last executing test programs: 1m13.419505804s ago: executing program 1 (id=267): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r0, r0) quotactl$Q_QUOTAON(0xffffffff80000203, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, r0, &(0x7f0000000100)='./file0\x00') r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e008d2a00000000000000000a", @ANYBLOB='\x00\x00\x00g'], 0x24}, 0x1, 0x0, 0x0, 0x10008000}, 0x14048010) getpid() mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 1m13.332530979s ago: executing program 1 (id=268): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@errors_continue}, {@minixdf}, {@dioread_nolock}, {@inlinecrypt}]}, 0x1, 0x3dd, &(0x7f00000008c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xff}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x400, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000000)=""/31}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r3 = epoll_create(0x6) r4 = socket$netlink(0x10, 0x3, 0x4) epoll_wait(r3, &(0x7f00000002c0)=[{}], 0x1, 0x9450) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 1m12.416584215s ago: executing program 1 (id=281): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000395200000000fcffffff0000ffff", @ANYRES32=0x0, @ANYBLOB="423d0000400000001c001280090001007866726d000000000c0002800800010003000000140003007866726d30"], 0x50}, 0x1, 0x0, 0x3000000, 0x80}, 0x40) 1m11.787738302s ago: executing program 1 (id=286): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getuid() bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./bus\x00', 0x1218088, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYRES16, @ANYRES32], 0x4a, 0x2e5, &(0x7f00000001c0)="$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") r1 = syz_clone(0x800100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x2, &(0x7f0000000180)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x20000020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xdad527ba36a6c5c5) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x40, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x4000000) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x3204806, &(0x7f0000000540)=ANY=[@ANYBLOB="636865636b3d7374726963742c636865636b3d72656c61786564006d6f64653d3078303030303030300400000000000000312c6d61703d6f66662c63727566742c696f636861727365743d6d6163677265656b416d61703d61636f726e2c676f636861727365743d69736f383835392d322c73657373696f6e3d3078303030303030303030303030303035382c73686f776173736f632c6d6f64653d3078666666666666666666666666666666642c636865636b3d7374726963742c6673636f6e746578743d73797374656d5f752c7065726d69745f646972656374696f2c00"], 0xfa, 0x69f, &(0x7f0000000f00)="$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") open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x2c, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') lseek(r5, 0x7fffffffffffffff, 0x2) write$binfmt_aout(r5, 0x0, 0xa052) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) 1m11.263367528s ago: executing program 1 (id=289): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) unshare(0x6020400) (async) bpf$BPF_BTF_LOAD(0x26, 0x0, 0x0) (async) unshare(0x6a040000) (async) r2 = socket$inet6(0xa, 0x2, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) (async) r4 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) timer_settime(r5, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) (async) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400000000ffffffff00000000", @ANYRES32=r6, @ANYBLOB="0b12050081010000240012800b00010069703667726500001400020008000100", @ANYRES32=r6, @ANYBLOB="0800050003"], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) (async) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, 0x0, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0xb0, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x9c, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xffffffffffffffa5, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbedit={0x68, 0x1, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x3f, 0x8be6, 0x4}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PTYPE={0x0, 0x7, 0x2}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c810) 1m10.835096342s ago: executing program 1 (id=292): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 1m10.717681451s ago: executing program 32 (id=292): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 1.500161428s ago: executing program 4 (id=786): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001100)=ANY=[@ANYBLOB], 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x88}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000073013500000000009500000000000000fc87e45434febf37a84d5ecc15e825c298da66f558545cd4c7444c609d364b8a66b27a7e9841edd43b6e341e957227e7da0542a2c9f72f2d037fe2f2d5c4"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000680)) bpf$ITER_CREATE(0x21, &(0x7f00000009c0)={r0}, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x2, 0x0, 0x0, 0x4, 0x0, 0xff}]}, {0x0, [0x0, 0x5f, 0x30, 0x2e, 0x5f]}}, 0x0, 0x2b}, 0x20) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000040)) close(r1) 1.475942394s ago: executing program 4 (id=788): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x17008, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 1.435152417s ago: executing program 4 (id=789): r0 = socket$kcm(0x2a, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x0}, 0x40) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20023) r1 = socket$kcm(0x2a, 0x2, 0x0) close(0x3) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) 1.28784193s ago: executing program 4 (id=793): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000040000000700000006"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000800000000000008000000000000ccb1734699e00000", @ANYRES32, @ANYBLOB='\x00'/14], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r0}, 0xc) socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000001c0)='freezer.state\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8920, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e1d, @local}, 0x10, 0x0}, 0x8850) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0xb, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1fff8}], 0x1}, 0x80d1) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0xfffffffffffffffe, 0xfffffffffefffffe}, 0x0, 0x20, 0xc2ba, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f0300efff000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(r2) 1.22645501s ago: executing program 2 (id=796): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r2, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b35d25a806c8c6f94f90f24fc", 0x13}], 0x1}, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x33, &(0x7f0000000380), 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x5c, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r4 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x3, 0x10000, 0x5}, {0x10000002, 0x0, 0x0, 0x9}], 0x10, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) close(r4) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x2, 0x2, @loopback}, 0xfffffffffffffd4e, 0x0}, 0x10) r8 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x64, &(0x7f0000000000)=r10, 0x10) setsockopt$sock_attach_bpf(r4, 0x84, 0x6e, &(0x7f0000000000)=r7, 0x10) close(0x3) 1.192233093s ago: executing program 5 (id=797): bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c000) sendmsg$sock(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x5, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[], 0x50) socket$kcm(0xa, 0x6, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xfe33) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x9, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xf}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="2008020022003507d25a806f8c6394f90524fc600df01141090005000400000037153e370248038011f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.032185474s ago: executing program 4 (id=798): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2, 0xffffffffffffffff, 0x2000000}, 0xc) 474.379045ms ago: executing program 4 (id=800): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10c) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=[{0x18, 0x84, 0x0, 'b'}], 0x18}, 0x880) 474.052375ms ago: executing program 5 (id=801): socketpair$unix(0x1, 0x3a8ca16d0d6d1c4e, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14690, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xb3b, 0xffffffffffbffff8}, 0x842, 0x0, 0x6, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x2f8}, 0x20000081) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000200), 0x21) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x48) 473.872764ms ago: executing program 3 (id=802): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000001680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 436.124948ms ago: executing program 3 (id=804): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)=[0x0, 0x0], 0x0, 0xab, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xa5, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000800)=[0x0], &(0x7f0000000140), 0x0, 0x46, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xbe, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="850000003b000400760000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x100, 0x40, '\x00', r2, @fallback=0x2f, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x10a200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x3, 