last executing test programs: 4m29.676605439s ago: executing program 3 (id=26): r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x8c}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf2000e8f8e46b417, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') readv(r4, &(0x7f0000000740)=[{&(0x7f0000000400)=""/162, 0xa2}], 0x1) 4m28.941263393s ago: executing program 3 (id=31): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="022000000000000014000300626f6e6430000000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x11, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000b300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r3}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x200003, {0x0, 0xff, 0x4}, 0xff}, 0x18) setsockopt$MRT6_TABLE(r5, 0x29, 0xcf, &(0x7f00000004c0)=0xffffffff, 0x4) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x29, 0x1, 0x3, 0x0, 0x0, 0x1000000009, 0xe43b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8000000000000008, 0x23fff8003}, 0x219e40, 0x81, 0x43a1bd76, 0x7, 0xd, 0x7, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r6 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0x5, 0x6, 0x6}}}}]}, 0x48}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r8, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) sync() sync() preadv(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x8800) r9 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000200)={0x0, 0xffffffffffffff50, &(0x7f0000000ac0)}, 0x44854) 4m28.582116444s ago: executing program 3 (id=36): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x24842, 0x0) mq_open(&(0x7f0000000100)='stripe', 0x40, 0x55, &(0x7f0000000140)={0xd353, 0x7, 0xf, 0x101}) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x3d, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a"], 0x54}}, 0x0) r4 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file1\x00', 0x0, 0x10, r4}, 0x18) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000004c0)=ANY=[@ANYBLOB="0180000000000000ffff00000000000001000000080000000100000000100000fffffffffffff77f01000000000000000300000000000000000000000000b5b6d1aa710600000000000000000000001000000000000000af37f414bd5c956e103a78584ecba940bf478daa9426b65d6f1b877fcf831bdee528a03e62c4606483bdd03ccb148b738cf1b966988a9c4453a8ec50037b7116d40669154c4c78e52f59d3db9c374394deb9f8e6d5cb27562509531013dc0dbd5a688e05de0c75476836bd87"]) 4m25.498318056s ago: executing program 3 (id=61): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) (fail_nth: 3) 4m25.307111072s ago: executing program 3 (id=64): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x2, 0x80805, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) select(0x20000088, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, 0x2710}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', 0x0}) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x0, 0xf8, 0x0, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000340), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2b}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0xff000000], [0xff000000, 0xffffff00, 0xff, 0xff], 'dummy0\x00', 'geneve0\x00', {}, {0xff}, 0x62, 0xff, 0x2, 0x15}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x100}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0xff}}}, {{@uncond, 0x0, 0x168, 0x190, 0x0, {}, [@common=@inet=@udplite={{0x30}, {[0x4e22, 0x4e20], [0x4e23, 0x4e22], 0x2}}, @common=@srh1={{0x90}, {0x1d, 0x7, 0xf8, 0x4, 0xffe0, @empty, @local, @mcast2, [0xff, 0xffffffff, 0x0, 0xff000000], [0xff, 0xff000000, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xffffffff], 0x46, 0x18c8}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x2, 0x7, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r6, 0x10001, 0x0) 4m25.097762049s ago: executing program 3 (id=70): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000bc0)="ccd83185d0a967441ff0e5bc6644867e3b15d9b6d39628128b4a6a7cd1d4858f9951641520495f3b801150018e0e7f9f76cbaca789ed4182900b6997c51640a9987a219c3a1b2c9c6ad19866d3d2de0916af066e10ca3d5497cb7309663bf3b7458d62d1d8cbd1940f80606f4b9611ffd117214fdf7e0541f976e97798baf861f4aba9a6057c17c82bbfd79c170e3c9b18ff322589d1fc8a78324a12e757a49eeaa68c2d1c6ad339c3b6da5a17", 0xad}, {&(0x7f00000009c0)="be864e820e4e156988a56b1ada635034fbd0d2253abc9956a0ded680004143221571ed22291c9157096f5adb9fde4acf0eabc43806dc1f7f66eed89fddef78509beb5783c8bdd786f70f6199f98871f536658ec3125c4738495362fe62eccaaf2ebcc2ce3a1166dca46b168e0106c896298d70c322b3f2ca8c66c60737c8972c0ee6df44f890d7926625667a9b300ac2edc67f26fb15d2986e21e56c41f21b44742b7cf5ae4c9cd9880f6f2a8d7a8c4055746cf5ab39da82b7e3ced08c8b1344c5db0a9fe8e9d27ecd6766996e62b373758465704e214ae5d88428f3", 0xdc}], 0x3}, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x15, 0xe2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3, 0x2}, 0x80, 0x0, 0x0, 0x8, 0x8f2c, 0x3e, 0x0, 0x0, 0xfffffffc, 0x0, 0x1ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0xffff, 0x4}, 0x8) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, 0x0) r6 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa8, 0x2, 0x0, 0x0, 0x0, 0x1, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0}, 0x109805, 0x0, 0x7fc, 0x6, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r2, @ANYRES16=r6], 0x14) 4m25.05406909s ago: executing program 32 (id=70): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000bc0)="ccd83185d0a967441ff0e5bc6644867e3b15d9b6d39628128b4a6a7cd1d4858f9951641520495f3b801150018e0e7f9f76cbaca789ed4182900b6997c51640a9987a219c3a1b2c9c6ad19866d3d2de0916af066e10ca3d5497cb7309663bf3b7458d62d1d8cbd1940f80606f4b9611ffd117214fdf7e0541f976e97798baf861f4aba9a6057c17c82bbfd79c170e3c9b18ff322589d1fc8a78324a12e757a49eeaa68c2d1c6ad339c3b6da5a17", 0xad}, {&(0x7f00000009c0)="be864e820e4e156988a56b1ada635034fbd0d2253abc9956a0ded680004143221571ed22291c9157096f5adb9fde4acf0eabc43806dc1f7f66eed89fddef78509beb5783c8bdd786f70f6199f98871f536658ec3125c4738495362fe62eccaaf2ebcc2ce3a1166dca46b168e0106c896298d70c322b3f2ca8c66c60737c8972c0ee6df44f890d7926625667a9b300ac2edc67f26fb15d2986e21e56c41f21b44742b7cf5ae4c9cd9880f6f2a8d7a8c4055746cf5ab39da82b7e3ced08c8b1344c5db0a9fe8e9d27ecd6766996e62b373758465704e214ae5d88428f3", 0xdc}], 0x3}, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x15, 0xe2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3, 0x2}, 0x80, 0x0, 0x0, 0x8, 0x8f2c, 0x3e, 0x0, 0x0, 0xfffffffc, 0x0, 0x1ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0xffff, 0x4}, 0x8) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, 0x0) r6 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa8, 0x2, 0x0, 0x0, 0x0, 0x1, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0}, 0x109805, 0x0, 0x7fc, 0x6, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r2, @ANYRES16=r6], 0x14) 3m23.118496948s ago: executing program 4 (id=698): r0 = gettid() perf_event_open(&(0x7f0000000040)={0x9, 0x80, 0x0, 0x0, 0x0, 0xf9, 0x0, 0x8, 0x208, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5, 0x3, 0xfffffffffffffffd, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8}, r0, 0x0, 0xffffffffffffffff, 0xa) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = dup(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x106240, 0x10008, 0x420da, 0x9, 0x9, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x8, 0xffffffffffffffff, 0xb) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x11, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES64=0x0, @ANYRES32=r4], 0x1a0}}, 0x800) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000280)=ANY=[@ANYBLOB="66e600a6ff0000002b21b6ef41c7a5c8dfe73e2a9aa566b533c93d9524d87bee471da84e2751cd46220268ce7f9134f92406ec30af595507b2a5e5f8b84f2b4bce034219d19b442e4833b74ded45718d67bf5a81f0ad3b4d06ac09b684ebf89be51a29deb8fd99b6c915a9a77ea14a11621e898708dc3b0c73ecdb29966bf8ae39bccb236623f7464f7ff15cdcead3a286"], 0x8) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r7, 0x1) syz_emit_ethernet(0x52, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32, @ANYBLOB="7002000090780000fe06e2d4c3d90000"], 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, 0x0, 0x20000080) getsockname$packet(r5, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x588d0}, 0xc846) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x14004040}, 0x44800) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)}], 0x1) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0xb, &(0x7f00000000c0)=0x8007, 0x4) getsockopt$inet6_buf(r9, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f0000000880)={[], [{@euid_gt}, {@fowner_lt}, {@flag='nolazytime'}, {@smackfsroot}, {@euid_eq}, {@euid_gt}, {@dont_hash}, {@euid_lt}]}, 0x2, 0xbde, &(0x7f0000001f40)="$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") rmdir(&(0x7f0000000380)='./file0/../file0\x00') r10 = fsmount(r2, 0x0, 0x70) getsockopt$inet6_tcp_buf(r10, 0x6, 0xe, 0x0, &(0x7f0000000540)) 3m22.197181148s ago: executing program 4 (id=708): r0 = socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 3m22.070331103s ago: executing program 4 (id=710): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1, 0x0, 0xa6ff}, 0x0) 3m22.059920433s ago: executing program 4 (id=712): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000100)={0x1, 0x2, 0x8000, 0x0, r0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newqdisc={0x14c, 0x24, 0x2, 0x8000000, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff1, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x11c, 0x2, {{0xfffffffe, 0x2, 0x10000, 0xa, 0xe7, 0xcc36}, [@TCA_NETEM_LOSS={0xd0, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x40, 0xf, 0xa, 0x4007559, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0xfffffffa, 0xa, 0xa}}, @NETEM_LOSS_GI={0x18, 0x1, {0xd82c, 0x8, 0x6, 0x0, 0xc5e0}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1000, 0x2, 0x0, 0x8, 0x1}}, @NETEM_LOSS_GI={0x18, 0x1, {0x4, 0x4, 0x9de, 0x9, 0xb502}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x0, 0xfffff001, 0xf6, 0x3}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5b, 0x20000, 0x3, 0x9}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x40003, 0x0, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x1, 0x1, 0x7, 0x3}}]}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x6}, @TCA_NETEM_REORDER={0xc, 0x3, {0x6, 0x4}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x100020}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4546cfee17049510}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x4, @perf_config_ext={0x9, 0x80}, 0x4, 0x0, 0x10003, 0x0, 0x2, 0x80000003, 0x0, 0x0, 0x6, 0x0, 0x800}, r0, 0x1, 0xffffffffffffffff, 0x1) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000356ffc)=0xffbfff40, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8982, &(0x7f0000004840)={0x8, 'vlan0\x00', {'nicvf0\x00'}, 0x5}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f00000a2000)={0x5, &(0x7f0000000340)=[{0xff31, 0x5, 0xa1, 0xa}, {0x0, 0x4, 0x66, 0x2}, {0x6, 0x0, 0xb}, {0x1, 0xb, 0x6, 0x5}, {0xfff, 0x9, 0x6, 0x7}]}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xc, &(0x7f0000000200)=ANY=[@ANYRES64=r7, @ANYRESHEX=r4], &(0x7f0000000240)='GPL\x00', 0x953e, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x7, 0x6}, 0x6000, 0x400000000000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) msgget$private(0x0, 0x6a0) preadv2(r10, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r11) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) 3m21.301955078s ago: executing program 4 (id=715): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x109, [{0x4, 0x1, 0x1}]}]}, {0x0, [0x30, 0x0, 0x0, 0x2e]}}, 0x0, 0x36, 0x2000, 0x8, 0x1}, 0x28) 3m21.017371377s ago: executing program 4 (id=718): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb1, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x7, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000a0000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r7, &(0x7f0000000300), &(0x7f0000000740)=""/4096}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=r4, @ANYBLOB="46060900000000002400128009000100626f6e6400000400140002800800040088"], 0x44}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r10], 0x54}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000e400e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000010405000000000000030000020000000a0002000000000642"], 0x20}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, r12, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_FIRMWARE_NAME={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40840}, 0x48800) 3m21.008131397s ago: executing program 33 (id=718): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb1, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x7, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000a0000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r7, &(0x7f0000000300), &(0x7f0000000740)=""/4096}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=r4, @ANYBLOB="46060900000000002400128009000100626f6e6400000400140002800800040088"], 0x44}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r10], 0x54}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000e400e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000010405000000000000030000020000000a0002000000000642"], 0x20}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, r12, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_FIRMWARE_NAME={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40840}, 0x48800) 2m48.629988273s ago: executing program 6 (id=963): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f00000005c0)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x80000000}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$eJzs3c1rHOUfAPDvbHb7/vs1hVKsiBR6sFK7aRJfKnioR9FiQT3XkGxDyaZbspvSxILtwV68SBFELIh3vXvwULx49K8oaKFICQp6WZnNbLJpNslmszFp9/OBSZ5nZnafeeaZ78Mz++wyAfStE+mfXMTxiPgiiTjcsi0f2cYTi/stPL45ni5J1Osf/JFEkq1r7p9k/w9mmeci4ufPIk7nVpdbnZufGiuXSzNZfqg2fW2oOjd/5sr02GRpsnR1ZHT03GujI2++8XrP6vryxb++fv/+O+c+P7nw1Q8Pj9xN4nwcyra11mNT9q7I3WrNnKjXs3NSiPNPvGy4q8J2r2SnD4CuDGRxXoiI44XDhWbUA8++TyOiDvSpZJPxv1d/Ac+I5jigeW/f9X3wU+rR24s3QKvrn1/8bCT2Ne6NDiwkK+6M0vvdwR6Un5bx4+/37qZLbOVzCIBNunU7Is7m86v7vyTr/7p3toN9nixD/wf/nfvp+OeVduOf3NL4J9qMfw62id1ubBz/uYc9KGZN6fjvrbbj36VJq8GBLPe/xpivkFy+Ui6lfdv/I+JUFPam+fXmc84tPKivta11/JcuafnNsWB2HA/zK+eYYmKsNraVOrd6dDvi+bbj32Sp/ZM27Z+ej486LONY6d6La23buP7bq/5dxEtt2395RitZf35yqHE9DDWvitX+vHPs17XKb1//X37ahqq2lbb/gfXrP5i0ztdWN1/Gt/v+Ka21rdvrf0/yYSO9J1t3Y6xWmxmO2JO8t3r9yPJrm/nm/mn9T51cv/9rd/3vj4iPO6z/naPfv9B9/bdXWv+JTbX/5hMP3v3km7XK76z9X22kTmVrOun/Oj3ArZw7AAAAAAAA2G1yEXEoklwx9mXpXK5YXPx+x9E4kCtXqrXTlyuzVyei8VvZwSjkmjPdh1u+DzGcfR+2mR95Ij8aEUci4suB/Y18cbxSntjpygMAAAAAAAAAAAAAAAAAAMAucXDp9/+x4vf/qd8GdvrogG2XX3z+N9CHNnzkfy+e9ATsShvGP/DMEv/Qv8Q/9C/xD32pMcUn/qF/iX/oX+If+pf4BwAAAAAAAAAAAAAAAAAAAAAAAAAAgJ66eOFCutQXHt8cT/MT1+dmpyrXz0yUqlPF6dnx4nhl5lpxslKZLJeK45Xpjd6vXKlcGx6J2RtDtVK1NlSdm780XZm9Wrt0ZXpssnSp5DnjAAAAAAAAAAAAAAAAAAAAsFp1bn5qrFwuzfQgUSiXS7mI6GTniB4V+tQl/t7y+6Ttdivf2XnenkQSy2vyu+KsSvQ6sdM9EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAs+zcAAP//MUwypA==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101142, 0x0) sendfile(r2, r2, 0x0, 0x8) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRESDEC=r1], 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x48004) 2m48.356526772s ago: executing program 6 (id=966): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000a0000000000000003000000240a00001000050095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x7d, &(0x7f0000000180)=""/125, 0x41000, 0x4}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) fsmount(0xffffffffffffffff, 0x0, 0xb) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r1, 0x710, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, @FOU_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xc4, 0x2, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x805}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x921b}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x64f5}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0xb6}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0xa}]}]}, 0xc4}}, 0x0) 2m48.0969568s ago: executing program 6 (id=969): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000380)={[{@minixdf}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@grpjquota}, {@stripe={'stripe', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@grpid}]}, 0x80, 0x54f, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000080000a48000000060a0b160000000000000000020000081c0005800800024000000001080002400000000108000140000060070900010073797a3000000000090002007327078ed5000000140000001100010000000000000000000000000a"], 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r4 = fcntl$dupfd(r1, 0x406, r1) sendmsg$inet_sctp(r4, &(0x7f0000000840)={&(0x7f00000001c0)=@in={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000044}, 0x4000004) fstatfs(r0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 2m47.534827869s ago: executing program 6 (id=974): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000500)='key_or_keyring\x00Z\t\xd10x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000180)=@newqdisc={0x2c, 0x28, 0x1, 0x4003, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x3, 0xfff1}, {0x8, 0xffff}, {0xc, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}}, 0x4000080) close_range(r0, 0xffffffffffffffff, 0x0) 2m47.380484274s ago: executing program 6 (id=975): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2m46.833815382s ago: executing program 6 (id=978): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000d7c0d6eb00000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x2) (async) r5 = socket(0x10, 0x803, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4014}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) (async) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000300)={0x25, {{0xa, 0x4e23, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}}, {{0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x108) (async) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000300)={0x25, {{0xa, 0x4e23, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}}, {{0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x108) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@gettfilter={0x24, 0x25, 0x6ce324a938346939, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c004}, 0x0) 2m46.59685391s ago: executing program 34 (id=978): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000d7c0d6eb00000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x2) (async) r5 = socket(0x10, 0x803, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4014}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) (async) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000300)={0x25, {{0xa, 0x4e23, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}}, {{0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x108) (async) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000300)={0x25, {{0xa, 0x4e23, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}}, {{0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x108) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@gettfilter={0x24, 0x25, 0x6ce324a938346939, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c004}, 0x0) 1m1.979235852s ago: executing program 5 (id=2034): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x780, &(0x7f0000000040)={0x0, 0x1e69, 0xc000, 0x0, 0xd1}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc, 0x4}, 0x0, 0x0, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_ATTACH(0x9, 0x0, 0x11) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4af584f73552a348) io_uring_enter(r0, 0x0, 0x1000002, 0x37, 0x0, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x1}]}}, 0x0, 0x26, 0x0, 0x1, 0x1, 0x10000, @value=r1}, 0x28) 1m1.035974813s ago: executing program 5 (id=2040): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x10, @empty, 0x4}, @in={0x2, 0x4e24, @empty}], 0x2c) sendto$inet6(r1, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000001a80)={0x0, 0xd7, "3d0ebd19d1e3ed8e5361ad2e25a887a865d98000e4a84f4d2cd394c8cea761926c2c7b471d892b3b5dfde0f5380f688b79c169abbdea08c03e8d4f130ac0c0129c3566368b549820f1abdb08b59397314084061a8b0538e9cc7eb31107d976df61e9a4b67289bd9478c3292e548d4a2f2400d32bf946e1e000e8e7837fbdd201ea4a1a9828222ae784ff2dfe19ad3c771d0631f4f9b7f5207826628037c875ba86256f44fd31dd8089bba6a571172f4e83b87d5e124bcccb8d24c6fc72b20be14572d43823f1bb2f7c880beca788a4cf09bbf3afff9357"}, &(0x7f0000001b80)=0xdf) 1m0.916455887s ago: executing program 5 (id=2045): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x6020400) r1 = syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r2, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r2, 0x0, 0x40000004, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000340)=0x4090, 0x4) syz_open_procfs(r1, &(0x7f0000000380)='net/ip6_tables_names\x00') pidfd_getfd(r2, r2, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000001c0)={0x0, 0xffffffffffffff88, &(0x7f0000000180)={&(0x7f0000000440)={0x78, r6, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7fff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x803]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_SECRET={0x14}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x78}, 0x1, 0x0, 0x0, 0x54}, 0x8010) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0xfe8e, 