last executing test programs: 11m47.841717745s ago: executing program 32 (id=154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206050000000000000000000000000014000780080013400000000108000640000000070500010006000000050005000200000005000400000000000900020073797a310000000015000300686173683a69702c706f7274"], 0x64}}, 0x0) 11m8.359446512s ago: executing program 33 (id=624): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000740)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0xdf, &(0x7f0000000040)={0x0, 0x183, 0x8, 0x3, 0x223}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="300000000000000001"], 0x30}, 0x4004011) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffd, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r1, 0x22d2, 0x20, 0x6c, 0x0, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r4, 0x0, 0x58) close(r4) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0xa6a4b5, &(0x7f0000002340)=ANY=[@ANYRES16, @ANYRES64=r4, @ANYBLOB="61722b26b3fa26ec935d0845287ac3dcf232dd183e1c6fa535f9ad4eb04b6e9e3ace74460ffec40f4ebd7f0852", @ANYRES16, @ANYRESDEC, @ANYRES16, @ANYRESHEX, @ANYBLOB="9a7f40ad4c7145903a868b9020e1e8899ed5747db23004fc9d248900abcaa6b065cf0800930a71dcd8b8955d93c78b9d4e5e06d8d5c9ac9b75d177754d6eba23e6d2be546c0dfecdf61baf732950a5729c01fbdc11e36cb411be200a9135657acd97d21ee46aac313ebdddd9265af16558dd3e5ba4836659a6abfe08aad84276acf949bdaa34bdf7f7b2dfb2fe8b9d6d225dcecebeb6e15f649994728842bd99fc94897d24315ac2d17bf6c2acfbfa8464d80f36304f88b906b78ab359be3479db5b0e7555f04416807c2202d6551f2425440be741dbe053e0bfeb845623e722a9293843f1cf0a71119dcadf7e353af4da52aed3086d6e5a095774248be9a1b1418dec1c03a2cb0ece0840ebeaaf7b67867da45943b700e2d6dad775ae6f33e55aa86ca84c336c91e3b7d7224f7a9a10d5b45a6ce0769d875415bea136b5508e5e0a88290792da3b11b2284a3d757c301cec78b55d3fcfa073615ccb089f66c5b9a5c84f6c1bb78c3370c4687eab260711fa05525687c7709e15cddea061f70798cbf940ad929eb80f33ad8bb4fcd322dd0558f111d7d01351147976b425a27e573402490055054cf3d80bebde6a89f3086170633740f08780aac3a73f17eaeda8deb642c2887962596b4d78c0ffffb28d0e64073b0641f89cf83a69afaaea03ba6070838fdbdaccb81630a6fdaa77fc10146013b9fd79e965a320daf81c1a51f032a3f462f2740e579eb116cad80b4e233326bf94fea52184517accf608b1fbfb395942869841b9ca0f314beff6b2dc0a74d7599012274b24775f0382e72907c1f0c571b994f048c0266feb775d893fec84e5733cd66a96cd45b60f63743b17b05d99c427a2d00a27fef17cadf128059a2e227b80701755b0bc706f32255c8cd619fa995cc7649f28337361a62cff46669fa4cf095a2d148987a9fafa6e1fb9f59b5ac5ff10a4c62e0187a3c75a983f7f5211142c6c09170a13e29c2044e5568bda8055cee4722e445e83ea01307c42cbe63a5bc529e1200e5874f7500275abacd6cc0e3bf8fd38ab7bab39f54d180d60892e2e3a713a3e654c89b8e9ba4474909991844514c04b655c66ccd6f2a17e29ff69d343ebac7ac5e1510ad4ff52e6a932a97bb0d814259da6545022152dd63f06219a1d66ec2278b694876ed6195b0543b8c9289b8438e8ee57dd38bcdb045a6fc4cede28effaa0354afbd4190fcbccd9a0e91508e4399e0e30a0bfdedcc19454b6dd7c2785a6e4fe74a0ece1d683ad07d76eafec02fb0d88debfeacd3531413185da0ffa4fb9b5e6d5a916f7bb5d51efc8ab61e4953fc6b2d1e670769f3ca56d51b804ceb118278acc90422e1f51e448a27d2fe4f93c88cf7c6148474bf650902dd6dd96541044113d244cf938150ec426e7ed63e1f153bbe328f4232552b104c8dee60b0c4e4c25f2605e97cc6f4263d32e8340be2d167137682373ae4cd501fdc9c5359b40f52803a5e4c0e04a5de0412c5cbd4d05e6135a1209d4b2dff50d39e481f1d1b01ed71004fb0c18e736af8ab176f833a439a85c9132e6d2296f665771c6a284eadc08c94ffa520dcc37fd6426c152364699514b15d4df6732fff39834e8ba29688b19db27a970d9d7fbee973c76bee04fb6164963969ebde0f785606781d63726736d8b60a713d5f72207a23f6f00420fdf24d14c069f36a7e236620481cc7a63857cc1355bac8d4f9a3f32785ad4d9d81719077a816b33b98006c322ee473aa9f8f83fae86a4d421104b298a9e42357c44b773e3504b3f9eb5b29330411b776b78fdb6dd9713dd1aee0cc9c7ee8bd23a50d4c8babaf6d74bc25377009a8c57c941f80e58ac08c93a275656cbad3864df9e791305d66103ab30983b07553ede5b5d5b0aab157f805eb6c11c75dd7f297c2cc9110551131a797164dec422b13799f1c261464c765a62c201eb9c8686eee94642d59f429cd137cba0d1a8126dcdfc28ea5c201526c61164a86f480dfde0c60fdf6afd3cd64719de1d89b5a362e058054a9db73aaffac324b04e8903060e1f14ca4ac31c82183066e6d581685efbe3452a20a665166b03808220770d66051971b61d8114376e22a4511cae9fdf7bbed68bb9f45b57eee1c15775730ef1434731d7b82a7cbcd6155396263984edfcea62196189da0ba9908d7d5ef514d75a3e1d4ae42654365083873fc4ce969fa4fac51d640be8d948bb9464d1a7e494c8df98bd5a569ff7fe1aca542c34610148a8f1dc9d60ff0f761270577f286a362f32164184ffce3ad132637e9f0381e9ce76a11f296f9d1e835cdc44926104e1df4d0a282a84b9fbc23064bfcab0d221c6e3124ae8ba6022e62f170dcc2d655f73b40f83fd65f5c705bc1f9e8df13adeadff9e1fe4660a55be7dc969cfffaed607190162dcd09d0cd86a297b22142b88f0eb28dd1a45152a4f4f2dca0d96d39fa594349040f486cd486af619b7083236cf90324cddc6f1ed0f6a103c8d936d7f2f31d420ef50931838e66721bff7494617b6b4bc385f3e51b3f81cf5d6953ac7fddc0f3466682911b38bc7f082e0c18e3ae0badf7f3fd3e186ebc2bab71fa26f77bb14cd97e6761c93c8c25887c0ef1f3dc1d8d86ce0fb73190f66f4deca77977e8d6064bfeeac3fad2bc50488c144e2a1a82fcc1e1c12ac54bf3e2d468e8f53241e4a6ad9e466746a45b053452ded5caa20461881d78d8235e986ba8b77e83601655d2650bf1b64ce17c75314216b43bbd1101a2e12e57525bb7d3b136a70635bdac8af24367a24ce2fe2a72ef2b0e56ff8dc62a82946f86f9b6b1418a89b1971372dfe7d5ce2e6611befff721f04a19bce7f90b1551a4cdead136662c50513fdde6f9d4a199c3907ed8799f231f54dd8347c71d829ff8ddc5d96b5aac2fe58652c81ff7f54e2568119dff2763ef435aa420630dacc7e9414340ee8688f46c7a8ab96d860937641042b3cdf6857ff1d2d4e47cec1f23e65fe541f38cb96b132666f999002e89cd1896ca58c2e63b87382e1a6c1ee9afa56cf3ba923fa9c989e20bff313f37252632fdcff03fbdd2d334ee93baf75c1bdae30feaa81fb2ac1b63c42dda06f20ce8c9d003eb3efed7931def342fb874fce92763f6f477c7f589b75d2129419fc4cb7a8893a1d3f94533ed9fdf9f21fc254fd80aa74750833d390327a2107e761240928d35a36c5eaca61fd848116b8dd7ec8157928bc2dd87f7756aa517cf6a61d2009fd4ba0579ca3b3129cfd5403546f5ab6d0575799a008fc67da9658427636d8f806d9b8cad64aee438d0a9b45957f31a5afe3ed894add9acadfd347246099c6ff0b4ec6f19ac61557daf8739e528185ab1468ca72d6d72e4f026e371e540b774b6576df3014dcc9e91b2cd1f0403a4fcaa6627b22682bb54f92150c2917acaee1972b2b03bc2bd37fdb9e7352c654d94ef196b7229e4da5ee62b7d395ecdd5177f2563242ea49ff78151a4a816a94e89b03f41c7e6684f8be3e5802e9338e7cbd3b43f708c062f944a59f31b02ca9a177e6b681accee8785d2467d2d78636be4330febaa3f6907db07992a2de74e459f3ae8ee6adae20cbc75aabd2d5d3424de0ddcc3ddd981c3a4966c57f8fdb1c42db87395f0bc800ff8ddb4c228a7d793d8a997885494a8578f5433d3f82886ea573641bf16065efbc25718c88f7277ce04c94af560d8deb7968496f849d3fad78741272b08bf7aec3f3c777428d3b8b897333ae5afb6823af63cb7347601ee2e8d4e21b21a12e6d42f66a1aac26d296bc68a998d8ba179ed5f756c2efd8a7acc0e3f08093bb4a83d37f15b4fe07c90858058ad1ff0e21bb7bf4363079c5d452dba5972b21c8f41daf6f11a51d321d3c1d544190238036d907d965ff469ce4895eb7675f3e94a15f83b837b892a40390d87d76e9b15eda02366299d3dd93943466bceeb2f9e465adccc08e1a02c3ac01815931627ed327e0ffbe09563221a365b88c4f2449bd3634920d5bfbde7cdc92c4cb16a579f35f07dafc87ce6ce4de7bf9e8ff0e80b81cdab8f2164a25a0a6929679ce9ae0dc2ac7ed41a787446676f091597551dc2e8c054224bac6652bba5fb675c0b2c94d2faac160f11b7b96fc96415aca8a47fa03658b8afa24b6bd97f7dbeead9ae5f7ec1cb0d000055f41a5043c6c4c97212398b168b5cb9ee650726eabcc31b6712e815fdaae77885350884fb36d6d5444d5e5500a7d636d4eced14b9d411c765b36a4be06ca9be2965d6d6c06c3b6bcb38babeb2999ee71295d48926bf6e39363fabf74de5e57aa0b59f9dddeca142d0c50ab7ff198196c69c971e6ab591220f4e42d6525e2dbd99b6c57949c854e4ee0e4581f9e3e160b3f66b01f23f4d0472c0a1f307837ac8dac0a257d09ab82975148dcd764fe6359a5f21b9cbe2ae7b9b277489a8b3285b8289a84ff854508b4488ffcf68f47ec7a5c18a8c3d06e26b32f754ac74ea8e93a554147fd3b3daf1fbe924e2e389cac13a5f80f3a21dbd250d3917f7b5acfc739a63f2b3d6b3f099efb4be7a842215c89fc87bd8550d11ba2a4af0f111ab124503b26feeae3be3ee24168dd4553a226b9168edb11c3e61bc850adf995b4d6f1aace6db0b91f805c3d1789a3e6b470e5470968f429d5b05c8f76ca2981e37f5bde4ad00a09755c76774ead7d93f3f41255b1d56152e3699b133b2e0b277427c992323d1b4d8c438434e9e901ddd43788f80cb9a975e9dd1671ce16be5ff8033d5da824f00fd78b540edbcd69a2e9aff03e31af9afefb809434f52b4a1239fdd241ed3a268258addde19d1724155a1a4c877bd59b0659b7a786886f6ffcb5999d1f9c007d615020926f7165a9ddd4aaa3c7b631d30cc951e328131d99282ac06a18f88373092320ea5308f06c376e711aecda4cd1c2b639d9ea7a2613d4e9eaa9a0ef72774fdec622f7d131b45135d577897bf686b460a371083070139ea544bda15012251d6c8e7163c25412841faefba76765648ca7cd1b423403a654b6b5754588ae6c309621477db20f7c9236af1e422ebd3fb6d6a712e7a6d00d58416b7d65a53a2514bf51bedfe9207f16a4d79418600389b98ea8b9e06b8da708a86f191e567925af39a09ac9fd7902e8f8e77567baf1b75c05ba1eb7089b424801405afc982a8d79c80fada184a1ab3bab526a3b0a5e20d2dc6bcdd2c5cb7c49f735f3e8f4d36a388ca805876ae08f0e3acca5dd864c1fa1552068bf799095221480374fd2dcaeddb74be93470eff4fe278e190f0a131f32340ada9cca518af769f42943875f4c5707beee2179771da21cd66405b9973648bd047a516d1cf902fa1f0fcdcbc3f4c1f20fc22f9a7e9f4c3a52576399604c46f83ede44f542d06d54e6e8a1e693a2cfcbb16c178d1bace976133e72cc4533bd02b1c4ec2cc22097435aff5a682ca7227414895450831560fa682493f4814ce8fbdb190f8ce2b533ed9582638511bda93aeae5d0690f745b788db622864ba3fb60952f119427fbe66754c5c038c5fb2cb87c326d65862e353c14950bd1fa7c70e36323e9cf90c81f6275e59c7926acac1560a0b6bbc7a850817f2effa19d485315a219d49e293f871278294d02765cf72caa2f438de3337ed205bf68ff6ddaaa5e4b80de5fba022dfcf9cf074a319678df11eb77b3ef66e512b67ba5182265a60eaf457691e973d23cbaf6000537f886695074ebb616f9cdad9de7c6fe9ecfbd13d537d64c34a7c90ca56b50e60d6a7067e391e63561793edf6ed3c2eeb8555909a59ce73da1f096d41fb42de44494128324a9", @ANYRESHEX=0x0, @ANYRES32], 0x5, 0x0, &(0x7f0000000000)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x60800) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r8 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200, 0x2f2}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r7, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x20040000}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x28, 0x209, 0x0, 0x2000, {0x2}}, 0x14}}, 0x0) io_uring_enter(r8, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 10m56.18972734s ago: executing program 34 (id=854): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8418, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xfffffffffffffffb, 0x7}, 0x0, 0x6, 0x0, 0x1, 0x401, 0x20004, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r0, 0x0, 0x79) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) (async) write$P9_RVERSION(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1300000065ffff64ffffee0600395032303030"], 0x13) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) getrlimit(0xe, &(0x7f0000000340)) (async) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtclass={0x58, 0x28, 0x100, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x1, 0xfff3}, {0xffe0, 0x3}, {0x0, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x6d}}, @TCA_RATE={0x6, 0x5, {0xff, 0x9}}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x8, 0xfc}}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r10, @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x20008040}, 0x40000) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r10], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 9m32.783778743s ago: executing program 35 (id=2115): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x2, '\x00', 0x0, 0x0, 0xfffffffc, 0x6}, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket(0x10, 0x2, 0x0) (async) socket$rds(0x15, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0x5) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r3, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) io_uring_setup(0x6c7e, &(0x7f0000000140)={0x0, 0x0, 0x3000}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x1, 0x0, 0x0, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) (async) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) socket$nl_route(0x10, 0x3, 0x0) 8m55.238267527s ago: executing program 36 (id=2874): sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x161602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000400)=0xf) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x8080) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 7m56.419299259s ago: executing program 37 (id=4215): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200080001400100000031007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x10}, 0x4, 0x0, 0x10000, 0x5, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x280801f, &(0x7f00000002c0), 0xfe, 0x506, &(0x7f0000000400)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) 7m56.388791752s ago: executing program 38 (id=4216): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000160a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380180003801400010076657468315f746f5f626f6e64000000080007"], 0xd8}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) 5m54.301888385s ago: executing program 9 (id=7157): timerfd_create(0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f00000004c0)={0xa, 0x4e24, 0x8, @private1={0xfc, 0x1, '\x00', 0x5}, 0x4}, 0x1c, &(0x7f0000000480)}, 0x4040006) r1 = dup(r0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000200)="05178100", 0x4, 0x50, &(0x7f0000000080)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) 5m54.256987978s ago: executing program 9 (id=7159): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x4000, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 32) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x20000328) (async, rerun: 32) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, 0x0, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) (rerun: 32) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r3}, 0x18) (async) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) (async) syz_mount_image$ext4(&(0x7f0000000540)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x380470a, &(0x7f0000000480), 0x2, 0x46b, &(0x7f0000000580)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r4, &(0x7f0000000000)='2', 0x1, 0x4fed0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000000080)={0x17c04, r4, 0xbf0, 0x100000204, 0x0, 0x1b}) 5m54.181276642s ago: executing program 9 (id=7161): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x42, 0x4, 0x2a8, 0xffffffff, 0x98, 0x160, 0x0, 0xffffffff, 0xffffffff, 0x98, 0x210, 0x210, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@ip={@multicast1, @multicast2, 0x0, 0x0, 'vlan0\x00', 'syzkaller1\x00', {}, {}, 0x33}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@inet=@SET1={0x28}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 5m54.153924854s ago: executing program 9 (id=7162): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x10, 0x4, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffd}, [@alu={0x4, 0x0, 0x6, 0xa, 0x0, 0x0, 0x8}]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f0000000040)='sysfs\x00', 0x10, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x40000000000, r2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x7) ftruncate(r0, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x6) 5m54.019866091s ago: executing program 9 (id=7163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0xfff5}, 0x4) 5m53.898272339s ago: executing program 9 (id=7165): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000a5d4ae464632090045"], 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0xb00) 5m53.839685391s ago: executing program 39 (id=7165): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000a5d4ae464632090045"], 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0xb00) 5m43.279796564s ago: executing program 3 (id=7334): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x101, 0x2, 0x0, 0x8}, {0x81, 0xc, 0x0, 0xfffffffa}, {0x9, 0xe, 0xfa}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) getdents(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) socket$netlink(0x10, 0x3, 0x2) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x40003, 0x0) writev(r3, &(0x7f0000000480)=[{&(0x7f0000000100)='\f7', 0x2}], 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x15, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00a56dc300a96c9b20f3fabdcb10cad696323259cc0500e5f91620d7b9aed9e1fa74020a4f00b8ff"], 0x1, 0x246, &(0x7f00000002c0)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl(r2, 0x3, &(0x7f0000000000)="37cf674a") sendmsg$nl_route_sched(r2, 0x0, 0x44004) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x5}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 5m42.631287971s ago: executing program 3 (id=7336): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2900}}, 0x1c}, 0x1, 0x0, 0x2000}, 0x8c0) 5m42.542794437s ago: executing program 3 (id=7338): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fddbdf252000000024002d80080002007c00000008000300020000000500040000000000050001000600000008000300", @ANYRES32=r4, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x2710, @host}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000100000027bf000022750000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000550075de156b0d839093194c23b33679711f05f6693c6a57744cafe5aaf5c5187c694964b54e45437d19868e1017fcc10d7687a742a78ff3042190057cc08148ed036cef5a34ca4507c953ddebd27e59ca9f1c46d3d2be3993dc008c821101c58bb2ed76afc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r6) sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010225bd70006b00df25280000e305002b000000000006000400a2aa000006000600030000000a0001007770616e30"], 0x38}, 0x1, 0x0, 0x0, 0x4002080}, 0x4000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000002246558d7a9e779310000000000000005000400000000000900020073797a3100000000050001000700000005000500eb0000a3d64f195cc338ff56e8a20016000300686173683a6e65742c706f72742c6e6574000000"], 0x50}, 0x1, 0x0, 0x0, 0x20044810}, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r5, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x110cc0, 0x7fff, 0xf, 0x0, 0x6, 0x1, 0x8001, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x619}, 0x38) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:') r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) r11 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r11, 0x42, 0x1ff) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f00000001c0)='./file0\x00', 0x50) capset(0x0, &(0x7f0000000240)={0x0, 0xfff, 0x7, 0x0, 0x1000}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r13, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4, 0x8], 0x0, 0x0, 0x12, 0x1}}, 0x40) truncate(&(0x7f0000000280)='./file0\x00', 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r12, 0x0) 5m42.307555271s ago: executing program 3 (id=7343): r0 = syz_clone(0x20008200, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) tkill(r0, 0x12) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0xb, 0xfe, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0xe}, 0x0, 0x32, 0x4381bd76, 0x3, 0x7, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, r0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xb) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc010000000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX], 0x1a0}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000001ec0), r4) sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001f40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd702d6c0c00000006001100630200cb8134cab3000000", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x24048040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x7, 0x7fff0000}]}) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c4607020000ff7f00000000000002003e006dfffbff9402000040000000400000000000000082130000000000000f00000000003800010000000200000003000000970f000008000000000000000d000000000000000100000000000000e6000000000000000800000000000e000300000000000000"], 0x78) close(r6) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0x1000, "e8ace225582394601a961b11b6ffa20c418c3d9fbb837ee9574b2528ed71b973858e3f4248404f26ca088b918c4de472e1a114ff3ed356b999c2c50a9d6cc68d0687736095fcfcc289a0ad67af2fe37af4cba64f0681f83f16c6e486e3e7d797fa8193b825aee8b9121a25d0e2d2686deff9c2b408ec704a159e0a30a083756cae1fc378012af1c1167a5957efc175ed73b111adeb1ba8221c8cd94d2c5d763a91e7455c41672673dbe11c3fc5924a3e0d02c912014706be4a9b013e89eb03052253a83c12818e7410ccf8dc9e234a5d049dd1b07cb48838929a76af58e5b98e66d48bcf8194f3ef939dc0553e9718c5640290c3cdf1bd471a9b05c2da8ad6ec3b7d02b875d9a6be44d645126fdeb12b6e80285246c0d5a6831bc65220974e1fda9404bf67b97264bc43223b0c9cdf4172ba8f3ce476e19103082cc8c04f3fe0f60fddd3727afd3e4fbfa63e08701959472fe332c0e25bd03d2e1c74251de119a7fafc2090515be9bccb8eaa4eefaccd18732b1413b01ad4b3e3a96ad301eaecd50b2489200a1c27754e6254fafbcc450f11839cf1af517cfa240ae79e87642f0962f185d20df13ca1b2df4d907f160d0393d9c5594e4b78f496a14f73d13970abf0d75336f6ec14b99bfb074b50e5a9da7cb89d59a69df2dc6240e4f4cadc6ce45707ddc4cb5cc2f2898f01faa91b9adf306d7a1fa67b3f2c69733b24889029f7669ddf3eed00c7a762b52f94edee726a8fe205f82bc4bc22868065b1040b694cacb1e02917806c6a19d6ee06eeb829bd48d738b151c5d0898f240c3cb17c8970035242b4888c4344ac49303994319cf627ee7d99f26312b34df86ffd9ae1020629543b55554275665940d273c72a23a5e499b7a30f3ab335e2f47b1b0863325b57b6735462d7e4dc3e7536b7b874cc8dea0a635c76c3b6e93a58ffc1c189d3cd83721898ed71da1ca78bb917810159fbafb2f706ca4c07038638c3356816118e964bfe7441075e921a668421db3e29696da5e03fa74102b2c3cc9c8ac0bd94c99df5bac84a68b36d36ba2fa56ab7501df505f3f96dee784ecbd7bb5f70e3ad81248dafe2451a562048a938cd6fc79e2bc1799e2644ac4b62a8a13f1a97f210c512ccf58786a0d4881a621e88fc6210071d5c2d95b24f1207e1c82ed3bf7d1ffe481759cca441586d49e462a45476e18b01c6203471cfa7df496f24ba0f816c19f8e064563fb0a7e8f860674eaec64f822e7c9bfb2bfbc6912cab606ac2e605b8a9a401711673f6f6571d0018fb49d6ecea949aea36f4dbec08073586f6986adb6bbd7ddd59b4137590786170db1ad003b0b632faf3bdaf09391cb1d6f89ba953f7d0434962b409d3913087b2e1352e84baaa5faf8e15ba423c843a850cc813348ef6c6ea5cceb6501518c6985706cda54c39e66919c762d8771e58b60a9ac1b20f7ad701eaaa8f2b2e19673a757de6415ae9e6fd2ebd0fecc2981c0906df728f0314af95135865e75eb0ec900041cd8d7eb0259b24797d37c8ff57e8646846680efb21f9f275429c97e3c2d8ef595c4f6cc3370047e36dc2e18509ea347d6e4728e1040e3438760a95790411a982ebfcfcfed8901bfcd32d685d116c5a1713fc330ea5b27b9765e0671ab24f23eca34d90e2555236e6fd851a6459b19485bad93e2c4822767a3887363840cab7938f92cae95770406b68616dff75fc51dd20fa57ec0c883c692408490c9078001c408eecaf73538315e9ecc80d4c8f161491853a2dffc28773f1f9b7723bf2fad856fd3ff1523cae12b7f1a815da87212ad3501764d2d4dbf3e30a633135dab8639671650780a14ef2ad1663f14ed051860c7d8d595d27058c50295346b9f8483049df34e35456d6150b29b3fa3bad4d940a6a8239787004d8e7b3f2f8a4c2a0b4863c6d02f58fe86ac40d73534233bc9ddb80dc1ba67d1b9e04b66b195278b2d3a930c1c70848ba809a1fabd4949b04b948fec8f1855f30f084ed9087e50dce6a1f305961a458028e9f46a896ee71cc42eaec65e9aef9938e53476a7d08ad287610bb9f5e61b9f11e5982f75af34f4b24ad87722e3f9721e85460c1d54e24c3a1604e76f3e8378303fa50b3a976525f06d4ea32ed2089c77a0c4109c82548d9ec007b19d51736b66260fa00ecf8328b64b3c1bbbccfacf1c28847690985b6a2f12e84064a5ec5928afd1d2614082e7561b68d41a850e35658c63e46eba430067f0bc628ec09ec3dc0ce8cad8dccc6c05b64d8d6facdb0258c6520417a9292b41a3a56a468a2913767b05ed14aaeae5c626796b74403e0397795f227db8eb8b1a3de356ac218d43a2a8bc74e872359582462ad44715c1ba12067f8cf986594ddd147c7aeed8daad8ad284dede76f4a7615d32d2c7a5b96cd442b36296b6fdecb289156af9deaf6dd015134cc74683d2b97be399ca46c95f26828eefbfb6b9cd23720a9864abe5b93f415bcbed342a83cd69d945d1ca564cfe9e3616b65f89a3f035465cc87405670c40027a5627abacd93c63fa862f78eb0eee9963240b7b0c61af67daa122d0f185923f647df06d793c2ec867012d29b2eb6924629b68d084ab6efa33cb5fbd3f83f448e4b937bbb44970546f427ae905f2fb985ffe980c69e1659a3c929377cc3dc7d0e351b02b4bd876a52bb763d7e851b71149007246612f2d4cc9d38e652d3e68df9e475abdf3ebe206b8fc8ea1e608b53de0d08806b89a103979098c83331ac491bf30a46b229e73cc900275e9282bf611a4591a910fffd5140302109430191529e896c9f2b7ba6a86e72561a0594e2b8bc4e1eec1a10d5c77f00a4ed27168c88d4c38f976f561a35e99b0ca9ef4b18e2a644a3e110135b07f6f60174a8f26e2f8cf85ad7c5dc2aefba4f7b81d4e5c30b6ba5ae10a330dd4f659e091be9ad0a71e1f0269002d574a269aceaa94ef76cbae5cb9504c979f41163795849569e290646f0a009ed0f1fa022905c3fc34d05814d5771db54a744121f1b0c5e65f2bf29b972f71c0b2a52d8156098d5293e4b24e718bbd1a4a6eb0c719c1a3ccf098238982998359ac8c8801575ed1b3caa9925d4e588a5b15f4a84495898b428de2f17016cd9ce40c7ed7ada915e49edc097cc8b96859dfacc633ee132a3b995f9321e3264f440067366930985330143bb9783797a182450ce5adc12318b2a552f1fa907447277453e73820cf05dc08e487d85586d282374419de1e4d729b6829d7366cf8db3ee5726e6893371529741ec1da559f76738a2ed6e819f5739715fd536f8d7df0dec3c3aee17ec0a0b9f0d51d5f86cdc5cc3623af51e29b46b453d430d2978b90e3e409f17896e7f1fbd193f828a72ace93a48f063856da9d0b3af874d2c26b0d22ba8e86d84bb81129a0e54dc555cf929a8e32621cf82288da8ee8362426cc71e92656792717d836fb56b859cc9624fb6a18050b86cbdcb71c1137bee2871676043e949649079710729145798b417ebeca06d5721914403c9db0cca3ea602a698395a8237b5fa586f213eb06b47ae39895b52f8473330416b85d429499167ef26f7630eefc56cdb1ca98be083feb70fc4de00e7420a13a5b891f23b91997863b3da4d5c7d67e20b35bb3942fe8dac6137c4ed547826b9547b9599d33fbc2fc59793b44996dcf3f5723f06418ef346f6cb28fd12026d1790f732b59adaaabcfb73cc197c70dfb9355e5a915525b36d1c9a1f519ba60e7f6ff4c7af876e0e83cc84ae1673e01dd4e82ba4987392b8d1d5c1755b8638d322c49dfc4818c5bd4683892c7d57c98b7c6cd2dca05a3d480e02cbe80c5a78f5ead6cdc554948ce3ba0258a4b0a0f1dafc1a0a340f19fc3c80e242b5eb2e5b84ac85cf6c1bd38151270e07f8cabf2f37f2ddd9f31958ee26bebd783ddf468fa85214943f2bc1e90370466f23241b795da91e5ca72f6e4f1d76f094d856ae93391d05904488baf8846a90de05a6ee611c9c71eea5518a081c2ffe00aea7b19a5f9a85c5cbb46c6130f2a0a13d3754e781abed56be513056b83747eae7610e26a90e7e20c76f26ea9537b96d116670940e5e7551867a331f3217e41fe80db75e55b6e3ece0f805bcf541210af1453725da7fd10736b3cd2dc806ea05279c84f480740e5a8a7ace6b6a98dfc1feb0499d24de2d63aa4d1e113199a246ec677375f33fe7b20f1fad84b6011c400c8823e3e6750a93e604d61efe8fa33ca19513255e84cdcdbabb5d4623ed520deb9e59b31705bf20ddc0f729dd4b51b7ea1fec8fb25f8085c7767b9a5beddd50dea472b70c2cc2caffc4c78b4b5226e8ef74dc8736281adf70221e97c085d6347e21bb3f0caa242ea49b206e0f6f56304b5dc880a520654cfb6f8f300ac3c8375b31df6695b70aa7037c1fb30f6a7cfcf3367e8718c216732ae89ac1bea75d3e4ef651d492842a27aba8f225a1a5fc976ef8a97aa7b3160643c10ccc9895cbbf6d448b1e4061ec9e2523f693685678e5f746be5ede2efb67a109f28a5c8e9d7db9703261e776e64d61cb08c1b2616407bf10b2b7b5b4d560194527c8cd2d0d6e6068d7522f289d4244654560f1d29c3b91a82f31635669d1426e73e4a2cb145253147530fa47af72652d4e1618f9aec86871d62dd5dba2bb68f685b57061d57e3542e9770b1f325c2522b4c4a85db9c65c381c68a2e2f9871e9350aa454dabcb989065b68350334fef891f5a17a2c78c20ad7d3feb91799149781c72961e774ffb0b8dff7382f95966545eb5efc73c0517a1c088b9a94b49d2c565232356d99f200eafdb31361fbda39937b837af3c3595fc898af297146eb066a1768f3284023d5d59c61619a2bc58ceca29fc96967a671edfeab9c526b7529184278508f7b51d4b2e3f09cc84bab9d160abc1a47884dfc897db706697aebc88b69ef96bce756e2fa4c1152b065cda4c655ae0b24df57c17c72c0912157e3a49213aa113dc8d81c9cd09b1355ea085109b3bea8cd03beed709f6a409a13aec3498b9aef7bbad78b20ffa0b033f4d098608b74f12a7c1e5a8b8dcb7f3d2427cd3a66ac5c49ec54e801c02ddad75df8bf5b24f3ae98a4d60abb6c33b511ded0b4ccf43476aafb32a79609445aab1575141a2fabde7d6626ee89a3f5ff407c0cfe2eebaa3cd181aaa8a59ccb47b734b0d9950b0764a3ec913fc95e5044b168fe0c130f73d0ee4bb56503b963517c6b809d0d5b0e6e663cf5f05defee67c669e2ce7fed4edc5cef1ab468574a1c36c2933724594910105ebeb9cd34602203fafa254921f531ee2c67b319c295f9a8e4257aead5844f6023d6d17a94c752c324a1ee719fdefab71ba3a0736078df6b03ba131dd89901af9d4d43f27ac38ac9dffa9789af8c9880a8aac2039f16d8b560306f5f64a1a12ff7abd2b6ac4afe1635993314ed6e55d81072abcfbe805553516a7c134983c6100306e7db17f58477eb74dffda541a4e3bdd62d6dbb00aebc3831a5a62e83cf632182400a73670e8661a4ed7f7125b92650ba45760a55e91502de383a697175c937553c6f2fcaead0392de5e4495fe2215d75a79b31936379b0518001c479a059a0469d4902628aea80f3026426bcf5d365fdaec055281e0d5ccf28b9dee9c29cae6936bce3e1eed0d3fee989668ea6ba125f99a78047c21dee249da0ccace905478c205bc8ec173083ea9f8253d8ac8f8409bc7ddc06517e98a18e81016938525d8d819f2efccb3ad03cd2558639288cf1620027f3178bc6756d00a245c9c420cea5243fba957043a138bbc94f0b5e9886da962ec7ff0"}, &(0x7f0000000140)=0x1008) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={r7, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x37}, 