0x4, 0x8, 0x0, 0x4, 0xa02ba79b55f5b37c, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3ff, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x80, 0xf, 0x7, 0x0, 0x8000000000000000, 0x9, 0xff, 0x0, 0x101, 0x0, 0x4}, r1, 0x2, r3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x1f, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000003000000000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b78500000083000000bf09920000000000005509010000000000950000000000000018590000100000000000000000000000185000000c00000000000000000000009500000000000000850000006700000e7141756b18cf24166214c08b0085100000ffffffff180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000085000000d2000000bf91000000000000b7020000000000008500000084000000b7000000000000000000"], &(0x7f0000000100)='GPL\x00', 0x6, 0xed, &(0x7f0000000280)=""/237, 0x41100, 0x5c, '\x00', r0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x3, 0x6, 0x5, 0x401}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000700)=[{0x4, 0x5, 0x3, 0xb}, {0x4, 0x5, 0x4, 0x8}, {0x2, 0x5, 0xa, 0x8}], 0x10, 0x4}, 0x94) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xe}], 0x28}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r5, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a00000000000061110c10000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061108e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) ioctl$PERF_EVENT_IOC_DISABLE(r7, 0x2401, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0xdb0a907) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000007feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030000001200001d44000000000000db0a00fee10000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$kcm(0x10, 0x2, 0x0) 435.552178ms ago: executing program 0 (id=805): socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getpid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000340)=""/235, 0xeb}, {&(0x7f00000005c0)=""/253, 0xfd}, {&(0x7f0000000840)=""/133, 0x85}, {&(0x7f0000000900)=""/180, 0xb4}], 0x5, &(0x7f00000001c0)=""/52, 0x34}, 0x2000) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080) r2 = socket$kcm(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r2}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2020, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r3, 0xe0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000280)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x60, &(0x7f0000000340), 0x0, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x6b, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000300"/43], 0x0, 0x42}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(r4, 0x0, 0x8080) socket$kcm(0x10, 0x2, 0x0) 385.694699ms ago: executing program 5 (id=806): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x38, 0x0, 0x1300) 343.478371ms ago: executing program 3 (id=807): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x27, 0xa, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={0x0, 0x0, 0x10, r3}, 0x18) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32, @ANYBLOB="0000000003000000fcffffff00000000000000f617586175866f3eebe8000000000000000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0xa89, 0xa4, &(0x7f0000000500)=""/164, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r5], 0x0, 0x10, 0xf}, 0x94) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000940)='syzkaller\x00', 0xfff, 0xa, &(0x7f0000000980)=""/10, 0x41100, 0x20, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000009c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000a00)={0x5}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a40)=[{0x0, 0x5, 0xc, 0x2}], 0x10, 0x9cf3}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r1}, &(0x7f0000000600), &(0x7f0000000b40)=r6}, 0x20) recvmsg$kcm(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/47, 0x2f}, 0x2142) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f0000000400)={&(0x7f0000000500)=@abs={0x1, 0x5c, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x408c0}, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r10 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000003280)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d02000000000000001800000000000000840000000700000062"], 0x38}, 0x41) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_ID(r7, 0x80082407, &(0x7f0000000640)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x1) 343.021871ms ago: executing program 2 (id=808): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) 342.732351ms ago: executing program 5 (id=809): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x480000001}, 0x8020, 0x0, 0x1780, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x2f, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8983, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 342.518111ms ago: executing program 0 (id=810): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x4) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x11b, 0x3, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, 0x0, 0x0) 325.863698ms ago: executing program 5 (id=811): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair(0x8, 0x6, 0xccab, &(0x7f0000000180)) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="000600000102"}) 288.126311ms ago: executing program 0 (id=812): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) 287.671521ms ago: executing program 2 (id=813): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0500000005000000fd09000085"], 0x50) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x8000000000000001}, 0xa08, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r2}, &(0x7f0000000580), &(0x7f0000000680)=r3}, 0x20) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r0}, 0x38) 228.509571ms ago: executing program 3 (id=814): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000}, 0x2c) 227.922671ms ago: executing program 0 (id=815): r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x37, 0x27, &(0x7f0000000100)="e7dbfc1cfa5a716b1165f166ce6d206b9dfe30f2da8b026dbb79137fc84dca4ff6fc3d2cc1e45ebea27a2d12ad26d5dd7e784bd7224845", &(0x7f0000000180)=""/39, 0x4, 0x0, 0xeb, 0xa, &(0x7f0000000240)="548e3c9db2ae6a06b681d0ab3f70b8128f247887b925166a7f4a9590398e702c38fe844533d873ba2990963a63191471375c1de80bf50cc485f59a3f70e09ef091b7eb8a1a62e43eac64aafd2f2fabe3eb33c2b68c301f49d58fa38eef9e7eba8a6a9bfba221d8ee3fc6a7edae246071f0bbc1d46f88caea2010247df24a5806691f530ae2393af402ea717dcd6675787312e6d9e862e00b4dab8b6d8021c97a70087ff0dcddb526aa3c513fb1dd5478c715aac7d280c24ee20261eee21716e74ac3127afeab54479b8428e586a33510111ab86e22311ce0c377e3960bbb99eca3ba73130477f27a9c9499", &(0x7f00000001c0)="240d88f56c78aa03c2e7", 0x0, 0x0, 0x8}, 0x50) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @empty}, 0x80, 0x0}, 0xb80b) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x2, 0x4e27, @loopback}, 0x10, 0x0}, 0x24000894) 211.349988ms ago: executing program 2 (id=816): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x34}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 192.574025ms ago: executing program 0 (id=817): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x10, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756e6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2c, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 140.527675ms ago: executing program 2 (id=818): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x15, 0x10, 0x40, 0x9, 0x400, 0xffffffffffffffff, 0xffffff44, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x6a, 0x9, 0xfc, 0x0, 0x0, 0x800000000057d, 0x20860, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x3}, 0x100804, 0xca, 0x200000, 0x7, 0x5, 0xffff, 0x3, 0x0, 0xe, 0x0, 0x4}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xb) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x9a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90424d5503", 0x27}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) 130.235253ms ago: executing program 3 (id=819): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203"], 0xfe1b) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) 117.790631ms ago: executing program 2 (id=820): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x1020, 0x9, 0x8, 0x0, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0xfffffffffffffffe, 0xfffffffffefffffe}, 0x0, 0x20, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1212000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x2}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x10c002, 0xac5d, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4b04}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x80, 0x0}, 0x0) recvmsg(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000080)=""/9, 0x9}, 0x40000010) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xf}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2f0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000380)=""/133, 0x85, 0x0, &(0x7f0000000500)=""/233, 0xe9}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(r7, &(0x7f00000009c0)={0x0, 0xfffffeb6, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x18, 0x404c0d1}, 0x40808) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff0000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000004a00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e00000000000000ff070000f1450000c0000000", @ANYRES32, @ANYBLOB="065ae191ba0000000f00000000a585d5293651b737cd9583", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000000400"/28], 