0x12) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x82000490}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000008991fb8b2fe4b8f9d05172f28345e0412e008195491ec006e65b535e1af5dc6bb7818df6666bb249d97efba0456c8ed28757a6df76c27a1756d4a2c17c03f800b770a8ad849805971f8d90da0d5e0d1da694867464fb802cfe1b8c81c5096ecba1006d48e8374e8bda0eb180bc5fc388251b60ac238d3914f01e9c52a44c445ad85e7a7b3220941fc220", @ANYRES16=r6, @ANYBLOB="200028bd7000fddbdf2503000000050006000700000014000100fc0200"/42], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f00000003c0)={0x19, 0x5, 0x5, 0xb, 0x2, 0x81}) 1m0.538085539s ago: executing program 5 (id=2048): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000180)={0x0, 0x0, 0xe3800000000000, 0x58e}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204000, &(0x7f0000000040)={[{@grpquota}, {@barrier_val={'barrier', 0x3d, 0x857}}]}, 0x4, 0xbac, &(0x7f00000017c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00', 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x145, 0x80000000) openat$cgroup_ro(r1, &(0x7f00000003c0)='pids.events\x00', 0x275a, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_int(r2, 0x1, 0x3, 0x0, &(0x7f0000000040)=0xa00) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x0, &(0x7f0000000540)={[{@dioread_nolock}, {@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@noblock_validity}]}, 0x3, 0x47d, &(0x7f0000000ec0)="$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") syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) stat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYRES16=r4], 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchdir(r3) openat(0xffffffffffffff9c, 0x0, 0x181242, 0x148) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r5, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xffffffffffffffff}) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000240)={r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x800, &(0x7f0000000100)={@align=0xd7, {0x5, 0xa94, 0x9, 0x1cbd}}, 0x8000, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x7}) r7 = inotify_init1(0x800) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0xdb4, 0x1, 0x7, 0xd7f, 0x1}) r8 = syz_clone(0x1000011, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r8, &(0x7f0000000240)=0x0, &(0x7f0000000280)) fcntl$lock(r6, 0x7, &(0x7f0000000280)={0x0, 0x6, 0x5, 0x4000000008, r8}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) 1m0.173591621s ago: executing program 5 (id=2050): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x4000000, {0x7, 0x0, 0x0, r1, 0x0, 0x96, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 58.326282802s ago: executing program 5 (id=2058): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x10ffff, 0xfffffffd}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x1f) 58.240428015s ago: executing program 35 (id=2058): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x10ffff, 0xfffffffd}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x1f) 6.214769305s ago: executing program 2 (id=2472): set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4, 0x3, 0x0, 0x2, 0x0, 0x9, 0xf40bb, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x0, @perf_config_ext={0x7, 0x100}, 0x104084, 0xffffffffffffffff, 0x43a1bd76, 0x7, 0x7ff, 0x2, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000100)=0xffff8000, 0x4) listen(r1, 0x7fff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0), &(0x7f0000000280)=0xffffffffffffff9e) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x38) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth0_to_batadv\x00', 0x3}, 0x18) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x1, 0xf6, 0x0, 0x0, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x420, 0x80000001}, 0x114905, 0x8, 0x0, 0x1, 0x72, 0x800, 0x4001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x73d993b3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x93c6}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) 4.691178255s ago: executing program 2 (id=2480): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @random="0000008000", 'veth0_to_team\x00'}}, 0x1e) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x7ffd, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") time(0x0) socket$packet(0x11, 0x3, 0x300) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) sendmmsg(r0, &(0x7f0000005b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20001000) sendto(r0, &(0x7f0000000140), 0x0, 0xe050, &(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x1, 0x0, 0x4, {0xa, 0x4e22, 0x8001, @mcast1, 0x1}}}, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10susz\a\x00\x00\x00\x00\x00\x00\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c4247e0000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4.23900664s ago: executing program 1 (id=2486): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000002000)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_ADT={0x60, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'wlan1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000090) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000001240)={[{@abort}, {@inlinecrypt}]}, 0x4, 0x541, &(0x7f0000001e00)="$eJzs3d9vW1cdAPDvvbG7pM2wBwiVSWwTK2qnUbtpGBSEtiEheJoEjGdKSNwoqhNXsTOaaIJM/AFICAESfwAvSDzwiIT2JyDQJHhHgEATdPAIveja1yJO7Npt3Hq4n490fM+5v77nXNnX98fRvQE8tp6LiFcjYiEiXoiISjE+LVIc9lI+33t33lzPUxJZ9vrfk0iKcf115eVSRJwrFluMiK99OeJbycm47f2Dm2vNZmO3KNc727fq7f2Dy1vba5uNzcbO6urKLyPipWtXssKp2lmNiJe/+Jcfff9nX3r515/89h+v/+3Sd/Jqff4jvXpHxPqpAozQW3e5uy368m20+zCCzUjenvLCrGsBAMAk8mP8D0bEx7vH/5VY6B7NAQAAAPMke2U5/p1EZAAAAMDcSiNiOZK0VvQFWI40rdV6fXg/HGfTZqvdefFGa29nI58WUY1yemOr2bhS9BWuRjnJyytFH9t++eqx8mpEPBURP6wsdcu19VZzY9YXPwAAAOAxce7ZwfP/f1XSbh4AAACYM9WRBQAAAGBeOOUHAACA+ef8HwAAAObaV157LU9Z/z3eG2/s791svXF5o9G+WdveW6+tt3Zv1TZbrc3uM/u2x62v2Wrd+lTs7N2udxrtTr29f3B9u7W307m+NfAKbAAAAOAReurZt/+QRMTh55a6KYrnAAIM+POsKwBM08KsKwDMTGnWFQBmpjx2DnsImHfJmOknO+/0rhXGb+4jyIXfvfuN+6sWAAAwRRc/evL+/5li2vhrA8D/M319AODxM3h3b2lm9QAevfKD9gA8P+2aALPygd7giX75bjY4feTDOya4/9+7xpBlD147AABgGpa7KUlrxTnAcqRprRbxZNzNqlFObmw1G1eKab+vlJ/IyyvdJZOxfYYBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAA5lpE+tek+zT/iIuVC8uDVweOvfXrp6//+PZap7O7EnEm+UclH3UmIjo/yceXYvdq5pUAAAAAMFtL+Uf3/P1qMVyZdZUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmB8vdj/fu/Pmej89yujvfiEiqsPil2KxO1yMckSc/WcSpSPLJRGxMIX4h29FxPlh8ZO4m2VZtajFsPhLDzl+tbtphsdPI+LcFOLD4+ztfP/z6rDfXxrPdYfDf3+lIp3W6P1f2ovc38kM2f88eaw8ytPv/KI+Mv5bEU+Xhu9/+vvfpNf+gRB54fkJ2/jNrx8cDJ1wZJXD4h+NVe9s36q39w8ub22vbTY2GzurqyufvvaZay9du1K/sdVsFJ9Dw/zgY7+6e6/2nx0RvzrY/hPb/8JErc/iP+/cvvOhXqE8LP6l54f//54fET8t/vs+UeTz6Rf7+cNe/qhnfv7bZ46WF47F3xjR/sUx7b80SfPT+OwLX/3en3oLHfuWntgaAMCj0N4/uLnWbDZ275FZnGCe+8pEnHY9r0y1Pu+HTIyfZ/F9UtXxmawScX9LZd/tfR9PF/2Ui5/IZKdZvBRTqMaZE7/ThXjQFSYRh/m6JvxCAgAAc+Z/B/33uoMEAAAAAAAAAAAAAAAAAAAAPEwP+FiyxYiYeObjMQ9n01QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHv6bwAAAP//SwrVDA==") 3.840479063s ago: executing program 2 (id=2487): setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)=ANY=[@ANYBLOB="380000000314010027bd7010fedbdf25090002006c797a32000000000800410072786500140033006c6f0000000000000000000000000000c0b421d124da5257b9f143c49a2bf14f083ee7ba42a69e3515b06a90d0b00cd2cf0fd3da28cef1bc6536f94a6b7b69c445eea24e671c60b30445cf58be17eb208a7e6da83935ce206cbe59a9db34134b03e5e39836568df97fbc6addbacdb73876a4ae2b569ec88c56737c0d8f1b6936dc"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) r1 = socket(0x40000000015, 0x805, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x1000, 0x9}]}) sendto$inet6(r2, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@fallback=r5, r5, 0x2f}, 0x20) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) writev(r6, &(0x7f0000000380), 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)={@cgroup=r4, r5, 0x2f, 0x10, 0x4, @void, @value=r4}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20044000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000240)={0x9, 0x81, 0x4, 0x6, 0x5, 0xb, 0x200, 0x7}, &(0x7f00000005c0)=0x20) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r8 = socket$kcm(0x29, 0x2, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) sendmsg$kcm(r8, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) getsockopt(r1, 0x114, 0x5, &(0x7f0000019100)=""/102399, &(0x7f00000000c0)=0x18fff) 3.768946936s ago: executing program 1 (id=2488): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) accept(r0, &(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x80) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e29, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/142, 0x1}, 0x82}], 0x1, 0x40012002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x92}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb228, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10006, 0x20da, 0x5, 0xa, 0x20005, 0x24, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) fcntl$getown(r1, 0x9) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) 3.702022078s ago: executing program 1 (id=2491): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x12, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000008b000000000000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000400048500000086000000bf09000000000000550901000000010395000000000000001daa0600000000002500f4ff9a456adf45000200060000000700000003000000b702000003000000850000002a000000b70000000040000095"], &(0x7f00000010c0)='syzkaller\x00', 0x9, 0xff2, &(0x7f0000001cc0)=""/4082, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r5 = socket(0x40000000015, 0x5, 0x0) r6 = socket(0x22, 0x2, 0x24) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000003c0)=[{&(0x7f0000001800)='\x00', 0x1}], 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, 0x0, 0x13f, 0xa}}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r9, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r7, 0x0, r10, 0x0, 0x25a5, 0x4) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x12, r11, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendto$inet(r3, 0x0, 0x0, 0x200088d5, 0x0, 0x45) 3.423353047s ago: executing program 8 (id=2494): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7fffffffffffffff]}, 0x8, 0x80000) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x221c448, &(0x7f0000000080)=ANY=[@ANYBLOB='map=acorn,utf8,session=0x0000000000000004,session=0x0000000000000056,map=normal,session=0x000000000000003d,unhide,norock,block=0x0000000000000400,map=off,session=0x0000000000000001,uid=', @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRESOCT], 0x0, 0xa80, &(0x7f0000000280)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b 7:'], 0xb8) (fail_nth: 3) 3.100265538s ago: executing program 8 (id=2497): clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x8000000000000000, 0x0, 0x0, 0x8, 0x2000000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffff8, 0x8}) r0 = open$dir(&(0x7f0000000080)='.\x00', 0x480, 0x10) fcntl$notify(r0, 0x402, 0x80000023) r1 = open(&(0x7f0000002180)='.\x00', 0x101000, 0x8a) fcntl$notify(r1, 0x402, 0x4) prctl$PR_SET_MM_EXE_FILE(0x50, 0xd, 0xffffffffffffffff) r2 = open(&(0x7f0000002180)='.\x00', 0x701400, 0x1eb) fcntl$notify(r2, 0x402, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 3.073095979s ago: executing program 8 (id=2498): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000003c0)='J{', 0x2}], 0x1}, 0x2000c8c0) recvmmsg$unix(r0, &(0x7f0000000f40)=[{{0x0, 0x1800, &(0x7f00000007c0)=[{&(0x7f0000000240)=""/157, 0x9d}], 0x1, &(0x7f0000000840)=[@rights={{0x10}}], 0x10}}], 0x1, 0x0, 0x0) 3.03351346s ago: executing program 8 (id=2499): perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4e93, 0x18445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x5}, 0x8080, 0x4, 0x80000000, 0x5, 0x400000a5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$igmp6(0xa, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6092c01f00442f002001000000000000000000000000000100000000000000000000ffff000000002421880b000000"], 0x0) 2.959084962s ago: executing program 7 (id=2500): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000080)={0x8, 0x8}) r1 = socket$kcm(0x2d, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x36}}, './file0\x00'}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x14080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000001c0)) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, 0x0) 2.862092345s ago: executing program 7 (id=2501): perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x4a718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x100000000, 0xe}, 0x104b18, 0x6, 0x0, 0x1, 0x5, 0x4, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsgid(r1) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRESHEX=r6], 0x15) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") openat(0xffffffffffffff9c, 0x0, 0x6aed42, 0x4) r8 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000200)='./file0\x00', 0x0, r9) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="900000001000370400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8b04040000000000700012800b00010067656e657665000060000280050004000100000014000700000000000000000000000800000000010800010002000000050009000100000005000c00010000000500080000000000050003003f00000005000d"], 0x90}}, 0x0) 2.856761376s ago: executing program 2 (id=2502): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x2, 0x64019, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x41}}}}, 0x118) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020bf4f635a621f30f122200000178d60300041000ffffff85000090cf9759ce750ac6c0aa00a5e50ffde96e1cc2b3fc05768da0f7f6cd8f4eb97b47eaaf8d4de1aa44ca94305678da3d5dd863b30ad89c1aa3ac62"], 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0x8}, 0x640, 0x5, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000340)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB="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"], 0x1, 0x2b4, &(0x7f0000000e40)="$eJzs3cFr024YwPFn7bZ2HVt7GIPfD8QHveglbPUvKLKBWFDmOqYHIXOplsZmNLVSEbeb1/0dw6MnBfUf2GU38SpeiiB42UGsrEm2rqu4ztVM8/1Aydv3fZ/kTd60PAk0bS5vPiwXXaNo1iSWVImJbMiuSGav5Bvyl7F2eVQ6bcjl8a/vz926fed6Lp+fW1Cdzy1eyarq5Pk3j5++uPCuNr70cvJ1QrYzd5tfsh+3p7f/a35fDNbuiJi64jg1c8W2dLXklg3Vm7ZlupaWKq5VrWlHe9F21tYaalZWJ1JrVct11aw0tGw1tOZordpQ875ZqqhhGDqRkqiJ9x1R2FpYMHMDGQzCMNarslrNmfGejYWtPzEoAABwtjSXN+Nh5P8PSq6WXK04h/L7o/l/TPrI/0Uinf/3j/w/Cvby/5T/+T2M/B8AAAAAAAAAAAAAAAAAAAAAgL/BbquVbrVa6WAZvBIikhSR4H3Y48RgMP/R1vHDvaSI/bxeqBe8pdeeK0pJbLFkZkTkW/t88Hnl+Wv5uRltm5a39rofv14vxCURxAcyveNnvXjtjF+XEUl1bj8raZnqHZ/tEV8vjMqli62Ev2VLDEnLzj1xxJbV9nl9EP9sVvXqjXxX/Fi7HwAAAAAA/wJD92W6r9/b7YYGjw3pavcqD+4PSPoX9we6rq+H5f/h8PYbAAAAAIAocRtPyqZtW9UIFIL/PziVFYZ/6JLH7TwsIn7Nq7MyFweFoQ1vVo42xUTkpGuO/94sfxaRQzVToU/3aRQ+PfKO9X7Nh593XpoI7UsJAAAAwEAESf9Q35GFnYEMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACACDruw8OC/id59ljH5uLh7CUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwNvwIAAD//5jbFjk=") bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{0x0, 0x0, &(0x7f0000004000)=[{0x0}, {&(0x7f00000070c0)=""/148, 0x94}], 0x2}, 0x3}], 0x1, 0x101, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.872612619s ago: executing program 8 (id=2503): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="022000000000000014000300626f6e6430000000000000000000000008000a00", @ANYRES32=r1], 0x3c}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x11, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r2}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x200003, {0x0, 0xff, 0x4}, 0xff}, 0x18) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f00000004c0)=0xffffffff, 0x4) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x29, 0x1, 0x3, 0x0, 0x0, 0x1000000009, 0xe43b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8000000000000008, 0x23fff8003}, 0x219e40, 0x81, 0x43a1bd76, 0x7, 0xd, 0x7, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0x5, 0x6, 0x6}}}}]}, 0x48}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) sync() sync() preadv(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x8800) r7 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000200)={0x0, 0xffffffffffffff50, &(0x7f0000000ac0)}, 0x44854) 1.801012381s ago: executing program 2 (id=2504): r0 = syz_io_uring_setup(0x5577, &(0x7f0000000280)={0x0, 0xe259, 0x200, 0x3, 0xa3}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180)) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRES16=r1, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r5 = socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, 0xffffffffffffffff, 0x1c}, 0x20) bind$rxrpc(r5, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r6, &(0x7f0000007700), 0x318, 0xfc0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000140)=[@sack_perm, @window={0x3, 0xdf2, 0xffff}, @window={0x3, 0x1b, 0x1}, @sack_perm, @sack_perm, @mss={0x2, 0x8}, @timestamp], 0x7) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x100010, r0, 0x10000000) socket(0x1e, 0x4, 0x0) 1.797521711s ago: executing program 7 (id=2505): socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x9, 0x0, 0x7995}, 0xfcb9, 0xecffffff, 0x0, 0x48000000, 0x8, 0x0, 0x0}) 1.748314423s ago: executing program 1 (id=2507): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) unshare(0x2040400) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000005124000380200000800c000180060001001e1c000010000a800c0002"], 0x50}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 1.691244875s ago: executing program 0 (id=2509): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="10000000"], 0x20}, 0x0) 1.633922627s ago: executing program 7 (id=2510): r0 = request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, r0) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x9) (async) ptrace(0x8, 0x0) r1 = syz_clone(0x300, &(0x7f0000000140)="994b1edf5787e062c687ff8a020af37844a0bb3bbac6177c084f0715e8056cf11d91badd31da93de3d33ae3a3bdaa4477ce7e8967f63aa7980dc84d86c939472739d7b532b758e7391cd28212d9e49119b0aee9b65799321fe7afa4664c251b88ad03e38fa343516871c019b1e478e96264d06144dd2fa20e17403ea3a29ebef57542d28bc51ef1aa4e3f9e1ba07991ee05a1191498b4850e45f1d65ec777e71f41909853c842b60f9949612837a292a322e9a7735b99a1c93d6f5bae77500f87d3170c5a565c74acd7f105b01a19a94552fd18fd6cb5cbfbdb5", 0xda, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="73ed7b0f4c1f746495b9ae78ae1ad564551ad6b14e2b090457601d8d28436a5ee162ed353e5f6e39c0afd6f3dcedaa6b59b8c2c3c5638a41dbce078a067858dffe2dd6292fce95fff4be00e8ecdd85a6318cfc9ca1b3a4eecb747c6de92d1a232bd2833814b3914012a3a3f3233f") (async) r2 = perf_event_open$cgroup(&(0x7f0000000380)={0x2, 0x80, 0x1b, 0x7, 0x4, 0xdc, 0x0, 0x9, 0x80, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000340), 0x8}, 0x201a, 0x8, 0x0, 0x4, 0x257b, 0x9, 0x5, 0x0, 0xb62c, 0x0, 0x1}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x2) r3 = perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x15, 0x3, 0x5, 0x5, 0x0, 0x60f, 0xc204e, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xf, 0x4, @perf_config_ext={0x80000000, 0x8e2e}, 0x100, 0x4, 0x32, 0x3, 0xc1, 0xf, 0x9307, 0x0, 0xe, 0x0, 0x8029}, r1, 0xc, r2, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000400)) (async) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000440)=0x8, 0x4) (async) sched_getaffinity(r1, 0x8, &(0x7f0000000480)) (async) pipe2$9p(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r5, &(0x7f0000000500)={0x20, 0x37, 0x1, {0x2, 0x8, 0xc1, r1, 0x2, '.