0x95/0xd0 [ 269.217407][T16186] dump_stack+0x15/0x1b [ 269.217427][T16186] should_fail_ex+0x263/0x280 [ 269.217448][T16186] should_fail_alloc_page+0xf2/0x100 [ 269.217509][T16186] __alloc_frozen_pages_noprof+0x108/0x360 [ 269.217539][T16186] alloc_pages_mpol+0xb3/0x260 [ 269.217567][T16186] alloc_pages_noprof+0x8f/0x130 [ 269.217593][T16186] isofs_lookup+0x3c/0x920 [ 269.217691][T16186] ? d_alloc_parallel+0xc01/0xce0 [ 269.217720][T16186] ? __d_lookup_rcu_op_compare+0x23b/0x270 [ 269.217790][T16186] ? try_to_unlazy+0x39d/0x580 [ 269.217816][T16186] __lookup_slow+0x19d/0x260 [ 269.217934][T16186] lookup_slow+0x3c/0x60 [ 269.217961][T16186] link_path_walk+0x946/0xe30 [ 269.218032][T16186] __filename_parentat+0x1a4/0x450 [ 269.218141][T16186] filename_rmdir+0x98/0x360 [ 269.218163][T16186] __se_sys_unlinkat+0x6e/0x140 [ 269.218187][T16186] __x64_sys_unlinkat+0x43/0x50 [ 269.218209][T16186] x64_sys_call+0x1120/0x3020 [ 269.218241][T16186] do_syscall_64+0x12c/0x370 [ 269.218333][T16186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.218401][T16186] RIP: 0033:0x7ff157a7c799 [ 269.218415][T16186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.218453][T16186] RSP: 002b:00007ff1564d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 269.218548][T16186] RAX: ffffffffffffffda RBX: 00007ff157cf5fa0 RCX: 00007ff157a7c799 [ 269.218564][T16186] RDX: 0000000000000200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 269.218577][T16186] RBP: 00007ff1564d7090 R08: 0000000000000000 R09: 0000000000000000 [ 269.218636][T16186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.218647][T16186] R13: 00007ff157cf6038 R14: 00007ff157cf5fa0 R15: 00007ffc370f0328 [ 269.218665][T16186] [ 269.598482][ T28] kauditd_printk_skb: 232 callbacks suppressed [ 269.598500][ T28] audit: type=1400 audit(1772850890.239:9417): avc: denied { create } for pid=16195 comm="syz.9.4595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 269.713450][T16207] FAULT_INJECTION: forcing a failure. [ 269.713450][T16207] name failslab, interval 1, probability 0, space 0, times 0 [ 269.717000][T16204] loop9: detected capacity change from 0 to 512 [ 269.731386][T16200] loop3: detected capacity change from 0 to 512 [ 269.762380][T16204] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 269.774922][T16207] CPU: 1 UID: 0 PID: 16207 Comm: syz.8.4599 Not tainted syzkaller #0 PREEMPT(full) [ 269.774999][T16207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 269.775010][T16207] Call Trace: [ 269.775015][T16207] [ 269.775022][T16207] __dump_stack+0x1d/0x30 [ 269.775049][T16207] dump_stack_lvl+0x95/0xd0 [ 269.775067][T16207] dump_stack+0x15/0x1b [ 269.775102][T16207] should_fail_ex+0x263/0x280 [ 269.775139][T16207] should_failslab+0x8c/0xb0 [ 269.775158][T16207] kmem_cache_alloc_noprof+0x66/0x400 [ 269.775180][T16207] ? skb_clone+0x151/0x1f0 [ 269.775216][T16207] skb_clone+0x151/0x1f0 [ 269.775283][T16207] __netlink_deliver_tap+0x2c9/0x500 [ 269.775310][T16207] netlink_unicast+0x66b/0x690 [ 269.775374][T16207] netlink_sendmsg+0x5c8/0x6f0 [ 269.775441][T16207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.775467][T16207] ____sys_sendmsg+0x563/0x5b0 [ 269.775493][T16207] ___sys_sendmsg+0x195/0x1e0 [ 269.775533][T16207] __x64_sys_sendmsg+0xd4/0x160 [ 269.775630][T16207] x64_sys_call+0x194c/0x3020 [ 269.775702][T16207] do_syscall_64+0x12c/0x370 [ 269.775723][T16207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.775744][T16207] RIP: 0033:0x7f011cadc799 [ 269.775757][T16207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.775908][T16207] RSP: 002b:00007f011b52f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.775929][T16207] RAX: ffffffffffffffda RBX: 00007f011cd55fa0 RCX: 00007f011cadc799 [ 269.775962][T16207] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 269.775975][T16207] RBP: 00007f011b52f090 R08: 0000000000000000 R09: 0000000000000000 [ 269.775986][T16207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.776021][T16207] R13: 00007f011cd56038 R14: 00007f011cd55fa0 R15: 00007ffc33ce4058 [ 269.776038][T16207] [ 269.800228][T16200] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 269.991726][T16204] EXT4-fs (loop9): 1 truncate cleaned up [ 270.000666][T16204] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.004647][T16200] EXT4-fs (loop3): 1 truncate cleaned up [ 270.024439][T16200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.041980][ T28] audit: type=1326 audit(1772850890.689:9418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16211 comm="syz.8.4600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011cadc799 code=0x7ffc0000 [ 270.043866][ T5809] IPVS: starting