0x50) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 44.603008ms ago: executing program 5 (id=821): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x23, 0x5, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') ioctl$TUNSETIFF(r3, 0xb701, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40107447, 0x0) close(r2) r4 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0x0, r4, 0x0, 0x1, &(0x7f0000000440)='\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@ifindex, r1, 0x9, 0x24, 0x0, @void, @void, @void, @value=r5}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0xa, 0x2, 0x11) sendmsg$sock(r6, 0x0, 0x8010) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 41.743177ms ago: executing program 0 (id=822): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x300}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 3 (id=823): socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, @perf_config_ext={0x0, 0x7fff}, 0x11400, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000001040)="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", 0x20d}, {&(0x7f0000000740)="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", 0x367}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @local}}}], 0x20}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)="95b42fb585170cd934897ba3cc71225e71c8507250ffcbf717d301f6c47426e3209e550ff7", 0x25}], 0x1, &(0x7f00000002c0)="effd7805e8cecd41c08b9d7b771975fffcc8b13fd7fe8b0e8b34a8f0b141c0b9e6331ef6c51fe437d15135535851a0020af05083fd9ed51f05dfbbd7994a8cfe5950262d880ca56aff9974bb0d2171c7585fefb4b599f5b38f64c0c41f663624a299a659d0145e1b8c333dafcb9ca3958c54e93bb3f8c08d11b348e6cc77f13c84afd62bb2262f", 0x87, 0x20008040}, 0x4000040) kernel console output (not intermixed with test programs): 3 [ 71.313389][ T4655] total_pgpgout 34018 [ 71.317423][ T4655] total_pgfault 45892 [ 71.321472][ T4655] total_pgmajfault 60 [ 71.325662][ T4655] total_inactive_anon 36864 [ 71.330146][ T4655] total_active_anon 90112 [ 71.334725][ T4655] total_inactive_file 20480 [ 71.339238][ T4655] total_active_file 524288 [ 71.343788][ T4655] total_unevictable 0 [ 71.347865][ T4655] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.318,pid=4654,uid=0 [ 71.362792][ T4655] Memory cgroup out of memory: Killed process 4655 (syz.0.318) total-vm:94292kB, anon-rss:1336kB, file-rss:22432kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 71.370865][ T4518] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.492125][ T4717] loop4: detected capacity change from 0 to 512 [ 71.540543][ T4717] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.553541][ T4655] syz.0.318 (4655) used greatest stack depth: 5776 bytes left [ 71.562214][ T4717] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.609024][ T4717] EXT4-fs error (device loop4): ext4_get_first_dir_block:3538: inode #12: comm syz.4.329: directory missing '.' [ 71.671716][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.809222][ T4518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.879947][ T4736] loop0: detected capacity change from 0 to 128 [ 71.889469][ T4736] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.901853][ T4736] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.985513][ T4740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.994122][ T4740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.038895][ T4738] smc: net device sit0 applied user defined pnetid SYZ1 [ 72.136175][ T4745] netlink: 88 bytes leftover after parsing attributes in process `syz.0.333'. [ 72.778329][ T4518] veth0_vlan: entered promiscuous mode [ 72.794118][ T4518] veth1_vlan: entered promiscuous mode [ 72.850174][ T4518] veth0_macvtap: entered promiscuous mode [ 72.861879][ T4765] loop2: detected capacity change from 0 to 128 [ 72.877314][ T4518] veth1_macvtap: entered promiscuous mode [ 72.898900][ T4765] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.926815][ T4518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.941642][ T4765] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.958890][ T4518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.980634][ T4348] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.996327][ T4348] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.032659][ T4348] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.046664][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.062485][ T4348] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.163833][ T3312] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.186566][ T4780] FAULT_INJECTION: forcing a failure. [ 74.186566][ T4780] name failslab, interval 1, probability 0, space 0, times 0 [ 74.978799][ T4780] CPU: 1 UID: 0 PID: 4780 Comm: syz.3.343 Tainted: G W syzkaller #0 PREEMPT(full) [ 74.978897][ T4780] Tainted: [W]=WARN [ 74.978904][ T4780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 74.978957][ T4780] Call Trace: [ 74.978964][ T4780] [ 74.978973][ T4780] __dump_stack+0x1d/0x30 [ 74.979000][ T4780] dump_stack_lvl+0x95/0xd0 [ 74.979024][ T4780] dump_stack+0x15/0x1b [ 74.979128][ T4780] should_fail_ex+0x263/0x280 [ 74.979152][ T4780] should_failslab+0x8c/0xb0 [ 74.979173][ T4780] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 74.979204][ T4780] ? __alloc_skb+0x2d6/0x690 [ 74.979224][ T4780] __alloc_skb+0x2d6/0x690 [ 74.979242][ T4780] ? __alloc_skb+0x200/0x690 [ 74.979266][ T4780] alloc_skb_with_frags+0x7d/0x470 [ 74.979378][ T4780] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 74.979399][ T4780] ? rcu_preempt_deferred_qs_irqrestore+0x3dd/0x5c0 [ 74.979424][ T4780] sock_alloc_send_pskb+0x44d/0x500 [ 74.979470][ T4780] rawv6_send_hdrinc+0x167/0xb20 [ 74.979500][ T4780] ? obj_cgroup_charge_account+0x122/0x1a0 [ 74.979524][ T4780] ? xfrm_lookup_route+0xd6/0x110 [ 74.979544][ T4780] rawv6_sendmsg+0x10de/0x1230 [ 74.979598][ T4780] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 74.979621][ T4780] inet_sendmsg+0xc5/0xd0 [ 74.979643][ T4780] ? __pfx_inet_sendmsg+0x10/0x10 [ 74.979680][ T4780] ____sys_sendmsg+0x519/0x5b0 [ 74.979789][ T4780] ___sys_sendmsg+0x195/0x1e0 [ 74.979852][ T4780] __x64_sys_sendmsg+0xd4/0x160 [ 74.979950][ T4780] x64_sys_call+0x194c/0x3020 [ 74.979976][ T4780] do_syscall_64+0x12c/0x370 [ 74.979998][ T4780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.980020][ T4780] RIP: 0033:0x7f3d1ea1c799 [ 74.980080][ T4780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.980096][ T4780] RSP: 002b:00007f3d1d46f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.980117][ T4780] RAX: ffffffffffffffda RBX: 00007f3d1ec95fa0 RCX: 00007f3d1ea1c799 [ 74.980166][ T4780] RDX: 0000000020008b88 RSI: 0000200000000300 RDI: 0000000000000004 [ 74.980178][ T4780] RBP: 00007f3d1d46f090 R08: 0000000000000000 R09: 0000000000000000 [ 74.980189][ T4780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.980201][ T4780] R13: 00007f3d1ec96038 R14: 00007f3d1ec95fa0 R15: 00007ffcb0551d58 [ 74.980320][ T4780] [ 75.333425][ T4790] netlink: 68 bytes leftover after parsing attributes in process `syz.5.345'. [ 75.361654][ T4792] @: renamed from syztnl2 [ 75.454714][ T4802] loop2: detected capacity change from 0 to 128 [ 75.504595][ T4802] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.519328][ T4802] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.552338][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.647238][ T4828] loop3: detected capacity change from 0 to 512 [ 75.657442][ T4828] EXT4-fs: Ignoring removed nobh option [ 75.672841][ T4828] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 75.679895][ T4819] wireguard0: entered promiscuous mode [ 75.689213][ T4819] wireguard0: entered allmulticast mode [ 75.697817][ T4828] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 75.711015][ T4828] EXT4-fs (loop3): 1 truncate cleaned up [ 75.718055][ T4828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.454715][ T28] kauditd_printk_skb: 130 callbacks suppressed [ 76.454730][ T28] audit: type=1326 audit(1772961099.339:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.4.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb460cfc799 code=0x7ffc0000 [ 76.588213][ T28] audit: type=1326 audit(1772961099.369:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.4.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fb460cfc799 code=0x7ffc0000 [ 76.611761][ T28] audit: type=1326 audit(1772961099.369:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.4.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb460cfc799 code=0x7ffc0000 [ 76.615840][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.700835][ T4918] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.356'. [ 76.710471][ T4918] netlink: zone id is out of range [ 76.788546][ T28] audit: type=1326 audit(1772961099.369:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.4.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb460cfc799 code=0x7ffc0000 [ 77.025292][ T4910] loop0: detected capacity change from 0 to 1024 [ 77.045352][ T28] audit: type=1326 audit(1772961099.369:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.4.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb460cfc799 code=0x7ffc0000 [ 77.078602][ T4929] wireguard0: entered promiscuous mode [ 77.087046][ T4929] wireguard0: entered allmulticast mode [ 77.103549][ T28] audit: type=1326 audit(1772961099.369:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.4.