*'}}, 0x20) (async) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000540)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r7, 0x2, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40c0) (async) ptrace$ARCH_MAP_VDSO_32(0x1e, r1, 0x6c, 0x2002) (async) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000006c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00', 0x0}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0], 0x0, 0x71, &(0x7f0000000a00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0xb2, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) (async) r10 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000c40), 0x48041, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000c80)={0x3c, r4, 'id1\x00'}) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50) (async) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d80)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000e00)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) (async) r15 = memfd_secret(0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ec0)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000700)=@raw=[@map_idx={0x18, 0x8, 0x5, 0x0, 0x4}], &(0x7f0000000740)='syzkaller\x00', 0x8, 0xd2, &(0x7f0000000780)=""/210, 0x1f00, 0x1a, '\x00', r8, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x1, 0x5, 0x3, 0x400}, 0x10, r9, 0x0, 0x4, &(0x7f0000000e40)=[r10, r11, 0x1, r12, r13, 0xffffffffffffffff, r14, 0x1, r15], &(0x7f0000000e80)=[{0x1, 0x3, 0xf, 0x2}, {0x2, 0x2, 0x3, 0x3}, {0x5, 0x2, 0xb, 0x3}, {0x5, 0x5, 0xe, 0x7}], 0x10, 0x1}, 0x94) (async) sendmsg$IEEE802154_SCAN_REQ(r6, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x2c, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x80}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0000}, 0x40001) (async) creat(&(0x7f0000001080)='./file0\x00', 0x158) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x5c, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40040}, 0x800) 1.633597617s ago: executing program 0 (id=2511): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) (fail_nth: 5) 1.366808185s ago: executing program 8 (id=2512): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = getpid() r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f00000000c0)={0x1, 0x8, 0xd7, 0x1ff, @vifc_lcl_addr=@local, @local}, 0x10) r3 = syz_pidfd_open(r1, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0xa9525000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) r5 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0xc, 0x8, 0xc, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x5, 0x8f, 0x9, 0x0, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x1, 0x8, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r5, 0x2) r6 = fcntl$dupfd(r3, 0x406, r3) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0xff08, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x2, 0x7, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20040840}, 0x20000800) unshare(0x6a040000) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000440), &(0x7f00000004c0)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1000}, 0x50) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000080)={0x2c, @empty, 0x18, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x80010, r0, 0x0) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FIONREAD(r7, 0x541b, &(0x7f0000000000)) 1.366445915s ago: executing program 7 (id=2513): perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4e93, 0x18445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x5}, 0x8080, 0x4, 0x80000000, 0x5, 0x400000a5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$igmp6(0xa, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6092c01f00442f002001000000000000000000000000000100000000000000000000ffff000000002421880b000000"], 0x0) 1.360840455s ago: executing program 0 (id=2514): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@newtfilter={0x44c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0xfff3, 0x1f}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff1, 0xd}}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x400, 0x2, [@TCA_CGROUP_EMATCHES={0x3fc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x15c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x40, 0x1, 0x0, 0x0, {{0x1607, 0x4, 0x7}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0xcf, 0x2}, {0x1, 0x3, 0x1}}}, @TCA_EM_META_LVALUE={0x26, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR='(U', @TCF_META_TYPE_VAR="d266c437167d1fdb1512", @TCF_META_TYPE_VAR="e153525e4f", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="863c6aa703"]}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xfc01}, {{0x2, 0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x9, 0x8, 0xe3}, {0x4, 0x0, 0x4}}}, @TCF_EM_META={0x90, 0x3, 0x0, 0x0, {{0x6, 0x4, 0x7}, [@TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR='\v', @TCF_META_TYPE_VAR="01ec17", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x29, 0x3, [@TCF_META_TYPE_VAR="68e2921e5668060826e0", @TCF_META_TYPE_VAR="1ab5e343970b9591", @TCF_META_TYPE_VAR="83d5", @TCF_META_TYPE_VAR="670b1a4e", @TCF_META_TYPE_VAR="c4b6a170c5eb577f", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR='j']}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x3, 0x1}, {0x7, 0x6}}}, @TCA_EM_META_LVALUE={0x2c, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="0385fb", @TCF_META_TYPE_VAR="31cf450b7be290", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="fe89ad", @TCF_META_TYPE_VAR="379e5fab", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="5dbc68650c9198", @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_VAR="bc1c7550b5645fc9"]}]}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x8}, {0x7, 0x7, 0x0, "fd628952f243b8"}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x0, 0x7, 0x5}, {{0x3, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}}}}, @TCF_EM_IPT={0x38, 0x1, 0x0, 0x0, {{0x7, 0x9, 0xfee6}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x1d4, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xfff8, 0x8, 0x3}, {0x1, 0x6, 0x2}}}, @TCF_EM_META={0xa0, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0xfb}, {0xdbb6, 0xf2, 0x2}}}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x4, 0x2}, {0xf22a, 0xe7}}}, @TCA_EM_META_LVALUE={0x30, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="1a4145a00ac1ab53", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="86fef320", @TCF_META_TYPE_VAR="195cc650453e0052", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="0eb277e5", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfffc, 0x7, 0x2}, {0x3, 0xcb, 0x1}}}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xea, 0x1}, {0x9, 0x9}}}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="eb", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_VAR="1e323b", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x4]}]}}, @TCF_EM_META={0x58, 0x3, 0x0, 0x0, {{0xbcde, 0x4, 0x3}, [@TCA_EM_META_LVALUE={0x2d, 0x2, [@TCF_META_TYPE_VAR="1bf44f", @TCF_META_TYPE_VAR="29d5208f3cec0e05", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="c9a23e28dab351c38cd1"]}, @TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_VAR='0', @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="3e81d79038f1", @TCF_META_TYPE_VAR="9de12f6df07acf", @TCF_META_TYPE_INT=0x1]}]}}, @TCF_EM_CONTAINER={0xb0, 0x3, 0x0, 0x0, {{0x1, 0x0, 0x9}, "0774ab4137d9d519203d057f7f9c469a4586c2359304f2da09b4eddc46b463d973a8fc3e776ad255d7e3dbfac83effbf8ee9887c893c1155995c2c995563c0edbb2c0d918aa9fcd883aaa7f9853887947e8721185ea3d7657d01fc642117b46d806a460869ac5a50a073731682bab5f0366b3454320c634b911700b2d9a724de3464ab1113c66fc4fcb90fa720994b86083529d567e6b71d81f718d03a8ca07ce3134d93"}}, @TCF_EM_META={0x18, 0x3, 0x0, 0x0, {{0x1, 0x4, 0xffff}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x5, 0x1}, {0x0, 0x5, 0x2}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0xb8, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x5, 0x8, 0x1}, {0x3, 0x2}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xc, 0x8, 0x1}, {0x2, 0x1, 0x4}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x3, 0x6}, {0x5, 0x1000, 0x1, 0x12e}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xe000, 0x7, 0x400}, {{0x4, 0x1, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xc1b, 0x1, 0x4}, {0x7fff, 0x7ff, 0x3, 0x3, 0x5, 0x1, 0x2}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x2, 0x3, 0x2}, {0xce1d, 0xd, 0x37, 0x7ff}}}, @TCF_EM_CONTAINER={0x30, 0x2, 0x0, 0x0, {{0x2, 0x0, 0x4}, "2b91b7348b98dfdfc106c34704289deb498596cd3dc75ef9efaf51073ca080ac0bce"}}]}]}]}}]}, 0x44c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.182441271s ago: executing program 1 (id=2515): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x2, 0x64019, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x41}}}}, 0x118) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020bf4f635a621f30f122200000178d60300041000ffffff85000090cf9759ce750ac6c0aa00a5e50ffde96e1cc2b3fc05768da0f7f6cd8f4eb97b47eaaf8d4de1aa44ca94305678da3d5dd863b30ad89c1aa3ac62"], 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0x8}, 0x640, 0x5, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000340)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB="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"], 0x1, 0x2b4, &(0x7f0000000e40)="$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") bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{0x0, 0x0, &(0x7f0000004000)=[{0x0}, {&(0x7f00000070c0)=""/148, 0x94}], 0x2}, 0x3}], 0x1, 0x101, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.181920271s ago: executing program 0 (id=2516): perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x4a718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x100000000, 0xe}, 0x104b18, 0x6, 0x0, 0x1, 0x5, 0x4, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsgid(r1) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRESHEX=r6], 0x15) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") 1.120532024s ago: executing program 0 (id=2517): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x12, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000008b000000000000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000400048500000086000000bf09000000000000550901000000010395000000000000001daa0600000000002500f4ff9a456adf45000200060000000700000003000000b702000003000000850000002a000000b70000000040000095"], &(0x7f00000010c0)='syzkaller\x00', 0x9, 0xff2, &(0x7f0000001cc0)=""/4082, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r5 = socket(0x40000000015, 0x5, 0x0) r6 = socket(0x22, 0x2, 0x24) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000003c0)=[{&(0x7f0000001800)='\x00', 0x1}], 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, 0x0, 0x13f, 0xa}}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r9, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r7, 0x0, r10, 0x0, 0x25a5, 0x4) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x12, r11, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendto$inet(r3, 0x0, 0x0, 0x200088d5, 0x0, 0x45) 791.626215ms ago: executing program 2 (id=2518): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x24, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000e004}, 0x4004014) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r7 = dup(r5) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000100)) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x5}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r8, &(0x7f0000000140)={0x2, 0x3, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000000), 0x20000328) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0xe}, 0x106200, 0x10004, 0x4, 0x5, 0x9b41, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x3d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 159.830335ms ago: executing program 1 (id=2519): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0x8}, 0x640, 0x5, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000340)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB="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"], 0x1, 0x2b4, &(0x7f0000000e40)="$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") r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) recvmmsg(r4, &(0x7f0000007280)=[{{0x0, 0x0, &(0x7f0000004000)=[{0x0}, {&(0x7f00000070c0)=""/148, 0x94}], 0x2}, 0x3}], 0x1, 0x101, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x8083, 0x0) ioctl$TCSETS2(r6, 0x402c542b, &(0x7f0000000540)={0x6, 0x7, 0x10021da0, 0x0, 0xff, "42f42749a2ed195a14c84953dc7e8e5aec7776", 0xfffffffa, 0x8000095f}) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x3c, @broadcast, 0x4e23, 0x2, 'sh\x00', 0x53, 0x4, 0x58}, 0x3d) r7 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) getsockopt$llc_int(r7, 0x10c, 0x8, &(0x7f0000000200), &(0x7f0000000240)=0x4) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r8, 0x400, 0x2) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x101c91c, &(0x7f0000000400)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@noblock_validity}, {@resgid}, {@inlinecrypt}, {@errors_remount}, {@noblock_validity}, {@usrjquota}, {@nodelalloc}, {@resgid, 0x32}]}, 0x1d, 0x4e8, &(0x7f0000000540)="$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") openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001000390407bd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="8300040000000000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x3d}, 0x38) 158.952075ms ago: executing program 7 (id=2520): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x1, 0x5003) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000005000000030000000000001103fcffffffffffff02000000000000040000000000000000010000840000000000000000020000000000000000002e2e"], 0x0, 0x51}, 0x28) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9701}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=@newqdisc={0x7c, 0x24, 0x400, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xfff3, 0xffff}, {0x1}}, [@TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x2, 0x4fc, 0xb, 0x2, 0x9, 0x9, 0x6}}, {0x10, 0x2, [0x86c2, 0x32, 0x5, 0x8, 0x10, 0x7]}}, {{0x1c, 0x1, {0x6, 0xf9, 0x8, 0x10001, 0x2, 0x3, 0x101, 0x4}}, {0xc, 0x2, [0x4, 0x3, 0x6, 0x2]}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008841}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0x6}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0x1, 0x8, 0x6, 0xfa9a, 0x5, 0x3, 0x1, 0xffffe7cf}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x200040e4}, 0x4890) timer_create(0x3, 0x0, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES64=r5, @ANYRES32=0x1, @ANYBLOB="01000100"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="03000000050000000800"/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000009abe000000000000", @ANYRES32=0x1, @ANYBLOB="c200"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="030000000300000004000000731600"/28], 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "262c38a773b8ceb133182062ec5bcfe4e617053af4eed9c8af3c66749ea6cc6e02578d719a7d0991023d9c074280042e57f784dec7c59a5664cc3dcf0e069f1d1d17e058371d6a685d74468e4492da9b7db55f5551fb30fb48a5a198fc2365709c9c7dc25308274bed2e5b06f0dd082641833292371c7b97d28062c71013f0068e20a68bdf61c1d342177124123145202c44727359ac5c95b7f22563ff26ed4fc21f510bf938aeca16e23a699ec15a5ba63d8284c16ad9a106c34f64dcfdf826c9c22e62bbfdddea6bc7d873f09ca456703727f5ada32d8df4a9eb44d70ab4340b4879eb6a208f494c529797b6322e2e81e8fd327d87109e4d46a636ba42769a"}, @TCA_RED_PARMS={0x14, 0x1, {0x207, 0x1ffc0000, 0x34da53c4, 0x1c, 0xc, 0x1, 0x6}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f00000000c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r10}, 0x86) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000081000000000000000100000018160000", @ANYRES32=r7, @ANYBLOB="000000000000000018190000", @ANYRES32=r7, @ANYBLOB="000000000000000085100000fbffffff95000000000000005410af39680390b1412c0d6d5966c66c5491012277fbc0c6a2abb7bb28e27ce72c298576eacd1bb89135174585e127a148516a2d24382d46eafd804eac5b2c0436b6fef2270413da2016e159c5af1273b4b23bfb4c8eb2fbe14cb77332259795b4246e705247f6e4816b27760b22db8240260e854d2766fcc7881224e2a3"], &(0x7f0000000400)='GPL\x00', 0x80b0, 0xdf, &(0x7f0000000580)=""/223, 0x41000, 0x0, '\x00', r9, 0x0, r0, 0x8, &(0x7f0000000680)={0x4, 0x1}, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[0x1], 0x0, 0x10, 0x81}, 0x94) timer_settime(r4, 0x0, &(0x7f0000000340)={{r5, r6+10000000}, {0x0, 0x9}}, 0x0) timer_gettime(r4, &(0x7f0000000000)) sync() connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000001000003b670dccc47b4530ed8e7fbd3a52842b182d35012427ead2e1b45a9e87111da26a4e11ea774800530859fd56060000000000000039b8e0a04ec5148293c5b9353e3e2e4b5fb5b914e500000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000003000/0x4000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) 0s ago: executing program 0 (id=2521): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) fcntl$notify(r0, 0x402, 0xb) r1 = syz_io_uring_setup(0x5f86, &(0x7f0000000180)={0x0, 0x2a99, 0x20, 0x2, 0x3b7}, &(0x7f0000000200), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, &(0x7f00000002c0)={0x5f, 0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, &(0x7f0000000540)={0x1, 0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x0}, 0x20) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) statx(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x34, 0x0) r2 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x1a0, 0xe138, 0x198, 0x1a0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d00feffff07000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x15, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000000d14012b07"], 0x28}, 0x1, 0x0, 0x0, 0x40008c4}, 0x20008040) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040), 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') getdents(r4, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) kernel console output (not intermixed with test programs): isc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.893151][T10256] xt_TPROXY: Can be used only with -p tcp or -p udp [ 220.977548][ T28] audit: type=1400 audit(2000000377.611:12417): avc: denied { getopt } for pid=10261 comm="syz.0.1863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 221.019797][ T28] audit: type=1400 audit(2000000377.630:12418): avc: denied { ioctl } for pid=10261 comm="syz.0.1863" path="socket:[29402]" dev="sockfs" ino=29402 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 221.080416][ T28] audit: type=1400 audit(2000000377.649:12419): avc: denied { shutdown } for pid=10261 comm="syz.0.1863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 221.125674][ T28] audit: type=1400 audit(2000000377.649:12420): avc: denied { setopt } for pid=10261 comm="syz.0.1863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 221.230348][T10278] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5146 sclass=netlink_route_socket pid=10278 comm=syz.1.1867 [ 221.293987][T10282] lo speed is unknown, defaulting to 1000 [ 221.814364][T10299] loop5: detected capacity change from 0 to 512 [ 221.834844][T10299] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.862196][T10299] ext4 filesystem being mounted at /359/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.915451][ T3713] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.055144][ T28] audit: type=1400 audit(2000000378.612:12421): avc: denied { load_policy } for pid=10302 comm="syz.0.1877" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 222.086270][T10303] SELinux: ebitmap start bit (32768) is beyond the end of the bitmap (1088) [ 222.115931][T10303] SELinux: failed to load policy [ 222.141359][T10314] FAULT_INJECTION: forcing a failure. [ 222.141359][T10314] name failslab, interval 1, probability 0, space 0, times 0 [ 222.158804][T10314] CPU: 0 UID: 0 PID: 10314 Comm: syz.0.1882 Tainted: G W syzkaller #0 PREEMPT(full) [ 222.158847][T10314] Tainted: [W]=WARN [ 222.158854][T10314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 222.158936][T10314] Call Trace: [ 222.158943][T10314] [ 222.158950][T10314] __dump_stack+0x1d/0x30 [ 222.158978][T10314] dump_stack_lvl+0x95/0xd0 [ 222.159050][T10314] dump_stack+0x15/0x1b [ 222.159078][T10314] should_fail_ex+0x263/0x280 [ 222.159112][T10314] should_failslab+0x8c/0xb0 [ 222.159139][T10314] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 222.159167][T10314] ? __d_alloc+0x37/0x340 [ 222.159226][T10314] ? __rcu_read_unlock+0x33/0x70 [ 222.159248][T10314] __d_alloc+0x37/0x340 [ 222.159273][T10314] ? number+0xa78/0xb90 [ 222.159383][T10314] d_alloc_parallel+0x54/0xce0 [ 222.159419][T10314] ? __d_lookup+0x316/0x340 [ 222.159531][T10314] ? lookup_noperm_common+0x1c2/0x2a0 [ 222.159567][T10314] ? d_lookup+0xb2/0xd0 [ 222.159642][T10314] proc_fill_cache+0x180/0x260 [ 222.159664][T10314] ? __pfx_proc_fd_instantiate+0x10/0x10 [ 222.159698][T10314] proc_readfd_common+0x29a/0x3d0 [ 222.159798][T10314] ? __pfx_proc_fd_instantiate+0x10/0x10 [ 222.159824][T10314] proc_fd_iterate+0x24/0x30 [ 222.159852][T10314] iterate_dir+0x114/0x330 [ 222.159945][T10314] __se_sys_getdents64+0xd2/0x230 [ 222.159965][T10314] ? __pfx_filldir64+0x10/0x10 [ 222.159992][T10314] __x64_sys_getdents64+0x43/0x50 [ 222.160019][T10314] x64_sys_call+0x2408/0x3020 [ 222.160142][T10314] do_syscall_64+0x12c/0x370 [ 222.160175][T10314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.160199][T10314] RIP: 0033:0x7ff7d909c819 [ 222.160216][T10314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.160288][T10314] RSP: 002b:00007ff7d7aef028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 222.160314][T10314] RAX: ffffffffffffffda RBX: 00007ff7d9315fa0 RCX: 00007ff7d909c819 [ 222.160331][T10314] RDX: 0000000000000ff6 RSI: 0000200000000f80 RDI: 000000000000000a [ 222.160348][T10314] RBP: 00007ff7d7aef090 R08: 0000000000000000 R09: 0000000000000000 [ 222.160363][T10314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.160389][T10314] R13: 00007ff7d9316038 R14: 00007ff7d9315fa0 R15: 00007ffce4be9918 [ 222.160408][T10314] [ 222.230082][T10316] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1881'. [ 222.438373][T10323] netlink: 'syz.1.1884': attribute type 1 has an invalid length. [ 222.446986][T10324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1884'. [ 222.618483][T10323] 8021q: adding VLAN 0 to HW filter on device bond3 [ 222.648420][T10324] vlan3: entered allmulticast mode [ 222.716937][T10337] loop7: detected capacity change from 0 to 512 [ 222.861669][T10324] bond3: entered allmulticast mode [ 223.180496][T10340] loop5: detected capacity change from 0 to 512 [ 223.211239][T10340] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.258879][T10340] ext4 filesystem being mounted at /364/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.299376][T10351] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 223.314056][ T28] audit: type=1326 audit(2000000379.791:12422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10354 comm="syz.2.1895" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04b453c819 code=0x0 [ 223.340299][ T3713] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.490965][T10368] netlink: 'syz.0.1899': attribute type 15 has an invalid length. [ 223.730787][T10378] bridge_slave_0: left allmulticast mode [ 223.741214][T10378] bridge_slave_0: left promiscuous mode [ 223.747589][T10378] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.756091][T10378] bridge_slave_1: left allmulticast mode [ 223.761756][T10378] bridge_slave_1: left promiscuous mode [ 223.767447][T10378] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.776109][T10378] bond0: (slave bond_slave_0): Releasing backup interface [ 223.785104][T10378] bond0: (slave bond_slave_1): Releasing backup interface [ 223.794783][T10378] team0: Port device team_slave_0 removed [ 223.801477][T10378] team0: Port device team_slave_1 removed [ 223.807644][T10378] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 223.829002][T10380] loop7: detected capacity change from 0 to 512 [ 224.133789][T10383] 9pnet_virtio: no channels available for device ./file0 [ 224.200649][T10387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.209216][T10387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.376125][T10401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1914'. [ 224.436875][T10387] netlink: 820 bytes leftover after parsing attributes in process `syz.0.1907'. [ 224.452316][T10387] netlink: 820 bytes leftover after parsing attributes in process `syz.0.1907'. [ 224.465846][T10411] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1919'. [ 224.543277][ T6431] kworker/u8:19: attempt to access beyond end of device [ 224.543277][ T6431] loop7: rw=1, sector=2384, nr_sectors = 2048 limit=512 [ 224.561341][ T6431] kworker/u8:19: attempt to access beyond end of device [ 224.561341][ T6431] loop7: rw=1, sector=4432, nr_sectors = 2048 limit=512 [ 224.580106][ T6431] kworker/u8:19: attempt to access beyond end of device [ 224.580106][ T6431] loop7: rw=1, sector=6480, nr_sectors = 2048 limit=512 [ 224.604687][ T6431] kworker/u8:19: attempt to access beyond end of device [ 224.604687][ T6431] loop7: rw=1, sector=8528, nr_sectors = 7936 limit=512 [ 224.677432][ T28] audit: type=1326 audit(2000000381.073:12423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10422 comm="syz.7.