estimator thread 0... [ 270.065731][ T28] audit: type=1326 audit(1772850890.689:9419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16211 comm="syz.8.4600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011cadc799 code=0x7ffc0000 [ 270.094753][ T28] audit: type=1326 audit(1772850890.689:9420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16211 comm="syz.8.4600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f011cadc799 code=0x7ffc0000 [ 270.118192][ T28] audit: type=1326 audit(1772850890.689:9421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16211 comm="syz.8.4600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011cadc799 code=0x7ffc0000 [ 270.142087][ T28] audit: type=1326 audit(1772850890.689:9422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16211 comm="syz.8.4600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011cadc799 code=0x7ffc0000 [ 270.154006][T16216] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 2, id = 0 [ 270.175830][T16215] netlink: 'syz.8.4600': attribute type 4 has an invalid length. [ 270.199997][ T28] audit: type=1326 audit(1772850890.689:9423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16211 comm="syz.8.4600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f011cadc799 code=0x7ffc0000 [ 270.232005][T16213] IPVS: using max 2448 ests per chain, 122400 per kthread [ 270.252252][ T28] audit: type=1326 audit(1772850890.689:9424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16211 comm="syz.8.4600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011cadc799 code=0x7ffc0000 [ 270.312059][ T28] audit: type=1326 audit(1772850890.689:9425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16211 comm="syz.8.4600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011cadc799 code=0x7ffc0000 [ 270.383385][ T28] audit: type=1326 audit(1772850890.689:9426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16211 comm="syz.8.4600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f011cadc799 code=0x7ffc0000 [ 270.626483][T16230] loop4: detected capacity change from 0 to 1024 [ 270.662561][T16230] EXT4-fs: Ignoring removed oldalloc option [ 270.672073][T16230] EXT4-fs: Ignoring removed bh option [ 270.692660][T16230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.726403][T16230] netlink: 'syz.4.4605': attribute type 21 has an invalid length. [ 270.755290][T16230] IPv6: NLM_F_CREATE should be specified when creating new route [ 270.763247][T16230] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.770524][T16230] IPv6: NLM_F_CREATE should be set when creating new route [ 270.777768][T16230] IPv6: NLM_F_CREATE should be set when creating new route [ 270.782073][T16236] netlink: 'syz.4.4605': attribute type 21 has an invalid length. [ 270.785049][T16230] IPv6: NLM_F_CREATE should be set when creating new route [ 270.820613][T16236] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.875322][T13015] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.898427][T16238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4607'. [ 270.916253][T15928] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.971989][T16244] FAULT_INJECTION: forcing a failure. [ 270.971989][T16244] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 270.994836][T16244] CPU: 1 UID: 0 PID: 16244 Comm: syz.2.4609 Not tainted syzkaller #0 PREEMPT(full) [ 270.994863][T16244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 270.994874][T16244] Call Trace: [ 270.994880][T16244] [ 270.994886][T16244] __dump_stack+0x1d/0x30 [ 270.994909][T16244] dump_stack_lvl+0x95/0xd0 [ 270.994972][T16244] dump_stack+0x15/0x1b [ 270.994991][T16244] should_fail_ex+0x263/0x280 [ 270.995019][T16244] should_fail_alloc_page+0xf2/0x100 [ 270.995040][T16244] __alloc_frozen_pages_noprof+0x108/0x360 [ 270.995159][T16244] alloc_pages_mpol+0xb3/0x260 [ 270.995185][T16244] alloc_pages_noprof+0x8f/0x130 [ 270.995211][T16244] alloc_skb_with_frags+0x193/0x470 [ 270.995253][T16244] ? should_fail_ex+0xd9/0x280 [ 270.995278][T16244] sock_alloc_send_pskb+0x44d/0x500 [ 270.995362][T16244] tun_get_user+0x62b/0x27c0 [ 270.995387][T16244] ? ref_tracker_alloc+0x1eb/0x2f0 [ 270.995415][T16244] tun_chr_write_iter+0x15e/0x210 [ 270.995438][T16244] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 270.995530][T16244] vfs_write+0x5a6/0x9f0 [ 270.995578][T16244] ksys_write+0xdc/0x1a0 [ 270.995597][T16244] __x64_sys_write+0x40/0x50 [ 270.995727][T16244] x64_sys_call+0x27e1/0x3020 [ 270.995754][T16244] do_syscall_64+0x12c/0x370 [ 270.995774][T16244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.995796][T16244] RIP: 0033:0x7f430ee0c799 [ 