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb460cfc799 code=0x7ffc0000 [ 77.127081][ T28] audit: type=1326 audit(1772961099.369:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.4.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb460cfc799 code=0x7ffc0000 [ 77.152123][ T28] audit: type=1326 audit(1772961099.369:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.4.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb460cfc799 code=0x7ffc0000 [ 77.175664][ T28] audit: type=1326 audit(1772961099.379:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.4.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb460cfc799 code=0x7ffc0000 [ 77.199165][ T28] audit: type=1326 audit(1772961099.379:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz.4.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb460cfc799 code=0x7ffc0000 [ 77.228196][ T4910] loop0: detected capacity change from 0 to 512 [ 77.241559][ T4910] EXT4-fs: Ignoring removed nobh option [ 77.277525][ T4910] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.305841][ T4910] EXT4-fs error (device loop0): htree_dirblock_to_tree:1051: inode #2: comm syz.0.353: Directory hole found for htree leaf block 0 [ 77.323989][ T4910] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 77.342070][ T4910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.351554][ T4910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.432897][ T4940] netlink: 'syz.4.360': attribute type 1 has an invalid length. [ 77.446121][ T4940] bond1: entered promiscuous mode [ 77.451272][ T4940] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.462430][ T4940] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.469589][ T4940] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 77.480153][ T4940] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 77.492781][ T4940] bond1: (slave vcan1): making interface the new active one [ 77.500533][ T4940] vcan1: entered promiscuous mode [ 77.507516][ T4940] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 77.519457][ T4944] loop2: detected capacity change from 0 to 128 [ 77.535026][ T4944] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.556997][ T4944] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.583669][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.599446][ T4949] loop2: detected capacity change from 0 to 128 [ 77.606133][ T4949] ext4: Unknown parameter 'dont_hash' [ 77.664517][ T4947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4947 comm=syz.4.362 [ 77.898461][ T4957] loop4: detected capacity change from 0 to 8192 [ 77.991292][ T4957] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.085626][ T4964] loop5: detected capacity change from 0 to 164 [ 78.106334][ T3312] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 78.180846][ T4964] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 78.198249][ T4957] netlink: 'syz.4.366': attribute type 6 has an invalid length. [ 78.266165][ T4969] FAULT_INJECTION: forcing a failure. [ 78.266165][ T4969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.363375][ T4966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.370'. [ 78.376222][ T4969] CPU: 1 UID: 0 PID: 4969 Comm: syz.5.368 Tainted: G W syzkaller #0 PREEMPT(full) [ 78.376273][ T4969] Tainted: [W]=WARN [ 78.376280][ T4969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 78.376292][ T4969] Call Trace: [ 78.376299][ T4969] [ 78.376307][ T4969] __dump_stack+0x1d/0x30 [ 78.376334][ T4969] dump_stack_lvl+0x95/0xd0 [ 78.376400][ T4969] dump_stack+0x15/0x1b [ 78.376417][ T4969] should_fail_ex+0x263/0x280 [ 78.376437][ T4969] should_fail+0xb/0x20 [ 78.376457][ T4969] should_fail_usercopy+0x1a/0x20 [ 78.376485][ T4969] _copy_to_user+0x20/0xa0 [ 78.376512][ T4969] simple_read_from_buffer+0xb5/0x130 [ 78.376531][ T4969] proc_fail_nth_read+0x10e/0x150 [ 78.376555][ T4969] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 78.376657][ T4969] vfs_read+0x1ab/0x7f0 [ 78.376686][ T4969] ? __rcu_read_unlock+0x4e/0x70 [ 78.376755][ T4969] ? __fget_files+0x184/0x1c0 [ 78.376865][ T4969] ? mutex_lock+0x57/0x90 [ 78.376887][ T4969] ksys_read+0xdc/0x1a0 [ 78.376916][ T4969] __x64_sys_read+0x40/0x50 [ 78.376931][ T4969] x64_sys_call+0x2886/0x3020 [ 78.376951][ T4969] do_syscall_64+0x12c/0x370 [ 78.376978][ T4969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.377078][ T4969] RIP: 0033:0x7fa1d1f8cfce [ 78.377094][ T4969] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 78.377111][ T4969] RSP: 002b:00007fa1d09fdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 78.377179][ T4969] RAX: ffffffffffffffda RBX: 00007fa1d09fe6c0 RCX: 00007fa1d1f8cfce [ 78.377191][ T4969] RDX: 000000000000000f RSI: 00007fa1d09fe0a0 RDI: 0000000000000004 [ 78.377205][ T4969] RBP: 00007fa1d09fe090 R08: 0000000000000000 R09: 0000000000000000 [ 78.377218][ T4969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.377254][ T4969] R13: 00007fa1d2246128 R14: 00007fa1d2246090 R15: 00007ffca77d9a48 [ 78.377269][ T4969] [ 78.664426][ T4972] loop3: detected capacity change from 0 to 512 [ 78.694021][ T4972] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 78.823811][ T4972] EXT4-fs (loop3): 1 truncate cleaned up [ 78.831971][ T4972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.313438][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.363277][ T4999] loop5: detected capacity change from 0 to 1024 [ 79.365483][ T4999] ext4: Bad value for 'stripe' [ 79.400232][ T4994] bond1: (slave bond_slave_1): Device is not our slave [ 79.408253][ T4994] bond1: option active_slave: invalid value (bond_slave_1) [ 79.417759][ T4994] bond1 (unregistering): Released all slaves [ 79.437236][ T4998] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 79.455164][ T4998] FAT-fs (loop3): Filesystem has been set read-only [ 79.462610][ T4998] netlink: 24 bytes leftover after parsing attributes in process `syz.3.378'. [ 79.521706][ T3311] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 79.681164][ T5003] bond0: entered promiscuous mode [ 79.686370][ T5003] bond_slave_0: entered promiscuous mode [ 79.692369][ T5003] bond_slave_1: entered promiscuous mode [ 79.792648][ T5028] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 79.805428][ T5023] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.828572][ T5028] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 79.845769][ T5036] ext4: Unknown parameter 'dont_hash' [ 79.851701][ T5023] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.902466][ T5028] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 79.939472][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.956646][ T5028] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 79.964924][ T5028] System zones: 0-2, 18-18, 34-35 [ 79.970611][ T5028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.552243][ T5048] set_capacity_and_notify: 4 callbacks suppressed [ 80.552257][ T5048] loop3: detected capacity change from 0 to 512 [ 80.636159][ T5048] journal_path: Non-blockdev passed as './file0' [ 80.717048][ T5048] EXT4-fs: error: could not find journal device path [ 80.987187][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.282683][ T5075] loop4: detected capacity change from 0 to 128 [ 81.299907][ T5075] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.324974][ T5075] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 81.369406][ T3317] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.476513][ T28] kauditd_printk_skb: 116 callbacks suppressed [ 81.476525][ T28] audit: type=1400 audit(1772961104.359:906): avc: denied { create } for pid=5093 comm="syz.3.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 81.533990][ T5092] FAULT_INJECTION: forcing a failure. [ 81.533990][ T5092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.571876][ T28] audit: type=1400 audit(1772961104.459:907): avc: denied { bind } for pid=5104 comm="syz.2.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.593422][ T5092] CPU: 0 UID: 0 PID: 5092 Comm: syz.0.390 Tainted: G W syzkaller #0 PREEMPT(full) [ 81.593455][ T5092] Tainted: [W]=WARN [ 81.593461][ T5092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 81.593473][ T5092] Call Trace: [ 81.593548][ T5092] [ 81.593555][ T5092] __dump_stack+0x1d/0x30 [ 81.593581][ T5092] dump_stack_lvl+0x95/0xd0 [ 81.593601][ T5092] dump_stack+0x15/0x1b [ 81.593622][ T5092] should_fail_ex+0x263/0x280 [ 81.593688][ T5092] should_fail+0xb/0x20 [ 81.593708][ T5092] should_fail_usercopy+0x1a/0x20 [ 81.593757][ T5092] copy_fpstate_to_sigframe+0x650/0x7f0 [ 81.593786][ T5092] ? copy_fpstate_to_sigframe+0xe5/0x7f0 [ 81.593815][ T5092] ? x86_task_fpu+0x36/0x60 [ 81.593836][ T5092] get_sigframe+0x34c/0x470 [ 81.593931][ T5092] ? get_signal+0xdc3/0xf60 [ 81.593967][ T5092] x64_setup_rt_frame+0xa7/0x4e0 [ 81.593996][ T5092] arch_do_signal_or_restart+0x24b/0x450 [ 81.594030][ T5092] exit_to_user_mode_loop+0x6a/0x6f0 [ 81.594054][ T5092] do_syscall_64+0x249/0x370 [ 81.594075][ T5092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.594151][ T5092] RIP: 0033:0x7f57e64ac797 [ 81.594167][ T5092] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 81.594183][ T5092] RSP: 002b:00007f57e4eff028 EFLAGS: 00000246 [ 81.594200][ T5092] RAX: 00000000000000ca RBX: 00007f57e6725fa0 RCX: 00007f57e64ac799 [ 81.594214][ T5092] RDX: 0000000000000000 RSI: 000000000000000d RDI: 000020000000cffc [ 81.594258][ T5092] RBP: 00007f57e4eff090 R08: 0000000000000000 R09: 0000000000000000 [ 81.594271][ T5092] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 81.594285][ T5092] R13: 00007f57e6726038 R14: 00007f57e6725fa0 R15: 00007ffedda2a578 [ 81.594304][ T5092] [ 81.602324][ T5103] loop5: detected capacity change from 0 to 256 [ 81.641653][ T28] audit: type=1400 audit(1772961104.489:908): avc: denied { write } for pid=5093 comm="syz.3.