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43b56c819 code=0x7ffc0000 [ 224.712247][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1923'. [ 224.712750][ T28] audit: type=1326 audit(2000000381.073:12425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10422 comm="syz.7.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7ff43b56c819 code=0x7ffc0000 [ 224.721384][T10421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1923'. [ 224.746344][ T28] audit: type=1326 audit(2000000381.073:12426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10422 comm="syz.7.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43b56c819 code=0x7ffc0000 [ 224.779054][ T28] audit: type=1326 audit(2000000381.073:12427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10422 comm="syz.7.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43b56c819 code=0x7ffc0000 [ 224.877610][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 225.130035][T10452] hub 8-0:1.0: USB hub found [ 225.134947][T10452] hub 8-0:1.0: 8 ports detected [ 225.433909][T10458] lo speed is unknown, defaulting to 1000 [ 226.227873][T10469] syzkaller0: entered promiscuous mode [ 226.233427][T10469] syzkaller0: entered allmulticast mode [ 226.772667][T10472] loop7: detected capacity change from 0 to 512 [ 226.789956][ T28] kauditd_printk_skb: 532 callbacks suppressed [ 226.789975][ T28] audit: type=1326 audit(2000000383.037:12959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.1.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc080c819 code=0x7ffc0000 [ 226.828393][T10472] EXT4-fs: Ignoring removed oldalloc option [ 226.916134][T10472] EXT4-fs (loop7): 1 truncate cleaned up [ 226.923174][T10472] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.052159][T10468] lo speed is unknown, defaulting to 1000 [ 227.061341][ T28] audit: type=1326 audit(2000000383.037:12960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.1.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc080c819 code=0x7ffc0000 [ 227.133008][T10470] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1937'. [ 227.150757][T10484] netlink: 'syz.0.1943': attribute type 1 has an invalid length. [ 227.174790][T10484] bond2: (slave bridge5): making interface the new active one [ 227.183602][T10484] bond2: (slave bridge5): Enslaving as an active interface with an up link [ 227.216066][T10480] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1939'. [ 227.248786][T10486] xt_hashlimit: size too large, truncated to 1048576 [ 227.257124][T10484] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 227.268814][ T7242] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.278679][ T28] audit: type=1326 audit(2000000383.037:12961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.1.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f1cc080c819 code=0x7ffc0000 [ 227.307005][T10487] macvlan3: entered promiscuous mode [ 227.312327][T10487] macvlan3: entered allmulticast mode [ 227.320469][T10487] bond2: entered promiscuous mode [ 227.336914][ T28] audit: type=1326 audit(2000000383.037:12962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.1.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc080c819 code=0x7ffc0000 [ 227.371959][ T28] audit: type=1326 audit(2000000383.037:12963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.1.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc080c819 code=0x7ffc0000 [ 227.385318][T10487] bridge5: entered promiscuous mode [ 227.406086][T10493] FAULT_INJECTION: forcing a failure. [ 227.406086][T10493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.424294][T10493] CPU: 1 UID: 0 PID: 10493 Comm: syz.7.1946 Tainted: G W syzkaller #0 PREEMPT(full) [ 227.424331][T10493] Tainted: [W]=WARN [ 227.424339][T10493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 227.424352][T10493] Call Trace: [ 227.424359][T10493] [ 227.424368][T10493] __dump_stack+0x1d/0x30 [ 227.424476][T10493] dump_stack_lvl+0x95/0xd0 [ 227.424503][T10493] dump_stack+0x15/0x1b [ 227.424579][T10493] should_fail_ex+0x263/0x280 [ 227.424610][T10493] should_fail+0xb/0x20 [ 227.424679][T10493] should_fail_usercopy+0x1a/0x20 [ 227.424711][T10493] _copy_from_iter+0xcf/0xea0 [ 227.424757][T10493] ? __alloc_skb+0x4f6/0x690 [ 227.424789][T10493] ? __alloc_skb+0x200/0x690 [ 227.424820][T10493] netlink_sendmsg+0x4ae/0x6f0 [ 227.424875][T10493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.424913][T10493] ____sys_sendmsg+0x563/0x5b0 [ 227.424991][T10493] ___sys_sendmsg+0x195/0x1e0 [ 227.425081][T10493] __x64_sys_sendmsg+0xd4/0x160 [ 227.425120][T10493] x64_sys_call+0x194c/0x3020 [ 227.425218][T10493] do_syscall_64+0x12c/0x370 [ 227.425257][T10493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.425282][T10493] RIP: 0033:0x7ff43b56c819 [ 227.425341][T10493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.425359][T10493] RSP: 002b:00007ff439fc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.425383][T10493] RAX: ffffffffffffffda RBX: 00007ff43b7e5fa0 RCX: 00007ff43b56c819 [ 227.425463][T10493] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 227.425479][T10493] RBP: 00007ff439fc7090 R08: 0000000000000000 R09: 0000000000000000 [ 227.425493][T10493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.425505][T10493] R13: 00007ff43b7e6038 R14: 00007ff43b7e5fa0 R15: 00007ffd5c516ee8 [ 227.425530][T10493] [ 227.426036][T10487] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 227.443000][ T28] audit: type=1326 audit(2000000383.037:12964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.1.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f1cc080c819 code=0x7ffc0000 [ 227.503100][T10487] bond2: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 227.658053][ T28] audit: type=1326 audit(2000000383.037:12965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.1.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc080c819 code=0x7ffc0000 [ 227.688942][T10487] bond2: left promiscuous mode [ 227.701359][T10487] bridge5: left promiscuous mode [ 227.710193][ T28] audit: type=1326 audit(2000000383.037:12966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.1.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc080c819 code=0x7ffc0000 [ 227.738271][ T28] audit: type=1326 audit(2000000383.037:12967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.1.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1cc080c819 code=0x7ffc0000 [ 227.761999][ T28] audit: type=1326 audit(2000000383.037:12968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.1.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc080c819 code=0x7ffc0000 [ 227.932401][T10510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1952'. [ 227.941577][T10510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1952'. [ 228.907230][T10518] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1954'. [ 228.955367][T10521] lo speed is unknown, defaulting to 1000 [ 229.401475][T10532] loop7: detected capacity change from 0 to 512 [ 229.410552][T10533] netlink: 'syz.0.1959': attribute type 21 has an invalid length. [ 229.862556][T10535] lo speed is unknown, defaulting to 1000 [ 230.245131][T10532] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.1960: inode has both inline data and extents flags [ 230.274033][T10532] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 230.274206][T10532] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.1960: couldn't read orphan inode 15 (err -117) [ 230.283428][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 230.283463][ C0] EXT4-fs (loop7): initial error at time 2000000386: ext4_orphan_get:1397: inode 15 [ 230.283493][ C0] EXT4-fs (loop7): last error at time 2000000386: ext4_orphan_get:1397: inode 15 [ 230.336906][T10532] loop7: lost filesystem error report for type 5 error -117 [ 230.337474][T10532] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.421951][T10549] FAULT_INJECTION: forcing a failure. [ 230.421951][T10549] name failslab, interval 1, probability 0, space 0, times 0 [ 230.434770][T10549] CPU: 1 UID: 0 PID: 10549 Comm: syz.5.1965 Tainted: G W syzkaller #0 PREEMPT(full) [ 230.434807][T10549] Tainted: [W]=WARN [ 230.434815][T10549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 230.434871][T10549] Call Trace: [ 230.434878][T10549] [ 230.434887][T10549] __dump_stack+0x1d/0x30 [ 230.434915][T10549] dump_stack_lvl+0x95/0xd0 [ 230.434937][T10549] dump_stack+0x15/0x1b [ 230.435017][T10549] should_fail_ex+0x263/0x280 [ 230.435059][T10549] should_failslab+0x8c/0xb0 [ 230.435083][T10549] __kmalloc_noprof+0xb8/0x4e0 [ 230.435105][T10549] ? sk_prot_alloc+0xa8/0x180 [ 230.435162][T10549] ? should_failslab+0x8c/0xb0 [ 230.435224][T10549] sk_prot_alloc+0xa8/0x180 [ 230.435307][T10549] sk_alloc+0x35/0x3e0 [ 230.435339][T10549] bpf_prog_test_run_skb+0x31b/0xef0 [ 230.435378][T10549] ? __fget_files+0x184/0x1c0 [ 230.435404][T10549] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 230.435485][T10549] bpf_prog_test_run+0x204/0x340 [ 230.435514][T10549] __sys_bpf+0x52e/0x7e0 [ 230.435541][T10549] __x64_sys_bpf+0x41/0x50 [ 230.435558][T10549] x64_sys_call+0x10cb/0x3020 [ 230.435648][T10549] do_syscall_64+0x12c/0x370 [ 230.435757][T10549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.435780][T10549] RIP: 0033:0x7fb17701c819 [ 230.435823][T10549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.435843][T10549] RSP: 002b:00007fb175a6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 230.435867][T10549] RAX: ffffffffffffffda RBX: 00007fb177295fa0 RCX: 00007fb17701c819 [ 230.435881][T10549] RDX: 0000000000000028 RSI: 0000200000000240 RDI: 000000000000000a [ 230.435905][T10549] RBP: 00007fb175a6f090 R08: 0000000000000000 R09: 0000000000000000 [ 230.435921][T10549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.435938][T10549] R13: 00007fb177296038 R14: 00007fb177295fa0 R15: 00007ffc387a9b78 [ 230.435961][T10549] [ 230.639343][ T7242] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.798666][T10558] lo speed is unknown, defaulting to 1000 [ 230.824416][T10556] loop5: detected capacity change from 0 to 512 [ 230.849409][T10559] loop7: detected capacity change from 0 to 2048 [ 230.857045][T10556] EXT4-fs warning (device loop5): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 230.875257][T10556] EXT4-fs (loop5): mount failed [ 230.929208][T10559] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.968982][T10559] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1967'. [ 231.006446][T10559] xt_hashlimit: size too large, truncated to 1048576 [ 231.392437][T10572] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1971'. [ 231.402278][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1971'. [ 231.411347][T10572] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.607971][ T7242] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.825354][T10579] lo speed is unknown, defaulting to 1000 [ 231.903988][T10580] loop5: detected capacity change from 0 to 128 [ 231.973076][T10580] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fff0000) [ 231.980969][T10580] FAT-fs (loop5): Filesystem has been set read-only [ 232.789002][T10592] loop5: detected capacity change from 0 to 256 [ 232.850264][T10592] FAT-fs (loop5): Directory bread(block 64) failed [ 232.857735][T10592] FAT-fs (loop5): Directory bread(block 65) failed [ 232.887537][T10592] FAT-fs (loop5): Directory bread(block 66) failed [ 232.907019][T10592] FAT-fs (loop5): Directory bread(block 67) failed [ 232.914128][T10592] FAT-fs (loop5): Directory bread(block 68) failed [ 232.927270][ T28] kauditd_printk_skb: 130 callbacks suppressed [ 232.927289][ T28] audit: type=1400 audit(2000000388.781:13098): avc: denied { getopt } for pid=10593 comm="syz.0.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 232.947170][T10592] FAT-fs (loop5): Directory bread(block 69) failed [ 232.991541][T10592] FAT-fs (loop5): Directory bread(block 70) failed [ 232.998543][T10592] FAT-fs (loop5): Directory bread(block 71) failed [ 233.027831][T10592] FAT-fs (loop5): Directory bread(block 72) failed [ 233.049316][T10592] FAT-fs (loop5): Directory bread(block 73) failed [ 233.313465][T10603] openvswitch: netlink: Flow actions attr not present in new flow. [ 233.525013][T10609] loop5: detected capacity change from 0 to 128 [ 233.733551][T10616] tipc: Can't bind to reserved service type 0 [ 233.817817][T10581] loop7: detected capacity change from 0 to 2048 [ 233.975961][T10581] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.992205][T10581] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.187977][T10619] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1973: bg 0: block 345: padding at end of block bitmap is not set [ 234.241474][T10619] EXT4-fs (loop7): Remounting filesystem read-only [ 234.330249][ T7242] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.393197][T10622] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1988'. [ 235.673302][T10636] rdma_rxe: rxe_newlink: failed to add lo [ 236.208378][T10653] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1996'. [ 236.302201][T10653] xt_hashlimit: size too large, truncated to 1048576 [ 236.881709][ T3421] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 236.921119][T10652] lo speed is unknown, defaulting to 1000 [ 237.878892][ T23] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 238.166181][T10675] loop5: detected capacity change from 0 to 512 [ 238.181256][T10675] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.194167][T10675] ext4 filesystem being mounted at /385/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.315013][ T3713] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.421945][T10679] SELinux: failed to load policy [ 238.428314][T10689] program syz.5.2003 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 238.428597][T10689] program syz.5.2003 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 238.524089][T10701] FAULT_INJECTION: forcing a failure. [ 238.524089][T10701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.538218][T10701] CPU: 0 UID: 0 PID: 10701 Comm: syz.0.2012 Tainted: G W syzkaller #0 PREEMPT(full) [ 238.538279][T10701] Tainted: [W]=WARN [ 238.538300][T10701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 238.538311][T10701] Call Trace: [ 238.538318][T10701] [ 238.538379][T10701] __dump_stack+0x1d/0x30 [ 238.538410][T10701] dump_stack_lvl+0x95/0xd0 [ 238.538434][T10701] dump_stack+0x15/0x1b [ 238.538455][T10701] should_fail_ex+0x263/0x280 [ 238.538492][T10701] should_fail+0xb/0x20 [ 238.538514][T10701] should_fail_usercopy+0x1a/0x20 [ 238.538604][T10701] _copy_from_user+0x1c/0xb0 [ 238.538636][T10701] get_timespec64+0x4c/0x100 [ 238.538660][T10701] __se_sys_pselect6+0xc4/0x2a0 [ 238.538724][T10701] ? mutex_unlock+0x4e/0x90 [ 238.538746][T10701] __x64_sys_pselect6+0x78/0x90 [ 238.538853][T10701] x64_sys_call+0x8d5/0x3020 [ 238.538884][T10701] do_syscall_64+0x12c/0x370 [ 238.538914][T10701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.538939][T10701] RIP: 0033:0x7ff7d909c819 [ 238.539030][T10701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.539049][T10701] RSP: 002b:00007ff7d7aef028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 238.539070][T10701] RAX: ffffffffffffffda RBX: 00007ff7d9315fa0 RCX: 00007ff7d909c819 [ 238.539083][T10701] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 238.539096][T10701] RBP: 00007ff7d7aef090 R08: 0000200000000280 R09: 0000000000000000 [ 238.539208][T10701] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 238.539221][T10701] R13: 00007ff7d9316038 R14: 00007ff7d9315fa0 R15: 00007ffce4be9918 [ 238.539239][T10701] [ 238.744298][T10705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2013'. [ 238.758518][T10706] lo speed is unknown, defaulting to 1000 [ 238.831854][ T28] audit: type=1400 audit(2000000394.310:13099): avc: denied { accept } for pid=10716 comm="syz.1.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 238.925753][T10712] loop5: detected capacity change from 0 to 2048 [ 238.942037][ T28] audit: type=1400 audit(2000000394.413:13100): avc: denied { getopt } for pid=10724 comm="syz.7.2020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 239.014194][T10712] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.465735][T10706] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2014'. [ 239.664103][T10706] xt_hashlimit: size too large, truncated to 1048576 [ 239.684944][T10747] lo speed is unknown, defaulting to 1000 [ 239.884477][T10746] lo speed is unknown, defaulting to 1000 [ 240.113808][ T3713] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.116740][T10759] ip6gre2: entered promiscuous mode [ 240.128794][T10759] ip6gre2: entered allmulticast mode [ 240.225958][T10767] loop5: detected capacity change from 0 to 512 [ 240.242913][T10767] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.274598][T10767] ext4 filesystem being mounted at /389/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.299108][ T3713] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.091228][T10788] lo speed is unknown, defaulting to 1000 [ 241.120971][T10760] delete_channel: no stack [ 241.152109][T10790] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2038'. [ 241.219667][T10790] xt_hashlimit: size too large, truncated to 1048576 [ 241.276989][T10795] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 241.354101][T10802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.495778][T10802] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 241.520218][T10806] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2045'. [ 241.530376][ T3421] lo speed is unknown, defaulting to 1000 [ 241.536556][ T3421] lyz2: Port: 1 Link ACTIVE [ 241.542854][T10806] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 241.618889][T10802] syzkaller0: entered promiscuous mode [ 241.624609][T10802] syzkaller0: entered allmulticast mode [ 241.671880][ T3421] lo speed is unknown, defaulting to 1000 [ 241.836258][T10818] loop5: detected capacity change from 0 to 4096 [ 241.908210][T10818] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.066375][ T28] audit: type=1400 audit(2000000397.304:13101): avc: denied { map } for pid=10817 comm="syz.5.2048" path="/393/file0/file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 242.118555][ T3713] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 242.164071][ T3713] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 242.194084][ T28] audit: type=1400 audit(2000000397.304:13102): avc: denied { execute } for pid=10817 comm="syz.5.2048" path="/393/file0/file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 242.234162][ T28] audit: type=1400 audit(2000000397.369:13103): avc: denied { remove_name } for pid=3713 comm="syz-executor" name="lost+found" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 242.257657][ T28] audit: type=1400 audit(2000000397.369:13104): avc: denied { rmdir } for pid=3713 comm="syz-executor" name="lost+found" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 242.290380][ T28] audit: type=1400 audit(2000000397.379:13105): avc: denied { unlink } for pid=3713 comm="syz-executor" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 242.418405][T10777] delete_channel: no stack [ 242.556559][T10826] syz_tun (unregistering): left promiscuous mode [ 242.579554][T10826] bridge0: port 3(syz_tun) entered disabled state [ 242.704900][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 242.772731][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 242.926357][T10841] lo speed is unknown, defaulting to 1000 [ 242.944319][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 