0x9}, @in6={0xa, 0x4e23, 0x86, @local, 0x800}]}, &(0x7f0000000040)=0x10) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) shutdown(r2, 0x2) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000000)=0x68) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x28240, 0xda) rmdir(&(0x7f0000000300)='./file1\x00') 5m42.070637214s ago: executing program 3 (id=7346): r0 = socket$pppoe(0x18, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) socket(0x40000000015, 0x805, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x8) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, 0x0, 0x0) socket$kcm(0x1e, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x2c, r3, 0x1, 0x0, 0xffffffff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2001, 0x53}}}}, [@NL80211_ATTR_TX_RATES={0x4, 0x10d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000065}, 0x4008000) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0xffff, 0x7}, 0x5, 0x0, 0xff, 0x0, 0x8, 0x17, 0xe, 0x1d, 0x8, 0x2, {0x7411, 0xfffffff7, 0x6, 0x810000, 0xe}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x404c004) sendmsg$NL80211_CMD_START_AP(r1, 0x0, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000005000000000a000000000000000000000008000400", @ANYRES32=r7, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) connect$pppoe(r0, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0xc000) 5m41.662288388s ago: executing program 3 (id=7351): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x800, @empty, 0xff}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x84, 0x2, 0x2, 0x1, 0x0, [@mcast2]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x50}}], 0x1, 0x20040890) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x74f, 0x80) ioctl$BLKGETDISKSEQ(r1, 0x80081280, 0x0) 5m41.662053758s ago: executing program 40 (id=7351): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x800, @empty, 0xff}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x84, 0x2, 0x2, 0x1, 0x0, [@mcast2]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x50}}], 0x1, 0x20040890) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x74f, 0x80) ioctl$BLKGETDISKSEQ(r1, 0x80081280, 0x0) 4m48.35314833s ago: executing program 7 (id=8120): prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0, 0x8}, 0x880, 0x34, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0xfff3, 0x4}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x6, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000014}, 0xf2ff0000) 4m47.715862207s ago: executing program 7 (id=8126): syz_read_part_table(0x104d, &(0x7f00000000c0)="$eJzsz82pwkAUBeCTmUx+Hq+I7KzASsQmXVmaO5eKaCQNiAjftzrDnHvhhu8q20e3O2e/1NbG3FL6/GXKNd2j1CUZkywtJVNS5+3g/3tDkssaksNcW/rXX11LQ4ZnOJ4+ehsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/Ih7AAAA//8/TAYM") 4m47.111558092s ago: executing program 7 (id=8133): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0xce21, 0x2, 0x2, 0x0, 0x0, 0x21}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x100000001, 0x0, 0xfffffffffffffffd, 0x8, 0x41, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x4000000}, {0x81}, 0x70bd2c, 0x3500, 0xa, 0x1, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 4m46.704381625s ago: executing program 7 (id=8136): r0 = inotify_init1(0x800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x600000, &(0x7f0000000500)={[{@block_validity}, {}, {@i_version}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noquota}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x80000401) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e00, 0xe, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x6, 0x7ffc1ffb}]}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r1, &(0x7f00000025c0)=[{0x0}], 0x1) modify_ldt$write(0x1, &(0x7f0000000080)={0x1000, 0x1000, 0xfffffffffffffffe}, 0x10) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x930, &(0x7f0000000800)) ptrace$poke(0x21, r2, 0x0, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000700), 0x18) utimensat(r3, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) 4m46.174854436s ago: executing program 7 (id=8141): r0 = socket(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x6, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000007c0)={'vlan0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000080)}, 0x100a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000120000800000000a00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x1002004, &(0x7f0000000000)=ANY=[], 0x1, 0x251, &(0x7f0000000400)="$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") openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000002240), 0x0, 0x1}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206010200000000000000000000000005000400000000000900020073797a310000000014000780080013400000000008000640000000000500050002000000050001000600000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x8000, 0x7800, 0x6, 0x40000, {{0x15, 0x4, 0x3, 0x9, 0x54, 0x64, 0x0, 0x7, 0x29, 0x0, @multicast1, @remote, {[@timestamp={0x44, 0x2c, 0x5, 0x0, 0x5, [0x3, 0xeab, 0x4, 0x4, 0x2, 0x7f, 0x101, 0x4, 0x7ff, 0x8]}, @timestamp={0x44, 0x14, 0x66, 0x0, 0xe, [0x2, 0x5, 0x80000001, 0x2]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000800)=@delchain={0xb4, 0x65, 0x200, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xb, 0x8}, {0x1, 0x8}, {0xd, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x4}}, @filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x9a8}, @TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "bd63afabdd28f03f530622fa59043363"}, @TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0x9}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x24}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}]}}, @TCA_RATE={0x6, 0x5, {0x66, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0xffffbde1}, @TCA_RATE={0x6, 0x5, {0x4, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0xb}, @TCA_RATE={0x6, 0x5, {0x4, 0xd9}}, @TCA_CHAIN={0x8, 0xb, 0x7fff}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x811) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000280)={0x11, 0x0, r6, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=ANY=[], 0xdd12}, {&(0x7f0000000640)=ANY=[@ANYBLOB="11000000370000022cbd7000fedbdf25"], 0x10}], 0x2, 0x0, 0x0, 0x4000007}, 0x20004000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103ff, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) 4m45.267604228s ago: executing program 7 (id=8147): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0xed00}, 0x94) 4m45.196782892s ago: executing program 41 (id=8147): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0xed00}, 0x94) 4m8.149194998s ago: executing program 4 (id=8383): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000008280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0xf9, 0x8, 0x40, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x1, 0xff, 0x3}}) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x0, @xdp={0x2c, 0x4, r1, 0x40}, @isdn={0x22, 0x3, 0xb2, 0x0, 0x1}, @l2tp={0x2, 0x0, @empty, 0x4}, 0x40, 0x0, 0x0, 0x0, 0xfff7, &(0x7f0000000100)='veth1_virt_wifi\x00', 0x2, 0x56b, 0x6}) 4m7.636631607s ago: executing program 4 (id=8387): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') socket(0x21, 0xa, 0x3b9) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) writev(r0, &(0x7f00000003c0), 0x100000000000022d) 4m7.385917892s ago: executing program 4 (id=8390): setsockopt(0xffffffffffffffff, 0x8d, 0x0, &(0x7f0000000280)="9366703732b4e6eeac2b4f4e8328e9158c00180a9977c9875e521e26ebef9b3c0e5390290508ef00339d8dc1023cf3da1a418810318bc58d0ae160600a65d3a9fef541b52f10bfc3fb60bf994c760fbe749a41e8d301fcecbc0823ad5613bf7a41d376b13504b44b2cbb92b7c05a3c75470b2d", 0x73) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x6) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x80000000000, 0x0, &(0x7f0000006680)=0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1f5) set_mempolicy(0x3, &(0x7f00000001c0)=0x6, 0xfff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb45040, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x1, &(0x7f0000000100)={{}, {0x0, 0xea60}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x2000000000000000, 0xfffffffffffffffb}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="403ad16ff5004b01e90000c9610000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000c9910200200012800b0001006272696467650000100002800c00210080000000000020"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) set_mempolicy(0x8000, &(0x7f0000000040)=0x9, 0x2) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYRESOCT=r2], 0x50}}, 0x4008840) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x4000) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) 4m5.006940559s ago: executing program 4 (id=8409): socket$kcm(0x29, 0x2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) (async) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) (async) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f00000002c0)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x800) (async) syz_genetlink_get_family_id$mptcp(0x0, r1) (async) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x0) (async) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x37, 0x61, 0x62, 0x66, 0x31, 0x31, 0x64, 0x35, 0x32, 0x38, 0x38, 0x62, 0x37, 0x65, 0x7, 0x38]}, &(0x7f0000000080)={0x0, "9b02fca023714fa86cf992e3633590de91fa3959438efc9a144a7cc2aae8c36834a5558696eee3595f88764f0c16736f5eb384866a439f7faf3064ad48ee5942", 0x1f}, 0x48, 0xfffffffffffffffe) (async) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16, @ANYRES8], 0x1, 0x36e, &(0x7f0000000c00)="$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") r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x113) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002400000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) (async) write$cgroup_subtree(r4, &(0x7f0000000240)=ANY=[@ANYBLOB='+net_cls +pids -cpuacct +pids -net +cpuacct -rdme +cpuset '], 0x3a) (async) fallocate(r3, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r5, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="96", 0xfffffe10}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r3, 0x0, 0x0, 0xffffffffffffffff}]) (async) r6 = syz_clone(0x80020100, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) (async) syz_open_procfs(r6, &(0x7f00000004c0)='auxv\x00') (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x7, 0xfc, 0xb, 0x4, 0x0, 0x3124, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x9, 0x9}, 0x16, 0x3, 0x4, 0x2, 0xff, 0x1ff, 0x7fff, 0x0, 0xffffffff, 0x0, 0x5}, r6, 0x6, 0xffffffffffffffff, 0x0) 4m4.691916927s ago: executing program 4 (id=8410): r0 = add_key$fscrypt_v1(&(0x7f0000002a00), &(0x7f0000000500)={'fscrypt:', @desc2}, &(0x7f0000000580)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa00", 0x29}, 0x48, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceadab4912f9f6a31854ec98e950cfed21fcad7ff0fb39af14c31ed56ad56d86000000000000000000000800", 0xfffffffe}, 0x48, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "6075ae1e1ee721441705322225930e6c1e3e1000000000000000d7cf6e021a805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x25}, 0x88, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) keyctl$KEYCTL_MOVE(0x4, r2, r1, r1, 0x0) keyctl$KEYCTL_MOVE(0x4, r0, r0, 0x0, 0x0) 4m4.332398528s ago: executing program 4 (id=8415): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000740)={0x0}) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000140)={@broadcast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1e1907", 0xc, 0x2f, 0x0, @remote, @mcast2, {[], {0x0, 0x22eb, 0xffffffffffffff00, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f0000000040)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') cachestat(r3, &(0x7f0000000000)={0x264, 0x1}, 0x0, 0xee) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000faffffffb6a40000000000060018210000cdd9", @ANYRES32=r1, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0xdf, &(0x7f0000001400)=""/223}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0x358, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2c0, 0x358, 0x358, 0x2c0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0xffffffff, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000003000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x30}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x464d13015c35a690, 0x3, 0x6, 0x73, 'snmp\x00', 'syz1\x00', {0xfffffffffffffffe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18090000000000000000000003ffffffbfa100000000000085100000fcffffff95"], &(0x7f0000000080)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 4m4.325452578s ago: executing program 42 (id=8415): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000740)={0x0}) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000140)={@broadcast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1e1907", 0xc, 0x2f, 0x0, @remote, @mcast2, {[], {0x0, 0x22eb, 0xffffffffffffff00, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f0000000040)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') cachestat(r3, &(0x7f0000000000)={0x264, 0x1}, 0x0, 0xee) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000faffffffb6a40000000000060018210000cdd9", @ANYRES32=r1, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0xdf, &(0x7f0000001400)=""/223}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0x358, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2c0, 0x358, 0x358, 0x2c0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0xffffffff, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000003000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x30}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x464d13015c35a690, 0x3, 0x6, 0x73, 'snmp\x00', 'syz1\x00', {0xfffffffffffffffe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18090000000000000000000003ffffffbfa100000000000085100000fcffffff95"], &(0x7f0000000080)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 22.461333635s ago: executing program 2 (id=9965): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x0, 0x0, 0xffffffff, 0x240, 0x2f8, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1001, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, '\\Q', 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1f, @local, @broadcast, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) timer_create(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 22.147874723s ago: executing program 2 (id=9968): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000002010400000000000000580a00000004000180040003803c0002800c00028005000100010000002c000180140003"], 0x58}, 0x1, 0x0, 0x0, 0x15}, 0x0) 21.832182902s ago: executing program 2 (id=9971): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={[&(0x7f00000000c0)='\x00', &(0x7f0000000100)='O\x05\xdd.}].\\\'.[/,/(\x00']}, &(0x7f0000000240)={[&(0x7f0000000180)=',^\x00', &(0x7f00000001c0)='GPL\x00']}) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRES64=r1], &(0x7f0000000000)='GPL\x00', 0x800, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a2549b7d44c55"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1}}, 0x40) 21.51034912s ago: executing program 2 (id=9972): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000780)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0xf, 0x2a4, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000400)={0x7}, 0x2000) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write(r2, &(0x7f00000000c0)="818f3d69149b997e15e0331ffb84139b2e821134083a", 0x16) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r3, 0x0) unshare(0x22020600) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x89204, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x9, 0x0, 0x8, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000060900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30000000006c000000060a010400000000000000000100000008000b40000000000900010073797a30000000004400048014000180090001006c617374"], 0xf4}}, 0x0) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r5, 0xb702, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7fff, 0x3, &(0x7f0000006680)) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x1) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) msgget(0x2, 0x600) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x20040, 0x40, 0xe}, 0x18) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x12, r6, 0x180000000) socket$nl_xfrm(0x10, 0x3, 0x6) 20.867851027s ago: executing program 2 (id=9975): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003b80), 0x0, 0x4800) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 20.596081673s ago: executing program 2 (id=9980): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff14) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) r1 = gettid() pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r2, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r2, 0x407, 0x7000000) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendfile(r7, r6, 0x0, 0x0) symlink(&(0x7f0000000300)='./file0/../file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r8 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x87}, &(0x7f00000000c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r5, 0x0, &(0x7f0000000480)='./file0\x00', 0x10b, 0x29c780}) io_uring_enter(r8, 0x3518, 0xaddf, 0x2, 0x0, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000280)={0x84, @private=0xa010101, 0x15, 0x3, 'lblc\x00', 0x1, 0x0, 0x7b}, 0x2c) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r11, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x3, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) 20.528072517s ago: executing program 43 (id=9980): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff14) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) r1 = gettid() pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r2, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r2, 0x407, 0x7000000) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendfile(r7, r6, 0x0, 0x0) symlink(&(0x7f0000000300)='./file0/../file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r8 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x87}, &(0x7f00000000c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r5, 0x0, &(0x7f0000000480)='./file0\x00', 0x10b, 0x29c780}) io_uring_enter(r8, 0x3518, 0xaddf, 0x2, 0x0, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000280)={0x84, @private=0xa010101, 0x15, 0x3, 'lblc\x00', 0x1, 0x0, 0x7b}, 0x2c) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r11, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x3, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) 6.987017387s ago: executing program 8 (id=10049): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xfffffffe, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x2, [{0x9, 0x3}, {0xb, 0x2}, {0xa, 0x3}, {0x0, 0x5}]}, @union={0x0, 0x0, 0x0, 0x5, 0x0, 0xdfa}]}}, &(0x7f0000000f40)=""/4089, 0x52, 0xff9, 0xa, 0x1}, 0x28) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) utime(&(0x7f0000000240)='./file0\x00', 0x0) lseek(r1, 0x0, 0x3) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40000, 0x1) getdents(r1, &(0x7f0000000540)=""/258, 0x102) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) writev(r0, &(0x7f00000003c0), 0x100000000000022d) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8e800, 0x80) 5.71669389s ago: executing program 8 (id=10055): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xa0, &(0x7f0000000240)={0x3, 0x0, 0xfffc, 0x4362}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x1, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000080)) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) (async, rerun: 64) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="030008009dadce1008004597002b008efa50460080119078ac1414bbac1414aa4e244eb4bd297ab700"/58], 0x35) (async, rerun: 64) brk(0xfffffffffffff801) shmget(0x0, 0x1000, 0x208, &(0x7f0000fff000/0x1000)=nil) (async) shmget(0x0, 0x4000, 0x8, &(0x7f0000ffb000/0x4000)=nil) 4.050410796s ago: executing program 8 (id=10066): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000180)=0xab5da19495d18d08) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000004c0)=[@in6={0xa, 0x4e22, 0x2, @private2, 0x2}, @in6={0xa, 0x4e22, 0x1, @local, 0x2}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e20, 0x8, @loopback, 0x6}, @in6={0xa, 0x4e20, 0x7, @private1}, @in6={0xa, 0x4e22, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x3d, @empty, 0xfff}, @in6={0xa, 0x4e22, 0x8, @private1, 0x3}], 0xf4) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008891}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x4, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8000}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) setresuid(0x0, 0xee00, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0x3, @private1, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 3.830170399s ago: executing program 0 (id=10067): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.63986597s ago: executing program 1 (id=10068): socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (fail_nth: 6) 3.511853547s ago: executing program 0 (id=10069): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x182, 0x0, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x8047, &(0x7f0000000280)=ANY=[], 0x4, 0x58f, &(0x7f0000000800)="$eJzs3c9v2+Ydx/EPXbt2NSAbtiEIAid9mmyAA7gqJTcOjJ446pHNViIFkm7tUxE0cmFE7opkAxZftlyyDdj+iF5333XYfdf9G8V6GnbjQFKy5ehXfjiRE7xfQvI8Ir/k86Us6Ava4kMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5fsN1a45aQbi7ZybzG3HUHl2sRans9N0600wZV3Lyf1pZ0ZVy0ZWfn66+nP93Q6vls1Wt5M2Kjn90+Sef/GxxYbD9lIRfi4ePju/f7fW6D+adyJxs2zBIoqDtbVsTJJHZek/STjMxzaBlk/0ktW3jx9ZLo9is+bdMbWtrw9jqfrQbbje8lh0svPNh3XU3zafVjvXiJAo/+rSa+DtBqxWE20VMvjqPuZO/ET8LUpNar23MwWGvuzEryTyo9ixB9VlBdbder9Xq9drm7a3bd1x3cWSBe8qR67oaiZj/mxbzdc6f4MCLW+jXf7UUKNSu9mTGPnw1FCtSe8L6vkH9/+VHduq4w/W/qPKZVq+crr6qov5fL59dn1T/J+Qy5bGU7+i5t3r68e5gHw/1SMe6r7vqqaeuHpzGrJ/LSBf8sS2rUIESRQrUllcsMf0lRlva1KZcfakdNZXIqKlALVkl2leiVLZ4R/mKtSxPqSLFMlqTr1syqilb3tKGjKyq2lekXYXaVkNesZcDHRav+8aUHE+CalOCvhi88+pTgp6r/heGN/kX9R/Uf1wk2aD+P+2deWQDAAAAAABeBaf47Xt+/r+ka9KSo2bQsu680wIAAAAAAOeo+Mv/at4U34y7JofzfwAAAAAA3jZOcY2dI6mi98ve4HKp/i8Bsh/PO0cAAAAAAPByir//X8+bSt57X87T5/8AAAAAAOBN96dJc+z/U8r60wIuO//4j+J4yXnc2fuFc+Tly7yj/gSBI/MEps2rzqX+Topmc7H/zLerTn/2y5NJML/vNwez5vp3ziEB/UUflDEf3Cvbe4M15SiVZtCyVT9qfVKT511aSO1e+ttvDn+n4vD/HLYvOT8cHPa61a9+3btX5PI438vjo/4rNTKP4pRcfqNrZcy18Ue8VFyI0R+34igf1x0+/oVy84XnGPOJbpQxNyplWzl7/Cv5mLXqpKMvs1iW9FJH/kQ3y5ibazfLZkwW9RlZdOvDr/8LvRbPkMXGtCyWD3vdjTFZZFmWPWsWADAvB9OrUOGds3X3BT5rX091f6K1MmbtavHBunh1zCe6O6uuuGPq+srJ8IuDLLLfT8jibyP3QJpUY/Nx/3oybq0Y97t8g+8mVtWkVXe08u1/s+zoW11++Oj4w8Oju193v+5+U69vbLofu+7tupaKw+g31B4AwBiz77EzM8L5eMZZ9U9PvlJQ1VfS/7LsntaLqw2KbxyM3Wul2OaH4msI6zPOWitDd3hZn3FWdxpbf47YjdfwkwAA4PW5MaMOT67/zuAufs76jPPuytBXCteHz47f1cjZ8XAtBwAAr4aNv3cq6R+dOA46X9a2tmpeumNNHPmfmThobFsThKmN/R0v3LamE0dp5EetvPN50LCJSXY7nShOTTOKTSdKgr3izu+mf+v3xLa9MA38pNOyXmKNH4Wp56emESS+6ez+qhUkOzYuNk461g+age+lQRSaJNqNfVs1JrF2KDBo2DANmkHeDU0nDtpevG8+j1q7bWsaNvHjoJNG5Q4HYwVhM4rbxW6r836xAQC4IB4+Or5/t9frPhh0nMWnl7x0Z97HCAAAzqJKAwAAAAAAAAAAAAAAAAAAAABw8Z3bRX5vVWf5Vez5C72KVN+TND3m3xVpeEmWPesQCxfhZ3GmM5h0ekrM38eskvSH+Sf/ZnXGfVqMzEcN4A32/wAAAP//9WFYYg==") 3.152946118s ago: executing program 0 (id=10070): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0xfffffc34, 0x0, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) r0 = socket$inet6(0xa, 0x2, 0xfffff076) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x8, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0xd, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) 3.099852611s ago: executing program 5 (id=10071): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000080)={[{@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000080)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@bh}, {@grpquota}, {@mblk_io_submit}]}, 0x1, 0xbd2, &(0x7f0000000540)="$eJzs3N1rXGUaAPDnnEymaZvtpMuybPdmsyxLC8tOky4p27KwrVS88ULQW6EhnZSQ6QdJpCbNxUT/AVGvBW8EtShe2OveKHrrjba3ihdCkdgoiGjkzEeSNjNJ2s70hPb3g3fO+553Zp7nmcPMOS/MTABPrOHsJo04FBFnk4hSc38aEcV6byCi1rjfyvLixE/LixNJrK4+/30SSUTcWV6caD1X0tzubw4GIuKLp5L446ub487OL0yPV6uVmeb46NyFy0dn5xf+PXVh/HzlfOXi6PH/jh0bOz5yYqxrtf789anrP/79mW9rv7z367Uf3ngniVMx2JzbWEe3DMfw2muyUSEixrsdLCd9zXo21pkUtnlQ2uOkAADoKN1wDffnKEVfrF+8leKTL3NNDgAAAOiK1b6IVQAAAOAxl1j/AwAAwGOu9T2AO8uLE62W7zcSHq3bpyNiqFH/SrM1ZgpRq28Hoj8i9t1JYuPPWpPGwx7acER8c+vEh1mLHv0OeSu1pYj4S7vjn9TrH6r/intz/WlEjHQh/vA9423q7+tCyLs8TP2nuhD/PusHgK64cbpxItt8/kvXrn+izfmv0Obc9SDanP+6fo7fSuv6b2XT9d96/X0drv+e22GMq+++daXTXFb//64//UGrZfGz7bZPuu2frOzM7aWIvxba1Z+s1Z90qP/sDmOUfrtS6TT3wPV3yerbEYejff0tydb/T3R0cqpaGWncto2x9PnY+53i511/dvz3dai/9f9PnY7/5R3GePHMmY827by13t26/vS7YvJCvVds7nl5fG5uZjSimDy7ef+xrXNp3af1HFn9R/6x9fu/Xf3ZZ0Kt+Tpka4Gl5jYbv3JPzP9fu/pxp3xa6788j/+5Dsd/Y/2fFTYf/9d2GOOfn75+pNPcxvVv1rL4rbUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALSkETEYSVpe66dpuRyxPyL+FPvS6qXZuX9NXnrp4rlsLmIo+tPJqWplJCJKjXGSjUfr/fXxsXvG/4mIgxHxZmlvfVyeuFQ9l3fxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArNkfEYORpOWISCNipZSm5XLeWQEAAABddyDvBAAAAICeG8o7AQAAAKDnrP8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADosYN/u3EziYjayb31lik25/pzzQzotTTvBIDc9OWdAJCbQt4JALm5zzW+ywV4DCXbzA90nNnT9VwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2L0OH7pxM4mI2sm99ZYpNuf6c80M6LU07wSA3PR1mhiIiMKjzQV4tLzF4clljQ8k28wPrN+ndvfMnp7lBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDuM1hvSVqOiGJzX7kc8YeIGIr+ZHKqWhmJiAMR8VWpf082Hs05ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALpvdn5herxarcxknTSanbU9OuudpPGK1XZLPjoP2SnGrkhjl3by/mQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPs/ML0+PVamVmNu9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLzNzi9Mj1erlZkedvKuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/PweAAD//1pFCiI=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x4000) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) perf_event_open(&(0x7f00000005c0)={0x4, 0x80, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0423, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x1000, 0xfffffffffffffeff}, 0x102013, 0x0, 0x7, 0x7, 0x3, 0x8d5e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x5d6, &(0x7f0000000300)="$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") 3.041534984s ago: executing program 1 (id=10072): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x900, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e12060200ef00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4000850) 2.895753673s ago: executing program 0 (id=10074): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)="abca2b8a8c7650be13da02b4318d5210af16c7051966df55495569d3b7bcbf73c173ba68983bb01a208a06dd44ea6f861cd634f5eeaefe0e154e0f80f4535579ae97e3ca3a93dffb8825f9baf0f9976bc5dab01846669e19662b511b8c86e1f3219bbb0fe76dec1deef35d3ec1", 0x6d}, {&(0x7f0000000240)="c0506947ea526f69b53cb11a03057bff2e9c9e32466e29c2c95fbc0854554fa6b03f1dd3d1c77b157f05720265f8c55753d452782dcbab40b4a4f3097a184daf6bb3459e2e371ab0", 0x48}, {&(0x7f00000002c0)="0621c365b71df1eafacb21a608e6cf72c492bc1e4a12fd16d128b2e8b9184fc19cb63996e2d8096a045e9438403da5a00331b599dfb8d7f2f9b73a96ff5f79bb665f020359fb05320ad359a494e7d794a9320f408d6cd3f9b288aa8ad92fd5a684317f39d19ea85f6cb9a6157b974871cb57939c568309960b81f07e8f47af5b5c8940df260ab9eec395d653cf667f50c705c07b0d2ab1a57ec9fe343d2398a2e7937fb56e7e776449355c525cf250785c1f57e7b67c39", 