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 81.937855][ T5113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.399'. [ 81.962281][ T5113] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 81.982668][ T5103] netlink: 8 bytes leftover after parsing attributes in process `syz.5.398'. [ 82.146578][ T5117] tipc: Started in network mode [ 82.153687][ T5117] tipc: Node identity 4e2b7e4d8d13, cluster identity 4711 [ 82.161053][ T5117] tipc: Enabled bearer , priority 0 [ 82.172346][ T28] audit: type=1326 audit(1772961105.039:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.2.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9b0cc799 code=0x7ffc0000 [ 82.251993][ T28] audit: type=1326 audit(1772961105.039:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.2.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9b0cc799 code=0x7ffc0000 [ 82.297270][ T5118] syzkaller0: entered promiscuous mode [ 82.320804][ T28] audit: type=1326 audit(1772961105.039:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.2.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9b0cc799 code=0x7ffc0000 [ 82.323253][ T5118] syzkaller0: entered allmulticast mode [ 82.394895][ T28] audit: type=1326 audit(1772961105.039:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.2.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fec9b0cc799 code=0x7ffc0000 [ 82.419651][ T5118] tipc: Resetting bearer [ 82.464829][ T5118] tipc: Resetting bearer [ 82.688355][ T5134] tipc: Started in network mode [ 82.716132][ T5137] loop3: detected capacity change from 0 to 128 [ 82.723790][ T28] audit: type=1326 audit(1772961105.049:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.2.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9b0cc799 code=0x7ffc0000 [ 82.736266][ T5134] tipc: Node identity 2a589e915dbb, cluster identity 4711 [ 82.800988][ T5134] tipc: Enabled bearer , priority 0 [ 82.825909][ T5136] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.405'. [ 82.878579][ T5140] syzkaller0: entered promiscuous mode [ 82.927143][ T5146] loop4: detected capacity change from 0 to 1024 [ 82.934145][ T5140] syzkaller0: entered allmulticast mode [ 83.021561][ T5146] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 83.114903][ T5146] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 83.195929][ T5146] SET target dimension over the limit! [ 83.707188][ T5140] tipc: Resetting bearer [ 83.712599][ T28] audit: type=1326 audit(1772961105.049:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.2.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9b0cc799 code=0x7ffc0000 [ 83.714978][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 83.736209][ T28] audit: type=1326 audit(1772961105.049:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.2.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9b0cc799 code=0x7ffc0000 [ 83.861718][ T5133] tipc: Resetting bearer [ 83.869002][ T5133] tipc: Disabling bearer [ 83.875832][ T3708] tipc: Node number set to 3275259469 [ 84.094410][ T5169] netlink: 24 bytes leftover after parsing attributes in process `syz.5.409'. [ 84.163351][ T3392] tipc: Node number set to 2011405969 [ 84.443260][ T5189] loop4: detected capacity change from 0 to 164 [ 84.530121][ T5190] ipvlan3: entered allmulticast mode [ 84.621215][ T5191] ipvlan3: entered allmulticast mode [ 84.684369][ T5189] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 85.912169][ T5206] loop3: detected capacity change from 0 to 512 [ 85.927221][ T5206] EXT4-fs: inline encryption not supported [ 86.015971][ T5206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.482325][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.636888][ T5212] ipvlan5: entered allmulticast mode [ 87.487992][ T5225] loop5: detected capacity change from 0 to 1024 [ 87.546671][ T5225] ext4: Unknown parameter '.' [ 87.675466][ T5225] loop5: detected capacity change from 0 to 1024 [ 87.710057][ T5225] ext4: Unknown parameter '.' [ 87.786762][ T5225] loop5: detected capacity change from 0 to 1024 [ 87.826913][ T5225] ext4: Unknown parameter '.' [ 87.898853][ T5225] loop5: detected capacity change from 0 to 1024 [ 87.930531][ T5225] ext4: Unknown parameter '.' [ 87.987703][ T5225] loop5: detected capacity change from 0 to 1024 [ 88.023282][ T5225] ext4: Unknown parameter '.' [ 88.065184][ T5225] loop5: detected capacity change from 0 to 1024 [ 88.102849][ T5225] ext4: Unknown parameter '.' [ 88.158468][ T5225] loop5: detected capacity change from 0 to 1024 [ 88.195058][ T5225] ext4: Unknown parameter '.' [ 89.256746][ T5240] loop3: detected capacity change from 0 to 128 [ 89.270857][ T5240] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.426'. [ 89.280165][ T5240] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.426'. [ 89.331742][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 89.331755][ T28] audit: type=1400 audit(1772961112.149:945): avc: denied { watch_reads } for pid=5235 comm="syz.3.426" path="/90" dev="tmpfs" ino=500 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 89.446742][ T5238] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5238 comm=syz.5.427 [ 89.499494][ T5245] loop4: detected capacity change from 0 to 512 [ 89.544742][ T5245] EXT4-fs (loop4): inodes count not valid: 63 vs 32 [ 89.871863][ T28] audit: type=1400 audit(1772961112.659:946): avc: denied { remount } for pid=5246 comm="syz.3.429" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 90.058950][ T28] audit: type=1400 audit(1772961112.839:947): avc: denied { mount } for pid=5255 comm="syz.4.432" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 91.253774][ T28] audit: type=1400 audit(1772961114.139:948): avc: denied { read write } for pid=5276 comm="syz.5.438" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 91.450775][ T28] audit: type=1400 audit(1772961114.139:949): avc: denied { open } for pid=5276 comm="syz.5.438" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 91.525878][ T28] audit: type=1400 audit(1772961114.169:950): avc: denied { ioctl } for pid=5276 comm="syz.5.438" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 91.920915][ T5289] set_capacity_and_notify: 1 callbacks suppressed [ 91.920933][ T5289] loop5: detected capacity change from 0 to 512 [ 92.005951][ T5289] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.068540][ T5289] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.084272][ T28] audit: type=1326 audit(1772961114.969:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.4.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb460cfc799 code=0x7ffc0000 [ 92.197806][ T28] audit: type=1326 audit(1772961114.999:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.4.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fb460cfc799 code=0x7ffc0000 [ 92.249908][ T28] audit: type=1326 audit(1772961114.999:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.4.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb460cfc799 code=0x7ffc0000 [ 92.273531][ T28] audit: type=1326 audit(1772961114.999:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.4.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fb460cfc799 code=0x7ffc0000 [ 92.300992][ T4518] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.338285][ T5304] loop5: detected capacity change from 0 to 1024 [ 92.369831][ T5304] EXT4-fs: Ignoring removed bh option [ 92.407340][ T5304] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 92.419508][ T5304] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.432918][ T5304] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: comm syz.5.449: lblock 0 mapped to illegal pblock 0 (length 1) [ 92.451783][ T5307] loop3: detected capacity change from 0 to 4096 [ 92.458482][ T5304] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.449: lblock 0 mapped to illegal pblock 0 (length 1) [ 92.474669][ T5307] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.475005][ T5304] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.449: lblock 0 mapped to illegal pblock 0 (length 1) [ 92.511389][ T5304] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.449: lblock 0 mapped to illegal pblock 0 (length 1) [ 92.551331][ T5314] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.449: lblock 0 mapped to illegal pblock 0 (length 1) [ 92.584940][ T5304] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.449: lblock 0 mapped to illegal pblock 0 (length 1) [ 92.603963][ T5304] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.449: lblock 0 mapped to illegal pblock 0 (length 1) [ 92.617676][ T5312] FAULT_INJECTION: forcing a failure. [ 92.617676][ T5312] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 92.631069][ T5304] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.449: lblock 0 mapped to illegal pblock 0 (length 1) [ 92.644634][ T5312] CPU: 0 UID: 0 PID: 5312 Comm: syz.4.452 Tainted: G W syzkaller #0 PREEMPT(full) [ 92.644729][ T5312] Tainted: [W]=WARN [ 92.644799][ T5312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 92.644810][ T5312] Call Trace: [ 92.644817][ T5312] [ 92.644825][ T5312] __dump_stack+0x1d/0x30 [ 92.644896][ T5312] dump_stack_lvl+0x95/0xd0 [ 92.644919][ T5312] dump_stack+0x15/0x1b [ 92.644941][ T5312] should_fail_ex+0x263/0x280 [ 92.644965][ T5312] should_fail_alloc_page+0xf2/0x100 [ 92.645015][ T5312] __alloc_frozen_pages_noprof+0x108/0x360 [ 92.645045][ T5312] alloc_pages_mpol+0xb3/0x260 [ 92.645072][ T5312] vma_alloc_folio_noprof+0x1a9/0x300 [ 92.645101][ T5312] do_wp_page+0xf62/0x2590 [ 92.645263][ T5312] ? css_rstat_updated+0xbb/0x280 [ 92.645336][ T5312] ? __rcu_read_lock+0x36/0x50 [ 92.645437][ T5312] handle_mm_fault+0x8c7/0x3020 [ 92.645468][ T5312] ? vma_start_read+0x1c7/0x2c0 [ 92.645495][ T5312] do_user_addr_fault+0x62f/0x1050 [ 92.645524][ T5312] ? ksys_mmap_pgoff+0xc1/0x310 [ 92.645626][ T5312] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 92.645653][ T5312] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 92.645677][ T5312] ? trace_page_fault_user+0x1f/0xe0 [ 92.645782][ T5312] exc_page_fault+0x62/0xa0 [ 92.645851][ T5312] asm_exc_page_fault+0x26/0x30 [ 92.645871][ T5312] RIP: 0033:0x7fb460bb3a63 [ 92.645941][ T5312] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 92.645958][ T5312] RSP: 002b:00007fb45f74e470 EFLAGS: 00010202 [ 92.645975][ T5312] RAX: 0000000000000400 RBX: 00007fb45f74e530 RCX: 00007fb45730e000 [ 92.645994][ T5312] RDX: 00007fb45f74e6d0 RSI: 0000000000000000 RDI: 00007fb45f74e5d0 [ 92.646007][ T5312] RBP: 00000000000000f9 R08: 0000000000000009 R09: 00000000000001a8 [ 92.646020][ T5312] R10: 00000000000001ca R11: 00007fb45f74e530 R12: 0000000000000001 [ 92.646034][ T5312] R13: 00007fb460db2320 R14: 0000000000000020 R15: 00007fb45f74e5d0 [ 92.646053][ T5312] [ 92.646106][ T5314] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.449: lblock 0 mapped to illegal pblock 0 (length 1) [ 92.661654][ T5312] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 92.683812][ T5304] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.449: lblock 0 mapped to illegal pblock 0 (length 1) [ 92.747511][ T5312] loop4: detected capacity change from 0 to 512 [ 92.982687][ T5312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.008137][ T5312] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.072271][ T5327] loop2: detected capacity change from 0 to 512 [ 93.085561][ T5327] EXT4-fs: inline encryption not supported [ 93.115190][ T5327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.128267][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.238901][ T5336] tipc: Started in network mode [ 93.246604][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.256869][ T5336] tipc: Node identity ac1414aa, cluster identity 4711 [ 93.262289][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.264069][ T5336] tipc: New replicast peer: 10.1.1.2 [ 93.278391][ T5336] tipc: Enabled bearer , priority 10 [ 93.315522][ T5340] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5340 comm=syz.4.459 [ 93.338722][ T5339] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5339 comm=syz.3.460 [ 93.355839][ T5332] loop0: detected capacity change from 0 to 256 [ 93.547010][ T5353] loop0: detected capacity change from 0 to 164 [ 93.564972][ T4518] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 93.693055][ T5364] loop0: detected capacity change from 0 to 256 [ 93.711105][ T5364] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 93.721309][ T5364] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 93.734463][ T5364] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 93.744892][ T5364] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 93.765143][ T5364] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 93.781456][ T5356] syzkaller0: entered promiscuous mode [ 93.797390][ T5356] syzkaller0: entered allmulticast mode [ 93.806489][ T5364] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 93.819601][ T5364] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 93.830828][ T5374] netlink: 'syz.3.473': attribute type 2 has an invalid length. [ 93.840491][ T5364] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 93.864100][ T5372] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.871797][ T5364] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 93.892607][ T5364] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 93.943234][ T5378] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5378 comm=syz.5.472 [ 93.945590][ T5379] usb usb8: usbfs: process 5379 (syz.3.473) did not claim interface 0 before use [ 94.023546][ T5383] loop2: detected capacity change from 0 to 512 [ 94.037810][ T5383] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 94.061444][ T5383] netlink: 200 bytes leftover after parsing attributes in process `syz.2.476'. [ 94.131134][ T3321] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 94.165509][ T5390] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 94.196528][ T5390] loop2: detected capacity change from 0 to 512 [ 94.203689][ T5390] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.308666][ T5394] netlink: 40 bytes leftover after parsing attributes in process `syz.2.478'. [ 94.318254][ T5394] netlink: 40 bytes leftover after parsing attributes in process `syz.2.478'. [ 94.384463][ T5396] FAULT_INJECTION: forcing a failure. [ 94.384463][ T5396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.397841][ T3708] tipc: Node number set to 2886997162 [ 94.403489][ T5396] CPU: 1 UID: 0 PID: 5396 Comm: syz.2.479 Tainted: G W syzkaller #0 PREEMPT(full) [ 94.403548][ T5396] Tainted: [W]=WARN [ 94.403556][ T5396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 94.403568][ T5396] Call Trace: [ 94.403574][ T5396] [ 94.403582][ T5396] __dump_stack+0x1d/0x30 [ 94.403605][ T5396] dump_stack_lvl+0x95/0xd0 [ 94.403698][ T5396] dump_stack+0x15/0x1b [ 94.403720][ T5396] should_fail_ex+0x263/0x280 [ 94.403815][ T5396] should_fail+0xb/0x20 [ 94.403857][ T5396] should_fail_usercopy+0x1a/0x20 [ 94.403878][ T5396] _copy_to_user+0x20/0xa0 [ 94.403902][ T5396] simple_read_from_buffer+0xb5/0x130 [ 94.403925][ T5396] proc_fail_nth_read+0x10e/0x150 [ 94.404023][ T5396] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 94.404050][ T5396] vfs_read+0x1ab/0x7f0 [ 94.404075][ T5396] ? __rcu_read_unlock+0x4e/0x70 [ 94.404168][ T5396] ? __fget_files+0x184/0x1c0 [ 94.404189][ T5396] ? mutex_lock+0x57/0x90 [ 94.404230][ T5396] ksys_read+0xdc/0x1a0 [ 94.404336][ T5396] __x64_sys_read+0x40/0x50 [ 94.404355][ T5396] x64_sys_call+0x2886/0x3020 [ 94.404456][ T5396] do_syscall_64+0x12c/0x370 [ 94.404505][ T5396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.404525][ T5396] RIP: 0033:0x7fec9b08cfce [ 94.404539][ T5396] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 94.404552][ T5396] RSP: 002b:00007fec99b26fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 94.404568][ T5396] RAX: ffffffffffffffda RBX: 00007fec99b276c0 RCX: 00007fec9b08cfce [ 94.404582][ T5396] RDX: 000000000000000f RSI: 00007fec99b270a0 RDI: 0000000000000005 [ 94.404619][ T5396] RBP: 00007fec99b27090 R08: 0000000000000000 R09: 0000000000000000 [ 94.404632][ T5396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.404642][ T5396] R13: 00007fec9b346038 R14: 00007fec9b345fa0 R15: 00007ffccc1204a8 [ 94.404715][ T5396] [ 94.659401][ T28] kauditd_printk_skb: 347 callbacks suppressed [ 94.659449][ T28] audit: type=1326 audit(1772961117.539:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5399 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e64ac799 code=0x7ffc0000 [ 94.703098][ T5403] netlink: 'syz.2.483': attribute type 4 has an invalid length. [ 94.728957][ T5400] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5400 comm=syz.0.480 [ 94.733844][ T5403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.483'. [ 94.752256][ T28] audit: type=1326 audit(1772961117.579:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5399 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e64ac799 code=0x7ffc0000 [ 94.805960][ T28] audit: type=1326 audit(1772961117.579:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5399 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e64ac799 code=0x7ffc0000 [ 94.831034][ T28] audit: type=1326 audit(1772961117.579:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5399 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e64ac799 code=0x7ffc0000 [ 94.855068][ T28] audit: type=1326 audit(1772961117.579:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5399 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f57e64ac799 code=0x7ffc0000 [ 94.878421][ T28] audit: type=1326 audit(1772961117.579:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5399 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e64ac799 code=0x7ffc0000 [ 94.902770][ T28] audit: type=1326 audit(1772961117.579:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5399 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e64ac799 code=0x7ffc0000 [ 94.914704][ T5408] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 94.926401][ T28] audit: type=1326 audit(1772961117.579:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5399 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e64ac799 code=0x7ffc0000 [ 94.967779][ T5408] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.971638][ T28] audit: type=1326 audit(1772961117.579:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5399 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f57e64ac799 code=0x7ffc0000 [ 95.001721][ T28] audit: type=1326 