243.123136][T10843] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 243.137117][ T28] audit: type=1400 audit(2000000398.342:13106): avc: denied { map } for pid=10827 comm="syz.7.2051" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 243.363904][ T28] audit: type=1400 audit(2000000398.342:13107): avc: denied { execute } for pid=10827 comm="syz.7.2051" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 243.415085][T10845] xt_hashlimit: size too large, truncated to 1048576 [ 243.466874][T10826] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.955719][T10844] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 243.965133][T10844] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 244.039175][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 244.062768][T10828] lo speed is unknown, defaulting to 1000 [ 244.232406][ T36] bridge_slave_1: left allmulticast mode [ 244.258226][ T36] bridge_slave_1: left promiscuous mode [ 244.278660][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.299155][ T36] bridge_slave_0: left promiscuous mode [ 244.319427][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.398557][T10832] delete_channel: no stack [ 244.470355][ T36] bond1 (unregistering): Released all slaves [ 244.693264][ T36] hsr_slave_0: left promiscuous mode [ 244.699072][ T36] hsr_slave_1: left promiscuous mode [ 244.716810][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 244.774814][T10885] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2063'. [ 244.938855][T10892] loop7: detected capacity change from 0 to 128 [ 244.981703][ T36] team0 (unregistering): Port device team_slave_1 removed [ 244.996356][ T36] team0 (unregistering): Port device team_slave_0 removed [ 245.031016][ T28] audit: type=1400 audit(2000000400.110:13108): avc: denied { mounton } for pid=10891 comm="syz.7.2064" path="/200/file0/file0" dev="loop7" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 245.065448][ T28] audit: type=1400 audit(2000000400.110:13109): avc: denied { unmount } for pid=10891 comm="syz.7.2064" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 245.104686][T10880] macsec2: entered promiscuous mode [ 245.110158][T10880] geneve1: entered promiscuous mode [ 245.116905][T10880] macsec2: entered allmulticast mode [ 245.122372][T10880] geneve1: entered allmulticast mode [ 245.201203][T10881] lo speed is unknown, defaulting to 1000 [ 245.300872][T10881] chnl_net:caif_netlink_parms(): no params data found [ 245.355589][T10881] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.362981][T10881] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.370200][T10881] bridge_slave_0: entered allmulticast mode [ 245.376922][T10881] bridge_slave_0: entered promiscuous mode [ 245.384810][T10881] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.392108][T10881] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.399485][T10881] bridge_slave_1: entered allmulticast mode [ 245.406630][T10881] bridge_slave_1: entered promiscuous mode [ 245.426104][T10881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.427027][ T36] IPVS: stop unused estimator thread 0... [ 245.436788][T10881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.463071][T10881] team0: Port device team_slave_0 added [ 245.469917][T10881] team0: Port device team_slave_1 added [ 245.488295][T10881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.495369][T10881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.522129][T10881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.534396][T10881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.541428][T10881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.568043][T10881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.670001][T10940] FAULT_INJECTION: forcing a failure. [ 245.670001][T10940] name failslab, interval 1, probability 0, space 0, times 0 [ 245.692016][T10881] hsr_slave_0: entered promiscuous mode [ 245.706758][T10881] hsr_slave_1: entered promiscuous mode [ 245.713635][T10940] CPU: 0 UID: 0 PID: 10940 Comm: syz.2.2069 Tainted: G W syzkaller #0 PREEMPT(full) [ 245.713679][T10940] Tainted: [W]=WARN [ 245.713686][T10940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 245.713764][T10940] Call Trace: [ 245.713770][T10940] [ 245.713778][T10940] __dump_stack+0x1d/0x30 [ 245.713803][T10940] dump_stack_lvl+0x95/0xd0 [ 245.713847][T10940] dump_stack+0x15/0x1b [ 245.713881][T10940] should_fail_ex+0x263/0x280 [ 245.713989][T10940] ? nft_trans_rule_add+0x39/0x1b0 [ 245.714016][T10940] should_failslab+0x8c/0xb0 [ 245.714038][T10940] __kmalloc_cache_noprof+0x5f/0x410 [ 245.714142][T10940] nft_trans_rule_add+0x39/0x1b0 [ 245.714164][T10940] nf_tables_newrule+0x10e5/0x16e0 [ 245.714232][T10940] nfnetlink_rcv+0xc1e/0x1720 [ 245.714378][T10940] netlink_unicast+0x5c0/0x690 [ 245.714417][T10940] netlink_sendmsg+0x5c8/0x6f0 [ 245.714442][T10940] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.714465][T10940] ____sys_sendmsg+0x563/0x5b0 [ 245.714504][T10940] ___sys_sendmsg+0x195/0x1e0 [ 245.714545][T10940] __x64_sys_sendmsg+0xd4/0x160 [ 245.714667][T10940] x64_sys_call+0x194c/0x3020 [ 245.714697][T10940] do_syscall_64+0x12c/0x370 [ 245.714809][T10940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.714837][T10940] RIP: 0033:0x7f04b453c819 [ 245.714855][T10940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.714882][T10940] RSP: 002b:00007f04b2f8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.714966][T10940] RAX: ffffffffffffffda RBX: 00007f04b47b5fa0 RCX: 00007f04b453c819 [ 245.714983][T10940] RDX: 0000000004040080 RSI: 0000200000000000 RDI: 0000000000000003 [ 245.715066][T10940] RBP: 00007f04b2f8f090 R08: 0000000000000000 R09: 0000000000000000 [ 245.715079][T10940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 245.715091][T10940] R13: 00007f04b47b6038 R14: 00007f04b47b5fa0 R15: 00007fff4e5fdf68 [ 245.715109][T10940] [ 245.715544][T10881] debugfs: 'hsr0' already exists in 'hsr' [ 245.935772][T10881] Cannot create hsr debugfs directory [ 246.666569][T10966] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2074'. [ 246.769120][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 247.099468][T10950] delete_channel: no stack [ 247.149194][T10881] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 247.198622][T10881] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 247.327765][T10881] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 247.414506][T10881] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 247.566378][T10881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.588506][ T28] audit: type=1400 audit(2000000402.505:13110): avc: denied { map } for pid=10988 comm="syz.7.2079" path="socket:[33803]" dev="sockfs" ino=33803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 247.620470][T10881] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.646756][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.653960][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.696922][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.704030][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.841122][T10881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.036326][T10881] veth0_vlan: entered promiscuous mode [ 248.047171][T10881] veth1_vlan: entered promiscuous mode [ 248.089614][T11020] loop7: detected capacity change from 0 to 128 [ 248.113440][T10881] veth0_macvtap: entered promiscuous mode [ 248.120938][T10881] veth1_macvtap: entered promiscuous mode [ 248.132932][T10881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.144291][T10881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.199440][ T30] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.218641][ T30] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.230440][ T30] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.244712][ T30] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.261585][ T28] audit: type=1400 audit(2000000403.132:13111): avc: denied { mount } for pid=10881 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 248.496193][T11049] lo speed is unknown, defaulting to 1000 [ 248.552995][T11050] loop8: detected capacity change from 0 to 2048 [ 248.567593][T11050] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.587733][T11050] xt_hashlimit: size too large, truncated to 1048576 [ 248.770877][T10881] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.712755][T11058] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 250.740028][T11058] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 250.753325][T11086] netlink: 'syz.1.2102': attribute type 4 has an invalid length. [ 250.888987][T11089] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.925397][T11089] bridge_slave_1: left allmulticast mode [ 250.933773][T11089] bridge_slave_1: left promiscuous mode [ 250.945485][T11089] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.998486][T11103] netlink: 'syz.1.2102': attribute type 4 has an invalid length. [ 251.385943][ T28] audit: type=1400 audit(2000000406.051:13112): avc: denied { lock } for pid=11090 comm="syz.7.2104" path="socket:[34030]" dev="sockfs" ino=34030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 251.810835][T11115] bond4: option lacp_rate: mode dependency failed, not supported in mode balance-xor(2) [ 251.822534][T11115] bond4 (unregistering): Released all slaves [ 251.864943][T11123] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 252.879639][ T23] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 252.926451][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 253.070753][T11144] loop7: detected capacity change from 0 to 512 [ 253.145902][ T28] audit: type=1400 audit(2000000407.697:13113): avc: denied { create } for pid=11149 comm="syz.0.2118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 253.154863][T11144] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.189313][ T28] audit: type=1400 audit(2000000407.744:13114): avc: denied { ioctl } for pid=11149 comm="syz.0.2118" path="socket:[33269]" dev="sockfs" ino=33269 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 253.193176][T11144] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.230523][T11150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.275692][T11153] FAULT_INJECTION: forcing a failure. [ 253.275692][T11153] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 253.280976][T11150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.289422][T11153] CPU: 1 UID: 0 PID: 11153 Comm: syz.8.2119 Tainted: G W syzkaller #0 PREEMPT(full) [ 253.289462][T11153] Tainted: [W]=WARN [ 253.289469][T11153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 253.289481][T11153] Call Trace: [ 253.289488][T11153] [ 253.289496][T11153] __dump_stack+0x1d/0x30 [ 253.289526][T11153] dump_stack_lvl+0x95/0xd0 [ 253.289549][T11153] dump_stack+0x15/0x1b [ 253.289571][T11153] should_fail_ex+0x263/0x280 [ 253.289599][T11153] should_fail_alloc_page+0xf2/0x100 [ 253.289625][T11153] __alloc_frozen_pages_noprof+0x108/0x360 [ 253.289656][T11153] alloc_pages_mpol+0xb3/0x260 [ 253.289685][T11153] alloc_pages_noprof+0x8f/0x140 [ 253.289714][T11153] __pmd_alloc+0x47/0x430 [ 253.289745][T11153] copy_page_range+0x39d4/0x3d00 [ 253.289771][T11153] ? kmem_cache_prefill_sheaf+0x12a/0x2d0 [ 253.289793][T11153] ? mas_ascend+0x1d7/0x540 [ 253.289826][T11153] ? mas_prealloc_calc+0x253/0x2a0 [ 253.289850][T11153] ? mas_store+0x402/0x5c0 [ 253.289874][T11153] ? vma_interval_tree_insert_after+0x197/0x1b0 [ 253.289903][T11153] dup_mmap+0x892/0x10c0 [ 253.289934][T11153] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 253.289962][T11153] ? __list_add_valid_or_report+0x38/0xe0 [ 253.289983][T11153] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 253.290012][T11153] ? __percpu_counter_init_many+0x2fa/0x310 [ 253.290043][T11153] copy_mm+0x119/0x370 [ 253.290067][T11153] copy_process+0xe22/0x20b0 [ 253.290095][T11153] kernel_clone+0x16b/0x5d0 [ 253.290125][T11153] ? vfs_write+0x86e/0x9f0 [ 253.290146][T11153] __x64_sys_clone+0x143/0x180 [ 253.290176][T11153] x64_sys_call+0x1222/0x3020 [ 253.290202][T11153] do_syscall_64+0x12c/0x370 [ 253.290228][T11153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.290250][T11153] RIP: 0033:0x7f246bdac819 [ 253.290267][T11153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.290285][T11153] RSP: 002b:00007f246a806fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 253.290306][T11153] RAX: ffffffffffffffda RBX: 00007f246c025fa0 RCX: 00007f246bdac819 [ 253.290320][T11153] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000640c7400 [ 253.290333][T11153] RBP: 00007f246a807090 R08: 0000000000000000 R09: 0000000000000000 [ 253.290346][T11153] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 253.290358][T11153] R13: 00007f246c026038 R14: 00007f246c025fa0 R15: 00007ffc966101d8 [ 253.290377][T11153] [ 253.541643][ T23] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 253.552803][ T7242] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.590738][ T28] audit: type=1326 audit(2000000408.109:13115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11149 comm="syz.0.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d909c819 code=0x7ffc0000 [ 253.627078][T11150] netlink: 724 bytes leftover after parsing attributes in process `syz.0.2118'. [ 253.670668][ T28] audit: type=1326 audit(2000000408.118:13116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11149 comm="syz.0.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff7d909c819 code=0x7ffc0000 [ 253.698892][ T28] audit: type=1326 audit(2000000408.118:13117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11149 comm="syz.0.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d909c819 code=0x7ffc0000 [ 253.726937][ T28] audit: type=1326 audit(2000000408.118:13118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11149 comm="syz.0.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7d909c819 code=0x7ffc0000 [ 253.743254][T11172] FAULT_INJECTION: forcing a failure. [ 253.743254][T11172] name failslab, interval 1, probability 0, space 0, times 0 [ 253.753412][ T28] audit: type=1326 audit(2000000408.118:13119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11149 comm="syz.0.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d909c819 code=0x7ffc0000 [ 253.772982][T11172] CPU: 0 UID: 0 PID: 11172 Comm: syz.8.2127 Tainted: G W syzkaller #0 PREEMPT(full) [ 253.773016][T11172] Tainted: [W]=WARN [ 253.773023][T11172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 253.773035][T11172] Call Trace: [ 253.773042][T11172] [ 253.773085][T11172] __dump_stack+0x1d/0x30 [ 253.773155][T11172] dump_stack_lvl+0x95/0xd0 [ 253.773194][T11172] dump_stack+0x15/0x1b [ 253.773217][T11172] should_fail_ex+0x263/0x280 [ 253.773326][T11172] should_failslab+0x8c/0xb0 [ 253.773349][T11172] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 253.773424][T11172] ? __alloc_skb+0x2d6/0x690 [ 253.773453][T11172] __alloc_skb+0x2d6/0x690 [ 253.773481][T11172] ? __alloc_skb+0x200/0x690 [ 253.773593][T11172] netlink_alloc_large_skb+0xbf/0xf0 [ 253.773675][T11172] netlink_sendmsg+0x40c/0x6f0 [ 253.773698][T11172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.773718][T11172] ____sys_sendmsg+0x563/0x5b0 [ 253.773778][T11172] ___sys_sendmsg+0x195/0x1e0 [ 253.773838][T11172] __x64_sys_sendmsg+0xd4/0x160 [ 253.773875][T11172] x64_sys_call+0x194c/0x3020 [ 253.773939][T11172] do_syscall_64+0x12c/0x370 [ 253.774027][T11172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.774050][T11172] RIP: 0033:0x7f246bdac819 [ 253.774067][T11172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.774085][T11172] RSP: 002b:00007f246a807028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.774107][T11172] RAX: ffffffffffffffda RBX: 00007f246c025fa0 RCX: 00007f246bdac819 [ 253.774123][T11172] RDX: 0000000004008094 RSI: 0000200000002780 RDI: 0000000000000003 [ 253.774137][T11172] RBP: 00007f246a807090 R08: 0000000000000000 R09: 0000000000000000 [ 253.774151][T11172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.774203][T11172] R13: 00007f246c026038 R14: 00007f246c025fa0 R15: 00007ffc966101d8 [ 253.774223][T11172] [ 253.877451][T11169] loop7: detected capacity change from 0 to 736 [ 253.884585][ T28] audit: type=1326 audit(2000000408.137:13120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11149 comm="syz.0.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d909c819 code=0x7ffc0000 [ 253.913433][ T28] audit: type=1326 audit(2000000408.137:13121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11149 comm="syz.0.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff7d905d04e code=0x7ffc0000 [ 254.015802][T11181] loop8: detected capacity change from 0 to 512 [ 254.036153][T11169] RRIP_1991A [ 254.103819][T11181] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.122800][T11181] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.151264][T10881] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.189215][T11188] usb usb8: usbfs: process 11188 (syz.7.2133) did not claim interface 4 before use [ 254.335345][T11200] loop7: detected capacity change from 0 to 512 [ 254.345634][T11200] EXT4-fs: Ignoring removed nomblk_io_submit option [ 254.368648][T11200] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 254.368681][T11200] EXT4-fs: failed to create workqueue [ 254.369242][T11197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11197 comm=syz.8.2137 [ 254.378772][T11200] EXT4-fs (loop7): mount failed [ 254.557864][T11225] loop8: detected capacity change from 0 to 128 [ 254.665707][T11233] FAULT_INJECTION: forcing a failure. [ 254.665707][T11233] name failslab, interval 1, probability 0, space 0, times 0 [ 254.678422][T11233] CPU: 0 UID: 0 PID: 11233 Comm: syz.8.2145 Tainted: G W syzkaller #0 PREEMPT(full) [ 254.678531][T11233] Tainted: [W]=WARN [ 254.678540][T11233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 254.678554][T11233] Call Trace: [ 254.678562][T11233] [ 254.678570][T11233] __dump_stack+0x1d/0x30 [ 254.678607][T11233] dump_stack_lvl+0x95/0xd0 [ 254.678633][T11233] dump_stack+0x15/0x1b [ 254.678726][T11233] should_fail_ex+0x263/0x280 [ 254.678760][T11233] should_failslab+0x8c/0xb0 [ 254.678785][T11233] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 254.678812][T11233] ? __alloc_skb+0x2d6/0x690 [ 254.678847][T11233] __alloc_skb+0x2d6/0x690 [ 254.678879][T11233] ? __alloc_skb+0x200/0x690 [ 254.678941][T11233] netlink_alloc_large_skb+0xbf/0xf0 [ 254.678973][T11233] netlink_sendmsg+0x40c/0x6f0 [ 254.679027][T11233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.679057][T11233] ____sys_sendmsg+0x563/0x5b0 [ 254.679177][T11233] ___sys_sendmsg+0x195/0x1e0 [ 254.679223][T11233] __x64_sys_sendmsg+0xd4/0x160 [ 254.679268][T11233] x64_sys_call+0x194c/0x3020 [ 254.679297][T11233] do_syscall_64+0x12c/0x370 [ 254.679381][T11233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.679407][T11233] RIP: 0033:0x7f246bdac819 [ 254.679427][T11233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.679447][T11233] RSP: 002b:00007f246a7e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.679472][T11233] RAX: ffffffffffffffda RBX: 00007f246c026090 RCX: 00007f246bdac819 [ 254.679490][T11233] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000009 [ 254.679505][T11233] RBP: 00007f246a7e6090 R08: 0000000000000000 R09: 0000000000000000 [ 254.679570][T11233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.679584][T11233] R13: 00007f246c026128 R14: 00007f246c026090 R15: 00007ffc966101d8 [ 254.679605][T11233] [ 254.944092][T11233] syz.8.2145: attempt to access beyond end of device [ 254.944092][T11233] loop8: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 255.017990][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 255.227465][T11258] FAULT_INJECTION: forcing a failure. [ 255.227465][T11258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.241555][T11258] CPU: 1 UID: 0 PID: 11258 Comm: syz.0.2157 Tainted: G W syzkaller #0 PREEMPT(full) [ 255.241592][T11258] Tainted: [W]=WARN [ 255.241600][T11258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 255.241614][T11258] Call Trace: [ 255.241622][T11258] [ 255.241650][T11258] __dump_stack+0x1d/0x30 [ 255.241681][T11258] dump_stack_lvl+0x95/0xd0 [ 255.241707][T11258] dump_stack+0x15/0x1b [ 255.241732][T11258] should_fail_ex+0x263/0x280 [ 255.241820][T11258] should_fail+0xb/0x20 [ 255.241848][T11258] should_fail_usercopy+0x1a/0x20 [ 255.241924][T11258] _copy_from_iter+0xcf/0xea0 [ 255.241957][T11258] ? __alloc_skb+0x4f6/0x690 [ 255.241988][T11258] ? __alloc_skb+0x200/0x690 [ 255.242079][T11258] netlink_sendmsg+0x4ae/0x6f0 [ 255.242109][T11258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.242197][T11258] ____sys_sendmsg+0x563/0x5b0 [ 255.242235][T11258] ___sys_sendmsg+0x195/0x1e0 [ 255.242336][T11258] __x64_sys_sendmsg+0xd4/0x160 [ 255.242420][T11258] x64_sys_call+0x194c/0x3020 [ 255.242517][T11258] do_syscall_64+0x12c/0x370 [ 255.242547][T11258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.242630][T11258] RIP: 0033:0x7ff7d909c819 [ 255.242649][T11258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.242669][T11258] RSP: 002b:00007ff7d7aef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.242694][T11258] RAX: ffffffffffffffda RBX: 00007ff7d9315fa0 RCX: 00007ff7d909c819 [ 255.242710][T11258] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 255.242740][T11258] RBP: 00007ff7d7aef090 R08: 0000000000000000 R09: 0000000000000000 [ 255.242755][T11258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.242822][T11258] R13: 00007ff7d9316038 R14: 00007ff7d9315fa0 R15: 00007ffce4be9918 [ 255.242843][T11258] [ 255.525373][ T3394] kernel write not supported for file /1220/oom_adj (pid: 3394 comm: kworker/0:4) [ 255.587169][T11219] loop7: detected capacity change from 0 to 512 [ 255.757802][T11278] SELinux: policydb version 414598713 does not match my version range 15-35 [ 255.766792][T11278] SELinux: failed to load policy [ 255.899705][T11219] EXT4-fs (loop7): 1 orphan inode deleted [ 255.943981][T11219] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.095734][ T7242] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.687945][T11303] netlink: 'syz.7.2173': attribute type 10 has an invalid length. [ 256.706933][T11305] FAULT_INJECTION: forcing a failure. [ 256.706933][T11305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.743452][T11305] CPU: 0 UID: 0 PID: 11305 Comm: syz.8.2174 Tainted: G W syzkaller #0 PREEMPT(full) [ 256.743493][T11305] Tainted: [W]=WARN [ 256.743501][T11305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 256.743564][T11305] Call Trace: [ 256.743572][T11305] [ 256.743581][T11305] __dump_stack+0x1d/0x30 [ 256.743613][T11305] dump_stack_lvl+0x95/0xd0 [ 256.743656][T11305] dump_stack+0x15/0x1b [ 256.743740][T11305] should_fail_ex+0x263/0x280 [ 256.743796][T11305] should_fail+0xb/0x20 [ 256.743825][T11305] should_fail_usercopy+0x1a/0x20 [ 256.743889][T11305] _copy_to_user+0x20/0xa0 [ 256.743924][T11305] pagemap_read+0x3ac/0x610 [ 256.744028][T11305] ? __pfx_pagemap_read+0x10/0x10 [ 256.744054][T11305] vfs_read+0x1ab/0x7f0 [ 256.744072][T11305] ? __rcu_read_unlock+0x4e/0x70 [ 256.744092][T11305] ? __fget_files+0x184/0x1c0 [ 256.744119][T11305] ? mutex_unlock+0x4e/0x90 [ 256.744211][T11305] __x64_sys_pread64+0xfd/0x150 [ 256.744255][T11305] x64_sys_call+0x27b5/0x3020 [ 256.744334][T11305] do_syscall_64+0x12c/0x370 [ 256.744364][T11305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.744390][T11305] RIP: 0033:0x7f246bdac819 [ 256.744410][T11305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.744431][T11305] RSP: 002b:00007f246a807028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 256.744516][T11305] RAX: ffffffffffffffda RBX: 00007f246c025fa0 RCX: 00007f246bdac819 [ 256.744533][T11305] RDX: 0000000000019000 RSI: 0000200000000200 RDI: 0000000000000005 [ 256.744548][T11305] RBP: 00007f246a807090 R08: 0000000000000000 R09: 0000000000000000 [ 256.744562][T11305] R10: 0000001000000000 R11: 0000000000000246 R12: 0000000000000002 [ 256.744574][T11305] R13: 00007f246c026038 R14: 00007f246c025fa0 R15: 00007ffc966101d8 [ 256.744636][T11305] [ 256.979688][T11303] team0: Port device netdevsim1 added [ 256.986344][T11311] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2176'. [ 257.012344][T11311] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2176'. [ 257.034248][ T28] kauditd_printk_skb: 76 callbacks suppressed [ 257.034264][ T28] audit: type=1326 audit(2000000411.337:13198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11312 comm="syz.0.