270.995879][T16244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.995897][T16244] RSP: 002b:00007f430d85f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 270.995918][T16244] RAX: ffffffffffffffda RBX: 00007f430f085fa0 RCX: 00007f430ee0c799 [ 270.995933][T16244] RDX: 0000000000000ffe RSI: 00002000000000c0 RDI: 0000000000000004 [ 270.996017][T16244] RBP: 00007f430d85f090 R08: 0000000000000000 R09: 0000000000000000 [ 270.996031][T16244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.996044][T16244] R13: 00007f430f086038 R14: 00007f430f085fa0 R15: 00007fff91312228 [ 270.996065][T16244] [ 271.354349][T16252] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4612'. [ 271.421081][T16259] loop2: detected capacity change from 0 to 1024 [ 271.442432][T16259] EXT4-fs: Ignoring removed bh option [ 271.447983][T16259] EXT4-fs: Ignoring removed i_version option [ 271.462531][T16259] EXT4-fs (loop2): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 271.498693][T16259] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 271.538935][T16230] ================================================================== [ 271.547410][T16230] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 271.556904][T16230] [ 271.559227][T16230] read to 0xffff88811fe48000 of 1024 bytes by task 82 on cpu 1: [ 271.566908][T16230] copy_folio_from_iter_atomic+0x75f/0x1170 [ 271.572831][T16230] generic_perform_write+0x2c1/0x490 [ 271.578136][T16230] shmem_file_write_iter+0xc5/0xf0 [ 271.583272][T16230] lo_rw_aio+0x67d/0x730 [ 271.587676][T16230] loop_process_work+0x56c/0xac0 [ 271.592631][T16230] loop_workfn+0x31/0x40 [ 271.596988][T16230] process_scheduled_works+0x4de/0x9e0 [ 271.602475][T16230] worker_thread+0x581/0x770 [ 271.607083][T16230] kthread+0x22a/0x280 [ 271.611157][T16230] ret_from_fork+0x150/0x360 [ 271.615791][T16230] ret_from_fork_asm+0x1a/0x30 [ 271.620582][T16230] [ 271.622898][T16230] write to 0xffff88811fe481a6 of 20 bytes by task 16230 on cpu 0: [ 271.630890][T16230] copy_folio_from_iter_atomic+0x75f/0x1170 [ 271.636797][T16230] generic_perform_write+0x2c1/0x490 [ 271.642185][T16230] ext4_buffered_write_iter+0x1ee/0x3c0 [ 271.647829][T16230] ext4_file_write_iter+0x380/0xfa0 [ 271.653047][T16230] iter_file_splice_write+0x6c4/0xa80 [ 271.658418][T16230] direct_splice_actor+0x156/0x2a0 [ 271.663536][T16230] splice_direct_to_actor+0x311/0x670 [ 271.668914][T16230] do_splice_direct+0x119/0x1a0 [ 271.673760][T16230] do_sendfile+0x382/0x650 [ 271.678176][T16230] __x64_sys_sendfile64+0x105/0x150 [ 271.683456][T16230] x64_sys_call+0x2dc4/0x3020 [ 271.688214][T16230] do_syscall_64+0x12c/0x370 [ 271.692814][T16230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.698700][T16230] [ 271.701004][T16230] Reported by Kernel Concurrency Sanitizer on: [ 271.707226][T16230] CPU: 0 UID: 0 PID: 16230 Comm: syz.4.4605 Not tainted syzkaller #0 PREEMPT(full) [ 271.716582][T16230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 271.726831][T16230] ================================================================== [ 271.913122][T15126] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.032403][T16270] netlink: 'syz.2.4615': attribute type 3 has an invalid length. [ 272.040363][T16270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4615'. [ 272.049440][T16270] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4615'. [ 272.124505][ T157] bridge_slave_1: left allmulticast mode [ 272.130199][ T157] bridge_slave_1: left promiscuous mode [ 272.136212][ T157] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.166853][ T157] bridge_slave_0: left allmulticast mode [ 272.181314][ T157] bridge_slave_0: left promiscuous mode [ 272.188198][ T157] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.516121][ T157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.526870][ T157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.536587][ T157] bond0 (unregistering): Released all slaves [ 272.589039][ T157] hsr_slave_0: left promiscuous mode [ 272.594721][ T157] hsr_slave_1: left promiscuous mode [ 272.600381][ T157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.608562][ T157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.616083][ T157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.624068][ T157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.634969][ T157] veth1_macvtap: left promiscuous mode [ 272.640568][ T157] veth0_macvtap: left promiscuous mode [ 272.646277][ T157] veth1_vlan: left promiscuous mode [ 272.651504][ T157] veth0_vlan: left promiscuous mode [ 272.711173][ T157] team0 (unregistering): Port device team_slave_1 removed [ 272.720980][ T157] team0 (unregistering): Port device team_slave_0 removed