audit(1772961117.579:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5399 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e64ac799 code=0x7ffc0000 [ 95.031229][ T5406] wireguard0: entered promiscuous mode [ 95.093920][ T5408] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.484: bg 0: block 112: padding at end of block bitmap is not set [ 95.108901][ T5406] wireguard0: entered allmulticast mode [ 95.119931][ T5408] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 95.132762][ T5408] EXT4-fs (loop5): This should not happen!! Data will be lost [ 95.132762][ T5408] [ 95.148002][ T5418] EXT4-fs (loop2): 1 orphan inode deleted [ 95.163286][ T5418] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.279201][ T5428] ext4: Unknown parameter 'dont_hash' [ 95.723902][ T5431] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.754409][ T4518] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 95.765807][ T5431] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.926192][ T5440] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5440 comm=syz.3.492 [ 96.597559][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.039497][ T5461] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5461 comm=syz.0.500 [ 97.061875][ T5459] netlink: 764 bytes leftover after parsing attributes in process `syz.3.499'. [ 97.122580][ T5448] set_capacity_and_notify: 5 callbacks suppressed [ 97.122602][ T5448] loop5: detected capacity change from 0 to 1024 [ 97.190309][ T5448] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.206535][ T5459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.499'. [ 97.230417][ T5448] EXT4-fs (loop5): resizing filesystem from 512 to 0 blocks [ 97.272354][ T5448] EXT4-fs warning (device loop5): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 97.434979][ T5459] macvlan2: entered promiscuous mode [ 97.435216][ T5459] macvlan2: entered allmulticast mode [ 97.435327][ T5459] veth0_virt_wifi: entered allmulticast mode [ 97.454191][ T5468] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.455169][ T5468] bridge_slave_1: left allmulticast mode [ 97.455200][ T5468] bridge_slave_1: left promiscuous mode [ 97.455616][ T5468] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.459918][ T5468] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 97.480441][ T5471] ipvlan2: entered allmulticast mode [ 97.480596][ T5471] macvlan0: entered allmulticast mode [ 97.480744][ T5471] veth1_vlan: entered allmulticast mode [ 98.350126][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.374927][ T4518] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.377824][ T5477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.503'. [ 98.589075][ T5488] tipc: Enabling of bearer rejected, failed to enable media [ 98.618152][ T5488] netlink: 'syz.5.507': attribute type 4 has an invalid length. [ 98.645158][ T5488] netlink: 4 bytes leftover after parsing attributes in process `syz.5.507'. [ 98.768662][ T5498] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5498 comm=syz.5.512 [ 98.804047][ T5502] netlink: 16 bytes leftover after parsing attributes in process `syz.3.514'. [ 98.884921][ T5507] FAULT_INJECTION: forcing a failure. [ 98.884921][ T5507] name failslab, interval 1, probability 0, space 0, times 0 [ 98.913397][ T5507] CPU: 0 UID: 0 PID: 5507 Comm: syz.3.516 Tainted: G W syzkaller #0 PREEMPT(full) [ 98.913430][ T5507] Tainted: [W]=WARN [ 98.913437][ T5507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 98.913447][ T5507] Call Trace: [ 98.913452][ T5507] [ 98.913458][ T5507] __dump_stack+0x1d/0x30 [ 98.913548][ T5507] dump_stack_lvl+0x95/0xd0 [ 98.913643][ T5507] dump_stack+0x15/0x1b [ 98.913663][ T5507] should_fail_ex+0x263/0x280 [ 98.913792][ T5507] ? netlbl_cipsov4_add+0x369/0x12a0 [ 98.913814][ T5507] should_failslab+0x8c/0xb0 [ 98.913831][ T5507] __kmalloc_cache_noprof+0x5f/0x410 [ 98.913890][ T5507] netlbl_cipsov4_add+0x369/0x12a0 [ 98.913917][ T5507] ? genl_family_rcv_msg_attrs_parse+0x13b/0x190 [ 98.914003][ T5507] ? genl_family_rcv_msg_attrs_parse+0x184/0x190 [ 98.914023][ T5507] genl_family_rcv_msg_doit+0x187/0x1f0 [ 98.914062][ T5507] genl_rcv_msg+0x432/0x470 [ 98.914083][ T5507] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 98.914170][ T5507] netlink_rcv_skb+0x123/0x220 [ 98.914196][ T5507] ? __pfx_genl_rcv_msg+0x10/0x10 [ 98.914262][ T5507] genl_rcv+0x28/0x40 [ 98.914290][ T5507] netlink_unicast+0x5c0/0x690 [ 98.914316][ T5507] netlink_sendmsg+0x5c8/0x6f0 [ 98.914354][ T5507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.914377][ T5507] ____sys_sendmsg+0x563/0x5b0 [ 98.914446][ T5507] ___sys_sendmsg+0x195/0x1e0 [ 98.914481][ T5507] __x64_sys_sendmsg+0xd4/0x160 [ 98.914505][ T5507] x64_sys_call+0x194c/0x3020 [ 98.914596][ T5507] do_syscall_64+0x12c/0x370 [ 98.914618][ T5507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.914767][ T5507] RIP: 0033:0x7f3d1ea1c799 [ 98.914780][ T5507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.914795][ T5507] RSP: 002b:00007f3d1d46f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.914815][ T5507] RAX: ffffffffffffffda RBX: 00007f3d1ec95fa0 RCX: 00007f3d1ea1c799 [ 98.914830][ T5507] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 98.914844][ T5507] RBP: 00007f3d1d46f090 R08: 0000000000000000 R09: 0000000000000000 [ 98.914858][ T5507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.914898][ T5507] R13: 00007f3d1ec96038 R14: 00007f3d1ec95fa0 R15: 00007ffcb0551d58 [ 98.914918][ T5507] [ 99.163028][ T5493] loop0: detected capacity change from 0 to 512 [ 99.177171][ T5509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5509 comm=syz.3.517 [ 99.216188][ T5493] EXT4-fs (loop0): failed to initialize system zone (-117) [ 99.237139][ T5493] EXT4-fs (loop0): mount failed [ 99.261824][ T5514] netlink: 'syz.5.519': attribute type 4 has an invalid length. [ 99.321020][ T5518] loop4: detected capacity change from 0 to 512 [ 99.382310][ T5518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.395685][ T5526] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5526 comm=syz.2.525 [ 99.408457][ T5518] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.443662][ T5532] tipc: Enabling of bearer rejected, already enabled [ 99.458381][ T5514] loop5: detected capacity change from 0 to 8192 [ 99.498944][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.541711][ T5514] loop5: p1 p2 p4[DM] [ 99.545864][ T5514] loop5: p1 size 67898881 extends beyond EOD, truncated [ 99.557305][ T5532] tipc: Enabled bearer , priority 0 [ 99.586865][ T5514] loop5: p4 start 393224 is beyond EOD, truncated [ 99.600432][ T5539] loop0: detected capacity change from 0 to 4096 [ 99.628431][ T5541] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.660969][ T5539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.697962][ T5551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.528'. [ 99.735116][ T28] kauditd_printk_skb: 468 callbacks suppressed [ 99.735181][ T28] audit: type=1400 audit(1772963682.616:1780): avc: denied { mount } for pid=5554 comm="syz.3.531" name="/" dev="autofs" ino=10756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 99.741778][ T5551] loop4: detected capacity change from 0 to 164 [ 99.789531][ T5551] ISOFS: unable to read i-node block [ 99.795618][ T28] audit: type=1400 audit(1772963682.676:1781): avc: denied { execute } for pid=5543 comm="syz.2.529" path="/102/file1" dev="tmpfs" ino=563 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.821334][ T5551] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 99.833365][ T5541] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.848294][ T5545] netlink: 'syz.2.529': attribute type 21 has an invalid length. [ 99.879139][ T5545] netlink: 156 bytes leftover after parsing attributes in process `syz.2.529'. [ 99.897276][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.914322][ T28] audit: type=1400 audit(1772963682.786:1782): avc: denied { bind } for pid=5559 comm="syz.5.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.934746][ T5541] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.947602][ T28] audit: type=1400 audit(1772963682.786:1783): avc: denied { listen } for pid=5559 comm="syz.5.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.980289][ T28] audit: type=1400 audit(1772963682.786:1784): avc: denied { connect } for pid=5559 comm="syz.5.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 100.002611][ T28] audit: type=1400 audit(1772963682.786:1785): avc: denied { write } for pid=5559 comm="syz.5.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 100.023487][ T28] audit: type=1400 audit(1772963682.786:1786): avc: denied { accept } for pid=5559 comm="syz.5.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 100.043330][ T28] audit: type=1400 audit(1772963682.786:1787): avc: denied { ioctl } for pid=5559 comm="syz.5.532" path="socket:[10765]" dev="sockfs" ino=10765 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 100.069276][ T28] audit: type=1400 audit(1772963682.836:1788): avc: denied { read } for pid=5559 comm="syz.5.