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d909c819 code=0x7ffc0000 [ 257.037701][T11311] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2176'. [ 257.051210][ T28] audit: type=1326 audit(2000000411.337:13199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11312 comm="syz.0.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d909c819 code=0x7ffc0000 [ 257.101752][ T28] audit: type=1326 audit(2000000411.337:13200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11312 comm="syz.0.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff7d909c819 code=0x7ffc0000 [ 257.125594][ T28] audit: type=1326 audit(2000000411.402:13201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11312 comm="syz.0.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d909c819 code=0x7ffc0000 [ 257.150625][ T28] audit: type=1326 audit(2000000411.402:13202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11312 comm="syz.0.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d909c819 code=0x7ffc0000 [ 257.175085][ T28] audit: type=1326 audit(2000000411.449:13203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11312 comm="syz.0.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff7d909c819 code=0x7ffc0000 [ 257.199619][ T28] audit: type=1326 audit(2000000411.449:13204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11312 comm="syz.0.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d909c819 code=0x7ffc0000 [ 257.301982][ T28] audit: type=1326 audit(2000000411.449:13205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11312 comm="syz.0.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d909c819 code=0x7ffc0000 [ 257.337497][ T28] audit: type=1326 audit(2000000411.477:13206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11312 comm="syz.0.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ff7d909c819 code=0x7ffc0000 [ 257.502087][ T28] audit: type=1326 audit(2000000411.477:13207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11312 comm="syz.0.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d909c819 code=0x7ffc0000 [ 258.396050][T11330] program syz.2.2181 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.175088][T11402] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2185'. [ 261.185193][T11404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2184'. [ 261.205763][T11402] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.213030][T11402] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.268439][T11409] loop8: detected capacity change from 0 to 1024 [ 261.308206][T11409] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 261.350215][T11409] EXT4-fs error (device loop8): ext4_map_blocks:786: inode #3: block 2: comm syz.8.2188: lblock 2 mapped to illegal pblock 2 (length 1) [ 261.392508][T11409] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 261.413298][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 261.428826][ C1] EXT4-fs (loop8): initial error at time 2000000415: ext4_map_blocks:786: inode 3: block 2 [ 261.438980][ C1] EXT4-fs (loop8): last error at time 2000000415: ext4_map_blocks:786: inode 3: block 2 [ 261.467073][T11409] EXT4-fs error (device loop8): ext4_map_blocks:786: inode #3: block 48: comm syz.8.2188: lblock 0 mapped to illegal pblock 48 (length 1) [ 261.482274][T11409] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 261.482524][T11409] EXT4-fs error (device loop8): ext4_acquire_dquot:7026: comm syz.8.2188: Failed to acquire dquot type 0 [ 261.503504][T11409] loop8: lost filesystem error report for type 5 error -117 [ 261.504553][T11409] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 261.522284][T11409] loop8: lost filesystem error report for type 5 error -117 [ 261.522416][T11409] EXT4-fs error (device loop8): ext4_evict_inode:265: inode #11: comm syz.8.2188: mark_inode_dirty error [ 261.541333][T11409] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 261.541456][T11409] EXT4-fs warning (device loop8): ext4_evict_inode:268: couldn't mark inode dirty (err -117) [ 261.561787][T11409] EXT4-fs (loop8): 1 orphan inode deleted [ 261.571714][T11409] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.594039][ T1720] EXT4-fs error (device loop8): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 261.606636][T11432] netlink: 4556 bytes leftover after parsing attributes in process `syz.0.2196'. [ 261.608747][ T1720] EXT4-fs error (device loop8): ext4_release_dquot:7062: comm kworker/u8:7: Failed to release dquot type 0 [ 261.618043][T11409] EXT4-fs error (device loop8): __ext4_get_inode_loc:4797: comm syz.8.2188: Invalid inode table block 1 in block_group 0 [ 261.645577][T11409] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 261.829864][T10881] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.861503][T11432] IPv6: sit1: Disabled Multicast RS [ 261.867964][T11432] sit1: entered allmulticast mode [ 261.873405][ T30] EXT4-fs error (device loop8): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 261.889946][ T30] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 261.890063][ T30] EXT4-fs error (device loop8): ext4_release_dquot:7062: comm kworker/u8:1: Failed to release dquot type 0 [ 261.910704][ T30] loop8: lost filesystem error report for type 5 error -117 [ 261.916191][T10881] EXT4-fs error (device loop8): __ext4_get_inode_loc:4797: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 261.940500][T10881] loop8: lost filesystem error report for type 5 error -117 [ 261.941428][T10881] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 261.958633][T10881] loop8: lost filesystem error report for type 5 error -117 [ 261.958765][T10881] EXT4-fs error (device loop8): ext4_quota_off:7310: inode #3: comm syz-executor: mark_inode_dirty error [ 261.977892][T10881] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 262.969610][T11459] FAULT_INJECTION: forcing a failure. [ 262.969610][T11459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.072469][T11459] CPU: 1 UID: 0 PID: 11459 Comm: syz.0.2206 Tainted: G W syzkaller #0 PREEMPT(full) [ 263.072545][T11459] Tainted: [W]=WARN [ 263.072553][T11459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 263.072616][T11459] Call Trace: [ 263.072624][T11459] [ 263.072632][T11459] __dump_stack+0x1d/0x30 [ 263.072662][T11459] dump_stack_lvl+0x95/0xd0 [ 263.072689][T11459] dump_stack+0x15/0x1b [ 263.072796][T11459] should_fail_ex+0x263/0x280 [ 263.072828][T11459] should_fail+0xb/0x20 [ 263.072856][T11459] should_fail_usercopy+0x1a/0x20 [ 263.072949][T11459] _copy_from_user+0x1c/0xb0 [ 263.073011][T11459] do_ip_getsockopt+0x12c/0x10c0 [ 263.073039][T11459] ? avc_has_perm_noaudit+0xab/0x130 [ 263.073132][T11459] ? avc_has_perm+0x101/0x190 [ 263.073167][T11459] ip_getsockopt+0x5c/0x180 [ 263.073238][T11459] raw_getsockopt+0xb0/0x190 [ 263.073274][T11459] sock_common_getsockopt+0x60/0x70 [ 263.073305][T11459] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 263.073404][T11459] do_sock_getsockopt+0x1c4/0x210 [ 263.073439][T11459] __x64_sys_getsockopt+0x11d/0x1a0 [ 263.073479][T11459] x64_sys_call+0x2dcf/0x3020 [ 263.073543][T11459] do_syscall_64+0x12c/0x370 [ 263.073703][T11459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.073725][T11459] RIP: 0033:0x7ff7d909c819 [ 263.073759][T11459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.073779][T11459] RSP: 002b:00007ff7d7aef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 263.073801][T11459] RAX: ffffffffffffffda RBX: 00007ff7d9315fa0 RCX: 00007ff7d909c819 [ 263.073820][T11459] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000004 [ 263.073910][T11459] RBP: 00007ff7d7aef090 R08: 0000200000000040 R09: 0000000000000000 [ 263.073924][T11459] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.073945][T11459] R13: 00007ff7d9316038 R14: 00007ff7d9315fa0 R15: 00007ffce4be9918 [ 263.073968][T11459] [ 263.967739][T11480] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2213'. [ 264.220293][T11481] lo speed is unknown, defaulting to 1000 [ 264.318103][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 264.318136][ T28] audit: type=1326 audit(2000000418.091:13231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11487 comm="syz.1.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc080c819 code=0x7ffc0000 [ 264.462023][ T28] audit: type=1326 audit(2000000418.100:13232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11487 comm="syz.1.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc080c819 code=0x7ffc0000 [ 264.541572][ T28] audit: type=1326 audit(2000000418.100:13233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11487 comm="syz.1.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc080c819 code=0x7ffc0000 [ 264.577262][T11499] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2218'. [ 264.592252][T11502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2220'. [ 264.614851][ T28] audit: type=1326 audit(2000000418.100:13234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11487 comm="syz.1.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1cc080c819 code=0x7ffc0000 [ 264.639594][ T28] audit: type=1326 audit(2000000418.100:13235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11487 comm="syz.1.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc080c819 code=0x7ffc0000 [ 264.667171][T11508] FAULT_INJECTION: forcing a failure. [ 264.667171][T11508] name failslab, interval 1, probability 0, space 0, times 0 [ 264.680216][T11508] CPU: 0 UID: 0 PID: 11508 Comm: syz.8.2222 Tainted: G W syzkaller #0 PREEMPT(full) [ 264.680251][T11508] Tainted: [W]=WARN [ 264.680260][T11508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 264.680272][T11508] Call Trace: [ 264.680285][T11508] [ 264.680294][T11508] __dump_stack+0x1d/0x30 [ 264.680393][T11508] dump_stack_lvl+0x95/0xd0 [ 264.680415][T11508] dump_stack+0x15/0x1b [ 264.680439][T11508] should_fail_ex+0x263/0x280 [ 264.680471][T11508] should_failslab+0x8c/0xb0 [ 264.680546][T11508] kmem_cache_alloc_noprof+0x66/0x400 [ 264.680633][T11508] ? skb_clone+0x151/0x1f0 [ 264.680664][T11508] skb_clone+0x151/0x1f0 [ 264.680695][T11508] __netlink_deliver_tap+0x2c9/0x500 [ 264.680766][T11508] netlink_unicast+0x66b/0x690 [ 264.680798][T11508] netlink_sendmsg+0x5c8/0x6f0 [ 264.680818][T11508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.680885][T11508] ____sys_sendmsg+0x563/0x5b0 [ 264.680923][T11508] ___sys_sendmsg+0x195/0x1e0 [ 264.681054][T11508] __x64_sys_sendmsg+0xd4/0x160 [ 264.681160][T11508] x64_sys_call+0x194c/0x3020 [ 264.681251][T11508] do_syscall_64+0x12c/0x370 [ 264.681284][T11508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.681309][T11508] RIP: 0033:0x7f246bdac819 [ 264.681328][T11508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.681348][T11508] RSP: 002b:00007f246a807028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.681392][T11508] RAX: ffffffffffffffda RBX: 00007f246c025fa0 RCX: 00007f246bdac819 [ 264.681409][T11508] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 264.681425][T11508] RBP: 00007f246a807090 R08: 0000000000000000 R09: 0000000000000000 [ 264.681440][T11508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.681453][T11508] R13: 00007f246c026038 R14: 00007f246c025fa0 R15: 00007ffc966101d8 [ 264.681508][T11508] [ 264.681616][T11508] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2222'. [ 264.884181][T11516] lo speed is unknown, defaulting to 1000 [ 264.892210][ T28] audit: type=1326 audit(2000000418.100:13236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11487 comm="syz.1.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc080c819 code=0x7ffc0000 [ 264.922146][ T28] audit: type=1326 audit(2000000418.100:13237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11487 comm="syz.1.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc080c819 code=0x7ffc0000 [ 265.007516][ T28] audit: type=1326 audit(2000000418.100:13238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11487 comm="syz.1.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f1cc080c819 code=0x7ffc0000 [ 265.038467][T11523] rdma_rxe: rxe_newlink: failed to add lo [ 265.046263][ T28] audit: type=1326 audit(2000000418.100:13240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11487 comm="syz.1.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc080c819 code=0x7ffc0000 [ 265.046295][ T28] audit: type=1326 audit(2000000418.100:13241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11487 comm="syz.1.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc080c819 code=0x7ffc0000 [ 265.345483][T11529] netlink: 'syz.2.2230': attribute type 25 has an invalid length. [ 265.378006][T11529] netlink: 'syz.2.2230': attribute type 6 has an invalid length. [ 265.408350][T11537] loop7: detected capacity change from 0 to 128 [ 265.680366][T11551] loop8: detected capacity change from 0 to 512 [ 265.709147][T11551] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2237'. [ 265.771969][T11555] program syz.7.2239 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.830714][T11559] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2240'. [ 265.848804][T11559] loop8: detected capacity change from 0 to 164 [ 265.858234][T11559] ISOFS: Bad logical zone size 2816 [ 266.370323][T11570] netlink: 'syz.1.2243': attribute type 1 has an invalid length. [ 266.740037][T11580] rdma_rxe: rxe_newlink: failed to add lo [ 267.202884][T11598] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2251'. [ 267.393160][T11601] lo speed is unknown, defaulting to 1000 [ 268.032432][T11616] FAULT_INJECTION: forcing a failure. [ 268.032432][T11616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.056554][T11616] CPU: 0 UID: 0 PID: 11616 Comm: syz.7.2258 Tainted: G W syzkaller #0 PREEMPT(full) [ 268.056585][T11616] Tainted: [W]=WARN [ 268.056592][T11616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 268.056630][T11616] Call Trace: [ 268.056636][T11616] [ 268.056642][T11616] __dump_stack+0x1d/0x30 [ 268.056668][T11616] dump_stack_lvl+0x95/0xd0 [ 268.056689][T11616] dump_stack+0x15/0x1b [ 268.056709][T11616] should_fail_ex+0x263/0x280 [ 268.056806][T11616] should_fail+0xb/0x20 [ 268.056827][T11616] should_fail_usercopy+0x1a/0x20 [ 268.056891][T11616] _copy_to_iter+0x251/0xea0 [ 268.056939][T11616] ? __rcu_read_lock+0x36/0x50 [ 268.057058][T11616] seq_read_iter+0x776/0x940 [ 268.057089][T11616] seq_read+0x279/0x2c0 [ 268.057197][T11616] ? __pfx_seq_read+0x10/0x10 [ 268.057309][T11616] proc_reg_read+0x128/0x1c0 [ 268.057326][T11616] ? __pfx_proc_reg_read+0x10/0x10 [ 268.057343][T11616] vfs_readv+0x432/0x6e0 [ 268.057444][T11616] __x64_sys_preadv+0xfd/0x1c0 [ 268.057463][T11616] x64_sys_call+0x2915/0x3020 [ 268.057593][T11616] do_syscall_64+0x12c/0x370 [ 268.057616][T11616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.057635][T11616] RIP: 0033:0x7ff43b56c819 [ 268.057653][T11616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.057669][T11616] RSP: 002b:00007ff439fc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 268.057687][T11616] RAX: ffffffffffffffda RBX: 00007ff43b7e5fa0 RCX: 00007ff43b56c819 [ 268.057700][T11616] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 268.057711][T11616] RBP: 00007ff439fc7090 R08: 0000000000000005 R09: 0000000000000000 [ 268.057739][T11616] R10: 000000000000003a R11: 0000000000000246 R12: 0000000000000001 [ 268.057750][T11616] R13: 00007ff43b7e6038 R14: 00007ff43b7e5fa0 R15: 00007ffd5c516ee8 [ 268.057767][T11616] [ 268.266616][T11609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=768 sclass=netlink_route_socket pid=11609 comm=syz.0.2256 [ 268.393857][T11630] netlink: 4324 bytes leftover after parsing attributes in process `syz.7.2260'. [ 268.403642][T11631] netlink: 'syz.7.2260': attribute type 2 has an invalid length. [ 268.425685][T11631] netlink: 'syz.7.2260': attribute type 1 has an invalid length. [ 268.448347][T11633] loop8: detected capacity change from 0 to 256 [ 268.474621][T11636] rdma_rxe: rxe_newlink: failed to add lo [ 268.519527][T11633] syz.8.2261: attempt to access beyond end of device [ 268.519527][T11633] loop8: rw=8912896, sector=256, nr_sectors = 20 limit=256 [ 268.565486][T11633] syz.8.2261: attempt to access beyond end of device [ 268.565486][T11633] loop8: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 268.580129][T11639] lo speed is unknown, defaulting to 1000 [ 268.723753][T11646] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2265'. [ 268.888053][T11646] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.955371][T11660] xt_recent: hitcount (4294967293) is larger than allowed maximum (65535) [ 268.991791][T11646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.014837][T11646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.067196][ T7041] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.077938][ T7041] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.115855][ T6431] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.125124][ T6431] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.167477][T11675] rdma_rxe: rxe_newlink: failed to add lo [ 269.271653][T11680] lo speed is unknown, defaulting to 1000 [ 269.726692][T11699] FAULT_INJECTION: forcing a failure. [ 269.726692][T11699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.798735][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 269.798754][ T28] audit: type=1400 audit(2000000423.283:13314): avc: denied { create } for pid=11691 comm="syz.2.2282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 269.975420][T11699] CPU: 0 UID: 0 PID: 11699 Comm: syz.7.2284 Tainted: G W syzkaller #0 PREEMPT(full) [ 269.975461][T11699] Tainted: [W]=WARN [ 269.975470][T11699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 269.975512][T11699] Call Trace: [ 269.975519][T11699] [ 269.975528][T11699] __dump_stack+0x1d/0x30 [ 269.975560][T11699] dump_stack_lvl+0x95/0xd0 [ 269.975588][T11699] dump_stack+0x15/0x1b [ 269.975624][T11699] should_fail_ex+0x263/0x280 [ 269.975709][T11699] should_fail+0xb/0x20 [ 269.975759][T11699] should_fail_usercopy+0x1a/0x20 [ 269.975861][T11699] _copy_to_user+0x20/0xa0 [ 269.976010][T11699] simple_read_from_buffer+0xb5/0x130 [ 269.976083][T11699] proc_fail_nth_read+0x10e/0x150 [ 269.976121][T11699] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 269.976168][T11699] vfs_read+0x1ab/0x7f0 [ 269.976188][T11699] ? _copy_from_user+0x3b/0xb0 [ 269.976275][T11699] ? __sys_bind+0x1e9/0x290 [ 269.976344][T11699] ksys_read+0xdc/0x1a0 [ 269.976363][T11699] __x64_sys_read+0x40/0x50 [ 269.976381][T11699] x64_sys_call+0x2886/0x3020 [ 269.976461][T11699] do_syscall_64+0x12c/0x370 [ 269.976530][T11699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.976557][T11699] RIP: 0033:0x7ff43b52d04e [ 269.976573][T11699] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 269.976590][T11699] RSP: 002b:00007ff439fc6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 269.976648][T11699] RAX: ffffffffffffffda RBX: 00007ff439fc76c0 RCX: 00007ff43b52d04e [ 269.976665][T11699] RDX: 000000000000000f RSI: 00007ff439fc70a0 RDI: 0000000000000005 [ 269.976680][T11699] RBP: 00007ff439fc7090 R08: 0000000000000000 R09: 0000000000000000 [ 269.976851][T11699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.976866][T11699] R13: 00007ff43b7e6038 R14: 00007ff43b7e5fa0 R15: 00007ffd5c516ee8 [ 269.976886][T11699] [ 270.148920][T11667] block device autoloading is deprecated and will be removed. [ 270.253924][T11706] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2286'. [ 270.318812][ T28] audit: type=1326 audit(2000000423.770:13315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.2.