0xb7}, {&(0x7f0000000380)="02261ee81c9714c0bcb1785eb2b300e2547ba99704a704ef97c8bb21858bbeae907e30a3e7613b484b92615e591c0072ff841b35c883951b75a39bacd4d7a5c5038fa2f5bcb8a8d6a9801dca695767e9dccb31c48b86f0f413449b5889cc677e8590e6990dab9c985687f14110d7b902efceda77a1e5b6e00919596f1248ed8d496eaa22fc53fc4dbb28795f36bbdb1e9e35505957c3ca5b9fb1518fd13ee90a152c742a434ed3caf906b95404caaf4596bdf9", 0xb3}, {&(0x7f00000004c0)="cd89e3dd0ba5d0c420a11d1a924653c62dc4d29cb72f082a53339b7b680494174d9e33de54d2177f76fa856c59038b42ffa3b02d26d7563b31f419bc4817264cd374e68f6484457c7db015b29cb15c232f19decba92a36a2e682631d46a9eef9dcff2f42ce4f92a8a2afe062", 0x6c}, {&(0x7f0000000540)="849c58441177530450c6528d8c07569da25134dfb6573b0f7163661019ea4787e4101cfc69c53667e3be12b1207d9652fb792b05f2416d33b041b95846806d75a58af670127337f7bb13d5a8485a45561600f2e7fc37305ee4a9817e044de0e9a44aafa6616c2dc28b75b9398a224f1506cd149b6b942ca4d5e912394f117e115de58ec057ce4279cb090bb01d12449c07e18fe94318b76bd6f3612e4fd5492f84230720c6b614", 0xa7}, {&(0x7f0000000440)="b5da5d5838e656f8e35eb1548e2201e28dc99bdbe1bffa7650a18c", 0x1b}], 0x7, 0x0, 0x0, 0x40}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="db7ef3eb1dbeaa7e52adb82d0de4b13524c59149e422287ac2b6354fb2c04223d600f364f5054a831cdf554d873d563d7802b0c911486e8a5cd4523c29f98219c586cbb09ff98435d0ea4d34cfa058a6c0b96c0b3bbfe4036703b3e5ff85ae96c138d009992d67bb36dd7e51f3213492953502de85157a9421bf2b34f8c3b56aa454d8ec42a7925e4b84495b914d5f56a905993a15637fbfc052420d410467517848dc7fdf08bedc7795b835fd840cbec6dd6a139d050252f8d25baf580fe049", 0xc0}], 0x1, &(0x7f0000000b00)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0, 0x4000000}}], 0x2, 0x48800) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x0) read(r1, &(0x7f0000002040)=""/76, 0x4c) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket(0x22, 0x80805, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r5, 0x0, 0x80000000, 0x0) syz_open_procfs(r5, &(0x7f0000000040)='net/stat\x00') getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001100)={0x0, @in6={{0xa, 0x4e21, 0xa60, @dev={0xfe, 0x80, '\x00', 0x12}, 0x6}}, 0x400, 0xb7, 0xfffffffd, 0x5, 0x40, 0xffffffff, 0x2}, &(0x7f00000011c0)=0x9c) ioctl$KDSIGACCEPT(r2, 0x5607, 0x2c) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) r7 = dup(r6) ioctl$TIOCL_SETVESABLANK(r7, 0x560e, &(0x7f0000000140)) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r8, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r7, 0x541c, &(0x7f0000000040)) r9 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r9) 2.878487904s ago: executing program 8 (id=10075): socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x8100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0xffffffffffffdcf8, r1, 'id0\x00'}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xd}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x1, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6gre0\x00', r6, 0x2f, 0x3, 0x8, 0x5, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x40, 0x401, 0x8}}) 2.669969976s ago: executing program 1 (id=10076): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x0, 0x0, &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffc}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$rxrpc(0x21, 0x2, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x160, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xffffffff, 0xff], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'gre0\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x3c, 0x9, 0x0, 0x50}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "978888d6ee9e7a5e4bc76ccf4228733e737d402fc4a91c346e4f9a692f63"}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@private2, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xffffff00, 0x0, 0xfffffefe], [0xffffff00, 0xff, 0xff, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x1, 0x2, 0x2, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) setsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f"], 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r5) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000100)=0x3, 0x2) epoll_create1(0x80000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x104084, &(0x7f0000000000)=ANY=[]) 2.332068445s ago: executing program 5 (id=10078): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="dca44ffb39af11f0a648c4455516d5a57019c03823237a4887f33625354770b7ed9e387e1449265a256b0336b9d85a36e903896deec347d48638b326229b2f52dbcc7ebc5d286c5a26a7205026900eed205146b333fbaa2d40af63d157123cb49e492809badc7a538a08385fd8049b57c8252ebf3894f1eeb49bd4160e4347b3a9fd0ec00e76733af70cd821d95057d1a44b12984ffcf7d225a2384679a143db9bf04139179a4ff8d1def080f0198a1c235cd7cf16b432dbea16ae86c40df05ce1f11a3f90943882639cc8a52c2a50bca3b173709c989f73737237a427e010", @ANYRESDEC], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000080000000000000001000084060004000000000001"], 0x0, 0x42}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf8200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=ANY=[@ANYBLOB="00000000513b82f625cdd630245a9829", @ANYRES16=0x0, @ANYBLOB="04002bbd7000ffdbdf25110000002c0007800c000400ff01000000000000080002000b0000000c000400000000000000100008000200000001002800058024000280080001000300000008000400320000000800030002000000080002002710a525180007800c00040009000000000000000700010000100000"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000e0ffffff010000001400020076657468315f746f5f6873720000000009000100"], 0x34}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x72) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0x3, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) kexec_load(0xd, 0x7, &(0x7f0000000940)=[{&(0x7f0000000000), 0x0, 0x9, 0x4}, {&(0x7f0000000040)="0cdc757c4a2952976e688299a4b93eaf40bcadd269a08713b4f8dcc060c76722e6d47c2e5d5d1634d02c6eb4a8d8bf7b0c358df1d41a3e250c2419", 0x3b, 0x17, 0x5}, {&(0x7f0000000180)="6c2551d35720ae5c5f555c241c640eedec9e2d9d90b663585e4297f8ba0d31767eebcc7c9fe80c2b8e17e70c2a69742a335aeb2e0aa3ff80ecfa108d58bb4aa0194654b881b61b4e801699379f8068823dab8e4f2f918104d188dad495fefcfbe609be4d88f2ac2d2aae461ab38ffc66fe4b017a81692fcc64ab64", 0x7b, 0x8000000000000001, 0x1ff}, {&(0x7f0000000080)="8ba6069c33bfe3d134962b589402ab63094a4777bb1e0d248f4626dea34328054cad16a5", 0x24, 0xfffffffffffff921, 0x7fff}, {&(0x7f0000000280)="d6affb654a9700fd0166cf79f5e378f0264629cbab8a13286ea79cfadb242dedfbbafa24878e", 0x26, 0xb, 0x3b4}, {&(0x7f0000000640)="1a3fd2dafc1114944410eb3b423f4922ad4d0286acd54c4c3291a1acccb8a812aa4dc8d2653539c96b5f479dfd8ed4e555fcb86e33e708127b455599f833536fd50d4173ffced4ab63e888735ab5119a0ddab9584731fa91e1283963601bdbf134dc3ee9b06875041e3dc6aba905b4f74fe2a794df76fb26dcb12ff79036fffcecc4033f6763e463dc98b642789f8c82bac907d1ff032dcbf2c0e883a6fdb1d541f6177914d734a3155d4136570c2ca204796e520235ad95590f0b1a", 0xbc, 0x7, 0x8}, {&(0x7f0000000700)="9e57df220f8062bb5e52f5ba247ba519674e183d8be2d74f604587c10e572c5be6feb881ba7fac2f4853b85498f8589d8c989d8994596d98fac536a0bda4d586a6a7e29059c098890e506e46182c97b796486b255d795235d0e2e959dffc2920769ecaff0a2e655d61515a8e8580389fda517e13407abdef9b4c77e28cea62446529af168207acdb2b2e511a7700f0a2efe988f4ad8d94400ffeb06807ab90f5a9e65d955eb53373fba0903c9446d584d9120c2a65d847966b5aa740ea2bd830085852301bc30dd6e70917521b26738e4ed806cc112ea7a930823ab502e28d5be81693d92ed85e7e", 0xe8, 0x200000, 0x6}], 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r1], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) timer_create(0x3, &(0x7f00000003c0)={0x0, 0x34, 0x2, @thr={&(0x7f00000002c0)="bd9c53ef15d787dc5563b8a1429f1448b6abae23a093769e09", &(0x7f0000001fc0)="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"}}, &(0x7f0000000400)=0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) timer_settime(r8, 0x0, &(0x7f0000000840)={{r9, r10+60000000}, {r11, r12+10000000}}, &(0x7f0000000a40)) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040800001b0000000002000000400004803c0001800900010068617368000000002c000280080003400000000008000240000000000800014000000000080004400000000008000640000100010900010073797a30000000000900020073797a32"], 0x94}}, 0x0) r13 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r14) syz_mount_image$ext4(&(0x7f0000000780)='ext2\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000c40)={[{@acl}, {@jqfmt_vfsv1}], [{@euid_gt={'euid>', r14}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@subj_user={'subj_user', 0x3d, '%@-*^@}\\:'}}, {@obj_user={'obj_user', 0x3d, 'SMC_PNETID\x00'}}, {@subj_user={'subj_user', 0x3d, 'Nx\xe3\xe8\x9c'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@obj_role={'obj_role', 0x3d, '\\&/@@#\\]}.}/$&#+#*\\,['}}, {@smackfshat={'smackfshat', 0x3d, '\\'}}, {@smackfsdef={'smackfsdef', 0x3d, '\'+$%'}}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 2.099886449s ago: executing program 6 (id=10079): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.937644138s ago: executing program 8 (id=10080): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0xe) mlockall(0x6) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000440)="$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") creat(&(0x7f0000000000)='./file2\x00', 0x149) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) listxattr(&(0x7f0000000340)='./file1\x00', 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0xc04c8c4) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 1.918834569s ago: executing program 6 (id=10081): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x200201, 0x110) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000cab000)=0x5f) getsockopt(r2, 0x3, 0x401, &(0x7f0000000700)=""/113, &(0x7f0000000780)=0x71) setresuid(0xee01, r3, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x1, 0x0}, &(0x7f0000000340)=0x88) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'ip6tnl0\x00', 0x0, 0x29, 0x7c, 0x66, 0x2, 0x20, @empty, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x0, 0x8, 0x9, 0x80}}) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r12, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x24, 0x66, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0x0, 0xfff2}, {0x0, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xbc, r6, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1d}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x599082eff990b0ca}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0xbc}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="980100004100000125bd7000fedbdf250d0000000c00008008004000", @ANYRES32, @ANYBLOB="0ba0e80e4e90a4d7af5ce12f4769df465133e9f80d0abdfb579bb9f5cfa09d1e5917edc3245c591c0eadfe3fbfcae881744fee9848159870906416dd59733373d0a4058593004f66e3b898ea6cb6df977854364a03d0781f6a5c422243bf284e3e3bfb8497c4c878400619381c3a74d9cb472ccc7ceeb4649e2d23f856e09053173d0ddf62bef6bc56574b625964e90c001300060000000000000046b861540ba1fd9a682ba8d37ba5635df641159008b175ee0fdf8e7e42e3d4058eb6655aa329951380967befac004f800f0578609dbb6e635fc0ddb884925fd0380827323d039962aeac08005800", @ANYRES32, @ANYBLOB="0b006100e03a5d26287d000038f3e9e6f2937fe6e978fc37e82dfdd412722f3de1d1661f1f5f89dc1e3c22b02b33edc823825cf1b637b7e8613e5ad9a9adfe8e39f9d0b59dfa2219abeaaa4debb8394a804b71fe464529753ab6b87cee545edb8f2268cf1550aaed7b7c7bbf7cca418826bf0800d000", @ANYRES32=r3, @ANYBLOB="0400228004007b800400428000"], 0x198}, 0x1, 0x0, 0x0, 0x4084054}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000cfba00080000300000000000911199000000000095000010bc53da40e4c0623983ba0000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 1.880473001s ago: executing program 5 (id=10082): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001a00), 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x2, 0x12c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000064000000850000000600"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1003, &(0x7f0000001cc0)=""/4099, 0x40f00, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 1.741537939s ago: executing program 0 (id=10083): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9658, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd9b, 0x3}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x8f17, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000000680)=""/152, 0x98}], 0x2, &(0x7f0000000080), 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x30000008}) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x6, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r4, 0x0, 0x4, 0x0) r5 = syz_pidfd_open(r4, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5400000010001fff29bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010067656e65766500001c0002800500040009000000050008000100000005000d000100000008000a00", @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) pidfd_send_signal(r5, 0x2, 0x0, 0x0) 1.487819924s ago: executing program 6 (id=10084): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000007000100000000000000070705000080030005000000000002004e22ac14140a0000000000000000020013"], 0x78}, 0x1, 0x7}, 0x0) 1.358498121s ago: executing program 1 (id=10085): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) 1.340552163s ago: executing program 5 (id=10086): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x40000000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x40000000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x9, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ptrace$setregs(0xd, r0, 0x9, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r0, 0x1, &(0x7f0000000340)={0x0}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x1e8, 0x12, 0x60a, 0x1e8, 0x202, 0x1e8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x1b8, 0x1e8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@inet=@set3={{0x50}, {{0x0, 0x3, 0x4}, {0x1}, {0x81, 0x8000}, 0x2}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r4 = dup3(r2, r3, 0x0) write$UHID_CREATE(r1, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/12, 0xc, 0x103, 0x4, 0x0, 0x2, 0xc04}}, 0x120) (async) write$UHID_CREATE(r1, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/12, 0xc, 0x103, 0x4, 0x0, 0x2, 0xc04}}, 0x120) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) (async) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x4) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000180)=0x1, 0x4) 1.111656675s ago: executing program 6 (id=10087): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd28, 0xfffffffd, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @loopback}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_TARGET_NETNSID={0x8}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) write$UHID_INPUT(r0, &(0x7f0000000840)={0x9, {"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", 0x1000}}, 0x214) 811.993943ms ago: executing program 5 (id=10088): prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x12, 0x3, 0x0, 0x2, 0x0, 0x0, 0x300, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x4}, 0x100, 0x1, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b160000000000000000020000082400048020000180080001006e617400140002800800014000ef000108000540000000140900010073797a30000000000900020073797a3200"], 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x23) r2 = socket$netlink(0x10, 0x3, 0x9) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f00000000c0)={0x1ae, 0xffffffff, 0xffff, 0x7ff}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8, 0x8}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000080000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x9f62}}, './file0\x00'}) ioctl$RTC_EPOCH_READ(r6, 0x8008700d, &(0x7f00000001c0)) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r7, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r7, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000840)='fdinfo\x00') lseek(r10, 0x7, 0x1) getdents(r10, 0x0, 0x51) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0x80e8662d, &(0x7f00000004c0)={@id={0x2, 0x0, @b}}) write$P9_RLERRORu(r6, &(0x7f0000000940)=ANY=[@ANYRESHEX=r0, @ANYRES8=r6, @ANYRES32=r4, @ANYRES32=r8, @ANYRES8=r5, @ANYRES16=r6, @ANYRES8=r8, @ANYRES8=r2, @ANYBLOB="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", @ANYBLOB="7a6c7b3ee5b20a657587cd9beec692244011e5d6d4397d10b80df8df019ab32d59b4018367615f01fa97a71727484a167ff2f2b37f563b3fe7582bcf1773b0f2fec2a5e3510d8ec0308efdf3cff5f33921cdcbcdc38e7afb65a22ec92c18e2e2c4bcf5fe1b80407fbf388184fd8b23876df12a7f2c9aada031451ebbbf266cea517e1f05ba6c0b63a98bc41e68d6e94535e2135243f9bc054dc5f9fa15355d62"], 0xfffffef4) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="700000001000030500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="35c60100ef000000500012800e0001006970366772657461700000003c00028014000600fe88000000000000000000000000010114000700ff"], 0x70}, 0x1, 0x0, 0x0, 0x240488c0}, 0x0) 751.215306ms ago: executing program 6 (id=10089): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x4, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xb}, 0x94) writev(r0, &(0x7f00000003c0), 0x100000000000022d) 609.965154ms ago: executing program 1 (id=10090): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x36, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0xc}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) (async) r2 = getpid() (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="db000000", @ANYRES16=r4, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) (async) writev(0xffffffffffffffff, 0x0, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) 509.87242ms ago: executing program 0 (id=10091): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40004) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000000c0)=""/55, 0x37}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/249, 0xf9}, {&(0x7f0000000540)=""/206, 0xce}, {&(0x7f0000000cc0)=""/201, 0xc9}, {&(0x7f0000000ec0)=""/130, 0x82}], 0x6}, 0x5d}], 0x1, 0x10022, 0x0) 327.689341ms ago: executing program 6 (id=10092): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 233.307706ms ago: executing program 5 (id=10093): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x2, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "0010008000"}, 0x10}}, 0x2004c891) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x2, 0x4) (async) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "0010008000"}, 0x10}}, 0x2004c891) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) (async) 231.825256ms ago: executing program 8 (id=10094): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) 0s ago: executing program 1 (id=10095): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x8300) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x80000011}) r3 = getpid() ioprio_get$pid(0x2, r3) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000c40)={0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001400)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d, 0x70bd2a, 0x25dfdbfc}, 0x14}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x88, &(0x7f0000000640)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@bh}, {@acl}, {@nouid32}, {@data_err_abort}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@dax}, {@nouser_xattr}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x73}}, {@commit={'commit', 0x3d, 0xffffffffffff0000}}]}, 0x1, 0x485, &(0x7f0000001500)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r7, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x7ff, 0x6, 0xb, 0xe000}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x1) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r4}, 0x14) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r9, 0x5411, &(0x7f0000000340)) kernel console output (not intermixed with test programs): capacity change from 0 to 2048 [ 683.559584][ T1532] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9630'. [ 684.171985][ T1551] netlink: 'syz.8.9634': attribute type 1 has an invalid length. [ 684.217617][ T1551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.348785][ T1554] bond0: (slave veth3): Enslaving as an active interface with a down link [ 684.426593][ T1551] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 684.471877][ T1551] bond0: (slave batadv1): making interface the new active one [ 684.507218][ T1564] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9637'. [ 684.527255][ T1551] batadv1: entered promiscuous mode [ 684.532705][ T1551] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 684.566138][ T1564] vlan0: entered promiscuous mode [ 684.742206][ T1559] syzkaller0: entered promiscuous mode [ 684.747839][ T1559] syzkaller0: entered allmulticast mode [ 684.954030][ T1575] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9638'. [ 685.132910][ T1575] loop8: detected capacity change from 0 to 512 [ 685.190812][ T1583] loop6: detected capacity change from 0 to 2048 [ 685.199654][ T1575] EXT4-fs: Ignoring removed bh option [ 685.241987][ T1583] EXT4-fs: Ignoring removed mblk_io_submit option [ 685.265113][ T1575] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 685.301112][ T1583] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 685.314829][ T1575] EXT4-fs (loop8): 1 truncate cleaned up [ 685.325517][ T1575] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 685.473005][T29935] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.556458][ T1592] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9642'. [ 685.565552][ T1592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9642'. [ 685.574531][ T1592] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9642'. [ 685.670973][ T1593] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9642'. [ 685.680083][ T1593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9642'. [ 685.689868][ T1593] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9642'. [ 685.797655][T28885] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.838602][T31979] hid_parser_main: 14 callbacks suppressed [ 685.838621][T31979] hid-generic 0103:0004:0000.001E: unknown main item tag 0x0 [ 685.852066][T31979] hid-generic 0103:0004:0000.001E: unknown main item tag 0x0 [ 685.859525][T31979] hid-generic 0103:0004:0000.001E: unknown main item tag 0x0 [ 685.866958][T31979] hid-generic 0103:0004:0000.001E: unknown main item tag 0x0 [ 685.874364][T31979] hid-generic 0103:0004:0000.001E: unknown main item tag 0x0 [ 685.881801][T31979] hid-generic 0103:0004:0000.001E: unknown main item tag 0x0 [ 685.889283][T31979] hid-generic 0103:0004:0000.001E: unknown main item tag 0x0 [ 685.896738][T31979] hid-generic 0103:0004:0000.001E: unknown main item tag 0x0 [ 685.904213][T31979] hid-generic 0103:0004:0000.001E: unknown main item tag 0x0 [ 685.911789][T31979] hid-generic 0103:0004:0000.001E: unknown main item tag 0x0 [ 686.093277][T31979] hid-generic 0103:0004:0000.001E: hidraw0: HID v0.02 Device [syz0] on syz1 [ 686.521993][ T1610] fido_id[1610]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 687.160408][ T1623] syzkaller0: entered promiscuous mode [ 687.166706][ T1623] syzkaller0: entered allmulticast mode [ 687.336524][ T29] kauditd_printk_skb: 488 callbacks suppressed [ 687.336541][ T29] audit: type=1400 audit(1769642136.762:50011): avc: denied { bpf } for pid=1626 comm="syz.8.9652" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 687.455114][ T29] audit: type=1400 audit(1769642136.762:50012): avc: denied { perfmon } for pid=1626 comm="syz.8.9652" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 687.476233][ T29] audit: type=1400 audit(1769642136.762:50013): avc: denied { bpf } for pid=1626 comm="syz.8.9652" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 687.497173][ T29] audit: type=1400 audit(1769642136.762:50014): avc: denied { perfmon } for pid=1626 comm="syz.8.9652" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 687.518349][ T29] audit: type=1400 audit(1769642136.762:50015): avc: denied { bpf } for pid=1626 comm="syz.8.9652" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 687.539010][ T29] audit: type=1400 audit(1769642136.762:50016): avc: denied { perfmon } for pid=1626 comm="syz.8.9652" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 687.560187][ T29] audit: type=1400 audit(1769642136.792:50017): avc: denied { map_create } for pid=1630 comm="syz.5.9654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 687.579456][ T29] audit: type=1400 audit(1769642136.792:50018): avc: denied { map_read map_write } for pid=1630 comm="syz.5.9654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 687.599411][ T29] audit: type=1400 audit(1769642136.792:50019): avc: denied { read write } for pid=29935 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 687.623908][ T29] audit: type=1400 audit(1769642136.792:50020): avc: denied { read write open } for pid=29935 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 688.109972][ T1646] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 688.122088][ T1649] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 688.170028][ T1646] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 688.279187][ T1646] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 688.367446][ T1653] IPVS: Error connecting to the multicast addr [ 688.388893][ T1646] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 688.481049][T14249] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 688.514401][T14249] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 688.570882][T14249] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 688.589489][T14249] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 688.625019][ T1662] loop8: detected capacity change from 0 to 512 [ 688.670022][ T1662] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 688.797492][ T1662] EXT4-fs (loop8): 1 truncate cleaned up [ 688.803916][ T1662] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 688.905995][ T1660] __nla_validate_parse: 8 callbacks suppressed [ 688.906033][ T1660] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9664'. [ 688.906136][T28885] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.356735][ T1673] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9668'. [ 689.400204][ T1675] netlink: 'syz.0.9667': attribute type 10 has an invalid length. [ 689.503686][ T1673] loop8: detected capacity change from 0 to 512 [ 689.597118][ T1673] EXT4-fs: Ignoring removed bh option [ 689.621672][ T1673] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 689.686229][ T1673] EXT4-fs (loop8): 1 truncate cleaned up [ 689.718554][ T1673] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 690.032773][T28885] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.047527][ T1692] ip6_vti0 speed is unknown, defaulting to 1000 [ 690.258046][ T1698] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 691.065148][ T1710] loop8: detected capacity change from 0 to 512 [ 691.078617][ T1716] netlink: 'syz.0.9683': attribute type 10 has an invalid length. [ 691.101412][ T1718] FAULT_INJECTION: forcing a failure. [ 691.101412][ T1718] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 691.114766][ T1718] CPU: 0 UID: 0 PID: 1718 Comm: syz.6.9684 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 691.114802][ T1718] Tainted: [W]=WARN [ 691.114809][ T1718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 691.114822][ T1718] Call Trace: [ 691.114830][ T1718] [ 691.114865][ T1718] __dump_stack+0x1d/0x30 [ 691.114890][ T1718] dump_stack_lvl+0x95/0xd0 [ 691.114985][ T1718] dump_stack+0x15/0x1b [ 691.115012][ T1718] should_fail_ex+0x263/0x280 [ 691.115069][ T1718] should_fail_alloc_page+0xf2/0x100 [ 691.115159][ T1718] __alloc_frozen_pages_noprof+0x108/0x350 [ 691.115251][ T1718] alloc_pages_mpol+0xb3/0x260 [ 691.115294][ T1718] alloc_pages_noprof+0x8f/0x130 [ 691.115328][ T1718] __pmd_alloc+0x47/0x480 [ 691.115429][ T1718] handle_mm_fault+0x1ed8/0x3030 [ 691.115470][ T1718] ? vma_start_read+0x1c7/0x2c0 [ 691.115512][ T1718] do_user_addr_fault+0x62f/0x1050 [ 691.115605][ T1718] ? ksys_mmap_pgoff+0xc1/0x310 [ 691.115645][ T1718] ? __x64_sys_mmap+0x49/0x70 [ 691.115690][ T1718] exc_page_fault+0x62/0xa0 [ 691.115723][ T1718] asm_exc_page_fault+0x26/0x30 [ 691.115750][ T1718] RIP: 0033:0x7f1f0720288e [ 691.115767][ T1718] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 691.115788][ T1718] RSP: 002b:00007f1f05da63c0 EFLAGS: 00010246 [ 691.115807][ T1718] RAX: 0000000000000001 RBX: 00007f1f05da6480 RCX: 0000000000000101 [ 691.115853][ T1718] RDX: 000000000000003f RSI: 0000000000000001 RDI: 00007f1f05da6520 [ 691.115873][ T1718] RBP: 0000000000000102 R08: 00007f1efd987000 R09: 0000000000000000 [ 691.115889][ T1718] R10: 0000000000000000 R11: 00007f1f05da6490 R12: 0000000000000001 [ 691.115906][ T1718] R13: 00007f1f073f7900 R14: 0000000000000000 R15: 00007f1f05da6520 [ 691.115934][ T1718] [ 691.297795][ T1718] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 691.314394][ T1719] netlink: 'syz.0.9683': attribute type 10 has an invalid length. [ 691.356049][ T1710] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 691.386688][ T1710] ext4 filesystem being mounted at /289/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 691.413621][ T1710] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.478672][ T1718] loop6: detected capacity change from 0 to 2048 [ 691.547496][ T1718] GPT:first_usable_lbas don't match. [ 691.552869][ T1718] GPT:34 != 290 [ 691.556667][ T1718] GPT: Use GNU Parted to correct GPT errors. [ 691.562816][ T1718] loop6: p1 p2 p3 [ 691.896058][T19621] udevd[19621]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 691.946676][ T7732] udevd[7732]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 691.950214][ T7426] udevd[7426]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 692.006132][ T1739] loop6: detected capacity change from 0 to 164 [ 692.018166][ T1739] Unable to read rock-ridge attributes [ 692.087801][ T1739] Unable to read rock-ridge attributes [ 692.117376][ T1739] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 692.159398][ T1739] Unable to read rock-ridge attributes [ 692.189507][ T1739] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 692.372961][ T29] kauditd_printk_skb: 556 callbacks suppressed [ 692.372979][ T29] audit: type=1400 audit(1769642141.792:50577): avc: denied { sys_module } for pid=1741 comm="syz.8.9691" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 692.400459][ T29] audit: type=1400 audit(1769642141.792:50578): avc: denied { module_request } for pid=1741 comm="syz.8.9691" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 692.425310][ T29] audit: type=1400 audit(1769642141.802:50579): avc: denied { ioctl } for pid=29935 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 692.457220][ T1752] bond1: Removing last ns target with arp_interval on [ 692.496899][ T29] audit: type=1400 audit(1769642141.922:50580): avc: denied { create } for pid=1741 comm="syz.8.9691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 692.546830][ T29] audit: type=1400 audit(1769642141.922:50581): avc: denied { write } for pid=1741 comm="syz.8.9691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 692.566680][ T29] audit: type=1400 audit(1769642141.962:50582): avc: denied { prog_load } for pid=1749 comm="syz.5.9693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 692.585906][ T29] audit: type=1400 audit(1769642141.962:50583): avc: denied { bpf } for pid=1749 comm="syz.5.9693" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 692.630959][ T29] audit: type=1400 audit(1769642142.042:50584): avc: denied { prog_load } for pid=1749 comm="syz.5.9693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 692.650413][ T29] audit: type=1400 audit(1769642142.042:50585): avc: denied { bpf } for pid=1749 comm="syz.5.9693" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 692.671097][ T29] audit: type=1400 audit(1769642142.042:50586): avc: denied { prog_load } for pid=1749 comm="syz.5.9693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 692.872963][ T1761] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 693.326207][ T1777] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9699'. [ 693.352842][ T1778] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 693.422012][ T1778] bond2 (unregistering): Released all slaves [ 693.687403][ T1792] FAULT_INJECTION: forcing a failure. [ 693.687403][ T1792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 693.700546][ T1792] CPU: 1 UID: 0 PID: 1792 Comm: syz.0.9704 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 693.700680][ T1792] Tainted: [W]=WARN [ 693.700687][ T1792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 693.700700][ T1792] Call Trace: [ 693.700707][ T1792] [ 693.700715][ T1792] __dump_stack+0x1d/0x30 [ 693.700755][ T1792] dump_stack_lvl+0x95/0xd0 [ 693.700783][ T1792] dump_stack+0x15/0x1b [ 693.700873][ T1792] should_fail_ex+0x263/0x280 [ 693.700912][ T1792] should_fail+0xb/0x20 [ 693.700940][ T1792] should_fail_usercopy+0x1a/0x20 [ 693.701017][ T1792] _copy_from_user+0x1c/0xb0 [ 693.701044][ T1792] do_arpt_set_ctl+0x3b6/0xad0 [ 693.701072][ T1792] ? _raw_spin_unlock_bh+0x18/0x20 [ 693.701140][ T1792] nf_setsockopt+0x199/0x1b0 [ 693.701248][ T1792] ip_setsockopt+0x102/0x110 [ 693.701278][ T1792] udp_setsockopt+0x99/0xb0 [ 693.701315][ T1792] sock_common_setsockopt+0x69/0x80 [ 693.701362][ T1792] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 693.701397][ T1792] __sys_setsockopt+0x184/0x200 [ 693.701493][ T1792] __x64_sys_setsockopt+0x64/0x80 [ 693.701576][ T1792] x64_sys_call+0x21d5/0x3000 [ 693.701619][ T1792] do_syscall_64+0xc0/0x2a0 [ 693.701711][ T1792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.701734][ T1792] RIP: 0033:0x7f968e46aeb9 [ 693.701750][ T1792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 693.701798][ T1792] RSP: 002b:00007f968cec7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 693.701819][ T1792] RAX: ffffffffffffffda RBX: 00007f968e6e5fa0 RCX: 00007f968e46aeb9 [ 693.701834][ T1792] RDX: 0000000000000060 RSI: 0a02000000000000 RDI: 0000000000000003 [ 693.701848][ T1792] RBP: 00007f968cec7090 R08: 00000000000003f0 R09: 0000000000000000 [ 693.701911][ T1792] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.701929][ T1792] R13: 00007f968e6e6038 R14: 00007f968e6e5fa0 R15: 00007ffde7d97498 [ 693.701957][ T1792] [ 694.038424][ T1799] loop2: detected capacity change from 0 to 1024 [ 694.047287][ T1799] EXT4-fs: Ignoring removed nomblk_io_submit option [ 694.067740][ T1799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 694.153854][ T1804] syzkaller0: entered promiscuous mode [ 694.159442][ T1804] syzkaller0: entered allmulticast mode [ 694.189061][T25374] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.765133][ T1816] loop7: detected capacity change from 1024 to 1023 [ 694.829170][ T1816] netlink: 'syz.8.9712': attribute type 1 has an invalid length. [ 694.837087][ T1816] netlink: 212400 bytes leftover after parsing attributes in process `syz.8.9712'. [ 694.889340][ T1821] netlink: 40 bytes leftover after parsing attributes in process `syz.8.9712'. [ 695.286125][ T1832] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9718'. [ 695.396155][ T1837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9720'. [ 695.426217][ T1836] loop8: detected capacity change from 0 to 512 [ 695.537820][ T1836] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 695.607303][ T1836] ext4 filesystem being mounted at /295/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 695.712804][ T1851] loop2: detected capacity change from 0 to 128 [ 695.733387][ T1846] syzkaller0: entered promiscuous mode [ 695.739023][ T1846] syzkaller0: entered allmulticast mode [ 695.748382][ T1836] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #4: comm syz.8.9719: corrupted inode contents [ 695.775505][ T1836] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #4: comm syz.8.9719: mark_inode_dirty error [ 695.808396][ T1836] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #4: comm syz.8.9719: corrupted inode contents [ 695.867834][ T1836] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #4: comm syz.8.9719: mark_inode_dirty error [ 695.915983][ T1836] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.9719: Failed to acquire dquot type 1 [ 695.975386][T14249] batadv1: left promiscuous mode [ 696.052217][T28885] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.191255][ T1866] netlink: 830 bytes leftover after parsing attributes in process `syz.0.9726'. [ 696.744047][ T1878] loop6: detected capacity change from 0 to 2048 [ 696.772582][ T1878] EXT4-fs: Ignoring removed mblk_io_submit option [ 696.824548][ T1878] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 696.955910][T29935] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.313490][T17873] hid_parser_main: 2 callbacks suppressed [ 697.313514][T17873] hid-generic 0103:0004:0000.001F: unknown main item tag 0x0 [ 697.328097][T17873] hid-generic 0103:0004:0000.001F: unknown main item tag 0x0 [ 697.335579][T17873] hid-generic 0103:0004:0000.001F: unknown main item tag 0x0 [ 697.343068][T17873] hid-generic 0103:0004:0000.001F: unknown main item tag 0x0 [ 697.351321][T17873] hid-generic 0103:0004:0000.001F: unknown main item tag 0x0 [ 697.358878][T17873] hid-generic 0103:0004:0000.001F: unknown main item tag 0x0 [ 697.366396][T17873] hid-generic 0103:0004:0000.001F: unknown main item tag 0x0 [ 697.373823][T17873] hid-generic 0103:0004:0000.001F: unknown main item tag 0x0 [ 697.381973][T17873] hid-generic 0103:0004:0000.001F: unknown main item tag 0x0 [ 697.389464][T17873] hid-generic 0103:0004:0000.001F: unknown main item tag 0x0 [ 697.449919][ T29] kauditd_printk_skb: 581 callbacks suppressed [ 697.449940][ T29] audit: type=1400 audit(1769642146.872:51165): avc: denied { create } for pid=1898 comm="syz.2.9735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 697.548350][ T29] audit: type=1400 audit(1769642146.912:51166): avc: denied { shutdown } for pid=1898 comm="syz.2.9735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 697.568211][ T29] audit: type=1400 audit(1769642146.912:51167): avc: denied { create } for pid=1898 comm="syz.2.9735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 697.588956][ T29] audit: type=1400 audit(1769642146.912:51168): avc: denied { create } for pid=1898 comm="syz.2.9735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 697.609582][ T29] audit: type=1400 audit(1769642146.912:51169): avc: denied { write } for pid=1898 comm="syz.2.9735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 697.630165][ T29] audit: type=1400 audit(1769642146.912:51170): avc: denied { read } for pid=1898 comm="syz.2.9735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 697.650570][ T29] audit: type=1400 audit(1769642146.922:51171): avc: denied { read } for pid=1898 comm="syz.2.9735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 697.665605][T17873] hid-generic 0103:0004:0000.001F: hidraw0: HID v0.02 Device [syz0] on syz1 [ 697.671150][ T29] audit: type=1400 audit(1769642146.932:51172): avc: denied { write } for pid=1898 comm="syz.2.9735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 697.700967][ T29] audit: type=1400 audit(1769642146.932:51173): avc: denied { getopt } for pid=1898 comm="syz.2.9735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 697.720675][ T29] audit: type=1400 audit(1769642146.932:51174): avc: denied { connect } for pid=1898 comm="syz.2.9735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 697.983528][ T1901] fido_id[1901]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 698.257408][ T1908] ip6_vti0 speed is unknown, defaulting to 1000 [ 698.287765][ T1909] option changes via remount are deprecated (pid=1907 comm=syz.8.9738) [ 698.348212][ T1910] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9738'. [ 698.361296][ T1912] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 698.406971][ T1910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 698.442715][ T1910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 698.699256][ T1916] siw: device registration error -23 [ 698.745094][ T1916] loop2: detected capacity change from 0 to 1024 [ 698.787109][ T1916] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 698.787109][ T1916] [ 698.797913][ T1916] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 699.106220][ T1927] loop6: detected capacity change from 0 to 128 [ 699.141332][ T1927] FAT-fs (loop6): Directory bread(block 524322) failed [ 699.159416][ T1927] FAT-fs (loop6): Directory bread(block 524323) failed [ 699.201547][ T1927] FAT-fs (loop6): Directory bread(block 524324) failed [ 699.228935][ T1927] FAT-fs (loop6): Directory bread(block 524325) failed [ 699.240229][T17873] hid-generic 0103:0004:0000.0020: hidraw0: HID v0.02 Device [syz0] on syz1 [ 699.242707][ T1927] FAT-fs (loop6): Directory bread(block 524326) failed [ 699.279344][ T1927] FAT-fs (loop6): Directory bread(block 524327) failed [ 699.316896][ T1927] FAT-fs (loop6): Directory bread(block 524328) failed [ 699.338083][ T1927] FAT-fs (loop6): Directory bread(block 524329) failed [ 699.460259][ T1927] FAT-fs (loop6): Directory bread(block 524322) failed [ 699.494997][ T1927] FAT-fs (loop6): Directory bread(block 524323) failed [ 699.627057][ T1937] fido_id[1937]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 699.990197][ T1948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9752'. [ 700.362242][ T1960] loop0: detected capacity change from 0 to 512 [ 700.387664][ T1960] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 700.441056][ T1960] EXT4-fs (loop0): 1 truncate cleaned up [ 700.476676][ T1960] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 700.658795][T26075] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.941728][ T1979] loop8: detected capacity change from 0 to 1024 [ 700.950419][ T1979] ext4: Unknown parameter 'security.ima' [ 701.014266][ T1984] batman_adv: batadv0: Removing interface: vlan3 [ 701.156716][ T1985] loop0: detected capacity change from 0 to 2048 [ 701.195269][ T1985] EXT4-fs: Ignoring removed mblk_io_submit option [ 701.266631][ T1985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 701.474313][ T1991] FAULT_INJECTION: forcing a failure. [ 701.474313][ T1991] name failslab, interval 1, probability 0, space 0, times 0 [ 701.487128][ T1991] CPU: 0 UID: 0 PID: 1991 Comm: syz.8.9763 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 701.487162][ T1991] Tainted: [W]=WARN [ 701.487169][ T1991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 701.487246][ T1991] Call Trace: [ 701.487253][ T1991] [ 701.487262][ T1991] __dump_stack+0x1d/0x30 [ 701.487369][ T1991] dump_stack_lvl+0x95/0xd0 [ 701.487392][ T1991] dump_stack+0x15/0x1b [ 701.487419][ T1991] should_fail_ex+0x263/0x280 [ 701.487514][ T1991] should_failslab+0x8c/0xb0 [ 701.487554][ T1991] __kmalloc_node_track_caller_noprof+0xb8/0x590 [ 701.487628][ T1991] ? sidtab_sid2str_get+0xa0/0x130 [ 701.487738][ T1991] ? skb_put+0xa9/0xf0 [ 701.487857][ T1991] kmemdup_noprof+0x2b/0x70 [ 701.487879][ T1991] sidtab_sid2str_get+0xa0/0x130 [ 701.487913][ T1991] security_sid_to_context_core+0x1eb/0x2e0 [ 701.487941][ T1991] security_sid_to_context+0x27/0x40 [ 701.488000][ T1991] avc_audit_post_callback+0x9d/0x520 [ 701.488043][ T1991] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 701.488121][ T1991] common_lsm_audit+0x1ba/0x230 [ 701.488186][ T1991] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 701.488301][ T1991] slow_avc_audit+0x14c/0x190 [ 701.488396][ T1991] avc_has_perm+0x144/0x190 [ 701.488452][ T1991] selinux_socket_sendmsg+0x192/0x1c0 [ 701.488501][ T1991] security_socket_sendmsg+0x44/0x80 [ 701.488601][ T1991] ____sys_sendmsg+0x361/0x600 [ 701.488676][ T1991] ___sys_sendmsg+0x195/0x1e0 [ 701.488709][ T1991] __x64_sys_sendmsg+0xd4/0x160 [ 701.488746][ T1991] x64_sys_call+0x17ba/0x3000 [ 701.488799][ T1991] do_syscall_64+0xc0/0x2a0 [ 701.488837][ T1991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.488918][ T1991] RIP: 0033:0x7f304d4eaeb9 [ 701.488936][ T1991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.488959][ T1991] RSP: 002b:00007f304bf47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 701.488986][ T1991] RAX: ffffffffffffffda RBX: 00007f304d765fa0 RCX: 00007f304d4eaeb9 [ 701.489006][ T1991] RDX: 0000000000000800 RSI: 0000200000001ac0 RDI: 0000000000000007 [ 701.489063][ T1991] RBP: 00007f304bf47090 R08: 0000000000000000 R09: 0000000000000000 [ 701.489080][ T1991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.489098][ T1991] R13: 00007f304d766038 R14: 00007f304d765fa0 R15: 00007ffd1ecdbb28 [ 701.489124][ T1991] [ 701.786703][ T1998] netlink: 'syz.5.9766': attribute type 21 has an invalid length. [ 701.794684][ T1998] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9766'. [ 701.946173][T26075] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.997962][T31979] hid-generic 0103:0004:0000.0021: hidraw0: HID v0.02 Device [syz0] on syz1 [ 702.232085][ T2007] loop0: detected capacity change from 0 to 512 [ 702.297317][ T2007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 702.315741][ T2004] fido_id[2004]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 702.348926][ T2007] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 702.369244][ T2010] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9772'. [ 702.435400][ T2010] vlan2: entered promiscuous mode [ 702.449580][ T2013] loop6: detected capacity change from 0 to 512 [ 702.458893][ T29] kauditd_printk_skb: 709 callbacks suppressed [ 702.458909][ T29] audit: type=1400 audit(1769642151.882:51884): avc: denied { prog_load } for pid=2014 comm="syz.5.9771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 702.484308][ T29] audit: type=1400 audit(1769642151.882:51885): avc: denied { bpf } for pid=2014 comm="syz.5.9771" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 702.505040][ T29] audit: type=1400 audit(1769642151.882:51886): avc: denied { perfmon } for pid=2014 comm="syz.5.9771" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 702.538198][ T2007] netlink: 260 bytes leftover after parsing attributes in process `syz.0.9769'. [ 702.585026][ T2016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9773'. [ 702.629388][ T2013] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 702.636172][ T29] audit: type=1400 audit(1769642151.882:51887): avc: denied { mounton } for pid=2003 comm="syz.6.9770" path="/255/file2" dev="tmpfs" ino=1356 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 702.664691][ T29] audit: type=1400 audit(1769642151.892:51888): avc: denied { create } for pid=2006 comm="syz.0.9769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 702.685024][ T29] audit: type=1400 audit(1769642151.902:51889): avc: denied { write } for pid=2015 comm="syz.2.9773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 702.697343][ T2013] ext4 filesystem being mounted at /255/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 702.705773][ T29] audit: type=1400 audit(1769642151.932:51890): avc: denied { ioctl } for pid=2006 comm="syz.0.9769" path="socket:[114970]" dev="sockfs" ino=114970 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 702.705812][ T29] audit: type=1400 audit(1769642151.962:51891): avc: denied { write } for pid=2006 comm="syz.0.9769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 702.705845][ T29] audit: type=1400 audit(1769642151.962:51892): avc: denied { nlmsg_write } for pid=2006 comm="syz.0.9769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 702.705964][ T29] audit: type=1400 audit(1769642152.042:51893): avc: denied { read write } for pid=25374 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 702.825667][T26075] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.024604][T29935] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 703.036445][ T2024] loop2: detected capacity change from 0 to 128 [ 703.563254][ T2041] loop2: detected capacity change from 0 to 2048 [ 703.620828][ T2041] EXT4-fs: Ignoring removed mblk_io_submit option [ 703.760215][ T2041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.917004][T25374] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.045194][ T2052] loop0: detected capacity change from 0 to 128 [ 704.491196][ T3445] bio_check_eod: 102 callbacks suppressed [ 704.491268][ T3445] kworker/u8:7: attempt to access beyond end of device [ 704.491268][ T3445] loop0: rw=1, sector=153, nr_sectors = 8 limit=128 [ 704.524796][ T2066] Cannot find map_set index 0 as target [ 704.577600][ T3445] kworker/u8:7: attempt to access beyond end of device [ 704.577600][ T3445] loop0: rw=1, sector=169, nr_sectors = 8 limit=128 [ 704.629540][ T3445] kworker/u8:7: attempt to access beyond end of device [ 704.629540][ T3445] loop0: rw=1, sector=185, nr_sectors = 8 limit=128 [ 704.647848][ T3445] kworker/u8:7: attempt to access beyond end of device [ 704.647848][ T3445] loop0: rw=1, sector=201, nr_sectors = 8 limit=128 [ 704.686037][ T3445] kworker/u8:7: attempt to access beyond end of device [ 704.686037][ T3445] loop0: rw=1, sector=217, nr_sectors = 8 limit=128 [ 704.725149][ T3445] kworker/u8:7: attempt to access beyond end of device [ 704.725149][ T3445] loop0: rw=1, sector=233, nr_sectors = 8 limit=128 [ 704.766771][ T3445] kworker/u8:7: attempt to access beyond end of device [ 704.766771][ T3445] loop0: rw=1, sector=249, nr_sectors = 8 limit=128 [ 704.811984][ T3445] kworker/u8:7: attempt to access beyond end of device [ 704.811984][ T3445] loop0: rw=1, sector=265, nr_sectors = 8 limit=128 [ 704.856391][ T3445] kworker/u8:7: attempt to access beyond end of device [ 704.856391][ T3445] loop0: rw=1, sector=281, nr_sectors = 8 limit=128 [ 704.877326][ T3445] kworker/u8:7: attempt to access beyond end of device [ 704.877326][ T3445] loop0: rw=1, sector=297, nr_sectors = 8 limit=128 [ 705.084591][ T2083] loop8: detected capacity change from 0 to 2048 [ 705.353620][ T2090] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9796'. [ 705.388835][ T2090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9796'. [ 705.407124][ T2090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 705.609749][ T2095] netlink: 84 bytes leftover after parsing attributes in process `syz.0.9799'. [ 705.618907][ T2095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9799'. [ 706.121998][ T2109] netlink: 'syz.2.9801': attribute type 1 has an invalid length. [ 706.256641][ T2113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9806'. [ 707.015952][ T2126] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9810'. [ 707.061293][ T2108] syz.8.9804 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 707.075657][ T2108] CPU: 0 UID: 0 PID: 2108 Comm: syz.8.9804 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 707.075698][ T2108] Tainted: [W]=WARN [ 707.075707][ T2108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 707.075746][ T2108] Call Trace: [ 707.075754][ T2108] [ 707.075762][ T2108] __dump_stack+0x1d/0x30 [ 707.075859][ T2108] dump_stack_lvl+0x95/0xd0 [ 707.075889][ T2108] dump_stack+0x15/0x1b [ 707.075913][ T2108] dump_header+0x80/0x240 [ 707.075940][ T2108] oom_kill_process+0x295/0x350 [ 707.076023][ T2108] out_of_memory+0x97d/0xb80 [ 707.076057][ T2108] try_charge_memcg+0x62e/0xa10 [ 707.076093][ T2108] obj_cgroup_charge_pages+0x23/0xc0 [ 707.076168][ T2108] __memcg_kmem_charge_page+0x9e/0x170 [ 707.076213][ T2108] __alloc_frozen_pages_noprof+0x18a/0x350 [ 707.076297][ T2108] alloc_pages_mpol+0xb3/0x260 [ 707.076342][ T2108] alloc_pages_noprof+0x8f/0x130 [ 707.076385][ T2108] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 707.076498][ T2108] __kvmalloc_node_noprof+0x471/0x680 [ 707.076536][ T2108] ? ip_set_alloc+0x24/0x30 [ 707.076617][ T2108] ? ip_set_alloc+0x24/0x30 [ 707.076683][ T2108] ip_set_alloc+0x24/0x30 [ 707.076724][ T2108] hash_netiface_create+0x282/0x740 [ 707.076767][ T2108] ? __pfx_hash_netiface_create+0x10/0x10 [ 707.076813][ T2108] ip_set_create+0x3cf/0x970 [ 707.076871][ T2108] ? __nla_parse+0x40/0x60 [ 707.076919][ T2108] nfnetlink_rcv_msg+0x509/0x5d0 [ 707.077001][ T2108] netlink_rcv_skb+0x123/0x220 [ 707.077043][ T2108] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 707.077092][ T2108] nfnetlink_rcv+0x167/0x1720 [ 707.077212][ T2108] ? __kfree_skb+0x109/0x150 [ 707.077260][ T2108] ? nlmon_xmit+0x4f/0x60 [ 707.077303][ T2108] ? consume_skb+0x49/0x140 [ 707.077345][ T2108] ? nlmon_xmit+0x4f/0x60 [ 707.077527][ T2108] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 707.077578][ T2108] ? __dev_queue_xmit+0x139a/0x1f20 [ 707.077633][ T2108] ? __dev_queue_xmit+0x148/0x1f20 [ 707.077712][ T2108] ? ref_tracker_free+0x37d/0x3e0 [ 707.077762][ T2108] ? __netlink_deliver_tap+0x4dc/0x500 [ 707.077834][ T2108] netlink_unicast+0x5c0/0x690 [ 707.077879][ T2108] netlink_sendmsg+0x5c8/0x6f0 [ 707.077909][ T2108] ? __pfx_netlink_sendmsg+0x10/0x10 [ 707.078018][ T2108] ____sys_sendmsg+0x5af/0x600 [ 707.078049][ T2108] ___sys_sendmsg+0x195/0x1e0 [ 707.078093][ T2108] __x64_sys_sendmsg+0xd4/0x160 [ 707.078202][ T2108] x64_sys_call+0x17ba/0x3000 [ 707.078235][ T2108] do_syscall_64+0xc0/0x2a0 [ 707.078283][ T2108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.078341][ T2108] RIP: 0033:0x7f304d4eaeb9 [ 707.078370][ T2108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 707.078394][ T2108] RSP: 002b:00007f304bf47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 707.078419][ T2108] RAX: ffffffffffffffda RBX: 00007f304d765fa0 RCX: 00007f304d4eaeb9 [ 707.078437][ T2108] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 707.078526][ T2108] RBP: 00007f304d558c1f R08: 0000000000000000 R09: 0000000000000000 [ 707.078539][ T2108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 707.078552][ T2108] R13: 00007f304d766038 R14: 00007f304d765fa0 R15: 00007ffd1ecdbb28 [ 707.078576][ T2108] [ 707.078624][ T2108] memory: usage 307092kB, limit 307200kB, failcnt 405 [ 707.405550][ T2108] memory+swap: usage 307092kB, limit 9007199254740988kB, failcnt 0 [ 707.413513][ T2108] kmem: usage 306868kB, limit 9007199254740988kB, failcnt 0 [ 707.420871][ T2108] Memory cgroup stats for /syz8: [ 707.464745][ T2108] cache 4096 [ 707.473038][ T2108] rss 192512 [ 707.476318][ T2108] shmem 0 [ 707.479312][ T2108] mapped_file 0 [ 707.482787][ T2108] dirty 0 [ 707.485762][ T2108] writeback 0 [ 707.489133][ T2108] workingset_refault_anon 215 [ 707.493874][ T2108] workingset_refault_file 290 [ 707.498597][ T2108] swap 0 [ 707.501472][ T2108] swapcached 0 [ 707.504985][ T2108] pgpgin 90589 [ 707.507253][ T29] kauditd_printk_skb: 554 callbacks suppressed [ 707.507312][ T29] audit: type=1400 audit(1769642156.932:52448): avc: denied { module_request } for pid=2131 comm="syz.5.9813" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 707.508376][ T2108] pgpgout 90538 [ 707.540402][ T2108] pgfault 108221 [ 707.543981][ T2108] pgmajfault 109 [ 707.547589][ T2108] inactive_anon 155648 [ 707.551691][ T2108] active_anon 36864 [ 707.555607][ T2108] inactive_file 16384 [ 707.559613][ T2108] active_file 0 [ 707.563091][ T2108] unevictable 0 [ 707.566605][ T2108] hierarchical_memory_limit 314572800 [ 707.572103][ T2108] hierarchical_memsw_limit 9223372036854771712 [ 707.578309][ T2108] total_cache 4096 [ 707.582119][ T2108] total_rss 192512 [ 707.586527][ T2108] total_shmem 0 [ 707.590013][ T2108] total_mapped_file 0 [ 707.594156][ T2108] total_dirty 0 [ 707.597681][ T2108] total_writeback 0 [ 707.601551][ T2108] total_workingset_refault_anon 215 [ 