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b453c819 code=0x7fc00000 [ 270.351563][ T28] audit: type=1326 audit(2000000423.770:13316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.2.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f04b453c819 code=0x7fc00000 [ 270.527073][T11727] Unknown options in mask 5 [ 270.575791][T11733] loop7: detected capacity change from 0 to 128 [ 270.594767][T11735] macvlan0: entered promiscuous mode [ 270.603730][T11735] netlink: 'syz.8.2299': attribute type 2 has an invalid length. [ 270.612082][T11733] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 270.625918][T11733] ext4 filesystem being mounted at /257/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 270.626321][T11735] x_tables: duplicate underflow at hook 1 [ 270.660077][ T7242] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 270.710473][T11741] vlan2: entered promiscuous mode [ 270.718123][T11741] dummy0: entered promiscuous mode [ 270.801576][T11745] loop8: detected capacity change from 0 to 512 [ 270.813517][T11745] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 270.822099][T11745] EXT4-fs (loop8): orphan cleanup on readonly fs [ 270.829344][T11745] EXT4-fs warning (device loop8): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 270.849598][T11745] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 270.857565][T11745] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #13: comm syz.8.2302: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 270.875640][T11745] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 270.875882][T11745] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.2302: couldn't read orphan inode 13 (err -117) [ 270.885132][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 270.885154][ C1] EXT4-fs (loop8): last error at time 2000000424: ext4_ext_check_inode:521: inode 13 [ 270.916582][T11745] loop8: lost filesystem error report for type 5 error -117 [ 270.917898][T11745] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 271.003221][T11745] EXT4-fs error (device loop8): ext4_lookup:1789: inode #2: comm syz.8.2302: deleted inode referenced: 12 [ 271.110152][T10881] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.501722][T11760] lo: entered allmulticast mode [ 271.513152][T11760] tunl0: entered allmulticast mode [ 271.515536][T11752] netlink: 'syz.2.2306': attribute type 83 has an invalid length. [ 271.519582][T11760] gre0: entered allmulticast mode [ 271.540402][T11760] gretap0: entered allmulticast mode [ 271.563849][T11760] erspan0: entered allmulticast mode [ 271.571893][T11768] loop8: detected capacity change from 0 to 512 [ 271.591853][T11760] ip_vti0: entered allmulticast mode [ 271.603282][T11768] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 271.614363][T11768] EXT4-fs (loop8): orphan cleanup on readonly fs [ 271.621010][T11760] ip6_vti0: entered allmulticast mode [ 271.626951][T11768] EXT4-fs warning (device loop8): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 271.627003][T11760] sit0: entered allmulticast mode [ 271.642596][T11760] ip6tnl0: entered allmulticast mode [ 271.654034][T11768] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 271.661161][T11768] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #13: comm syz.8.2312: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 271.680092][T11760] ip6gre0: entered allmulticast mode [ 271.685918][T11760] syz_tun: entered allmulticast mode [ 271.691464][T11760] ip6gretap0: entered allmulticast mode [ 271.696455][T11768] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 271.698269][T11768] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.2312: couldn't read orphan inode 13 (err -117) [ 271.698448][T11760] bridge0: entered allmulticast mode [ 271.707475][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 271.707494][ C1] EXT4-fs (loop8): last error at time 2000000425: ext4_ext_check_inode:521: inode 13 [ 271.707880][T11768] loop8: lost filesystem error report for type 5 error -117 [ 271.734138][T11768] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 271.761933][T11768] FAULT_INJECTION: forcing a failure. [ 271.761933][T11768] name failslab, interval 1, probability 0, space 0, times 0 [ 271.774865][T11768] CPU: 1 UID: 0 PID: 11768 Comm: syz.8.2312 Tainted: G W syzkaller #0 PREEMPT(full) [ 271.774945][T11768] Tainted: [W]=WARN [ 271.774952][T11768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 271.775035][T11768] Call Trace: [ 271.775042][T11768] [ 271.775050][T11768] __dump_stack+0x1d/0x30 [ 271.775082][T11768] dump_stack_lvl+0x95/0xd0 [ 271.775108][T11768] dump_stack+0x15/0x1b [ 271.775208][T11768] should_fail_ex+0x263/0x280 [ 271.775346][T11768] should_failslab+0x8c/0xb0 [ 271.775373][T11768] kmem_cache_alloc_noprof+0x66/0x400 [ 271.775398][T11768] ? do_getname+0x2e/0x1c0 [ 271.775421][T11768] do_getname+0x2e/0x1c0 [ 271.775448][T11768] __se_sys_symlink+0x2f/0x1b0 [ 271.775524][T11768] __x64_sys_symlink+0x31/0x40 [ 271.775571][T11768] x64_sys_call+0x2465/0x3020 [ 271.775597][T11768] do_syscall_64+0x12c/0x370 [ 271.775821][T11768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.775844][T11768] RIP: 0033:0x7f246bdac819 [ 271.775864][T11768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.775883][T11768] RSP: 002b:00007f246a807028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 271.775907][T11768] RAX: ffffffffffffffda RBX: 00007f246c025fa0 RCX: 00007f246bdac819 [ 271.775923][T11768] RDX: 0000000000000000 RSI: 00002000000017c0 RDI: 0000200000001780 [ 271.775967][T11768] RBP: 00007f246a807090 R08: 0000000000000000 R09: 0000000000000000 [ 271.775981][T11768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.776037][T11768] R13: 00007f246c026038 R14: 00007f246c025fa0 R15: 00007ffc966101d8 [ 271.776059][T11768] [ 271.961048][T11760] vcan0: entered allmulticast mode [ 271.966596][T11760] bond0: entered allmulticast mode [ 271.971902][T11760] team0: entered allmulticast mode [ 271.977344][T11760] dummy0: entered allmulticast mode [ 271.982920][T11760] nlmon0: entered allmulticast mode [ 271.988348][T11760] caif0: entered allmulticast mode [ 271.994113][T10881] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.003267][T11760] vxcan0: entered allmulticast mode [ 272.003391][T11760] vxcan1: entered allmulticast mode [ 272.003478][T11760] veth0: entered allmulticast mode [ 272.003592][T11760] veth1: entered allmulticast mode [ 272.003699][T11760] wg0: entered allmulticast mode [ 272.003760][T11760] wg1: entered allmulticast mode [ 272.041539][T11779] lyz2: rxe_newlink: already configured on lo [ 272.045405][T11760] wg2: entered allmulticast mode [ 272.054577][T11760] veth0_to_bridge: entered allmulticast mode [ 272.064209][T11760] bridge_slave_0: entered allmulticast mode [ 272.070684][T11760] veth1_to_bridge: entered allmulticast mode [ 272.077390][T11760] bridge_slave_1: entered allmulticast mode [ 272.084124][T11760] veth0_to_bond: entered allmulticast mode [ 272.090691][T11760] bond_slave_0: entered allmulticast mode [ 272.097114][ T28] audit: type=1400 audit(2000000425.426:13317): avc: denied { connect } for pid=11781 comm="syz.8.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 272.117702][T11760] veth1_to_bond: entered allmulticast mode [ 272.125162][T11760] bond_slave_1: entered allmulticast mode [ 272.131010][ T28] audit: type=1400 audit(2000000425.426:13318): avc: denied { getopt } for pid=11781 comm="syz.8.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 272.134772][T11760] veth0_to_team: entered allmulticast mode [ 272.151150][ T28] audit: type=1400 audit(2000000425.426:13319): avc: denied { read } for pid=11781 comm="syz.8.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 272.157578][T11760] team_slave_0: entered allmulticast mode [ 272.185678][T11760] veth1_to_team: entered allmulticast mode [ 272.191935][T11760] team_slave_1: entered allmulticast mode [ 272.197890][T11760] veth1_to_batadv: entered allmulticast mode [ 272.204626][T11760] batadv_slave_1: entered allmulticast mode [ 272.210958][T11760] xfrm0: entered allmulticast mode [ 272.216269][T11760] veth0_to_hsr: entered allmulticast mode [ 272.222548][T11760] hsr_slave_0: entered allmulticast mode [ 272.228307][T11760] veth1_to_hsr: entered allmulticast mode [ 272.234472][T11760] hsr_slave_1: entered allmulticast mode [ 272.240284][T11760] hsr0: entered allmulticast mode [ 272.245814][T11760] veth1_virt_wifi: entered allmulticast mode [ 272.251985][T11760] veth0_virt_wifi: entered allmulticast mode [ 272.260410][T11760] veth1_vlan: entered allmulticast mode [ 272.266328][T11760] veth0_vlan: entered allmulticast mode [ 272.272179][ T28] audit: type=1400 audit(2000000425.594:13320): avc: denied { write } for pid=11781 comm="syz.8.2318" path="socket:[36195]" dev="sockfs" ino=36195 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 272.297233][T11760] vlan0: entered allmulticast mode [ 272.309266][T11760] macvlan0: entered allmulticast mode [ 272.318861][T11760] macvlan1: entered allmulticast mode [ 272.330576][T11760] ipvlan0: entered allmulticast mode [ 272.340788][T11760] ipvlan1: entered allmulticast mode [ 272.346442][T11760] veth1_macvtap: entered allmulticast mode [ 272.357829][T11760] veth0_macvtap: entered allmulticast mode [ 272.364936][T11760] macvtap0: entered allmulticast mode [ 272.370637][T11760] macsec0: entered allmulticast mode [ 272.376241][T11760] geneve0: entered allmulticast mode [ 272.381894][T11760] bond1: entered allmulticast mode [ 272.387205][T11760] bridge1: entered allmulticast mode [ 272.399695][T11760] macsec1: entered allmulticast mode [ 272.405213][T11760] ip6tnl1: entered allmulticast mode [ 272.410788][T11760] syztnl1: entered allmulticast mode [ 272.416343][T11760] netdevsim netdevsim0 eth0: entered allmulticast mode [ 272.425804][T11760] netdevsim netdevsim0 eth1: entered allmulticast mode [ 272.432913][T11760] netdevsim netdevsim0 eth2: entered allmulticast mode [ 272.440113][T11760] netdevsim netdevsim0 eth3: entered allmulticast mode [ 272.447490][T11760] bridge2: entered allmulticast mode [ 272.453069][T11760] macvlan2: entered allmulticast mode [ 272.458672][T11760] bridge3: entered allmulticast mode [ 272.464298][T11760] ip6gre1: left promiscuous mode [ 272.475146][T11760] : entered allmulticast mode [ 272.486720][T11760] bridge4: entered allmulticast mode [ 272.492351][T11760] gre1: left promiscuous mode [ 272.497117][T11760] gre1: entered allmulticast mode [ 272.502931][T11760] bond2: entered allmulticast mode [ 272.518865][T11760] bridge5: entered allmulticast mode [ 272.529630][T11760] gretap1: entered allmulticast mode [ 272.540690][T11760] geneve1: left promiscuous mode [ 272.551392][T11760] macsec2: left promiscuous mode [ 272.559859][T11760] ip6gre2: entered allmulticast mode [ 272.648342][T11774] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.655691][T11774] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.689066][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881054f6600: rx timeout, send abort [ 272.697341][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8881054f6600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 272.794701][T11774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.819543][T11774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.896659][ T6176] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.906523][ T6176] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.947196][ T6176] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.007950][ T6176] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.018862][T11818] xt_policy: output policy not valid in PREROUTING and INPUT [ 273.131823][T11813] lo speed is unknown, defaulting to 1000 [ 273.397806][T11823] loop7: detected capacity change from 0 to 512 [ 273.476581][T11823] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 273.488018][T11823] EXT4-fs (loop7): orphan cleanup on readonly fs [ 273.502079][T11823] EXT4-fs warning (device loop7): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 273.522842][T11823] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 273.533443][T11823] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #13: comm syz.7.2322: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 273.552789][T11823] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 273.556266][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 273.571824][ C1] EXT4-fs (loop7): last error at time 2000000426: ext4_ext_check_inode:521: inode 13 [ 273.584567][T11823] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.2322: couldn't read orphan inode 13 (err -117) [ 273.597701][T11823] loop7: lost filesystem error report for type 5 error -117 [ 273.613634][T11823] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 273.646742][T11822] EXT4-fs error (device loop7): ext4_lookup:1789: inode #2: comm syz.7.2322: deleted inode referenced: 12 [ 273.658795][T11822] EXT4-fs error (device loop7): ext4_lookup:1789: inode #2: comm syz.7.2322: deleted inode referenced: 12 [ 273.670578][T11822] EXT4-fs error (device loop7): ext4_lookup:1789: inode #2: comm syz.7.2322: deleted inode referenced: 12 [ 273.739843][T11831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2326'. [ 273.845786][T11838] netem: incorrect gi model size [ 273.853033][T11838] netem: change failed [ 273.868165][T11838] /dev/loop2: Can't lookup blockdev [ 273.969625][ T7242] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.019396][T11843] rdma_rxe: rxe_newlink: failed to add lo [ 274.240908][T11854] FAULT_INJECTION: forcing a failure. [ 274.240908][T11854] name failslab, interval 1, probability 0, space 0, times 0 [ 274.336192][T11855] lo speed is unknown, defaulting to 1000 [ 274.660074][T11854] CPU: 1 UID: 0 PID: 11854 Comm: syz.7.2332 Tainted: G W syzkaller #0 PREEMPT(full) [ 274.660119][T11854] Tainted: [W]=WARN [ 274.660126][T11854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 274.660138][T11854] Call Trace: [ 274.660144][T11854] [ 274.660154][T11854] __dump_stack+0x1d/0x30 [ 274.660198][T11854] dump_stack_lvl+0x95/0xd0 [ 274.660220][T11854] dump_stack+0x15/0x1b [ 274.660245][T11854] should_fail_ex+0x263/0x280 [ 274.660310][T11854] should_failslab+0x8c/0xb0 [ 274.660337][T11854] kmem_cache_alloc_noprof+0x66/0x400 [ 274.660391][T11854] ? security_inode_alloc+0x37/0x100 [ 274.660423][T11854] security_inode_alloc+0x37/0x100 [ 274.660454][T11854] inode_init_always_gfp+0x4b7/0x500 [ 274.660498][T11854] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 274.660534][T11854] alloc_inode+0x58/0x170 [ 274.660561][T11854] new_inode+0x1d/0xe0 [ 274.660589][T11854] shmem_get_inode+0x246/0x750 [ 274.660649][T11854] __shmem_file_setup+0x112/0x210 [ 274.660693][T11854] shmem_file_setup+0x3b/0x50 [ 274.660725][T11854] memfd_alloc_file+0x4e/0x300 [ 274.660762][T11854] __se_sys_memfd_create+0x2e1/0x3b0 [ 274.660854][T11854] __x64_sys_memfd_create+0x31/0x40 [ 274.660937][T11854] x64_sys_call+0x1f22/0x3020 [ 274.660963][T11854] do_syscall_64+0x12c/0x370 [ 274.660995][T11854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.661022][T11854] RIP: 0033:0x7ff43b56c819 [ 274.661041][T11854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.661208][T11854] RSP: 002b:00007ff439fc6e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 274.661233][T11854] RAX: ffffffffffffffda RBX: 00000000000003e9 RCX: 00007ff43b56c819 [ 274.661251][T11854] RDX: 00007ff439fc6ee0 RSI: 0000000000000000 RDI: 00007ff43b602e71 [ 274.661265][T11854] RBP: 0000200000000840 R08: 00000000ffffffff R09: 0000000000000000 [ 274.661280][T11854] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000400 [ 274.661335][T11854] R13: 00007ff439fc6ee0 R14: 00007ff439fc6ea0 R15: 00002000000000c0 [ 274.661358][T11854] [ 274.978525][T11849] loop7: detected capacity change from 0 to 16384 [ 276.242541][T11870] lo speed is unknown, defaulting to 1000 [ 276.538821][ T28] audit: type=1400 audit(2000000429.589:13321): avc: denied { map } for pid=11858 comm="syz.1.2333" path="socket:[35387]" dev="sockfs" ino=35387 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 277.261538][T11871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2333'. [ 277.307164][T11881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2339'. [ 277.316088][ T28] audit: type=1400 audit(2000000429.589:13322): avc: denied { accept } for pid=11858 comm="syz.1.2333" path="socket:[35387]" dev="sockfs" ino=35387 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 277.373286][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2342'. [ 277.607056][T11892] lyz2: rxe_newlink: already configured on lo [ 277.687725][T11896] lo speed is unknown, defaulting to 1000 [ 277.914189][T11905] bond0: left allmulticast mode [ 277.920279][T11905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.928898][T11905] bond0: entered allmulticast mode [ 277.934349][T11905] team0: Port device bond0 added [ 278.021283][T11905] lo speed is unknown, defaulting to 1000 [ 278.199730][T11922] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2353'. [ 278.259928][T11922] veth3: entered promiscuous mode [ 278.795758][T11916] loop7: detected capacity change from 0 to 16384 [ 279.045814][T11933] rdma_rxe: rxe_newlink: failed to add lo [ 280.022720][ T28] audit: type=1326 audit(2000000432.844:13323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11957 comm="syz.8.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f246bd69511 code=0x7ffc0000 [ 280.070524][T11956] lo speed is unknown, defaulting to 1000 [ 280.323259][ T28] audit: type=1326 audit(2000000432.872:13324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11957 comm="syz.8.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f246bdad609 code=0x7ffc0000 [ 280.418874][ T28] audit: type=1326 audit(2000000432.872:13325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11957 comm="syz.8.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f246bd6957b code=0x7ffc0000 [ 280.512289][ T28] audit: type=1326 audit(2000000432.872:13326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11957 comm="syz.8.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246bdac819 code=0x7ffc0000 [ 280.621599][ T28] audit: type=1326 audit(2000000432.872:13328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11957 comm="syz.8.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246bdac819 code=0x7ffc0000 [ 280.673040][T11968] lo speed is unknown, defaulting to 1000 [ 280.728754][ T28] audit: type=1326 audit(2000000432.872:13329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11957 comm="syz.8.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246bdac819 code=0x7ffc0000 [ 280.823812][ T28] audit: type=1326 audit(2000000432.872:13330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11957 comm="syz.8.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246bdac819 code=0x7ffc0000 [ 280.860012][T11969] xt_hashlimit: size too large, truncated to 1048576 [ 280.913883][ T28] audit: type=1326 audit(2000000432.872:13327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11957 comm="syz.8.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f246bd68c6c code=0x7ffc0000 [ 281.615165][T11974] loop8: detected capacity change from 0 to 128 [ 281.970641][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 281.970677][ T28] audit: type=1400 audit(2000000434.669:13393): avc: denied { read } for pid=11996 comm="syz.7.2373" path="socket:[35598]" dev="sockfs" ino=35598 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 282.235673][T11974] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2367'. [ 282.352778][T12006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.439589][T12006] team0: Port device bond0 added [ 282.504635][T12006] lo speed is unknown, defaulting to 1000 [ 282.824467][T12032] ieee802154 phy0 wpan0: encryption failed: -22 [ 283.077002][T12036] netlink: 'syz.8.2385': attribute type 21 has an invalid length. [ 283.135545][T12036] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2385'. [ 284.178599][ T28] audit: type=1400 audit(2000000436.717:13394): avc: denied { ioctl } for pid=12046 comm="syz.0.2389" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 284.759049][T12041] loop8: detected capacity change from 0 to 512 [ 285.159140][T12041] EXT4-fs (loop8): 1 orphan inode deleted [ 285.236303][T12041] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.477283][ T28] audit: type=1400 audit(2000000437.887:13395): avc: denied { ioctl } for pid=12040 comm="syz.8.2387" path="socket:[35713]" dev="sockfs" ino=35713 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 286.518180][ T28] audit: type=1400 audit(2000000437.887:13396): avc: denied { write } for pid=12040 comm="syz.8.2387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 288.659999][T12084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2400'. [ 288.677403][ T7041] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.719169][ T28] audit: type=1400 audit(2000000440.937:13397): avc: denied { write } for pid=12083 comm="syz.2.2400" path="socket:[36800]" dev="sockfs" ino=36800 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 288.772846][ T7041] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.781672][ T7041] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.791263][ T7041] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.880092][T12091] loop7: detected capacity change from 0 to 512 [ 288.892517][T10881] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.936747][T12091] EXT4-fs: Ignoring removed bh option [ 288.951493][T12091] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 289.030611][T12091] EXT4-fs error (device loop7): ext4_iget_extra_inode:5040: inode #15: comm syz.7.2404: corrupted in-inode xattr: e_value size too large [ 289.048533][T12091] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 289.048709][T12091] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.2404: couldn't read orphan inode 15 (err -117) [ 289.057932][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 289.057954][ C0] EXT4-fs (loop7): initial error at time 2000000441: ext4_iget_extra_inode:5040: inode 15 [ 289.058006][ C0] EXT4-fs (loop7): last error at time 2000000441: ext4_iget_extra_inode:5040: inode 15 [ 289.131396][T12091] loop7: lost filesystem error report for type 5 error -117 [ 289.132445][T12091] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.548622][ T7242] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.778546][T12113] FAULT_INJECTION: forcing a failure. [ 289.778546][T12113] name failslab, interval 1, probability 0, space 0, times 0 [ 289.791244][T12113] CPU: 0 UID: 0 PID: 12113 Comm: syz.7.2411 Tainted: G W syzkaller #0 PREEMPT(full) [ 289.791317][T12113] Tainted: [W]=WARN [ 289.791323][T12113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 289.791335][T12113] Call Trace: [ 289.791343][T12113] [ 289.791370][T12113] __dump_stack+0x1d/0x30 [ 289.791403][T12113] dump_stack_lvl+0x95/0xd0 [ 289.791499][T12113] dump_stack+0x15/0x1b [ 289.791524][T12113] should_fail_ex+0x263/0x280 [ 289.791638][T12113] ? io_manage_buffers_legacy+0x188/0x6c0 [ 289.791672][T12113] should_failslab+0x8c/0xb0 [ 289.791694][T12113] __kmalloc_cache_noprof+0x5f/0x410 [ 289.791799][T12113] io_manage_buffers_legacy+0x188/0x6c0 [ 289.791828][T12113] __io_issue_sqe+0xfd/0x2d0 [ 289.791848][T12113] io_issue_sqe+0x206/0xc00 [ 289.791867][T12113] ? io_provide_buffers_prep+0x1c7/0x1f0 [ 289.791961][T12113] io_submit_sqes+0x7f7/0x1230 [ 289.791994][T12113] __se_sys_io_uring_enter+0x1c9/0xf50 [ 289.792018][T12113] ? __fget_files+0x184/0x1c0 [ 289.792045][T12113] ? mutex_unlock+0x4e/0x90 [ 289.792095][T12113] ? fput+0x8f/0xc0 [ 289.792128][T12113] __x64_sys_io_uring_enter+0x78/0x90 [ 289.792192][T12113] x64_sys_call+0x1e16/0x3020 [ 289.792224][T12113] do_syscall_64+0x12c/0x370 [ 289.792252][T12113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.792296][T12113] RIP: 0033:0x7ff43b56c819 [ 289.792317][T12113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.792339][T12113] RSP: 002b:00007ff439fc7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 289.792430][T12113] RAX: ffffffffffffffda RBX: 00007ff43b7e5fa0 RCX: 00007ff43b56c819 [ 289.792444][T12113] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 289.792457][T12113] RBP: 00007ff439fc7090 R08: 0000000000000000 R09: 0000000000000000 [ 289.792505][T12113] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 289.792521][T12113] R13: 00007ff43b7e6038 R14: 00007ff43b7e5fa0 R15: 00007ffd5c516ee8 [ 289.792542][T12113] [ 290.106861][T12121] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2413'. [ 290.342840][T12125] FAULT_INJECTION: forcing a failure. [ 290.342840][T12125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.402667][T12125] CPU: 0 UID: 0 PID: 12125 Comm: syz.7.2414 Tainted: G W syzkaller #0 PREEMPT(full) [ 290.402746][T12125] Tainted: [W]=WARN [ 290.402755][T12125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 290.402770][T12125] Call Trace: [ 290.402779][T12125] [ 290.402788][T12125] __dump_stack+0x1d/0x30 [ 290.402823][T12125] dump_stack_lvl+0x95/0xd0 [ 290.402851][T12125] dump_stack+0x15/0x1b [ 290.402880][T12125] should_fail_ex+0x263/0x280 [ 290.402911][T12125] should_fail+0xb/0x20 [ 290.403007][T12125] should_fail_usercopy+0x1a/0x20 [ 290.403036][T12125] _copy_from_user+0x1c/0xb0 [ 290.403074][T12125] ___sys_sendmsg+0xc1/0x1e0 [ 290.403157][T12125] __x64_sys_sendmsg+0xd4/0x160 [ 290.403200][T12125] x64_sys_call+0x194c/0x3020 [ 290.403233][T12125] do_syscall_64+0x12c/0x370 [ 290.403267][T12125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.403292][T12125] RIP: 0033:0x7ff43b56c819 [ 290.403308][T12125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.403410][T12125] RSP: 002b:00007ff439fc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.403481][T12125] RAX: ffffffffffffffda RBX: 00007ff43b7e5fa0 RCX: 00007ff43b56c819 [ 290.403499][T12125] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 290.403515][T12125] RBP: 00007ff439fc7090 R08: 0000000000000000 R09: 0000000000000000 [ 290.403531][T12125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.403545][T12125] R13: 00007ff43b7e6038 R14: 00007ff43b7e5fa0 R15: 00007ffd5c516ee8 [ 290.403579][T12125] [ 291.159947][T12136] lo speed is unknown, defaulting to 1000 [ 291.222944][ T28] audit: type=1400 audit(2000000443.322:13398): avc: denied { setattr } for pid=12134 comm="syz.8.2417" path="socket:[36928]" dev="sockfs" ino=36928 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 291.717345][ T28] audit: type=1400 audit(2000000443.771:13399): avc: denied { create } for pid=12140 comm="syz.1.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 291.986127][T12152] geneve1: entered promiscuous mode [ 291.997296][T12152] macsec1: entered promiscuous mode [ 292.002615][T12152] macsec1: entered allmulticast mode [ 292.035783][T12152] geneve1: entered allmulticast mode [ 292.055967][T12156] netlink: 'syz.8.2423': attribute type 29 has an invalid length. [ 292.103843][T12156] netlink: 'syz.8.2423': attribute type 29 has an invalid length. [ 292.123969][T12156] netlink: 500 bytes leftover after parsing attributes in process `syz.8.2423'. [ 292.195105][T12130] loop7: detected capacity change from 0 to 512 [ 292.278747][T12167] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2427'. [ 292.288097][T12167] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 292.429032][ T28] audit: type=1400 audit(2000000444.454:13400): avc: denied { accept } for pid=12171 comm="syz.8.2430" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 292.479599][T12177] netlink: 'syz.1.2429': attribute type 21 has an invalid length. [ 292.530876][T12177] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2429'. [ 292.548071][ T28] audit: type=1400 audit(2000000444.557:13401): avc: denied { getopt } for pid=12181 comm="syz.8.2432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 292.667913][ T28] audit: type=1400 audit(2000000444.669:13402): avc: denied { read } for pid=12183 comm="syz.1.2433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 292.774260][T12193] loop8: detected capacity change from 0 to 512 [ 292.788010][T12096] udevd[12096]: incorrect ext4 checksum on /dev/loop8 [ 292.795112][T12193] EXT4-fs (loop8): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 292.835992][T12096] udevd[12096]: incorrect ext4 checksum on /dev/loop8 [ 292.848579][T12096] udevd[12096]: incorrect ext4 checksum on /dev/loop8 [ 292.876465][T12130] EXT4-fs (loop7): 1 orphan inode deleted [ 292.923249][T12130] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.026340][T12199] rdma_rxe: rxe_newlink: failed to add lo [ 293.337402][ T28] audit: type=1400 audit(2000000445.305:13403): avc: denied { setopt } for pid=12209 comm="syz.0.2443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 293.454021][ T28] audit: type=1326 audit(2000000445.408:13404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12209 comm="syz.0.2443" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7d909c819 code=0x0 [ 293.907035][ T4345] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.915944][ T4345] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.924768][ T4345] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.934169][ T4345] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.098386][ T7242] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.127565][T12224] netem: incorrect gi model size [ 294.148683][T12224] netem: change failed [ 294.161142][T12220] EXT4-fs (loop8): unable to read superblock [ 294.222934][T12210] delete_channel: no stack [ 294.298423][T12242] loop7: detected capacity change from 0 to 512 [ 294.334163][T12242] EXT4-fs error (device loop7): ext4_iget_extra_inode:5040: inode #12: comm syz.7.2452: corrupted in-inode xattr: bad e_name length [ 294.359657][T12242] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 294.368389][T12242] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.2452: couldn't read orphan inode 12 (err -117) [ 294.389455][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 294.389480][ C1] EXT4-fs (loop7): initial error at time 2000000446: ext4_iget_extra_inode:5040: inode 12 [ 294.389510][ C1] EXT4-fs (loop7): last error at time 2000000446: ext4_iget_extra_inode:5040: inode 12 [ 294.515046][T12242] loop7: lost filesystem error report for type 5 error -117 [ 294.516867][T12242] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.597618][T12242] EXT4-fs (loop7): shut down requested (2) [ 294.613431][T12252] lyz2: rxe_newlink: already configured on lo [ 294.789231][ T7242] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.931387][T12260] loop8: detected capacity change from 0 to 512 [ 295.012004][T12260] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 295.044446][T12260] EXT4-fs (loop8): 1 truncate cleaned up [ 295.051426][T12260] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.251154][ T28] audit: type=1400 audit(2000000446.971:13405): avc: denied { name_bind } for pid=12266 comm="syz.1.2460" src=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 295.517523][T10881] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.686360][T12287] loop8: detected capacity change from 0 to 128 [ 295.862809][T12295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.878106][T12295] team0: Port device bond0 added [ 295.962124][T12295] lo speed is unknown, defaulting to 1000 [ 296.262837][T12305] netlink: 'syz.0.2471': attribute type 3 has an invalid length. [ 297.212527][T12310] netlink: 128 bytes leftover after parsing attributes in process `syz.8.2473'. [ 297.258764][T12310] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 297.333212][T12326] sd 0:0:1:0: device reset [ 297.378731][T12330] SELinux: security_context_str_to_sid (a`yv-|J+0l8G[kT_|nU5 [ 297.378731][T12330] M9) failed with errno=-22 [ 297.458273][T12332] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 297.489037][T12324] loop7: detected capacity change from 0 to 128 [ 297.505982][T12334] loop8: detected capacity change from 0 to 512 [ 297.566091][T12336] xfrm1: entered allmulticast mode [ 297.594539][T12323] tmpfs: Bad value for 'mpol' [ 297.601957][T12334] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.646371][T12334] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.708461][T12347] xt_hashlimit: size too large, truncated to 1048576 [ 297.738859][T12348] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2481'. [ 297.807052][T12348] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2481'. [ 298.279184][T10881] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.441726][T12361] loop8: detected capacity change from 0 to 128 [ 298.463111][T12363] lyz2: rxe_newlink: already configured on lo [ 298.535889][T12367] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2489'. [ 298.750122][T12377] syzkaller0: entered promiscuous mode [ 298.755752][T12377] syzkaller0: entered allmulticast mode [ 298.829301][T12387] loop8: detected capacity change from 0 to 1764 [ 298.874651][T12387] FAULT_INJECTION: forcing a failure. [ 298.874651][T12387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.896792][T12387] CPU: 0 UID: 0 PID: 12387 Comm: syz.8.2494 Tainted: G W syzkaller #0 PREEMPT(full) [ 298.896828][T12387] Tainted: [W]=WARN [ 298.896835][T12387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 298.896909][T12387] Call Trace: [ 298.896916][T12387] [ 298.896923][T12387] __dump_stack+0x1d/0x30 [ 298.896949][T12387] dump_stack_lvl+0x95/0xd0 [ 298.896974][T12387] dump_stack+0x15/0x1b [ 298.897046][T12387] should_fail_ex+0x263/0x280 [ 298.897077][T12387] should_fail+0xb/0x20 [ 298.897103][T12387] should_fail_usercopy+0x1a/0x20 [ 298.897157][T12387] _copy_to_user+0x20/0xa0 [ 298.897191][T12387] simple_read_from_buffer+0xb5/0x130 [ 298.897278][T12387] proc_fail_nth_read+0x10e/0x150 [ 298.897380][T12387] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 298.897413][T12387] vfs_read+0x1ab/0x7f0 [ 298.897434][T12387] ? __rcu_read_unlock+0x4e/0x70 [ 298.897457][T12387] ? __fget_files+0x184/0x1c0 [ 298.897542][T12387] ? mutex_lock+0x57/0x90 [ 298.897567][T12387] ksys_read+0xdc/0x1a0 [ 298.897593][T12387] __x64_sys_read+0x40/0x50 [ 298.897659][T12387] x64_sys_call+0x2886/0x3020 [ 298.897695][T12387] do_syscall_64+0x12c/0x370 [ 298.897721][T12387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.897742][T12387] RIP: 0033:0x7f246bd6d04e [ 298.897758][T12387] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 298.897800][T12387] RSP: 002b:00007f246a806fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 298.897821][T12387] RAX: ffffffffffffffda RBX: 00007f246a8076c0 RCX: 00007f246bd6d04e [ 298.897899][T12387] RDX: 000000000000000f RSI: 00007f246a8070a0 RDI: 000000000000000c [ 298.897912][T12387] RBP: 00007f246a807090 R08: 0000000000000000 R09: 0000000000000000 [ 298.897946][T12387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.897958][T12387] R13: 00007f246c026038 R14: 00007f246c025fa0 R15: 00007ffc966101d8 [ 298.898054][T12387] [ 298.914691][T12391] lo speed is unknown, defaulting to 1000 [ 299.052108][T12394] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2495'. [ 299.157055][ T28] audit: type=1400 audit(2000000450.741:13406): avc: denied { write } for pid=12369 comm="syz.1.2491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 299.191206][T12389] xt_CT: You must specify a L4 protocol and not use inversions on it [ 299.270009][T12402] xt_hashlimit: size too large, truncated to 1048576 [ 299.326546][ T28] audit: type=1400 audit(2000000450.900:13407): avc: denied { create } for pid=12403 comm="syz.7.2500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 299.346737][T12404] netlink: 'syz.7.2500': attribute type 21 has an invalid length. [ 299.366772][ T28] audit: type=1400 audit(2000000450.928:13408): avc: denied { ioctl } for pid=12403 comm="syz.7.2500" path="socket:[37368]" dev="sockfs" ino=37368 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 299.413287][T12407] loop7: detected capacity change from 0 to 512 [ 299.649527][T12407] EXT4-fs (loop7): 1 orphan inode deleted [ 299.665221][T12407] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.724202][T12369] delete_channel: no stack [ 299.830852][T12407] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2501'. [ 300.391894][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.431392][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.441372][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.467094][ T30] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.483434][ T7242] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.520228][T12414] lo speed is unknown, defaulting to 1000 [ 300.530521][T12418] netlink: 'syz.0.2506': attribute type 1 has an invalid length. [ 300.543178][T12416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2504'. [ 300.650761][T12435] FAULT_INJECTION: forcing a failure. [ 300.650761][T12435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.692329][T12428] lo speed is unknown, defaulting to 1000 [ 300.700439][T12435] CPU: 0 UID: 0 PID: 12435 Comm: syz.0.2511 Tainted: G W syzkaller #0 PREEMPT(full) [ 300.700479][T12435] Tainted: [W]=WARN [ 300.700486][T12435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 300.700498][T12435] Call Trace: [ 300.700536][T12435] [ 300.700543][T12435] __dump_stack+0x1d/0x30 [ 300.700572][T12435] dump_stack_lvl+0x95/0xd0 [ 300.700597][T12435] dump_stack+0x15/0x1b [ 300.700620][T12435] should_fail_ex+0x263/0x280 [ 300.700652][T12435] should_fail+0xb/0x20 [ 300.700693][T12435] should_fail_usercopy+0x1a/0x20 [ 300.700727][T12435] _copy_from_iter+0xcf/0xea0 [ 300.700864][T12435] ? __alloc_skb+0x4f6/0x690 [ 300.700897][T12435] ? __alloc_skb+0x200/0x690 [ 300.700953][T12435] netlink_sendmsg+0x4ae/0x6f0 [ 300.700978][T12435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.701000][T12435] __sys_sendto+0x42e/0x490 [ 300.701112][T12435] __x64_sys_sendto+0x76/0x90 [ 300.701146][T12435] x64_sys_call+0x2d35/0x3020 [ 300.701227][T12435] do_syscall_64+0x12c/0x370 [ 300.701259][T12435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.701285][T12435] RIP: 0033:0x7ff7d905d04e [ 300.701304][T12435] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 300.701325][T12435] RSP: 002b:00007ff7d7aede88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 300.701369][T12435] RAX: ffffffffffffffda RBX: 00007ff7d7aef6c0 RCX: 00007ff7d905d04e [ 300.701390][T12435] RDX: 0000000000000020 RSI: 00007ff7d7aee000 RDI: 0000000000000004 [ 300.701405][T12435] RBP: 0000000000000000 R08: 00007ff7d7aedf04 R09: 000000000000000c [ 300.701427][T12435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 300.701441][T12435] R13: 00007ff7d7aedf58 R14: 00007ff7d7aee000 R15: 0000000000000000 [ 300.701557][T12435] [ 300.930930][T12443] xt_hashlimit: size too large, truncated to 1048576 [ 301.451754][T12455] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 302.083000][T12442] lo speed is unknown, defaulting to 1000 [ 302.150036][T12453] delete_channel: no stack [ 302.215545][T12455] lo speed is unknown, defaulting to 1000 [ 302.358821][T12470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2521'. [ 302.373736][ T28] audit: type=1400 audit(2000000453.753:13409): avc: denied { getopt } for pid=12467 comm="syz.0.2521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 302.483691][T12464] ================================================================== [ 302.491815][T12464] BUG: KCSAN: data-race in page_pool_put_unrefed_netmem / page_pool_refill_alloc_cache [ 302.501557][T12464] [ 302.504055][T12464] write to 0xffff88811a155580 of 8 bytes by task 12469 on cpu 1: [ 302.511769][T12464] page_pool_refill_alloc_cache+0x2a5/0x3c0 [ 302.517659][T12464] page_pool_alloc_pages+0xd0/0x130 [ 302.522942][T12464] bpf_test_run_xdp_live+0x66c/0x1360 [ 302.528325][T12464] bpf_prog_test_run_xdp+0x57b/0xa10 [ 302.533698][T12464] bpf_prog_test_run+0x204/0x340 [ 302.538631][T12464] __sys_bpf+0x52e/0x7e0 [ 302.542868][T12464] __x64_sys_bpf+0x41/0x50 [ 302.547272][T12464] x64_sys_call+0x10cb/0x3020 [ 302.552001][T12464] do_syscall_64+0x12c/0x370 [ 302.556595][T12464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.562502][T12464] [ 302.564901][T12464] read to 0xffff88811a155580 of 8 bytes by task 12464 on cpu 0: [ 302.572688][T12464] page_pool_put_unrefed_netmem+0x38b/0x4b0 [ 302.578580][T12464] napi_pp_put_page+0xe9/0x200 [ 302.583358][T12464] skb_release_data+0x624/0x670 [ 302.588224][T12464] __kfree_skb+0x44/0x150 [ 302.592600][T12464] sk_skb_reason_drop+0xbd/0x290 [ 302.597552][T12464] udpv6_recvmsg+0x1f7/0xca0 [ 302.602133][T12464] inet6_recvmsg+0x143/0x290 [ 302.606713][T12464] sock_recvmsg+0x95/0x120 [ 302.611141][T12464] ____sys_recvmsg+0xf5/0x280 [ 302.615814][T12464] ___sys_recvmsg+0x11f/0x3b0 [ 302.620485][T12464] do_recvmmsg+0x1ef/0x560 [ 302.624995][T12464] __x64_sys_recvmmsg+0xe5/0x170 [ 302.629920][T12464] x64_sys_call+0x80f/0x3020 [ 302.634521][T12464] do_syscall_64+0x12c/0x370 [ 302.639127][T12464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.645022][T12464] [ 302.647339][T12464] value changed: 0xffffea00057c62c0 -> 0x0000000000000000 [ 302.654437][T12464] [ 302.656754][T12464] Reported by Kernel Concurrency Sanitizer on: [ 302.662904][T12464] CPU: 0 UID: 0 PID: 12464 Comm: syz.1.2519 Tainted: G W syzkaller #0 PREEMPT(full) [ 302.673865][T12464] Tainted: [W]=WARN [ 302.677669][T12464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 302.687741][T12464] ==================================================================