707.606865][ T2108] total_workingset_refault_file 290 [ 707.612078][ T2108] total_swap 0 [ 707.615515][ T2108] total_swapcached 0 [ 707.619424][ T2108] total_pgpgin 90589 [ 707.623410][ T2108] total_pgpgout 90538 [ 707.627443][ T2108] total_pgfault 108221 [ 707.631627][ T2108] total_pgmajfault 109 [ 707.635752][ T2108] total_inactive_anon 155648 [ 707.640430][ T2108] total_active_anon 36864 [ 707.644822][ T2108] total_inactive_file 16384 [ 707.649374][ T2108] total_active_file 0 [ 707.653372][ T2108] total_unevictable 0 [ 707.657402][ T2108] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.9804,pid=2107,uid=0 [ 707.672064][ T2108] Memory cgroup out of memory: Killed process 2108 (syz.8.9804) total-vm:96052kB, anon-rss:1332kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 707.713740][ T29] audit: type=1400 audit(1769642157.132:52449): avc: denied { sys_module } for pid=2131 comm="syz.5.9813" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 707.735724][ T29] audit: type=1400 audit(1769642157.132:52450): avc: denied { module_request } for pid=2131 comm="syz.5.9813" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 707.778066][ T29] audit: type=1400 audit(1769642157.202:52451): avc: denied { read write } for pid=29935 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 707.803272][ T29] audit: type=1400 audit(1769642157.202:52452): avc: denied { read write open } for pid=29935 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 708.020392][ T2119] loop0: detected capacity change from 0 to 2048 [ 708.056510][ T29] audit: type=1400 audit(1769642157.262:52453): avc: denied { ioctl } for pid=29935 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 708.083031][ T29] audit: type=1400 audit(1769642157.332:52454): avc: denied { read write } for pid=25374 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 708.108137][ T29] audit: type=1400 audit(1769642157.332:52455): avc: denied { read write open } for pid=25374 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 708.133451][ T29] audit: type=1400 audit(1769642157.332:52456): avc: denied { ioctl } for pid=25374 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 708.159986][ T29] audit: type=1400 audit(1769642157.362:52457): avc: denied { read write } for pid=28885 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 708.246836][ T2119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 708.394095][ T2151] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9818'. [ 708.428725][T26075] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.611798][ T2155] loop6: detected capacity change from 0 to 128 [ 708.776549][ T2155] netlink: 108 bytes leftover after parsing attributes in process `syz.6.9819'. [ 709.463205][ T2179] ieee802154 phy0 wpan0: encryption failed: -22 [ 709.623883][ T2186] netlink: 'syz.8.9827': attribute type 1 has an invalid length. [ 709.732204][ T2189] bond1: (slave geneve2): making interface the new active one [ 709.740311][ T2189] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 709.749335][T15806] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 709.823641][T15806] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 709.905820][T15806] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 709.914711][T15806] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 710.647272][ T2222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9835'. [ 710.744028][ T2225] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 710.751345][ T2225] IPv6: NLM_F_CREATE should be set when creating new route [ 710.827174][ T2228] netlink: 'syz.8.9838': attribute type 10 has an invalid length. [ 710.835098][ T2228] netlink: 2 bytes leftover after parsing attributes in process `syz.8.9838'. [ 710.855160][ T2228] veth0_vlan: entered allmulticast mode [ 710.997203][ T2231] loop2: detected capacity change from 0 to 512 [ 711.059457][ T2231] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 711.233538][ T2233] netlink: 'syz.2.9840': attribute type 2 has an invalid length. [ 711.242076][ T2233] netlink: 'syz.2.9840': attribute type 1 has an invalid length. [ 711.733098][ T2254] loop6: detected capacity change from 0 to 128 [ 712.626223][ T29] kauditd_printk_skb: 549 callbacks suppressed [ 712.626242][ T29] audit: type=1400 audit(1769642162.042:53007): avc: denied { prog_load } for pid=2268 comm="syz.0.9849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 712.652411][ T29] audit: type=1400 audit(1769642162.042:53008): avc: denied { bpf } for pid=2268 comm="syz.0.9849" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 712.673083][ T29] audit: type=1400 audit(1769642162.042:53009): avc: denied { perfmon } for pid=2268 comm="syz.0.9849" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 712.694816][ T29] audit: type=1400 audit(1769642162.042:53010): avc: denied { perfmon } for pid=2268 comm="syz.0.9849" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 712.716667][ T29] audit: type=1400 audit(1769642162.042:53011): avc: denied { perfmon } for pid=2268 comm="syz.0.9849" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 712.737683][ T29] audit: type=1400 audit(1769642162.052:53012): avc: denied { perfmon } for pid=2268 comm="syz.0.9849" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 712.759522][ T29] audit: type=1400 audit(1769642162.052:53013): avc: denied { prog_load } for pid=2268 comm="syz.0.9849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 712.778701][ T29] audit: type=1400 audit(1769642162.052:53014): avc: denied { bpf } for pid=2268 comm="syz.0.9849" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 713.150119][ T29] audit: type=1400 audit(1769642162.052:53015): avc: denied { bpf } for pid=2268 comm="syz.0.9849" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 713.171621][ T29] audit: type=1400 audit(1769642162.372:53016): avc: denied { read write } for pid=26075 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 713.556997][ T2283] loop6: detected capacity change from 0 to 1024 [ 713.595196][ T2283] EXT4-fs: Ignoring removed orlov option [ 713.642985][ T2283] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c118, mo2=0102] [ 713.706497][ T2283] System zones: 0-1, 3-12 [ 713.755903][ T2283] EXT4-fs (loop6): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 713.790287][ T2274] loop0: detected capacity change from 0 to 8192 [ 713.856362][ T2274] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9850'. [ 713.871371][ T2275] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9850'. [ 713.917825][T29935] EXT4-fs (loop6): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 713.933711][ T2291] netlink: 31 bytes leftover after parsing attributes in process `syz.0.9850'. [ 714.070506][ T2296] tipc: Started in network mode [ 714.075459][ T2296] tipc: Node identity 4, cluster identity 4711 [ 714.081641][ T2296] tipc: Node number set to 4 [ 714.808353][ T2325] netlink: 'syz.5.9859': attribute type 1 has an invalid length. [ 714.963747][ T2330] FAULT_INJECTION: forcing a failure. [ 714.963747][ T2330] name failslab, interval 1, probability 0, space 0, times 0 [ 714.976524][ T2330] CPU: 0 UID: 0 PID: 2330 Comm: syz.2.9861 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 714.976555][ T2330] Tainted: [W]=WARN [ 714.976562][ T2330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 714.976654][ T2330] Call Trace: [ 714.976661][ T2330] [ 714.976669][ T2330] __dump_stack+0x1d/0x30 [ 714.976694][ T2330] dump_stack_lvl+0x95/0xd0 [ 714.976714][ T2330] dump_stack+0x15/0x1b [ 714.976738][ T2330] should_fail_ex+0x263/0x280 [ 714.976817][ T2330] should_failslab+0x8c/0xb0 [ 714.976845][ T2330] __kmalloc_node_track_caller_noprof+0xb8/0x590 [ 714.976880][ T2330] ? sidtab_sid2str_get+0xa0/0x130 [ 714.977015][ T2330] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 714.977055][ T2330] kmemdup_noprof+0x2b/0x70 [ 714.977075][ T2330] sidtab_sid2str_get+0xa0/0x130 [ 714.977136][ T2330] security_sid_to_context_core+0x1eb/0x2e0 [ 714.977234][ T2330] security_sid_to_context+0x27/0x40 [ 714.977321][ T2330] avc_audit_post_callback+0x10f/0x520 [ 714.977402][ T2330] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 714.977508][ T2330] common_lsm_audit+0x1ba/0x230 [ 714.977531][ T2330] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 714.977565][ T2330] slow_avc_audit+0x14c/0x190 [ 714.977638][ T2330] avc_has_perm+0x144/0x190 [ 714.977689][ T2330] selinux_socket_sendmsg+0x192/0x1c0 [ 714.977716][ T2330] security_socket_sendmsg+0x44/0x80 [ 714.977762][ T2330] ____sys_sendmsg+0x361/0x600 [ 714.977790][ T2330] ___sys_sendmsg+0x195/0x1e0 [ 714.977881][ T2330] __x64_sys_sendmsg+0xd4/0x160 [ 714.977909][ T2330] x64_sys_call+0x17ba/0x3000 [ 714.977984][ T2330] do_syscall_64+0xc0/0x2a0 [ 714.978016][ T2330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.978127][ T2330] RIP: 0033:0x7fb5791faeb9 [ 714.978148][ T2330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.978167][ T2330] RSP: 002b:00007fb577c36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 714.978248][ T2330] RAX: ffffffffffffffda RBX: 00007fb579476090 RCX: 00007fb5791faeb9 [ 714.978267][ T2330] RDX: 0000000000000800 RSI: 0000200000001ac0 RDI: 0000000000000007 [ 714.978315][ T2330] RBP: 00007fb577c36090 R08: 0000000000000000 R09: 0000000000000000 [ 714.978416][ T2330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.978433][ T2330] R13: 00007fb579476128 R14: 00007fb579476090 R15: 00007ffe56fa52c8 [ 714.978476][ T2330] [ 715.281108][ T2334] FAULT_INJECTION: forcing a failure. [ 715.281108][ T2334] name failslab, interval 1, probability 0, space 0, times 0 [ 715.293830][ T2334] CPU: 0 UID: 0 PID: 2334 Comm: syz.6.9862 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 715.293865][ T2334] Tainted: [W]=WARN [ 715.293872][ T2334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 715.293887][ T2334] Call Trace: [ 715.293897][ T2334] [ 715.293908][ T2334] __dump_stack+0x1d/0x30 [ 715.293939][ T2334] dump_stack_lvl+0x95/0xd0 [ 715.294019][ T2334] dump_stack+0x15/0x1b [ 715.294041][ T2334] should_fail_ex+0x263/0x280 [ 715.294075][ T2334] should_failslab+0x8c/0xb0 [ 715.294124][ T2334] kmem_cache_alloc_noprof+0x68/0x490 [ 715.294219][ T2334] ? skb_clone+0x151/0x1f0 [ 715.294243][ T2334] skb_clone+0x151/0x1f0 [ 715.294264][ T2334] __netlink_deliver_tap+0x2c9/0x500 [ 715.294450][ T2334] netlink_unicast+0x66b/0x690 [ 715.294562][ T2334] netlink_sendmsg+0x5c8/0x6f0 [ 715.294633][ T2334] ? __pfx_netlink_sendmsg+0x10/0x10 [ 715.294658][ T2334] ____sys_sendmsg+0x5af/0x600 [ 715.294704][ T2334] ___sys_sendmsg+0x195/0x1e0 [ 715.294736][ T2334] __x64_sys_sendmsg+0xd4/0x160 [ 715.294803][ T2334] x64_sys_call+0x17ba/0x3000 [ 715.294842][ T2334] do_syscall_64+0xc0/0x2a0 [ 715.294903][ T2334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.294936][ T2334] RIP: 0033:0x7f1f0734aeb9 [ 715.294958][ T2334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.295033][ T2334] RSP: 002b:00007f1f05da7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 715.295061][ T2334] RAX: ffffffffffffffda RBX: 00007f1f075c5fa0 RCX: 00007f1f0734aeb9 [ 715.295081][ T2334] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 715.295176][ T2334] RBP: 00007f1f05da7090 R08: 0000000000000000 R09: 0000000000000000 [ 715.295194][ T2334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.295211][ T2334] R13: 00007f1f075c6038 R14: 00007f1f075c5fa0 R15: 00007ffd49623458 [ 715.295239][ T2334] [ 715.491621][ T2334] netlink: 'syz.6.9862': attribute type 27 has an invalid length. [ 715.705284][ T2337] FAULT_INJECTION: forcing a failure. [ 715.705284][ T2337] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 715.718700][ T2337] CPU: 0 UID: 0 PID: 2337 Comm: syz.8.9863 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 715.718757][ T2337] Tainted: [W]=WARN [ 715.718766][ T2337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 715.718781][ T2337] Call Trace: [ 715.718788][ T2337] [ 715.718795][ T2337] __dump_stack+0x1d/0x30 [ 715.718820][ T2337] dump_stack_lvl+0x95/0xd0 [ 715.718920][ T2337] dump_stack+0x15/0x1b [ 715.718945][ T2337] should_fail_ex+0x263/0x280 [ 715.718976][ T2337] should_fail_alloc_page+0xf2/0x100 [ 715.719087][ T2337] __alloc_frozen_pages_noprof+0x108/0x350 [ 715.719135][ T2337] alloc_pages_mpol+0xb3/0x260 [ 715.719174][ T2337] vma_alloc_folio_noprof+0x1a9/0x300 [ 715.719217][ T2337] do_wp_page+0xf6d/0x2560 [ 715.719269][ T2337] ? css_rstat_updated+0xbb/0x280 [ 715.719355][ T2337] ? __rcu_read_lock+0x36/0x50 [ 715.719393][ T2337] handle_mm_fault+0x8c7/0x3030 [ 715.719435][ T2337] ? vma_start_read+0x1c7/0x2c0 [ 715.719466][ T2337] do_user_addr_fault+0x62f/0x1050 [ 715.719510][ T2337] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 715.719534][ T2337] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 715.719576][ T2337] ? irqentry_exit+0x3c/0x510 [ 715.719676][ T2337] exc_page_fault+0x62/0xa0 [ 715.719713][ T2337] asm_exc_page_fault+0x26/0x30 [ 715.719764][ T2337] RIP: 0033:0x7f304d3a27e3 [ 715.719782][ T2337] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 715.719807][ T2337] RSP: 002b:00007f304bf463c0 EFLAGS: 00010202 [ 715.719829][ T2337] RAX: 00000000000001c0 RBX: 00007f304bf46480 RCX: 00007f3043b27000 [ 715.719910][ T2337] RDX: 00007f304bf46620 RSI: 0000000000000071 RDI: 00007f304bf46520 [ 715.719924][ T2337] RBP: 00000000000000bd R08: 0000000000000009 R09: 00000000000001a9 [ 715.720011][ T2337] R10: 00000000000001d2 R11: 00007f304bf46480 R12: 0000000000000001 [ 715.720029][ T2337] R13: 00007f304d597900 R14: 0000000000000002 R15: 00007f304bf46520 [ 715.720053][ T2337] [ 715.720065][ T2337] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 715.944154][T14249] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.954273][T14249] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.977641][ T2337] loop8: detected capacity change from 0 to 2048 [ 716.004639][T14249] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.013696][T14249] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.056536][ T2337] GPT:first_usable_lbas don't match. [ 716.061892][ T2337] GPT:34 != 290 [ 716.065473][ T2337] GPT: Use GNU Parted to correct GPT errors. [ 716.071644][ T2337] loop8: p1 p2 p3 [ 716.356210][ T2345] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.9866' sets config #1 [ 716.368556][ T2349] bridge0: port 3(macvtap1) entered blocking state [ 716.375236][ T2349] bridge0: port 3(macvtap1) entered disabled state [ 716.429489][ T2349] macvtap1: entered allmulticast mode [ 716.435141][ T2349] bridge0: entered allmulticast mode [ 716.476573][ T2352] netlink: 'syz.8.9868': attribute type 27 has an invalid length. [ 716.498285][ T2349] macvtap1: left allmulticast mode [ 716.503597][ T2349] bridge0: left allmulticast mode [ 716.528751][T32763] udevd[32763]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 716.537460][T19621] udevd[19621]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 716.559919][ T2338] loop0: detected capacity change from 0 to 128 [ 716.569745][ T7426] udevd[7426]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 716.731777][ T2352] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.739066][ T2352] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.843154][ T2359] netlink: 'syz.2.9867': attribute type 1 has an invalid length. [ 716.876672][ T2358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=2358 comm=syz.6.9870 [ 716.916340][ T2352] veth0_vlan: left allmulticast mode [ 716.952461][ T3445] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.961513][ T3445] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.971148][ T3445] netdevsim netdevsim8 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 717.067664][ T3445] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.076651][ T3445] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.086379][ T3445] netdevsim netdevsim8 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 717.158518][ T2365] loop0: detected capacity change from 0 to 512 [ 717.201153][ T3445] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.210919][ T3445] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.220002][ T3445] netdevsim netdevsim8 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 717.261394][ T2365] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 717.315260][T15801] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.324193][T15801] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.333142][T15801] netdevsim netdevsim8 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 717.345466][ T2365] ext4 filesystem being mounted at /467/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 717.443124][T17873] hid_parser_main: 26 callbacks suppressed [ 717.443145][T17873] hid-generic 0103:0004:0000.0022: unknown main item tag 0x0 [ 717.457287][T17873] hid-generic 0103:0004:0000.0022: unknown main item tag 0x0 [ 717.464717][T17873] hid-generic 0103:0004:0000.0022: unknown main item tag 0x0 [ 717.472218][T17873] hid-generic 0103:0004:0000.0022: unknown main item tag 0x0 [ 717.480353][T17873] hid-generic 0103:0004:0000.0022: unknown main item tag 0x0 [ 717.487805][T17873] hid-generic 0103:0004:0000.0022: unknown main item tag 0x0 [ 717.495268][T17873] hid-generic 0103:0004:0000.0022: unknown main item tag 0x0 [ 717.502679][T17873] hid-generic 0103:0004:0000.0022: unknown main item tag 0x0 [ 717.510939][T17873] hid-generic 0103:0004:0000.0022: unknown main item tag 0x0 [ 717.518393][T17873] hid-generic 0103:0004:0000.0022: unknown main item tag 0x0 [ 717.538895][ T2365] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9872'. [ 717.552489][T17873] hid-generic 0103:0004:0000.0022: hidraw0: HID v0.02 Device [syz0] on syz1 [ 717.664979][ T29] kauditd_printk_skb: 361 callbacks suppressed [ 717.664997][ T29] audit: type=1400 audit(1769642167.082:53378): avc: denied { unmount } for pid=26075 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 717.717404][T26075] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.728990][ T2385] netlink: 'syz.5.9875': attribute type 1 has an invalid length. [ 717.778281][ T29] audit: type=1400 audit(1769642167.122:53379): avc: denied { open } for pid=2366 comm="syz.6.9873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 717.797742][ T29] audit: type=1400 audit(1769642167.122:53380): avc: denied { perfmon } for pid=2366 comm="syz.6.9873" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 717.818833][ T29] audit: type=1400 audit(1769642167.122:53381): avc: denied { kernel } for pid=2366 comm="syz.6.9873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 717.838510][ T29] audit: type=1400 audit(1769642167.122:53382): avc: denied { perfmon } for pid=2366 comm="syz.6.9873" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 717.859703][ T29] audit: type=1400 audit(1769642167.172:53383): avc: denied { read write } for pid=25374 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 717.884187][ T29] audit: type=1400 audit(1769642167.172:53384): avc: denied { read write open } for pid=25374 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 717.909503][ T29] audit: type=1400 audit(1769642167.172:53385): avc: denied { ioctl } for pid=25374 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 718.001415][ T2383] fido_id[2383]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 718.032754][ T29] audit: type=1400 audit(1769642167.372:53386): avc: denied { read write } for pid=26075 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 718.057315][ T29] audit: type=1400 audit(1769642167.372:53387): avc: denied { read write open } for pid=26075 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 718.159578][ T2390] loop2: detected capacity change from 0 to 736 [ 718.222926][ T2390] iso9660: Unknown parameter '' [ 718.283381][ T2390] netlink: 'syz.2.9876': attribute type 1 has an invalid length. [ 718.381011][ T2394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9877'. [ 718.479862][ T2398] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9877'. [ 718.593739][T14249] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.602275][T14249] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.614316][T14249] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.636254][T14249] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.169165][ T2416] xt_cluster: you have exceeded the maximum number of cluster nodes (3131 > 32) [ 719.337797][ T2420] loop0: detected capacity change from 0 to 512 [ 719.447555][ T2420] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 719.502401][ T2420] ext4 filesystem being mounted at /469/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 719.680671][T26075] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.126447][ T2441] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9889'. [ 721.061974][ T2465] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 721.070476][ T2465] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 721.294317][ T2467] loop6: detected capacity change from 0 to 512 [ 721.366188][ T2467] EXT4-fs: Ignoring removed nomblk_io_submit option [ 721.372874][ T2467] EXT4-fs: Ignoring removed bh option [ 721.428613][ T2467] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 721.481707][ T2475] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9904'. [ 721.491746][ T2467] ext4 filesystem being mounted at /282/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 721.547816][ T2478] loop2: detected capacity change from 0 to 256 [ 721.563085][ T2467] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz.6.9900: iget: bad i_size value: 2533274857506816 [ 721.645024][ T2482] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz.6.9900: iget: bad i_size value: 2533274857506816 [ 721.690595][ T2467] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz.6.9900: iget: bad i_size value: 2533274857506816 [ 721.817532][T29935] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.989668][ T2486] netlink: 'syz.2.9906': attribute type 11 has an invalid length. [ 721.997575][ T2486] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9906'. [ 722.115906][ T2488] bond4 (unregistering): Released all slaves [ 722.318215][ T2494] loop6: detected capacity change from 0 to 1024 [ 722.390907][ T2494] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 722.453465][ T2494] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 722.568308][ T2494] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.9908: bg 0: block 112: padding at end of block bitmap is not set [ 722.666259][ T2494] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm syz.6.9908: lblock 0 mapped to illegal pblock 0 (length 1) [ 722.680037][ T29] kauditd_printk_skb: 592 callbacks suppressed [ 722.680053][ T29] audit: type=1326 audit(1769642172.092:53980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2492 comm="syz.6.9908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1f0734aeb9 code=0x7ffc0000 [ 722.724264][ T2504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9911'. [ 722.741949][ T2502] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.9908: lblock 0 mapped to illegal pblock 0 (length 1) [ 722.755325][ T29] audit: type=1400 audit(1769642172.132:53981): avc: denied { read write } for pid=2492 comm="syz.6.9908" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 722.778220][ T29] audit: type=1400 audit(1769642172.132:53982): avc: denied { read write open } for pid=2492 comm="syz.6.9908" path="/283/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 722.802375][ T29] audit: type=1400 audit(1769642172.132:53983): avc: denied { bpf } for pid=2503 comm="syz.5.9911" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 722.823063][ T29] audit: type=1400 audit(1769642172.132:53984): avc: denied { map } for pid=2492 comm="syz.6.9908" path="/283/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 722.846381][ T29] audit: type=1400 audit(1769642172.132:53985): avc: denied { read write execute } for pid=2492 comm="syz.6.9908" path="/283/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 722.870846][ T29] audit: type=1400 audit(1769642172.132:53986): avc: denied { prog_run } for pid=2503 comm="syz.5.9911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 722.890479][ T29] audit: type=1400 audit(1769642172.142:53987): avc: denied { ioctl } for pid=26075 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 722.916674][ T29] audit: type=1400 audit(1769642172.142:53988): avc: denied { write } for pid=2503 comm="syz.5.9911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 722.936213][ T29] audit: type=1400 audit(1769642172.142:53989): avc: denied { ioctl } for pid=25374 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 722.995492][ T2492] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.9908: lblock 0 mapped to illegal pblock 0 (length 1) [ 723.077402][ T2494] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.9908: lblock 0 mapped to illegal pblock 0 (length 1) [ 723.078147][ T2510] loop2: detected capacity change from 0 to 164 [ 723.101698][ T2506] bond4 (unregistering): Released all slaves [ 723.108252][ T2510] ISOFS: unable to read i-node block [ 723.113591][ T2510] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 723.138087][ T2494] EXT4-fs error (device loop6): ext4_ext_remove_space:2955: inode #15: comm syz.6.9908: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 723.194231][ T2510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.216296][ T2510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.261591][ T2492] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.9908: lblock 0 mapped to illegal pblock 0 (length 1) [ 723.322960][ T2502] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.9908: lblock 0 mapped to illegal pblock 0 (length 1) [ 723.398788][ T2492] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.9908: lblock 0 mapped to illegal pblock 0 (length 1) [ 723.464036][ T2502] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.9908: lblock 0 mapped to illegal pblock 0 (length 1) [ 723.915310][ T2523] syzkaller0: entered promiscuous mode [ 723.920861][ T2523] syzkaller0: entered allmulticast mode [ 723.998214][ T2525] netlink: 'syz.2.9919': attribute type 4 has an invalid length. [ 724.006788][ T2525] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.9919'. [ 724.250220][ T2528] futex_wake_op: syz.5.9920 tries to shift op by 32; fix this program [ 724.502057][ T2532] FAULT_INJECTION: forcing a failure. [ 724.502057][ T2532] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 724.516340][ T2532] CPU: 0 UID: 0 PID: 2532 Comm: syz.0.9921 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 724.516373][ T2532] Tainted: [W]=WARN [ 724.516391][ T2532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 724.516408][ T2532] Call Trace: [ 724.516415][ T2532] [ 724.516422][ T2532] __dump_stack+0x1d/0x30 [ 724.516447][ T2532] dump_stack_lvl+0x95/0xd0 [ 724.516475][ T2532] dump_stack+0x15/0x1b [ 724.516499][ T2532] should_fail_ex+0x263/0x280 [ 724.516569][ T2532] should_fail_alloc_page+0xf2/0x100 [ 724.516595][ T2532] alloc_pages_bulk_noprof+0x101/0x520 [ 724.516631][ T2532] copy_splice_read+0xf3/0x6c0 [ 724.516723][ T2532] ? __schedule+0x82d/0xc90 [ 724.516752][ T2532] sock_splice_read+0xa5/0xb0 [ 724.516787][ T2532] ? __pfx_sock_splice_read+0x10/0x10 [ 724.516815][ T2532] splice_file_to_pipe+0x237/0x390 [ 724.516842][ T2532] do_splice+0xc46/0x10b0 [ 724.516905][ T2532] ? __se_sys_splice+0x1ff/0x3a0 [ 724.516927][ T2532] __se_sys_splice+0x26c/0x3a0 [ 724.516966][ T2532] __x64_sys_splice+0x78/0x90 [ 724.517070][ T2532] x64_sys_call+0x2e82/0x3000 [ 724.517178][ T2532] do_syscall_64+0xc0/0x2a0 [ 724.517277][ T2532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.517340][ T2532] RIP: 0033:0x7f968e46aeb9 [ 724.517360][ T2532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.517384][ T2532] RSP: 002b:00007f968cec7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 724.517459][ T2532] RAX: ffffffffffffffda RBX: 00007f968e6e5fa0 RCX: 00007f968e46aeb9 [ 724.517534][ T2532] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000006 [ 724.517556][ T2532] RBP: 00007f968cec7090 R08: 0080000000000f36 R09: 0000000000000000 [ 724.517570][ T2532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 724.517583][ T2532] R13: 00007f968e6e6038 R14: 00007f968e6e5fa0 R15: 00007ffde7d97498 [ 724.517652][ T2532] [ 724.519210][T29935] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 724.604549][ T2536] loop2: detected capacity change from 0 to 128 [ 724.805748][ T2536] FAT-fs (loop2): Directory bread(block 32) failed [ 724.815398][ T2536] FAT-fs (loop2): Directory bread(block 33) failed [ 724.833601][ T2536] FAT-fs (loop2): Directory bread(block 34) failed [ 724.866179][ T2536] FAT-fs (loop2): Directory bread(block 35) failed [ 724.901075][ T2536] FAT-fs (loop2): Directory bread(block 36) failed [ 724.932971][ T2536] FAT-fs (loop2): Directory bread(block 37) failed [ 724.980795][ T2536] FAT-fs (loop2): Directory bread(block 38) failed [ 725.033976][ T2536] FAT-fs (loop2): Directory bread(block 39) failed [ 725.074372][ T2536] FAT-fs (loop2): Directory bread(block 40) failed [ 725.115160][ T2536] FAT-fs (loop2): Directory bread(block 41) failed [ 725.324122][ T2552] loop6: detected capacity change from 0 to 1024 [ 725.364197][ T2552] EXT4-fs: Ignoring removed nomblk_io_submit option [ 725.398981][ T2552] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 725.683979][ T2535] syzkaller0: entered promiscuous mode [ 725.689557][ T2535] syzkaller0: entered allmulticast mode [ 725.855635][ T2558] syzkaller0: entered promiscuous mode [ 725.861179][ T2558] syzkaller0: entered allmulticast mode [ 725.861590][ T2561] FAULT_INJECTION: forcing a failure. [ 725.861590][ T2561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 725.879972][ T2561] CPU: 0 UID: 0 PID: 2561 Comm: syz.0.9926 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 725.880016][ T2561] Tainted: [W]=WARN [ 725.880025][ T2561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 725.880043][ T2561] Call Trace: [ 725.880052][ T2561] [ 725.880062][ T2561] __dump_stack+0x1d/0x30 [ 725.880093][ T2561] dump_stack_lvl+0x95/0xd0 [ 725.880162][ T2561] dump_stack+0x15/0x1b [ 725.880189][ T2561] should_fail_ex+0x263/0x280 [ 725.880231][ T2561] should_fail+0xb/0x20 [ 725.880266][ T2561] should_fail_usercopy+0x1a/0x20 [ 725.880301][ T2561] _copy_from_user+0x1c/0xb0 [ 725.880329][ T2561] ___sys_recvmsg+0xaa/0x3b0 [ 725.880361][ T2561] do_recvmmsg+0x1ef/0x560 [ 725.880398][ T2561] ? fput+0x8f/0xc0 [ 725.880429][ T2561] __x64_sys_recvmmsg+0xe5/0x170 [ 725.880531][ T2561] x64_sys_call+0x2b75/0x3000 [ 725.880561][ T2561] do_syscall_64+0xc0/0x2a0 [ 725.880642][ T2561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.880665][ T2561] RIP: 0033:0x7f968e46aeb9 [ 725.880681][ T2561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.880700][ T2561] RSP: 002b:00007f968ce85028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 725.880750][ T2561] RAX: ffffffffffffffda RBX: 00007f968e6e6180 RCX: 00007f968e46aeb9 [ 725.880770][ T2561] RDX: 0000000000000001 RSI: 0000200000000c40 RDI: 0000000000000007 [ 725.880803][ T2561] RBP: 00007f968ce85090 R08: 0000000000000000 R09: 0000000000000000 [ 725.880820][ T2561] R10: 0000000000010022 R11: 0000000000000246 R12: 0000000000000001 [ 725.880833][ T2561] R13: 00007f968e6e6218 R14: 00007f968e6e6180 R15: 00007ffde7d97498 [ 725.880853][ T2561] [ 726.196983][T14280] bio_check_eod: 102 callbacks suppressed [ 726.197025][T14280] kworker/u8:17: attempt to access beyond end of device [ 726.197025][T14280] loop2: rw=1, sector=4124, nr_sectors = 4 limit=128 [ 726.418366][T29935] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.655349][ T2565] loop2: detected capacity change from 0 to 512 [ 726.670048][ T2565] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 726.765091][ T2565] EXT4-fs (loop2): 1 truncate cleaned up [ 726.781767][ T2565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 726.922711][T25374] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.162979][ T2573] loop8: detected capacity change from 0 to 8192 [ 727.187458][ T2573] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 727.347095][ T2573] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 727.355994][ T2573] FAT-fs (loop8): Filesystem has been set read-only [ 727.405210][ T2573] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 727.414082][ T2573] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 727.492205][ T2573] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 727.506097][ T2573] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 727.522531][ T2573] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 727.556454][ T2573] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 727.589029][ T2573] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 727.622400][ T2573] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 727.655007][ T2573] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 727.697246][ T29] kauditd_printk_skb: 441 callbacks suppressed [ 727.697264][ T29] audit: type=1400 audit(1769642177.122:54431): avc: denied { prog_load } for pid=2588 comm="syz.5.9933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 727.722666][ T29] audit: type=1400 audit(1769642177.122:54432): avc: denied { bpf } for pid=2588 comm="syz.5.9933" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 727.825594][ T29] audit: type=1400 audit(1769642177.172:54433): avc: denied { create } for pid=2588 comm="syz.5.9933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 727.846292][ T29] audit: type=1400 audit(1769642177.182:54434): avc: denied { create } for pid=2588 comm="syz.5.9933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 727.866916][ T29] audit: type=1400 audit(1769642177.182:54435): avc: denied { write } for pid=2588 comm="syz.5.9933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 727.887575][ T29] audit: type=1400 audit(1769642177.182:54436): avc: denied { read write } for pid=25374 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 727.912042][ T29] audit: type=1400 audit(1769642177.182:54437): avc: denied { read write open } for pid=25374 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 727.937320][ T29] audit: type=1400 audit(1769642177.182:54438): avc: denied { ioctl } for pid=25374 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 727.963086][ T29] audit: type=1400 audit(1769642177.182:54439): avc: denied { read } for pid=2588 comm="syz.5.9933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 727.983638][ T29] audit: type=1400 audit(1769642177.182:54440): avc: denied { read } for pid=2588 comm="syz.5.9933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 728.236107][ T2598] loop0: detected capacity change from 0 to 512 [ 728.266129][ T2598] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 728.308303][ T2598] EXT4-fs (loop0): 1 truncate cleaned up [ 728.326337][ T2598] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 728.428055][ T2598] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.9938: corrupted xattr block 33: invalid header [ 728.547774][ T2600] ip6_vti0 speed is unknown, defaulting to 1000 [ 728.567413][ T2598] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 728.577837][ T2598] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.9938: corrupted xattr block 33: invalid header [ 728.626884][ T2598] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 728.657548][ T2598] EXT4-fs error (device loop0): ext4_xattr_block_list:766: inode #15: comm syz.0.9938: corrupted xattr block 33: invalid header [ 729.138958][T26075] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.776731][ T2624] loop6: detected capacity change from 0 to 1024 [ 729.805560][ T2624] EXT4-fs: Ignoring removed nomblk_io_submit option [ 729.812481][ T2628] bridge0: entered allmulticast mode [ 729.877131][ T2624] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 729.985821][ T2632] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20003 [ 730.221162][ T2628] loop0: detected capacity change from 0 to 8192 [ 730.351162][T29935] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.407988][ T2640] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9953'. [ 730.488421][ T2640] vlan4: entered promiscuous mode [ 730.493523][ T2640] team0: entered promiscuous mode [ 730.498611][ T2640] team_slave_0: entered promiscuous mode [ 730.504469][ T2640] team_slave_1: entered promiscuous mode [ 730.529494][ T2645] netlink: 'syz.2.9952': attribute type 1 has an invalid length. [ 730.872933][ T2655] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9958'. [ 731.168360][ T2649] ip6_vti0 speed is unknown, defaulting to 1000 [ 731.772398][ T2674] xt_nat: multiple ranges no longer supported [ 732.099411][ T2683] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9968'. [ 732.142101][ T2679] loop8: detected capacity change from 0 to 256 [ 732.411011][ T2679] FAT-fs (loop8): Directory bread(block 64) failed [ 732.439637][ T2691] loop0: detected capacity change from 0 to 512 [ 732.452727][ T2679] FAT-fs (loop8): Directory bread(block 65) failed [ 732.478708][ T2679] FAT-fs (loop8): Directory bread(block 66) failed [ 732.490269][ T2691] EXT4-fs: Ignoring removed mblk_io_submit option [ 732.510642][ T2679] FAT-fs (loop8): Directory bread(block 67) failed [ 732.540479][ T2679] FAT-fs (loop8): Directory bread(block 68) failed [ 732.574027][ T2679] FAT-fs (loop8): Directory bread(block 69) failed [ 732.619017][ T2679] FAT-fs (loop8): Directory bread(block 70) failed [ 732.636926][ T2679] FAT-fs (loop8): Directory bread(block 71) failed [ 732.643640][ T2679] FAT-fs (loop8): Directory bread(block 72) failed [ 732.695933][ T2679] FAT-fs (loop8): Directory bread(block 73) failed [ 732.748015][ T29] kauditd_printk_skb: 547 callbacks suppressed [ 732.748031][ T29] audit: type=1400 audit(1769642182.172:54988): avc: denied { mount } for pid=2675 comm="syz.8.9966" name="/" dev="loop8" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 732.809360][ T2691] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 732.843121][ T2698] loop2: detected capacity change from 0 to 256 [ 732.860426][ T29] audit: type=1400 audit(1769642182.202:54989): avc: denied { read write } for pid=2675 comm="syz.8.9966" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 732.884606][ T29] audit: type=1400 audit(1769642182.202:54990): avc: denied { read write open } for pid=2675 comm="syz.8.9966" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 732.909687][ T29] audit: type=1400 audit(1769642182.262:54991): avc: denied { read write } for pid=2696 comm="syz.2.9972" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 732.933956][ T29] audit: type=1400 audit(1769642182.262:54992): avc: denied { read write open } for pid=2696 comm="syz.2.9972" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 732.959082][ T29] audit: type=1400 audit(1769642182.262:54993): avc: denied { ioctl } for pid=2696 comm="syz.2.9972" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 732.984808][ T29] audit: type=1400 audit(1769642182.262:54994): avc: denied { open } for pid=2697 comm="syz.6.9973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 733.004174][ T29] audit: type=1400 audit(1769642182.262:54995): avc: denied { perfmon } for pid=2697 comm="syz.6.9973" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 733.025211][ T29] audit: type=1400 audit(1769642182.272:54996): avc: denied { kernel } for pid=2697 comm="syz.6.9973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 733.044746][ T29] audit: type=1400 audit(1769642182.272:54997): avc: denied { perfmon } for pid=2697 comm="syz.6.9973" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 733.186220][T25374] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 733.193881][T25374] FAT-fs (loop2): Filesystem has been set read-only [ 733.261479][T25374] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 733.396441][T15801] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 733.477523][T15801] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 733.557828][T15801] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 733.624095][ T2705] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9976'. [ 733.633094][ T2705] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9976'. [ 733.642983][T15801] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 733.839771][T15801] bridge_slave_1: left allmulticast mode [ 733.845571][T15801] bridge_slave_1: left promiscuous mode [ 733.851295][T15801] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.875002][T15801] bridge_slave_0: left allmulticast mode [ 733.880697][T15801] bridge_slave_0: left promiscuous mode [ 733.886592][T15801] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.015158][T15801] bond2 (unregistering): (slave geneve2): Releasing active interface [ 734.406901][ T2727] netlink: 'syz.6.9984': attribute type 21 has an invalid length. [ 734.416048][T15801] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 734.425735][T15801] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 734.445684][T15801] .` (unregistering): Released all slaves [ 734.464614][T15801] bond1 (unregistering): (slave veth3): Releasing active interface [ 734.502337][T15801] bond1 (unregistering): Released all slaves [ 734.530725][T15801] bond2 (unregistering): Released all slaves [ 734.543853][ T2731] loop6: detected capacity change from 0 to 512 [ 734.552960][T15801] bond3 (unregistering): Released all slaves [ 734.564384][ T2731] EXT4-fs: Ignoring removed bh option [ 734.572269][T15801] bond0 (unregistering): Released all slaves [ 734.597295][ T2731] EXT4-fs: dax option not supported [ 734.630962][ T2727] netlink: 132 bytes leftover after parsing attributes in process `syz.6.9984'. [ 734.670409][T15801] tipc: Left network mode [ 734.800590][T15801] hsr_slave_0: left promiscuous mode [ 734.812490][T15801] hsr_slave_1: left promiscuous mode [ 734.835821][T15801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 734.997393][T15801] team0 (unregistering): Port device team_slave_1 removed [ 735.045988][T15801] team0 (unregistering): Port device team_slave_0 removed [ 735.196629][T15801] team0 (unregistering): Port device dummy0 removed [ 735.242737][ T2751] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9988'. [ 735.305776][ T2749] ip6_vti0 speed is unknown, defaulting to 1000 [ 735.425641][ T2754] loop6: detected capacity change from 0 to 128 [ 735.490273][T15801] IPVS: stop unused estimator thread 0... [ 735.576914][ T2716] ip6_vti0 speed is unknown, defaulting to 1000 [ 735.629545][ T2754] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9989'. [ 735.638627][ T2754] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9989'. [ 736.249123][ T2716] chnl_net:caif_netlink_parms(): no params data found [ 736.558056][ T2716] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.565337][ T2716] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.572661][ T2716] bridge_slave_0: entered allmulticast mode [ 736.579461][ T2716] bridge_slave_0: entered promiscuous mode [ 736.588428][ T2716] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.595590][ T2716] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.598040][ T2785] netlink: 'syz.6.9993': attribute type 1 has an invalid length. [ 736.603420][ T2716] bridge_slave_1: entered allmulticast mode [ 736.617246][ T2716] bridge_slave_1: entered promiscuous mode [ 736.642078][ T2716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.759473][ T2785] 8021q: adding VLAN 0 to HW filter on device bond2 [ 736.768817][ T2716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 736.795824][ T2716] team0: Port device team_slave_0 added [ 736.805220][ T2716] team0: Port device team_slave_1 added [ 736.813453][ T2778] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9993'. [ 736.890079][ T2716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.897113][ T2716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.923761][ T2716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.924444][ T2790] netlink: 'syz.5.9996': attribute type 21 has an invalid length. [ 736.974357][ T2785] loop6: detected capacity change from 0 to 8192 [ 736.989956][ T2778] bond2: entered allmulticast mode [ 737.007933][ T2790] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9996'. [ 737.018341][ T2716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.025352][ T2716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.051307][ T2716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.095121][T19621] loop6: p2 p3 p4[EZD] [ 737.102709][T19621] loop6: p3 start 331781 is beyond EOD, truncated [ 737.109244][T19621] loop6: p4 size 197376 extends beyond EOD, truncated [ 737.164639][ T2785] loop6: p2 p3 p4[EZD] [ 737.234834][ T2716] hsr_slave_0: entered promiscuous mode [ 737.252906][ T2785] loop6: p3 start 331781 is beyond EOD, truncated [ 737.259468][ T2785] loop6: p4 size 197376 extends beyond EOD, truncated [ 737.271954][ T2716] hsr_slave_1: entered promiscuous mode [ 737.285446][ T2716] debugfs: 'hsr0' already exists in 'hsr' [ 737.291229][ T2716] Cannot create hsr debugfs directory [ 737.645163][ T2808] tipc: New replicast peer: 255.255.255.255 [ 737.651444][ T2808] tipc: Enabled bearer , priority 10 [ 737.766111][ T29] kauditd_printk_skb: 1146 callbacks suppressed [ 737.766133][ T29] audit: type=1400 audit(1769642187.192:56144): avc: denied { ioctl } for pid=28885 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 737.892939][ T2816] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10003'. [ 737.902105][ T2816] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10003'. [ 737.919655][ T29] audit: type=1400 audit(1769642187.202:56145): avc: denied { create } for pid=2813 comm="syz.6.10003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 737.940404][ T29] audit: type=1400 audit(1769642187.232:56146): avc: denied { create } for pid=2813 comm="syz.6.10003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 737.961203][ T29] audit: type=1400 audit(1769642187.232:56147): avc: denied { write } for pid=2813 comm="syz.6.10003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 737.981811][ T29] audit: type=1400 audit(1769642187.232:56148): avc: denied { read } for pid=2813 comm="syz.6.10003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 737.997318][T19621] udevd[19621]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 738.002375][ T29] audit: type=1400 audit(1769642187.232:56149): avc: denied { read } for pid=2813 comm="syz.6.10003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 738.032611][ T29] audit: type=1400 audit(1769642187.272:56150): avc: denied { search } for pid=2815 comm="sed" name="resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 738.054857][ T29] audit: type=1400 audit(1769642187.272:56151): avc: denied { read } for pid=2815 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=510 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 738.063376][T32763] udevd[32763]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 738.076854][ T29] audit: type=1400 audit(1769642187.272:56152): avc: denied { read open } for pid=2815 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=510 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 738.112099][ T29] audit: type=1400 audit(1769642187.272:56153): avc: denied { getattr } for pid=2815 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=510 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 738.584987][ T2826] syz.8.10005 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 738.599346][ T2826] CPU: 0 UID: 0 PID: 2826 Comm: syz.8.10005 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 738.599386][ T2826] Tainted: [W]=WARN [ 738.599396][ T2826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 738.599477][ T2826] Call Trace: [ 738.599483][ T2826] [ 738.599493][ T2826] __dump_stack+0x1d/0x30 [ 738.599572][ T2826] dump_stack_lvl+0x95/0xd0 [ 738.599601][ T2826] dump_stack+0x15/0x1b [ 738.599629][ T2826] dump_header+0x80/0x240 [ 738.599662][ T2826] oom_kill_process+0x295/0x350 [ 738.599757][ T2826] out_of_memory+0x97d/0xb80 [ 738.599786][ T2826] try_charge_memcg+0x62e/0xa10 [ 738.599815][ T2826] obj_cgroup_charge_pages+0x23/0xc0 [ 738.599872][ T2826] __memcg_kmem_charge_page+0x9e/0x170 [ 738.599908][ T2826] __alloc_frozen_pages_noprof+0x18a/0x350 [ 738.600070][ T2826] alloc_pages_mpol+0xb3/0x260 [ 738.600113][ T2826] alloc_pages_noprof+0x8f/0x130 [ 738.600189][ T2826] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 738.600250][ T2826] __kvmalloc_node_noprof+0x471/0x680 [ 738.600287][ T2826] ? ip_set_alloc+0x24/0x30 [ 738.600371][ T2826] ? ip_set_alloc+0x24/0x30 [ 738.600411][ T2826] ? __slab_alloc+0x25/0x50 [ 738.600584][ T2826] ip_set_alloc+0x24/0x30 [ 738.600617][ T2826] hash_netiface_create+0x282/0x740 [ 738.600651][ T2826] ? __pfx_hash_netiface_create+0x10/0x10 [ 738.600739][ T2826] ip_set_create+0x3cf/0x970 [ 738.600800][ T2826] ? __nla_parse+0x40/0x60 [ 738.600858][ T2826] nfnetlink_rcv_msg+0x509/0x5d0 [ 738.600908][ T2826] netlink_rcv_skb+0x123/0x220 [ 738.600995][ T2826] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 738.601032][ T2826] nfnetlink_rcv+0x167/0x1720 [ 738.601061][ T2826] ? _raw_spin_trylock+0x53/0xb0 [ 738.601170][ T2826] ? kmem_cache_free+0xdf/0x380 [ 738.601201][ T2826] ? _raw_spin_trylock+0x5b/0xb0 [ 738.601235][ T2826] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 738.601289][ T2826] ? ___ratelimit+0x3f2/0x460 [ 738.601319][ T2826] ? __printk_ratelimit+0x1c/0x30 [ 738.601359][ T2826] ? audit_log_lost+0x171/0x200 [ 738.601472][ T2826] ? audit_log_start+0x46f/0x730 [ 738.601501][ T2826] ? avc_denied+0xe4/0x100 [ 738.601544][ T2826] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 738.601587][ T2826] ? __pfx_avc_audit_pre_callback+0x10/0x10 [ 738.601619][ T2826] ? common_lsm_audit+0x97/0x230 [ 738.601649][ T2826] ? avc_perm_nonode+0xcb/0xe0 [ 738.601747][ T2826] ? _raw_spin_lock_bh+0x56/0xb0 [ 738.601808][ T2826] ? should_fail_ex+0x30/0x280 [ 738.601847][ T2826] ? selinux_nlmsg_lookup+0x99/0x890 [ 738.601940][ T2826] ? __rcu_read_unlock+0x33/0x70 [ 738.601984][ T2826] ? __netlink_lookup+0x276/0x2b0 [ 738.602013][ T2826] netlink_unicast+0x5c0/0x690 [ 738.602066][ T2826] netlink_sendmsg+0x5c8/0x6f0 [ 738.602088][ T2826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 738.602146][ T2826] ____sys_sendmsg+0x5af/0x600 [ 738.602179][ T2826] ___sys_sendmsg+0x195/0x1e0 [ 738.602214][ T2826] __x64_sys_sendmsg+0xd4/0x160 [ 738.602254][ T2826] x64_sys_call+0x17ba/0x3000 [ 738.602306][ T2826] do_syscall_64+0xc0/0x2a0 [ 738.602347][ T2826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.602374][ T2826] RIP: 0033:0x7f304d4eaeb9 [ 738.602454][ T2826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.602480][ T2826] RSP: 002b:00007f304bf47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 738.602522][ T2826] RAX: ffffffffffffffda RBX: 00007f304d765fa0 RCX: 00007f304d4eaeb9 [ 738.602536][ T2826] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 738.602555][ T2826] RBP: 00007f304d558c1f R08: 0000000000000000 R09: 0000000000000000 [ 738.602579][ T2826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 738.602667][ T2826] R13: 00007f304d766038 R14: 00007f304d765fa0 R15: 00007ffd1ecdbb28 [ 738.602693][ T2826] [ 738.602703][ T2826] memory: usage 307200kB, limit 307200kB, failcnt 696 [ 738.707167][T19621] udevd[19621]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 738.708550][ T2826] memory+swap: usage 307356kB, limit 9007199254740988kB, failcnt 0 [ 738.998395][ T2826] kmem: usage 307144kB, limit 9007199254740988kB, failcnt 0 [ 739.005728][ T2826] Memory cgroup stats for /syz8: [ 739.005936][ T2826] cache 4096 [ 739.014125][ T2826] rss 40960 [ 739.017290][ T2826] shmem 0 [ 739.020256][ T2826] mapped_file 0 [ 739.023739][ T2826] dirty 0 [ 739.026836][ T2826] writeback 0 [ 739.030145][ T2826] workingset_refault_anon 234 [ 739.034930][ T2826] workingset_refault_file 2415 [ 739.039706][ T2826] swap 159744 [ 739.043012][ T2826] swapcached 0 [ 739.046442][ T2826] pgpgin 112851 [ 739.050023][ T2826] pgpgout 112837 [ 739.053595][ T2826] pgfault 113591 [ 739.057201][ T2826] pgmajfault 122 [ 739.060905][ T2826] inactive_anon 8192 [ 739.064842][ T2826] active_anon 24576 [ 739.068748][ T2826] inactive_file 16384 [ 739.072749][ T2826] active_file 0 [ 739.076402][ T2826] unevictable 8192 [ 739.080143][ T2826] hierarchical_memory_limit 314572800 [ 739.085604][ T2826] hierarchical_memsw_limit 9223372036854771712 [ 739.091826][ T2826] total_cache 4096 [ 739.095623][ T2826] total_rss 40960 [ 739.099299][ T2826] total_shmem 0 [ 739.102830][ T2826] total_mapped_file 0 [ 739.106860][ T2826] total_dirty 0 [ 739.110393][ T2826] total_writeback 0 [ 739.114224][ T2826] total_workingset_refault_anon 234 [ 739.119627][ T2826] total_workingset_refault_file 2415 [ 739.124958][ T2826] total_swap 159744 [ 739.128786][ T2826] total_swapcached 0 [ 739.132723][ T2826] total_pgpgin 112851 [ 739.136741][ T2826] total_pgpgout 112837 [ 739.140887][ T2826] total_pgfault 113591 [ 739.145040][ T2826] total_pgmajfault 122 [ 739.149135][ T2826] total_inactive_anon 8192 [ 739.153657][ T2826] total_active_anon 24576 [ 739.158096][ T2826] total_inactive_file 16384 [ 739.162616][ T2826] total_active_file 0 [ 739.166661][ T2826] total_unevictable 8192 [ 739.170922][ T2826] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.10005,pid=2824,uid=0 [ 739.185738][ T2826] Memory cgroup out of memory: Killed process 2824 (syz.8.10005) total-vm:94136kB, anon-rss:1204kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 739.220834][T32763] udevd[32763]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 739.257396][ T2716] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 739.290406][ T2716] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 739.355426][ T2716] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 739.381575][ T2716] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 740.027075][ T2854] netlink: 'syz.8.10009': attribute type 21 has an invalid length. [ 740.048304][ T2857] syzkaller0: entered promiscuous mode [ 740.053820][ T2857] syzkaller0: entered allmulticast mode [ 740.096516][ T2859] loop8: detected capacity change from 0 to 512 [ 740.105168][ T2859] EXT4-fs: Ignoring removed bh option [ 740.110663][ T2859] EXT4-fs: dax option not supported [ 740.145799][ T2854] netlink: 132 bytes leftover after parsing attributes in process `syz.8.10009'. [ 740.303992][ T2716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.423483][ T2716] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.495943][T14249] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.503268][T14249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.587190][T14249] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.594357][T14249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.677015][ T2863] bridge_slave_1: left allmulticast mode [ 740.682808][ T2863] bridge_slave_1: left promiscuous mode [ 740.688706][ T2863] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.718852][ T2863] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 741.263970][ T2883] loop8: detected capacity change from 0 to 164 [ 741.270589][ T2885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2885 comm=syz.6.10014 [ 741.463149][ T2883] syzkaller0: entered promiscuous mode [ 741.468845][ T2883] syzkaller0: entered allmulticast mode [ 741.520581][ T2716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 741.942673][ T2900] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 742.326883][ T2918] netlink: 36 bytes leftover after parsing attributes in process `syz.6.10020'. [ 742.432541][ T2716] veth0_vlan: entered promiscuous mode [ 742.447370][ T2920] loop0: detected capacity change from 0 to 1024 [ 742.484051][ T2920] EXT4-fs: Ignoring removed nomblk_io_submit option [ 742.518040][ T2716] veth1_vlan: entered promiscuous mode [ 742.536211][ T2914] delete_channel: no stack [ 742.544605][ T2920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 742.785720][ T29] kauditd_printk_skb: 1536 callbacks suppressed [ 742.785739][ T29] audit: type=1400 audit(1769642192.202:57495): avc: denied { getattr } for pid=2929 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.785802][ T29] audit: type=1400 audit(1769642192.202:57496): avc: denied { search } for pid=2929 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.785907][ T29] audit: type=1400 audit(1769642192.202:57497): avc: denied { search } for pid=2929 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=478 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.785996][ T29] audit: type=1400 audit(1769642192.202:57498): avc: denied { search } for pid=2929 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.786029][ T29] audit: type=1400 audit(1769642192.202:57499): avc: denied { search } for pid=2929 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.786083][ T29] audit: type=1400 audit(1769642192.202:57500): avc: denied { search } for pid=2929 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.786133][ T29] audit: type=1400 audit(1769642192.202:57501): avc: denied { search } for pid=2929 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=478 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.786215][ T29] audit: type=1400 audit(1769642192.202:57502): avc: denied { search } for pid=2929 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.786324][ T29] audit: type=1400 audit(1769642192.202:57503): avc: denied { read open } for pid=2929 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.786353][ T29] audit: type=1400 audit(1769642192.202:57504): avc: denied { getattr } for pid=2929 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.787893][ T2716] veth0_macvtap: entered promiscuous mode [ 742.821232][ T2716] veth1_macvtap: entered promiscuous mode [ 742.966452][ T2716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.013376][ T2716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.075578][ T3445] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.075794][ T3445] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.075931][ T3445] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.076054][ T3445] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.150860][T26075] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.001405][ T2957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9981'. [ 744.232500][ T2961] loop8: detected capacity change from 0 to 512 [ 744.241117][ T2966] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10025'. [ 744.277508][ T2961] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 744.347136][ T2961] EXT4-fs (loop8): 1 truncate cleaned up [ 744.353460][ T2961] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 744.456505][ T2961] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.10027: corrupted xattr block 33: invalid header [ 744.535682][ T2961] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 744.595718][ T2961] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.10027: corrupted xattr block 33: invalid header [ 744.714045][ T2949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10024'. [ 744.740228][ T2961] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 744.805360][ T2961] EXT4-fs error (device loop8): ext4_xattr_block_list:766: inode #15: comm syz.8.10027: corrupted xattr block 33: invalid header [ 744.953977][ T2989] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 745.262169][T28885] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.626929][ T3013] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10035'. [ 745.660392][ T3017] netlink: 'syz.8.10036': attribute type 9 has an invalid length. [ 745.769452][ T3022] netlink: 'syz.8.10036': attribute type 4 has an invalid length. [ 745.777520][ T3022] netlink: 152 bytes leftover after parsing attributes in process `syz.8.10036'. [ 746.001457][ T3022] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 746.057799][ T3031] netlink: 'syz.5.10039': attribute type 21 has an invalid length. [ 746.069732][ T3031] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10039'. [ 746.262508][ T3045] netlink: 84 bytes leftover after parsing attributes in process `syz.0.10041'. [ 746.271681][ T3045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10041'. [ 747.333291][ T4901] IPVS: starting estimator thread 0... [ 747.392729][ T3082] loop6: detected capacity change from 0 to 512 [ 747.434960][ T3078] IPVS: using max 1968 ests per chain, 98400 per kthread [ 747.474104][ T3088] netlink: 'syz.5.10048': attribute type 1 has an invalid length. [ 747.482443][ T3082] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.10050: inode has both inline data and extents flags [ 747.505420][ T3082] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.10050: couldn't read orphan inode 15 (err -117) [ 747.519725][ T3082] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 747.609729][ T3082] netlink: 60 bytes leftover after parsing attributes in process `syz.6.10050'. [ 747.619000][ T3082] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10050'. [ 747.628205][ T3082] netlink: 60 bytes leftover after parsing attributes in process `syz.6.10050'. [ 747.815359][ T29] kauditd_printk_skb: 2006 callbacks suppressed [ 747.815380][ T29] audit: type=1400 audit(1769642197.232:59511): avc: denied { unmount } for pid=29935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 747.842948][T29935] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.905033][ T29] audit: type=1400 audit(1769642197.242:59512): avc: denied { search } for pid=3100 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 747.926270][ T29] audit: type=1400 audit(1769642197.242:59513): avc: denied { read } for pid=3100 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 747.948277][ T29] audit: type=1400 audit(1769642197.242:59514): avc: denied { read open } for pid=3100 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 747.971576][ T29] audit: type=1400 audit(1769642197.242:59515): avc: denied { search } for pid=3100 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 747.993030][ T29] audit: type=1400 audit(1769642197.242:59516): avc: denied { search } for pid=3100 comm="cmp" name="dhcpcd" dev="tmpfs" ino=478 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 748.015464][ T29] audit: type=1400 audit(1769642197.242:59517): avc: denied { search } for pid=3100 comm="cmp" name="hook-state" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 748.037803][ T29] audit: type=1400 audit(1769642197.242:59518): avc: denied { read } for pid=3100 comm="cmp" name="resolv.conf.eth23.ipv4ll" dev="tmpfs" ino=34265 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 748.061510][ T29] audit: type=1400 audit(1769642197.242:59519): avc: denied { read open } for pid=3100 comm="cmp" path="/run/dhcpcd/hook-state/resolv.conf.eth23.ipv4ll" dev="tmpfs" ino=34265 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 748.087418][ T29] audit: type=1400 audit(1769642197.242:59520): avc: denied { getattr } for pid=3100 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 748.682182][ T3117] loop1: detected capacity change from 0 to 2048 [ 748.736390][ T3117] EXT4-fs: Ignoring removed mblk_io_submit option [ 748.815620][ T3117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 748.846851][ T3124] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10057'. [ 748.969103][ T2716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 749.029049][ T3132] vhci_hcd vhci_hcd.2: invalid port number 98 [ 749.035235][ T3132] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffc i0062 l0 [ 749.144342][ T3130] 8021q: adding VLAN 0 to HW filter on device .` [ 749.156007][ T3130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 749.265122][ T3130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 749.368001][ T3130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 749.449665][ T3130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 749.541110][ T3130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 749.615615][ T3150] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3150 comm=syz.5.10061 [ 749.628538][ T3130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 749.717578][ T3130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 749.779984][ T3130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 750.053187][ T3166] netlink: 'syz.6.10063': attribute type 1 has an invalid length. [ 750.600448][ T3189] syzkaller0: entered promiscuous mode [ 750.606032][ T3189] syzkaller0: entered allmulticast mode [ 750.649505][ T3189] FAULT_INJECTION: forcing a failure. [ 750.649505][ T3189] name failslab, interval 1, probability 0, space 0, times 0 [ 750.662301][ T3189] CPU: 0 UID: 0 PID: 3189 Comm: syz.1.10068 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 750.662360][ T3189] Tainted: [W]=WARN [ 750.662370][ T3189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 750.662388][ T3189] Call Trace: [ 750.662396][ T3189] [ 750.662404][ T3189] __dump_stack+0x1d/0x30 [ 750.662431][ T3189] dump_stack_lvl+0x95/0xd0 [ 750.662522][ T3189] dump_stack+0x15/0x1b [ 750.662548][ T3189] should_fail_ex+0x263/0x280 [ 750.662615][ T3189] should_failslab+0x8c/0xb0 [ 750.662640][ T3189] kmem_cache_alloc_noprof+0x68/0x490 [ 750.662717][ T3189] ? skb_clone+0x151/0x1f0 [ 750.662798][ T3189] skb_clone+0x151/0x1f0 [ 750.662818][ T3189] __netlink_deliver_tap+0x2c9/0x500 [ 750.662929][ T3189] netlink_unicast+0x66b/0x690 [ 750.662968][ T3189] netlink_sendmsg+0x5c8/0x6f0 [ 750.662994][ T3189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 750.663038][ T3189] ____sys_sendmsg+0x5af/0x600 [ 750.663064][ T3189] ___sys_sendmsg+0x195/0x1e0 [ 750.663096][ T3189] __x64_sys_sendmsg+0xd4/0x160 [ 750.663128][ T3189] x64_sys_call+0x17ba/0x3000 [ 750.663182][ T3189] do_syscall_64+0xc0/0x2a0 [ 750.663215][ T3189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.663291][ T3189] RIP: 0033:0x7fcb257caeb9 [ 750.663308][ T3189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.663328][ T3189] RSP: 002b:00007fcb24227028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 750.663419][ T3189] RAX: ffffffffffffffda RBX: 00007fcb25a45fa0 RCX: 00007fcb257caeb9 [ 750.663433][ T3189] RDX: 0000000000040004 RSI: 0000200000000280 RDI: 0000000000000008 [ 750.663451][ T3189] RBP: 00007fcb24227090 R08: 0000000000000000 R09: 0000000000000000 [ 750.663469][ T3189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 750.663484][ T3189] R13: 00007fcb25a46038 R14: 00007fcb25a45fa0 R15: 00007ffff48a7778 [ 750.663554][ T3189] [ 751.181423][ T3202] netlink: 'syz.1.10072': attribute type 10 has an invalid length. [ 751.256347][ T3204] netlink: 10 bytes leftover after parsing attributes in process `syz.6.10073'. [ 751.272632][ T3202] veth0_vlan: entered allmulticast mode [ 751.278414][ T3202] team0: Device veth0_vlan is up. Set it down before adding it as a team port [ 751.700298][ T3218] ip6_vti0 speed is unknown, defaulting to 1000 [ 751.941844][ T3233] netlink: 'syz.5.10078': attribute type 12 has an invalid length. [ 751.949895][ T3233] netlink: 'syz.5.10078': attribute type 29 has an invalid length. [ 751.957871][ T3233] netlink: 148 bytes leftover after parsing attributes in process `syz.5.10078'. [ 751.967051][ T3233] netlink: 59 bytes leftover after parsing attributes in process `syz.5.10078'. [ 752.369909][ T3245] loop8: detected capacity change from 0 to 512 [ 752.390538][ T3244] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10081'. [ 752.439721][ T3245] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 752.553620][ T3245] EXT4-fs (loop8): 1 truncate cleaned up [ 752.588322][ T3245] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 752.730405][ T3245] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.10080: corrupted xattr block 33: invalid header [ 752.746351][ T3245] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 752.776476][ T3245] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.10080: corrupted xattr block 33: invalid header [ 752.835379][ T29] kauditd_printk_skb: 1812 callbacks suppressed [ 752.835399][ T29] audit: type=1400 audit(1769642202.242:61333): avc: denied { search } for pid=3253 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=478 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.864650][ T29] audit: type=1400 audit(1769642202.242:61334): avc: denied { search } for pid=3253 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.888115][ T29] audit: type=1400 audit(1769642202.242:61335): avc: denied { search } for pid=3253 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.911410][ T29] audit: type=1400 audit(1769642202.242:61336): avc: denied { search } for pid=3253 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.933748][ T29] audit: type=1400 audit(1769642202.242:61337): avc: denied { search } for pid=3253 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=478 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.956729][ T29] audit: type=1400 audit(1769642202.242:61338): avc: denied { search } for pid=3253 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.980001][ T29] audit: type=1400 audit(1769642202.242:61339): avc: denied { read open } for pid=3253 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 753.005776][ T29] audit: type=1400 audit(1769642202.252:61340): avc: denied { getattr } for pid=3253 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 753.031381][ T29] audit: type=1400 audit(1769642202.252:61341): avc: denied { read write } for pid=29935 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 753.055822][ T29] audit: type=1400 audit(1769642202.252:61342): avc: denied { read write open } for pid=29935 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 753.151730][ T3261] netlink: 'syz.0.10083': attribute type 1 has an invalid length. [ 753.212333][ T3264] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10087'. [ 753.434930][ T3245] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 753.481778][ T3245] EXT4-fs error (device loop8): ext4_xattr_block_list:766: inode #15: comm syz.8.10080: corrupted xattr block 33: invalid header [ 753.630164][ T3273] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=18 sclass=netlink_audit_socket pid=3273 comm=syz.5.10088 [ 753.840418][T28885] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.026705][ T3288] syzkaller0: entered promiscuous mode [ 754.032234][ T3288] syzkaller0: entered allmulticast mode [ 754.246863][ C0] ================================================================== [ 754.255033][ C0] BUG: KCSAN: data-race in vxcan_xmit / vxcan_xmit [ 754.261588][ C0] [ 754.263930][ C0] read-write to 0xffff8881605f8228 of 8 bytes by interrupt on cpu 1: [ 754.271994][ C0] vxcan_xmit+0x28b/0x340 [ 754.276345][ C0] dev_hard_start_xmit+0x125/0x3e0 [ 754.281493][ C0] __dev_queue_xmit+0xdb1/0x1f20 [ 754.286459][ C0] can_send+0x589/0x720 [ 754.290636][ C0] can_can_gw_rcv+0x7bb/0x820 [ 754.295343][ C0] can_rcv_filter+0xc7/0x4f0 [ 754.299953][ C0] can_receive+0x163/0x1c0 [ 754.304382][ C0] can_rcv+0xed/0x190 [ 754.308375][ C0] process_backlog+0x363/0x670 [ 754.313157][ C0] __napi_poll+0x5f/0x310 [ 754.317503][ C0] net_rx_action+0x452/0x930 [ 754.322119][ C0] handle_softirqs+0xb9/0x280 [ 754.326813][ C0] do_softirq+0x45/0x60 [ 754.330999][ C0] __local_bh_enable_ip+0x70/0x80 [ 754.336065][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 754.341038][ C0] nsim_dev_trap_report_work+0x52b/0x630 [ 754.346693][ C0] process_scheduled_works+0x4cd/0x9d0 [ 754.352171][ C0] worker_thread+0x6bc/0x8b0 [ 754.356789][ C0] kthread+0x488/0x510 [ 754.360888][ C0] ret_from_fork+0x148/0x280 [ 754.365521][ C0] ret_from_fork_asm+0x1a/0x30 [ 754.370310][ C0] [ 754.372647][ C0] read-write to 0xffff8881605f8228 of 8 bytes by interrupt on cpu 0: [ 754.380725][ C0] vxcan_xmit+0x28b/0x340 [ 754.385080][ C0] dev_hard_start_xmit+0x125/0x3e0 [ 754.390242][ C0] __dev_queue_xmit+0xdb1/0x1f20 [ 754.395218][ C0] can_send+0x589/0x720 [ 754.399397][ C0] can_can_gw_rcv+0x7bb/0x820 [ 754.404101][ C0] can_rcv_filter+0xc7/0x4f0 [ 754.408697][ C0] can_receive+0x163/0x1c0 [ 754.413142][ C0] can_rcv+0xed/0x190 [ 754.417128][ C0] process_backlog+0x363/0x670 [ 754.421920][ C0] __napi_poll+0x5f/0x310 [ 754.426254][ C0] net_rx_action+0x452/0x930 [ 754.430864][ C0] handle_softirqs+0xb9/0x280 [ 754.435675][ C0] run_ksoftirqd+0x1c/0x30 [ 754.440122][ C0] smpboot_thread_fn+0x32a/0x510 [ 754.445102][ C0] kthread+0x488/0x510 [ 754.449206][ C0] ret_from_fork+0x148/0x280 [ 754.453826][ C0] ret_from_fork_asm+0x1a/0x30 [ 754.458604][ C0] [ 754.460960][ C0] value changed: 0x0000000000003ff1 -> 0x0000000000003ff2 [ 754.468083][ C0] [ 754.470420][ C0] Reported by Kernel Concurrency Sanitizer on: [ 754.476593][ C0] CPU: 0 UID: 0 PID: 14 Comm: ksoftirqd/0 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 754.487830][ C0] Tainted: [W]=WARN [ 754.491643][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 754.501696][ C0] ================================================================== [ 754.523365][ C0] ================================================================== [ 754.531514][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 754.538767][ C0] [ 754.541128][ C0] read-write to 0xffff88813dec5020 of 4 bytes by interrupt on cpu 1: [ 754.549223][ C0] can_can_gw_rcv+0x807/0x820 [ 754.553939][ C0] can_rcv_filter+0xc7/0x4f0 [ 754.558559][ C0] can_receive+0x163/0x1c0 [ 754.563005][ C0] can_rcv+0xed/0x190 [ 754.567019][ C0] process_backlog+0x363/0x670 [ 754.571814][ C0] __napi_poll+0x5f/0x310 [ 754.576163][ C0] net_rx_action+0x452/0x930 [ 754.580796][ C0] handle_softirqs+0xb9/0x280 [ 754.585528][ C0] do_softirq+0x45/0x60 [ 754.589727][ C0] __local_bh_enable_ip+0x70/0x80 [ 754.594779][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 754.599748][ C0] wg_packet_encrypt_worker+0x169/0xde0 [ 754.605319][ C0] process_scheduled_works+0x4cd/0x9d0 [ 754.610801][ C0] worker_thread+0x6bc/0x8b0 [ 754.615422][ C0] kthread+0x488/0x510 [ 754.619527][ C0] ret_from_fork+0x148/0x280 [ 754.624140][ C0] ret_from_fork_asm+0x1a/0x30 [ 754.628931][ C0] [ 754.631266][ C0] read-write to 0xffff88813dec5020 of 4 bytes by interrupt on cpu 0: [ 754.639343][ C0] can_can_gw_rcv+0x807/0x820 [ 754.644046][ C0] can_rcv_filter+0xc7/0x4f0 [ 754.648658][ C0] can_receive+0x163/0x1c0 [ 754.653092][ C0] can_rcv+0xed/0x190 [ 754.657092][ C0] process_backlog+0x363/0x670 [ 754.661882][ C0] __napi_poll+0x5f/0x310 [ 754.666230][ C0] net_rx_action+0x452/0x930 [ 754.670849][ C0] handle_softirqs+0xb9/0x280 [ 754.675555][ C0] do_softirq+0x45/0x60 [ 754.679749][ C0] __local_bh_enable_ip+0x70/0x80 [ 754.684808][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 754.689790][ C0] lock_sock_nested+0x132/0x160 [ 754.694672][ C0] sockopt_lock_sock+0x41/0x50 [ 754.699471][ C0] do_ip_getsockopt+0xaa8/0x1070 [ 754.704434][ C0] ip_getsockopt+0x5c/0x180 [ 754.708959][ C0] tcp_getsockopt+0xad/0xe0 [ 754.713501][ C0] sock_common_getsockopt+0x60/0x70 [ 754.718728][ C0] do_sock_getsockopt+0x1c4/0x210 [ 754.723786][ C0] __x64_sys_getsockopt+0x11d/0x1a0 [ 754.729021][ C0] x64_sys_call+0x2dc7/0x3000 [ 754.733722][ C0] do_syscall_64+0xc0/0x2a0 [ 754.738266][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.744187][ C0] [ 754.746527][ C0] value changed: 0x00004546 -> 0x00004547 [ 754.752267][ C0] [ 754.754609][ C0] Reported by Kernel Concurrency Sanitizer on: [ 754.760776][ C0] CPU: 0 UID: 0 PID: 2716 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 754.772354][ C0] Tainted: [W]=WARN [ 754.776178][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 754.786288][ C0] ================================================================== [ 754.878645][ C1] ================================================================== [ 754.886803][ C1] BUG: KCSAN: data-race in vxcan_xmit / vxcan_xmit [ 754.893332][ C1] [ 754.895656][ C1] read-write to 0xffff888165fd0220 of 8 bytes by interrupt on cpu 0: [ 754.903732][ C1] vxcan_xmit+0x2c8/0x340 [ 754.908077][ C1] dev_hard_start_xmit+0x125/0x3e0 [ 754.913214][ C1] __dev_queue_xmit+0xdb1/0x1f20 [ 754.918185][ C1] can_send+0x589/0x720 [ 754.922356][ C1] can_can_gw_rcv+0x7bb/0x820 [ 754.927046][ C1] can_rcv_filter+0xc7/0x4f0 [ 754.931653][ C1] can_receive+0x163/0x1c0 [ 754.936074][ C1] can_rcv+0xed/0x190 [ 754.940071][ C1] process_backlog+0x363/0x670 [ 754.944852][ C1] __napi_poll+0x5f/0x310 [ 754.949224][ C1] net_rx_action+0x452/0x930 [ 754.953832][ C1] handle_softirqs+0xb9/0x280 [ 754.958518][ C1] do_softirq+0x45/0x60 [ 754.962699][ C1] __local_bh_enable_ip+0x70/0x80 [ 754.967922][ C1] __alloc_skb+0x477/0x4b0 [ 754.972386][ C1] alloc_skb_with_frags+0x7d/0x470 [ 754.977510][ C1] sock_alloc_send_pskb+0x44d/0x500 [ 754.982743][ C1] unix_dgram_sendmsg+0x391/0x1060 [ 754.987869][ C1] __sys_sendto+0x470/0x4d0 [ 754.992422][ C1] __x64_sys_sendto+0x76/0x90 [ 754.997112][ C1] x64_sys_call+0x29a7/0x3000 [ 755.001816][ C1] do_syscall_64+0xc0/0x2a0 [ 755.006330][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.012246][ C1] [ 755.014564][ C1] read-write to 0xffff888165fd0220 of 8 bytes by interrupt on cpu 1: [ 755.022626][ C1] vxcan_xmit+0x2c8/0x340 [ 755.026971][ C1] dev_hard_start_xmit+0x125/0x3e0 [ 755.032111][ C1] __dev_queue_xmit+0xdb1/0x1f20 [ 755.037072][ C1] can_send+0x589/0x720 [ 755.041262][ C1] can_can_gw_rcv+0x7bb/0x820 [ 755.045967][ C1] can_rcv_filter+0xc7/0x4f0 [ 755.050588][ C1] can_receive+0x163/0x1c0 [ 755.055031][ C1] can_rcv+0xed/0x190 [ 755.059051][ C1] process_backlog+0x363/0x670 [ 755.063836][ C1] __napi_poll+0x5f/0x310 [ 755.068171][ C1] net_rx_action+0x452/0x930 [ 755.072781][ C1] handle_softirqs+0xb9/0x280 [ 755.077472][ C1] do_softirq+0x45/0x60 [ 755.081645][ C1] __local_bh_enable_ip+0x70/0x80 [ 755.086682][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 755.091649][ C1] nsim_dev_trap_report_work+0x52b/0x630 [ 755.097287][ C1] process_scheduled_works+0x4cd/0x9d0 [ 755.102771][ C1] worker_thread+0x6bc/0x8b0 [ 755.107372][ C1] kthread+0x488/0x510 [ 755.111459][ C1] ret_from_fork+0x148/0x280 [ 755.116057][ C1] ret_from_fork_asm+0x1a/0x30 [ 755.120849][ C1] [ 755.123213][ C1] value changed: 0x000000000000786e -> 0x000000000000786f [ 755.130321][ C1] [ 755.132655][ C1] Reported by Kernel Concurrency Sanitizer on: [ 755.138807][ C1] CPU: 1 UID: 0 PID: 14251 Comm: kworker/u8:9 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 755.150382][ C1] Tainted: [W]=WARN [ 755.154190][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 755.164252][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 755.171055][ C1] ================================================================== [ 755.203703][ C0] ================================================================== [ 755.211843][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 755.219079][ C0] [ 755.221422][ C0] read-write to 0xffff888100b4c5b8 of 8 bytes by interrupt on cpu 1: [ 755.229510][ C0] can_rcv_filter+0xd9/0x4f0 [ 755.234129][ C0] can_receive+0x163/0x1c0 [ 755.238584][ C0] can_rcv+0xed/0x190 [ 755.242603][ C0] process_backlog+0x363/0x670 [ 755.247415][ C0] __napi_poll+0x5f/0x310 [ 755.251786][ C0] net_rx_action+0x452/0x930 [ 755.256415][ C0] handle_softirqs+0xb9/0x280 [ 755.261155][ C0] do_softirq+0x45/0x60 [ 755.265382][ C0] __local_bh_enable_ip+0x70/0x80 [ 755.270471][ C0] update_defense_level+0x59d/0x5d0 [ 755.275708][ C0] defense_work_handler+0x1f/0x80 [ 755.280779][ C0] process_scheduled_works+0x4cd/0x9d0 [ 755.286297][ C0] worker_thread+0x6bc/0x8b0 [ 755.290933][ C0] kthread+0x488/0x510 [ 755.295059][ C0] ret_from_fork+0x148/0x280 [ 755.299696][ C0] ret_from_fork_asm+0x1a/0x30 [ 755.304502][ C0] [ 755.306863][ C0] read-write to 0xffff888100b4c5b8 of 8 bytes by interrupt on cpu 0: [ 755.314959][ C0] can_rcv_filter+0xd9/0x4f0 [ 755.319576][ C0] can_receive+0x163/0x1c0 [ 755.324016][ C0] can_rcv+0xed/0x190 [ 755.328029][ C0] process_backlog+0x363/0x670 [ 755.332837][ C0] __napi_poll+0x5f/0x310 [ 755.337205][ C0] net_rx_action+0x452/0x930 [ 755.341834][ C0] handle_softirqs+0xb9/0x280 [ 755.346558][ C0] do_softirq+0x45/0x60 [ 755.350750][ C0] __local_bh_enable_ip+0x70/0x80 [ 755.355812][ C0] update_defense_level+0x59d/0x5d0 [ 755.361042][ C0] defense_work_handler+0x1f/0x80 [ 755.366112][ C0] process_scheduled_works+0x4cd/0x9d0 [ 755.371614][ C0] worker_thread+0x6bc/0x8b0 [ 755.376245][ C0] kthread+0x488/0x510 [ 755.380356][ C0] ret_from_fork+0x148/0x280 [ 755.384981][ C0] ret_from_fork_asm+0x1a/0x30 [ 755.389786][ C0] [ 755.392135][ C0] value changed: 0x0000000000008220 -> 0x0000000000008221 [ 755.399264][ C0] [ 755.401605][ C0] Reported by Kernel Concurrency Sanitizer on: [ 755.407788][ C0] CPU: 0 UID: 0 PID: 31173 Comm: kworker/0:14 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 755.419363][ C0] Tainted: [W]=WARN [ 755.423189][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 755.433275][ C0] Workqueue: events_long defense_work_handler [ 755.439394][ C0] ================================================================== [ 757.385429][ C0] ================================================================== [ 757.393591][ C0] BUG: KCSAN: data-race in vxcan_xmit / vxcan_xmit [ 757.400126][ C0] [ 757.402447][ C0] read-write to 0xffff8881605f8228 of 8 bytes by interrupt on cpu 1: [ 757.410525][ C0] vxcan_xmit+0x28b/0x340 [ 757.414896][ C0] dev_hard_start_xmit+0x125/0x3e0 [ 757.420053][ C0] __dev_queue_xmit+0xdb1/0x1f20 [ 757.425027][ C0] can_send+0x589/0x720 [ 757.429201][ C0] can_can_gw_rcv+0x7bb/0x820 [ 757.433903][ C0] can_rcv_filter+0xc7/0x4f0 [ 757.438505][ C0] can_receive+0x163/0x1c0 [ 757.442946][ C0] can_rcv+0xed/0x190 [ 757.446933][ C0] process_backlog+0x363/0x670 [ 757.451718][ C0] __napi_poll+0x5f/0x310 [ 757.456062][ C0] net_rx_action+0x452/0x930 [ 757.460689][ C0] handle_softirqs+0xb9/0x280 [ 757.465424][ C0] do_softirq+0x45/0x60 [ 757.469610][ C0] __local_bh_enable_ip+0x70/0x80 [ 757.474659][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 757.479618][ C0] batadv_tt_purge+0x2cd/0x610 [ 757.484398][ C0] process_scheduled_works+0x4cd/0x9d0 [ 757.489863][ C0] worker_thread+0x6bc/0x8b0 [ 757.494475][ C0] kthread+0x488/0x510 [ 757.498556][ C0] ret_from_fork+0x148/0x280 [ 757.503174][ C0] ret_from_fork_asm+0x1a/0x30 [ 757.507961][ C0] [ 757.510299][ C0] read-write to 0xffff8881605f8228 of 8 bytes by interrupt on cpu 0: [ 757.518375][ C0] vxcan_xmit+0x28b/0x340 [ 757.522750][ C0] dev_hard_start_xmit+0x125/0x3e0 [ 757.527967][ C0] __dev_queue_xmit+0xdb1/0x1f20 [ 757.532978][ C0] can_send+0x589/0x720 [ 757.537140][ C0] can_can_gw_rcv+0x7bb/0x820 [ 757.541841][ C0] can_rcv_filter+0xc7/0x4f0 [ 757.546436][ C0] can_receive+0x163/0x1c0 [ 757.550871][ C0] can_rcv+0xed/0x190 [ 757.554904][ C0] process_backlog+0x363/0x670 [ 757.559698][ C0] __napi_poll+0x5f/0x310 [ 757.564084][ C0] net_rx_action+0x452/0x930 [ 757.568683][ C0] handle_softirqs+0xb9/0x280 [ 757.573417][ C0] __irq_exit_rcu+0x39/0xc0 [ 757.577991][ C0] sysvec_apic_timer_interrupt+0x74/0x80 [ 757.583652][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 757.589645][ C0] kcsan_setup_watchpoint+0x404/0x410 [ 757.595040][ C0] avtab_search_node+0x12b/0x2b0 [ 757.600009][ C0] context_struct_compute_av+0x343/0xaf0 [ 757.605663][ C0] security_compute_av+0x34f/0xa20 [ 757.610797][ C0] avc_compute_av+0x5d/0x430 [ 757.615431][ C0] avc_perm_nonode+0x5e/0xe0 [ 757.620064][ C0] avc_has_perm_noaudit+0xf2/0x130 [ 757.625215][ C0] avc_has_perm+0x60/0x190 [ 757.629681][ C0] selinux_inode_unlink+0x248/0x290 [ 757.634912][ C0] security_inode_unlink+0x78/0xb0 [ 757.640058][ C0] vfs_unlink+0x127/0x440 [ 757.644398][ C0] do_unlinkat+0x1e2/0x4b0 [ 757.648816][ C0] __x64_sys_unlink+0x2e/0x40 [ 757.653508][ C0] x64_sys_call+0x2f48/0x3000 [ 757.658212][ C0] do_syscall_64+0xc0/0x2a0 [ 757.662755][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.668654][ C0] [ 757.671008][ C0] value changed: 0x0000000000042290 -> 0x0000000000042291 [ 757.678134][ C0] [ 757.680471][ C0] Reported by Kernel Concurrency Sanitizer on: [ 757.686638][ C0] CPU: 0 UID: 0 PID: 28885 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 757.698206][ C0] Tainted: [W]=WARN [ 757.702020][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 757.712094][ C0] ================================================================== [ 757.738398][ C0] ================================================================== [ 757.746536][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 757.753785][ C0] [ 757.756128][ C0] read-write to 0xffff88813dec5020 of 4 bytes by interrupt on cpu 1: [ 757.764219][ C0] can_can_gw_rcv+0x807/0x820 [ 757.768941][ C0] can_rcv_filter+0xc7/0x4f0 [ 757.773561][ C0] can_receive+0x163/0x1c0 [ 757.777996][ C0] can_rcv+0xed/0x190 [ 757.782003][ C0] process_backlog+0x363/0x670 [ 757.786798][ C0] __napi_poll+0x5f/0x310 [ 757.791159][ C0] net_rx_action+0x452/0x930 [ 757.795787][ C0] handle_softirqs+0xb9/0x280 [ 757.800506][ C0] do_softirq+0x45/0x60 [ 757.804707][ C0] __local_bh_enable_ip+0x70/0x80 [ 757.809781][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 757.814764][ C0] batadv_tt_purge+0x2cd/0x610 [ 757.819553][ C0] process_scheduled_works+0x4cd/0x9d0 [ 757.825083][ C0] worker_thread+0x6bc/0x8b0 [ 757.829720][ C0] kthread+0x488/0x510 [ 757.833832][ C0] ret_from_fork+0x148/0x280 [ 757.838482][ C0] ret_from_fork_asm+0x1a/0x30 [ 757.843282][ C0] [ 757.845616][ C0] read-write to 0xffff88813dec5020 of 4 bytes by interrupt on cpu 0: [ 757.853853][ C0] can_can_gw_rcv+0x807/0x820 [ 757.858579][ C0] can_rcv_filter+0xc7/0x4f0 [ 757.863193][ C0] can_receive+0x163/0x1c0 [ 757.867637][ C0] can_rcv+0xed/0x190 [ 757.871651][ C0] process_backlog+0x363/0x670 [ 757.876456][ C0] __napi_poll+0x5f/0x310 [ 757.880823][ C0] net_rx_action+0x452/0x930 [ 757.885475][ C0] handle_softirqs+0xb9/0x280 [ 757.890198][ C0] do_softirq+0x45/0x60 [ 757.894397][ C0] __local_bh_enable_ip+0x70/0x80 [ 757.899464][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 757.904439][ C0] lock_sock_nested+0x132/0x160 [ 757.909324][ C0] tcp_close+0x1d/0xd0 [ 757.913433][ C0] inet_release+0xcd/0xf0 [ 757.917797][ C0] sock_close+0x6b/0x150 [ 757.922097][ C0] __fput+0x29b/0x650 [ 757.926116][ C0] fput_close_sync+0xad/0x190 [ 757.930842][ C0] __x64_sys_close+0x55/0xf0 [ 757.935490][ C0] x64_sys_call+0x2c25/0x3000 [ 757.940209][ C0] do_syscall_64+0xc0/0x2a0 [ 757.944758][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.950684][ C0] [ 757.953033][ C0] value changed: 0x00041e6f -> 0x00041e70 [ 757.958776][ C0] [ 757.961122][ C0] Reported by Kernel Concurrency Sanitizer on: [ 757.967296][ C0] CPU: 0 UID: 0 PID: 2716 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 757.978794][ C0] Tainted: [W]=WARN [ 757.982624][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 757.992712][ C0] ================================================================== [ 758.088230][ C1] ================================================================== [ 758.096457][ C1] BUG: KCSAN: data-race in vxcan_xmit / vxcan_xmit [ 758.103008][ C1] [ 758.105331][ C1] read-write to 0xffff888165fd0220 of 8 bytes by interrupt on cpu 0: [ 758.113417][ C1] vxcan_xmit+0x2c8/0x340 [ 758.117768][ C1] dev_hard_start_xmit+0x125/0x3e0 [ 758.122915][ C1] __dev_queue_xmit+0xdb1/0x1f20 [ 758.127879][ C1] can_send+0x589/0x720 [ 758.132047][ C1] can_can_gw_rcv+0x7bb/0x820 [ 758.136741][ C1] can_rcv_filter+0xc7/0x4f0 [ 758.141346][ C1] can_receive+0x163/0x1c0 [ 758.145784][ C1] can_rcv+0xed/0x190 [ 758.149785][ C1] process_backlog+0x363/0x670 [ 758.154569][ C1] __napi_poll+0x5f/0x310 [ 758.158908][ C1] net_rx_action+0x452/0x930 [ 758.163520][ C1] handle_softirqs+0xb9/0x280 [ 758.168219][ C1] do_softirq+0x45/0x60 [ 758.172408][ C1] __local_bh_enable_ip+0x70/0x80 [ 758.177459][ C1] kernel_fpu_end+0x6c/0x80 [ 758.181993][ C1] blake2s_compress+0x67/0x1740 [ 758.186866][ C1] blake2s_update+0xa3/0x160 [ 758.191476][ C1] wg_cookie_add_mac_to_packet+0x174/0x3a0 [ 758.197310][ C1] wg_packet_handshake_send_worker+0xd0/0x160 [ 758.203392][ C1] process_scheduled_works+0x4cd/0x9d0 [ 758.208858][ C1] worker_thread+0x6bc/0x8b0 [ 758.213468][ C1] kthread+0x488/0x510 [ 758.217553][ C1] ret_from_fork+0x148/0x280 [ 758.222167][ C1] ret_from_fork_asm+0x1a/0x30 [ 758.226941][ C1] [ 758.229280][ C1] read-write to 0xffff888165fd0220 of 8 bytes by interrupt on cpu 1: [ 758.237362][ C1] vxcan_xmit+0x2c8/0x340 [ 758.241723][ C1] dev_hard_start_xmit+0x125/0x3e0 [ 758.246851][ C1] __dev_queue_xmit+0xdb1/0x1f20 [ 758.251823][ C1] can_send+0x589/0x720 [ 758.255993][ C1] can_can_gw_rcv+0x7bb/0x820 [ 758.260706][ C1] can_rcv_filter+0xc7/0x4f0 [ 758.265315][ C1] can_receive+0x163/0x1c0 [ 758.269753][ C1] can_rcv+0xed/0x190 [ 758.273789][ C1] process_backlog+0x363/0x670 [ 758.278560][ C1] __napi_poll+0x5f/0x310 [ 758.282904][ C1] net_rx_action+0x452/0x930 [ 758.287498][ C1] handle_softirqs+0xb9/0x280 [ 758.292200][ C1] do_softirq+0x45/0x60 [ 758.296369][ C1] __local_bh_enable_ip+0x70/0x80 [ 758.301424][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 758.306398][ C1] batadv_tt_purge+0x2cd/0x610 [ 758.311189][ C1] process_scheduled_works+0x4cd/0x9d0 [ 758.316669][ C1] worker_thread+0x6bc/0x8b0 [ 758.321316][ C1] kthread+0x488/0x510 [ 758.325420][ C1] ret_from_fork+0x148/0x280 [ 758.330063][ C1] ret_from_fork_asm+0x1a/0x30 [ 758.334886][ C1] [ 758.337224][ C1] value changed: 0x000000000004722d -> 0x000000000004722e [ 758.344352][ C1] [ 758.346675][ C1] Reported by Kernel Concurrency Sanitizer on: [ 758.352842][ C1] CPU: 1 UID: 0 PID: 15804 Comm: kworker/u8:25 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 758.364475][ C1] Tainted: [W]=WARN [ 758.368281][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 758.378356][ C1] Workqueue: bat_events batadv_tt_purge [ 758.383930][ C1] ================================================================== [ 758.395251][ C1] ================================================================== [ 758.403376][ C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 758.410613][ C1] [ 758.412961][ C1] read-write to 0xffff888100b4c5b8 of 8 bytes by interrupt on cpu 0: [ 758.421055][ C1] can_rcv_filter+0xd9/0x4f0 [ 758.425677][ C1] can_receive+0x163/0x1c0 [ 758.430120][ C1] can_rcv+0xed/0x190 [ 758.434136][ C1] process_backlog+0x363/0x670 [ 758.438940][ C1] __napi_poll+0x5f/0x310 [ 758.443306][ C1] net_rx_action+0x452/0x930 [ 758.447924][ C1] handle_softirqs+0xb9/0x280 [ 758.452644][ C1] do_softirq+0x45/0x60 [ 758.456842][ C1] __local_bh_enable_ip+0x70/0x80 [ 758.461915][ C1] __alloc_skb+0x477/0x4b0 [ 758.466367][ C1] nsim_dev_trap_report_work+0x18a/0x630 [ 758.472031][ C1] process_scheduled_works+0x4cd/0x9d0 [ 758.477531][ C1] worker_thread+0x6bc/0x8b0 [ 758.482181][ C1] kthread+0x488/0x510 [ 758.486292][ C1] ret_from_fork+0x148/0x280 [ 758.490923][ C1] ret_from_fork_asm+0x1a/0x30 [ 758.495733][ C1] [ 758.498084][ C1] read-write to 0xffff888100b4c5b8 of 8 bytes by interrupt on cpu 1: [ 758.506171][ C1] can_rcv_filter+0xd9/0x4f0 [ 758.510794][ C1] can_receive+0x163/0x1c0 [ 758.515247][ C1] can_rcv+0xed/0x190 [ 758.519255][ C1] process_backlog+0x363/0x670 [ 758.524056][ C1] __napi_poll+0x5f/0x310 [ 758.528414][ C1] net_rx_action+0x452/0x930 [ 758.533049][ C1] handle_softirqs+0xb9/0x280 [ 758.537764][ C1] do_softirq+0x45/0x60 [ 758.541962][ C1] __local_bh_enable_ip+0x70/0x80 [ 758.547049][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 758.552044][ C1] batadv_tt_purge+0x2cd/0x610 [ 758.556863][ C1] process_scheduled_works+0x4cd/0x9d0 [ 758.562359][ C1] worker_thread+0x6bc/0x8b0 [ 758.567009][ C1] kthread+0x488/0x510 [ 758.571116][ C1] ret_from_fork+0x148/0x280 [ 758.575745][ C1] ret_from_fork_asm+0x1a/0x30 [ 758.580552][ C1] [ 758.582912][ C1] value changed: 0x0000000000045756 -> 0x0000000000045757 [ 758.590040][ C1] [ 758.592388][ C1] Reported by Kernel Concurrency Sanitizer on: [ 758.598570][ C1] CPU: 1 UID: 0 PID: 15804 Comm: kworker/u8:25 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 758.610249][ C1] Tainted: [W]=WARN [ 758.614067][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 758.624144][ C1] Workqueue: bat_events batadv_tt_purge [ 758.629763][ C1] ================================================================== [ 760.404761][ C0] ================================================================== [ 760.412903][ C0] BUG: KCSAN: data-race in vxcan_xmit / vxcan_xmit [ 760.419444][ C0] [ 760.421765][ C0] read-write to 0xffff8881605f8228 of 8 bytes by interrupt on cpu 1: [ 760.429838][ C0] vxcan_xmit+0x28b/0x340 [ 760.434189][ C0] dev_hard_start_xmit+0x125/0x3e0 [ 760.439314][ C0] __dev_queue_xmit+0xdb1/0x1f20 [ 760.444288][ C0] can_send+0x589/0x720 [ 760.448499][ C0] can_can_gw_rcv+0x7bb/0x820 [ 760.453225][ C0] can_rcv_filter+0xc7/0x4f0 [ 760.457827][ C0] can_receive+0x163/0x1c0 [ 760.462285][ C0] can_rcv+0xed/0x190 [ 760.466272][ C0] process_backlog+0x363/0x670 [ 760.471061][ C0] __napi_poll+0x5f/0x310 [ 760.475412][ C0] net_rx_action+0x452/0x930 [ 760.480021][ C0] handle_softirqs+0xb9/0x280 [ 760.484722][ C0] do_softirq+0x45/0x60 [ 760.488890][ C0] __local_bh_enable_ip+0x70/0x80 [ 760.493950][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 760.498914][ C0] neigh_periodic_work+0x5e9/0x690 [ 760.504046][ C0] process_scheduled_works+0x4cd/0x9d0 [ 760.509523][ C0] worker_thread+0x6bc/0x8b0 [ 760.514142][ C0] kthread+0x488/0x510 [ 760.518224][ C0] ret_from_fork+0x148/0x280 [ 760.522843][ C0] ret_from_fork_asm+0x1a/0x30 [ 760.527628][ C0] [ 760.530015][ C0] read-write to 0xffff8881605f8228 of 8 bytes by interrupt on cpu 0: [ 760.538099][ C0] vxcan_xmit+0x28b/0x340 [ 760.542465][ C0] dev_hard_start_xmit+0x125/0x3e0 [ 760.547623][ C0] __dev_queue_xmit+0xdb1/0x1f20 [ 760.552594][ C0] can_send+0x589/0x720 [ 760.558494][ C0] can_can_gw_rcv+0x7bb/0x820 [ 760.563196][ C0] can_rcv_filter+0xc7/0x4f0 [ 760.567789][ C0] can_receive+0x163/0x1c0 [ 760.572238][ C0] can_rcv+0xed/0x190 [ 760.576240][ C0] process_backlog+0x363/0x670 [ 760.581031][ C0] __napi_poll+0x5f/0x310 [ 760.585379][ C0] net_rx_action+0x452/0x930 [ 760.590027][ C0] handle_softirqs+0xb9/0x280 [ 760.594743][ C0] do_softirq+0x45/0x60 [ 760.598912][ C0] __local_bh_enable_ip+0x70/0x80 [ 760.603963][ C0] __alloc_skb+0x477/0x4b0 [ 760.608484][ C0] nsim_dev_trap_report_work+0x18a/0x630 [ 760.614136][ C0] process_scheduled_works+0x4cd/0x9d0 [ 760.619601][ C0] worker_thread+0x6bc/0x8b0 [ 760.624388][ C0] kthread+0x488/0x510 [ 760.628562][ C0] ret_from_fork+0x148/0x280 [ 760.633194][ C0] ret_from_fork_asm+0x1a/0x30 [ 760.637981][ C0] [ 760.640319][ C0] value changed: 0x000000000007ea0e -> 0x000000000007ea0f [ 760.647439][ C0] [ 760.649774][ C0] Reported by Kernel Concurrency Sanitizer on: [ 760.655940][ C0] CPU: 0 UID: 0 PID: 14251 Comm: kworker/u8:9 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 760.667506][ C0] Tainted: [W]=WARN [ 760.671325][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 760.681410][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 760.688199][ C0] ================================================================== [ 760.800977][ C0] ================================================================== [ 760.809136][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 760.816398][ C0] [ 760.818739][ C0] read-write to 0xffff88813dec5020 of 4 bytes by interrupt on cpu 1: [ 760.826836][ C0] can_can_gw_rcv+0x807/0x820 [ 760.831562][ C0] can_rcv_filter+0xc7/0x4f0 [ 760.836182][ C0] can_receive+0x163/0x1c0 [ 760.840633][ C0] can_rcv+0xed/0x190 [ 760.844649][ C0] process_backlog+0x363/0x670 [ 760.849454][ C0] __napi_poll+0x5f/0x310 [ 760.853827][ C0] net_rx_action+0x452/0x930 [ 760.858458][ C0] handle_softirqs+0xb9/0x280 [ 760.863174][ C0] run_ksoftirqd+0x1c/0x30 [ 760.867635][ C0] smpboot_thread_fn+0x32a/0x510 [ 760.872610][ C0] kthread+0x488/0x510 [ 760.876735][ C0] ret_from_fork+0x148/0x280 [ 760.881385][ C0] ret_from_fork_asm+0x1a/0x30 [ 760.886194][ C0] [ 760.888555][ C0] read-write to 0xffff88813dec5020 of 4 bytes by interrupt on cpu 0: [ 760.896733][ C0] can_can_gw_rcv+0x807/0x820 [ 760.901445][ C0] can_rcv_filter+0xc7/0x4f0 [ 760.906068][ C0] can_receive+0x163/0x1c0 [ 760.910511][ C0] can_rcv+0xed/0x190 [ 760.914529][ C0] process_backlog+0x363/0x670 [ 760.919333][ C0] __napi_poll+0x5f/0x310 [ 760.923703][ C0] net_rx_action+0x452/0x930 [ 760.928359][ C0] handle_softirqs+0xb9/0x280 [ 760.933088][ C0] run_ksoftirqd+0x1c/0x30 [ 760.937562][ C0] smpboot_thread_fn+0x32a/0x510 [ 760.942546][ C0] kthread+0x488/0x510 [ 760.946653][ C0] ret_from_fork+0x148/0x280 [ 760.951290][ C0] ret_from_fork_asm+0x1a/0x30 [ 760.956099][ C0] [ 760.958449][ C0] value changed: 0x0007f066 -> 0x0007f067 [ 760.964191][ C0] [ 760.966535][ C0] Reported by Kernel Concurrency Sanitizer on: [ 760.972711][ C0] CPU: 0 UID: 0 PID: 14 Comm: ksoftirqd/0 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 760.983948][ C0] Tainted: [W]=WARN [ 760.987769][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 760.997849][ C0] ================================================================== [ 761.100286][ C0] ================================================================== [ 761.108433][ C0] BUG: KCSAN: data-race in vxcan_xmit / vxcan_xmit [ 761.114979][ C0] [ 761.117317][ C0] read-write to 0xffff888165fd0220 of 8 bytes by interrupt on cpu 1: [ 761.125397][ C0] vxcan_xmit+0x2c8/0x340 [ 761.129761][ C0] dev_hard_start_xmit+0x125/0x3e0 [ 761.134913][ C0] __dev_queue_xmit+0xdb1/0x1f20 [ 761.139897][ C0] can_send+0x589/0x720 [ 761.144074][ C0] can_can_gw_rcv+0x7bb/0x820 [ 761.148770][ C0] can_rcv_filter+0xc7/0x4f0 [ 761.153379][ C0] can_receive+0x163/0x1c0 [ 761.157825][ C0] can_rcv+0xed/0x190 [ 761.161832][ C0] process_backlog+0x363/0x670 [ 761.166624][ C0] __napi_poll+0x5f/0x310 [ 761.170982][ C0] net_rx_action+0x452/0x930 [ 761.175604][ C0] handle_softirqs+0xb9/0x280 [ 761.180317][ C0] do_softirq+0x45/0x60 [ 761.184517][ C0] __local_bh_enable_ip+0x70/0x80 [ 761.189568][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 761.194535][ C0] neigh_periodic_work+0x5e9/0x690 [ 761.199652][ C0] process_scheduled_works+0x4cd/0x9d0 [ 761.205132][ C0] worker_thread+0x6bc/0x8b0 [ 761.209743][ C0] kthread+0x488/0x510 [ 761.213835][ C0] ret_from_fork+0x148/0x280 [ 761.218438][ C0] ret_from_fork_asm+0x1a/0x30 [ 761.223227][ C0] [ 761.225549][ C0] read-write to 0xffff888165fd0220 of 8 bytes by interrupt on cpu 0: [ 761.233633][ C0] vxcan_xmit+0x2c8/0x340 [ 761.237976][ C0] dev_hard_start_xmit+0x125/0x3e0 [ 761.243120][ C0] __dev_queue_xmit+0xdb1/0x1f20 [ 761.248075][ C0] can_send+0x589/0x720 [ 761.252243][ C0] can_can_gw_rcv+0x7bb/0x820 [ 761.256948][ C0] can_rcv_filter+0xc7/0x4f0 [ 761.261556][ C0] can_receive+0x163/0x1c0 [ 761.265991][ C0] can_rcv+0xed/0x190 [ 761.270010][ C0] process_backlog+0x363/0x670 [ 761.274793][ C0] __napi_poll+0x5f/0x310 [ 761.279130][ C0] net_rx_action+0x452/0x930 [ 761.283737][ C0] handle_softirqs+0xb9/0x280 [ 761.288448][ C0] do_softirq+0x45/0x60 [ 761.292625][ C0] __local_bh_enable_ip+0x70/0x80 [ 761.297666][ C0] __alloc_skb+0x477/0x4b0 [ 761.302118][ C0] audit_log_start+0x3aa/0x730 [ 761.306897][ C0] common_lsm_audit+0x65/0x230 [ 761.311677][ C0] slow_avc_audit+0x14c/0x190 [ 761.316378][ C0] audit_inode_permission+0x119/0x160 [ 761.321787][ C0] selinux_inode_permission+0x723/0x7d0 [ 761.327346][ C0] security_inode_permission+0x69/0xa0 [ 761.332829][ C0] link_path_walk+0x1de/0xe30 [ 761.337522][ C0] path_lookupat+0x8c/0x500 [ 761.342063][ C0] filename_lookup+0x190/0x390 [ 761.346837][ C0] vfs_statx+0x96/0x170 [ 761.351019][ C0] vfs_fstatat+0x115/0x170 [ 761.355465][ C0] __se_sys_newfstatat+0x55/0x3e0 [ 761.360526][ C0] __x64_sys_newfstatat+0x55/0x70 [ 761.365571][ C0] x64_sys_call+0x111f/0x3000 [ 761.370299][ C0] do_syscall_64+0xc0/0x2a0 [ 761.374833][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.380780][ C0] [ 761.383114][ C0] value changed: 0x0000000000086160 -> 0x0000000000086161 [ 761.390221][ C0] [ 761.392554][ C0] Reported by Kernel Concurrency Sanitizer on: [ 761.398795][ C0] CPU: 0 UID: 0 PID: 3311 Comm: dhcpcd-run-hook Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 761.410539][ C0] Tainted: [W]=WARN [ 761.414363][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 761.424422][ C0] ================================================================== [ 761.435202][ C1] ================================================================== [ 761.443365][ C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 761.450591][ C1] [ 761.452937][ C1] read-write to 0xffff888100b4c5b8 of 8 bytes by interrupt on cpu 0: [ 761.461028][ C1] can_rcv_filter+0xd9/0x4f0 [ 761.465646][ C1] can_receive+0x163/0x1c0 [ 761.470106][ C1] can_rcv+0xed/0x190 [ 761.474110][ C1] process_backlog+0x363/0x670 [ 761.478913][ C1] __napi_poll+0x5f/0x310 [ 761.483275][ C1] net_rx_action+0x452/0x930 [ 761.487888][ C1] handle_softirqs+0xb9/0x280 [ 761.492625][ C1] do_softirq+0x45/0x60 [ 761.496822][ C1] __local_bh_enable_ip+0x70/0x80 [ 761.501879][ C1] __alloc_skb+0x477/0x4b0 [ 761.506336][ C1] audit_log_start+0x3aa/0x730 [ 761.511134][ C1] common_lsm_audit+0x65/0x230 [ 761.515928][ C1] slow_avc_audit+0x14c/0x190 [ 761.520642][ C1] audit_inode_permission+0x119/0x160 [ 761.526054][ C1] selinux_inode_permission+0x723/0x7d0 [ 761.531629][ C1] security_inode_permission+0x69/0xa0 [ 761.537115][ C1] link_path_walk+0x1de/0xe30 [ 761.541842][ C1] path_lookupat+0x8c/0x500 [ 761.546381][ C1] filename_lookup+0x190/0x390 [ 761.551182][ C1] vfs_statx+0x96/0x170 [ 761.555371][ C1] vfs_fstatat+0x115/0x170 [ 761.559813][ C1] __se_sys_newfstatat+0x55/0x3e0 [ 761.564874][ C1] __x64_sys_newfstatat+0x55/0x70 [ 761.569931][ C1] x64_sys_call+0x111f/0x3000 [ 761.574642][ C1] do_syscall_64+0xc0/0x2a0 [ 761.579194][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.585115][ C1] [ 761.587460][ C1] read-write to 0xffff888100b4c5b8 of 8 bytes by interrupt on cpu 1: [ 761.595553][ C1] can_rcv_filter+0xd9/0x4f0 [ 761.600205][ C1] can_receive+0x163/0x1c0 [ 761.604655][ C1] can_rcv+0xed/0x190 [ 761.608664][ C1] process_backlog+0x363/0x670 [ 761.613450][ C1] __napi_poll+0x5f/0x310 [ 761.617805][ C1] net_rx_action+0x452/0x930 [ 761.622445][ C1] handle_softirqs+0xb9/0x280 [ 761.627164][ C1] run_ksoftirqd+0x1c/0x30 [ 761.631629][ C1] smpboot_thread_fn+0x32a/0x510 [ 761.636613][ C1] kthread+0x488/0x510 [ 761.640727][ C1] ret_from_fork+0x148/0x280 [ 761.645361][ C1] ret_from_fork_asm+0x1a/0x30 [ 761.650173][ C1] [ 761.652515][ C1] value changed: 0x0000000000082ad5 -> 0x0000000000082ad6 [ 761.659631][ C1] [ 761.661974][ C1] Reported by Kernel Concurrency Sanitizer on: [ 761.668150][ C1] CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 761.679388][ C1] Tainted: [W]=WARN [ 761.683204][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 761.693282][ C1] ================================================================== [ 762.126374][ T29] kauditd_printk_skb: 595 callbacks suppressed [ 762.126394][ T29] audit: type=1400 audit(1769642208.822:61566): avc: denied { search } for pid=3309 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 762.155863][ T29] audit: type=1400 audit(1769642208.832:61567): avc: denied { search } for pid=3309 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=478 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 762.179947][ T29] audit: type=1400 audit(1769642208.832:61568): avc: denied { search } for pid=3309 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 762.204121][ T29] audit: type=1400 audit(1769642208.832:61569): avc: denied { search } for pid=3309 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 762.228406][ T29] audit: type=1400 audit(1769642210.182:61570): avc: denied { search } for pid=3311 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 762.251604][ T29] audit: type=1400 audit(1769642210.182:61571): avc: denied { search } for pid=3311 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=478 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 762.275475][ T29] audit: type=1400 audit(1769642210.182:61572): avc: denied { search } for pid=3311 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 762.299702][ T29] audit: type=1400 audit(1769642210.182:61573): avc: denied { read open } for pid=3311 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 762.326323][ T29] audit: type=1400 audit(1769642210.222:61574): avc: denied { getattr } for pid=3311 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 762.352682][ T29] audit: type=1400 audit(1769642210.482:61575): avc: denied { search } for pid=3311 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 763.450054][ C0] ================================================================== [ 763.458193][ C0] BUG: KCSAN: data-race in vxcan_xmit / vxcan_xmit [ 763.464711][ C0] [ 763.467034][ C0] read-write to 0xffff8881605f8228 of 8 bytes by interrupt on cpu 1: [ 763.475120][ C0] vxcan_xmit+0x28b/0x340 [ 763.479484][ C0] dev_hard_start_xmit+0x125/0x3e0 [ 763.484629][ C0] __dev_queue_xmit+0xdb1/0x1f20 [ 763.489584][ C0] can_send+0x589/0x720 [ 763.493755][ C0] can_can_gw_rcv+0x7bb/0x820 [ 763.498448][ C0] can_rcv_filter+0xc7/0x4f0 [ 763.503054][ C0] can_receive+0x163/0x1c0 [ 763.507476][ C0] can_rcv+0xed/0x190 [ 763.511474][ C0] process_backlog+0x363/0x670 [ 763.516253][ C0] __napi_poll+0x5f/0x310 [ 763.520608][ C0] net_rx_action+0x452/0x930 [ 763.525221][ C0] handle_softirqs+0xb9/0x280 [ 763.529930][ C0] run_ksoftirqd+0x1c/0x30 [ 763.534375][ C0] smpboot_thread_fn+0x32a/0x510 [ 763.539324][ C0] kthread+0x488/0x510 [ 763.543416][ C0] ret_from_fork+0x148/0x280 [ 763.548020][ C0] ret_from_fork_asm+0x1a/0x30 [ 763.552807][ C0] [ 763.555133][ C0] read-write to 0xffff8881605f8228 of 8 bytes by interrupt on cpu 0: [ 763.563215][ C0] vxcan_xmit+0x28b/0x340 [ 763.567557][ C0] dev_hard_start_xmit+0x125/0x3e0 [ 763.572717][ C0] __dev_queue_xmit+0xdb1/0x1f20 [ 763.577678][ C0] can_send+0x589/0x720 [ 763.581852][ C0] can_can_gw_rcv+0x7bb/0x820 [ 763.586549][ C0] can_rcv_filter+0xc7/0x4f0 [ 763.591164][ C0] can_receive+0x163/0x1c0 [ 763.595597][ C0] can_rcv+0xed/0x190 [ 763.599598][ C0] process_backlog+0x363/0x670 [ 763.604383][ C0] __napi_poll+0x5f/0x310 [ 763.608723][ C0] net_rx_action+0x452/0x930 [ 763.613333][ C0] handle_softirqs+0xb9/0x280 [ 763.618030][ C0] do_softirq+0x45/0x60 [ 763.622213][ C0] __local_bh_enable_ip+0x70/0x80 [ 763.627257][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 763.632229][ C0] nsim_dev_trap_report_work+0x52b/0x630 [ 763.637873][ C0] process_scheduled_works+0x4cd/0x9d0 [ 763.643349][ C0] worker_thread+0x6bc/0x8b0 [ 763.647976][ C0] kthread+0x488/0x510 [ 763.652072][ C0] ret_from_fork+0x148/0x280 [ 763.656673][ C0] ret_from_fork_asm+0x1a/0x30 [ 763.661463][ C0] [ 763.663799][ C0] value changed: 0x00000000000b7060 -> 0x00000000000b7061 [ 763.670907][ C0] [ 763.673242][ C0] Reported by Kernel Concurrency Sanitizer on: [ 763.679404][ C0] CPU: 0 UID: 0 PID: 3306 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 763.690890][ C0] Tainted: [W]=WARN [ 763.694703][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 763.704781][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 763.711564][ C0] ================================================================== [ 763.821532][ C1] ================================================================== [ 763.829691][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 763.836947][ C1] [ 763.839291][ C1] read-write to 0xffff88813dec5020 of 4 bytes by interrupt on cpu 0: [ 763.847386][ C1] can_can_gw_rcv+0x807/0x820 [ 763.852107][ C1] can_rcv_filter+0xc7/0x4f0 [ 763.856746][ C1] can_receive+0x163/0x1c0 [ 763.861200][ C1] can_rcv+0xed/0x190 [ 763.865217][ C1] process_backlog+0x363/0x670 [ 763.870016][ C1] __napi_poll+0x5f/0x310 [ 763.874383][ C1] net_rx_action+0x452/0x930 [ 763.879031][ C1] handle_softirqs+0xb9/0x280 [ 763.883757][ C1] do_softirq+0x45/0x60 [ 763.887953][ C1] __local_bh_enable_ip+0x70/0x80 [ 763.893027][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 763.898027][ C1] wg_packet_decrypt_worker+0x69e/0x6e0 [ 763.903601][ C1] process_scheduled_works+0x4cd/0x9d0 [ 763.909096][ C1] worker_thread+0x6bc/0x8b0 [ 763.913725][ C1] kthread+0x488/0x510 [ 763.917844][ C1] ret_from_fork+0x148/0x280 [ 763.922478][ C1] ret_from_fork_asm+0x1a/0x30 [ 763.927304][ C1] [ 763.929648][ C1] read-write to 0xffff88813dec5020 of 4 bytes by interrupt on cpu 1: [ 763.937743][ C1] can_can_gw_rcv+0x807/0x820 [ 763.942461][ C1] can_rcv_filter+0xc7/0x4f0 [ 763.947081][ C1] can_receive+0x163/0x1c0 [ 763.951534][ C1] can_rcv+0xed/0x190 [ 763.955542][ C1] process_backlog+0x363/0x670 [ 763.960346][ C1] __napi_poll+0x5f/0x310 [ 763.964709][ C1] net_rx_action+0x452/0x930 [ 763.969360][ C1] handle_softirqs+0xb9/0x280 [ 763.974088][ C1] do_softirq+0x45/0x60 [ 763.978294][ C1] __local_bh_enable_ip+0x70/0x80 [ 763.983361][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 763.988385][ C1] neigh_periodic_work+0x5e9/0x690 [ 763.993533][ C1] process_scheduled_works+0x4cd/0x9d0 [ 763.999019][ C1] worker_thread+0x6bc/0x8b0 [ 764.003640][ C1] kthread+0x488/0x510 [ 764.007748][ C1] ret_from_fork+0x148/0x280 [ 764.012383][ C1] ret_from_fork_asm+0x1a/0x30 [ 764.017185][ C1] [ 764.019536][ C1] value changed: 0x000b5bd1 -> 0x000b5bd2 [ 764.025301][ C1] [ 764.027649][ C1] Reported by Kernel Concurrency Sanitizer on: [ 764.033836][ C1] CPU: 1 UID: 0 PID: 17872 Comm: kworker/1:16 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 764.045602][ C1] Tainted: [W]=WARN [ 764.049425][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 764.059540][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 764.066520][ C1] ================================================================== [ 764.165466][ C0] ================================================================== [ 764.173608][ C0] BUG: KCSAN: data-race in vxcan_xmit / vxcan_xmit [ 764.180146][ C0] [ 764.182475][ C0] read-write to 0xffff888165fd0220 of 8 bytes by interrupt on cpu 1: [ 764.190568][ C0] vxcan_xmit+0x2c8/0x340 [ 764.194933][ C0] dev_hard_start_xmit+0x125/0x3e0 [ 764.200073][ C0] __dev_queue_xmit+0xdb1/0x1f20 [ 764.205051][ C0] can_send+0x589/0x720 [ 764.209309][ C0] can_can_gw_rcv+0x7bb/0x820 [ 764.214010][ C0] can_rcv_filter+0xc7/0x4f0 [ 764.218603][ C0] can_receive+0x163/0x1c0 [ 764.223030][ C0] can_rcv+0xed/0x190 [ 764.227019][ C0] process_backlog+0x363/0x670 [ 764.231806][ C0] __napi_poll+0x5f/0x310 [ 764.236145][ C0] net_rx_action+0x452/0x930 [ 764.240756][ C0] handle_softirqs+0xb9/0x280 [ 764.245463][ C0] do_softirq+0x45/0x60 [ 764.249650][ C0] __local_bh_enable_ip+0x70/0x80 [ 764.254768][ C0] __alloc_skb+0x477/0x4b0 [ 764.259219][ C0] nsim_dev_trap_report_work+0x18a/0x630