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 100.089527][ T28] audit: type=1400 audit(1772963682.856:1789): avc: denied { mounton } for pid=5543 comm="syz.2.529" path="/102/file1" dev="tmpfs" ino=563 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 100.113011][ T5541] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.160553][ T5564] wireguard0: entered promiscuous mode [ 100.166463][ T5564] wireguard0: entered allmulticast mode [ 100.194836][ T4897] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.206700][ T4897] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.219696][ T4348] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.231450][ T4348] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.284847][ T5584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.538'. [ 100.598434][ T5594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5594 comm=syz.2.542 [ 100.796783][ T5598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.543'. [ 100.938506][ T5607] loop5: detected capacity change from 0 to 1024 [ 100.956818][ T5607] EXT4-fs: Ignoring removed bh option [ 100.979973][ T5611] loop0: detected capacity change from 0 to 128 [ 100.989092][ T5611] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.007802][ T5607] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 101.008724][ T5611] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.030954][ T5607] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.052823][ T5619] loop4: detected capacity change from 0 to 764 [ 101.063382][ T5619] rock: directory entry would overflow storage [ 101.069634][ T5619] rock: sig=0x5245, size=8, remaining=5 [ 101.081254][ T5607] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: comm syz.5.546: lblock 0 mapped to illegal pblock 0 (length 1) [ 101.097347][ T5619] geneve2: entered promiscuous mode [ 101.105598][ T4897] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 101.119358][ T4897] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 101.134554][ T4897] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 101.142989][ T5607] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.546: lblock 0 mapped to illegal pblock 0 (length 1) [ 101.143238][ T4897] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 101.164833][ T5607] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.546: lblock 0 mapped to illegal pblock 0 (length 1) [ 101.178508][ T5607] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.546: lblock 0 mapped to illegal pblock 0 (length 1) [ 101.264821][ T5627] netlink: 88 bytes leftover after parsing attributes in process `syz.0.548'. [ 101.360807][ T5607] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.546: lblock 0 mapped to illegal pblock 0 (length 1) [ 101.374907][ T5605] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.546: lblock 0 mapped to illegal pblock 0 (length 1) [ 101.388819][ T5607] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.546: lblock 0 mapped to illegal pblock 0 (length 1) [ 101.471699][ T5634] loop4: detected capacity change from 0 to 128 [ 101.535493][ T5623] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.546: lblock 0 mapped to illegal pblock 0 (length 1) [ 101.583555][ T5605] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.546: lblock 0 mapped to illegal pblock 0 (length 1) [ 101.598315][ T5636] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 101.606910][ T5623] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.546: lblock 0 mapped to illegal pblock 0 (length 1) [ 101.621556][ T5636] EXT4-fs (loop2): 1 truncate cleaned up [ 101.628135][ T5636] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.071449][ T4518] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 102.201944][ T5641] syzkaller0: entered promiscuous mode [ 102.211463][ T5641] syzkaller0: entered allmulticast mode [ 102.472782][ T5658] set_capacity_and_notify: 1 callbacks suppressed [ 102.472800][ T5658] loop5: detected capacity change from 0 to 512 [ 102.501985][ T5658] EXT4-fs: inline encryption not supported [ 102.526482][ T5658] EXT4-fs: Ignoring removed i_version option [ 102.550763][ T5658] EXT4-fs (loop5): 1 orphan inode deleted [ 102.567399][ T5658] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.643424][ T4518] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.681501][ T3312] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.827029][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.872846][ T5671] loop2: detected capacity change from 0 to 1024 [ 102.932976][ T5671] EXT4-fs: Ignoring removed bh option [ 102.938888][ T5666] wireguard0: entered promiscuous mode [ 102.945644][ T5666] wireguard0: entered allmulticast mode [ 103.037267][ T5671] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 103.055807][ T5671] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.147019][ T5671] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: comm syz.2.569: lblock 0 mapped to illegal pblock 0 (length 1) [ 103.199734][ T5671] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.569: lblock 0 mapped to illegal pblock 0 (length 1) [ 103.231518][ T5671] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.569: lblock 0 mapped to illegal pblock 0 (length 1) [ 103.247844][ T5681] loop0: detected capacity change from 0 to 764 [ 103.262480][ T5681] rock: directory entry would overflow storage [ 103.268708][ T5681] rock: sig=0x5245, size=8, remaining=5 [ 103.276530][ T5671] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.569: lblock 0 mapped to illegal pblock 0 (length 1) [ 103.310247][ T5682] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.569: lblock 0 mapped to illegal pblock 0 (length 1) [ 103.332053][ T5682] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.569: lblock 0 mapped to illegal pblock 0 (length 1) [ 103.371624][ T5670] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.569: lblock 0 mapped to illegal pblock 0 (length 1) [ 103.401511][ T5670] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.569: lblock 0 mapped to illegal pblock 0 (length 1) [ 103.427685][ T5671] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.569: lblock 0 mapped to illegal pblock 0 (length 1) [ 103.460396][ T5671] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.569: lblock 0 mapped to illegal pblock 0 (length 1) [ 103.496613][ T5681] geneve2: entered promiscuous mode [ 103.524516][ T41] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 103.546330][ T41] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 103.563584][ T4897] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 103.579694][ T4897] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 103.878444][ T5702] loop0: detected capacity change from 0 to 128 [ 103.902035][ T5702] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.920358][ T5702] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.082819][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 104.176406][ T5705] netlink: 88 bytes leftover after parsing attributes in process `syz.0.577'. [ 104.869953][ T5714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.580'. [ 105.699395][ T5719] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.580'. [ 105.708965][ T5719] netlink: zone id is out of range [ 105.714353][ T5719] netlink: zone id is out of range [ 105.721513][ T5719] netlink: zone id is out of range [ 105.816064][ T5719] netlink: set zone limit has 8 unknown bytes [ 105.844898][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 105.844910][ T28] audit: type=1400 audit(1772963688.727:1801): avc: denied { associate } for pid=5716 comm="syz.3.581" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 105.932601][ T3312] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.211893][ T5735] loop3: detected capacity change from 0 to 1024 [ 106.233834][ T5735] EXT4-fs: Ignoring removed bh option [ 106.279264][ T5735] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 106.341073][ T5735] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.380851][ T28] audit: type=1400 audit(1772963689.247:1802): avc: denied { override_creds } for pid=5741 comm="syz.5.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 106.427772][ T5735] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: comm syz.3.588: lblock 0 mapped to illegal pblock 0 (length 1) [ 106.481078][ T5735] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #15: comm syz.3.588: lblock 0 mapped to illegal pblock 0 (length 1) [ 106.505172][ T28] audit: type=1400 audit(1772963689.387:1803): avc: denied { setopt } for pid=5741 comm="syz.5.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.528434][ T5735] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #15: comm syz.3.588: lblock 0 mapped to illegal pblock 0 (length 1) [ 106.590497][ T5734] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #15: comm syz.3.588: lblock 0 mapped to illegal pblock 0 (length 1) [ 106.643766][ T5734] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #15: comm syz.3.588: lblock 0 mapped to illegal pblock 0 (length 1) [ 106.661109][ T5734] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #15: comm syz.3.588: lblock 0 mapped to illegal pblock 0 (length 1) [ 106.721390][ T5750] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #15: comm syz.3.588: lblock 0 mapped to illegal pblock 0 (length 1) [ 106.754861][ T5735] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #15: comm syz.3.588: lblock 0 mapped to illegal pblock 0 (length 1) [ 106.781956][ T5749] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #15: comm syz.3.588: lblock 0 mapped to illegal pblock 0 (length 1) [ 106.854409][ T5752] loop0: detected capacity change from 0 to 2048 [ 106.868552][ T5734] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #15: comm syz.3.588: lblock 0 mapped to illegal pblock 0 (length 1) [ 106.920870][ T3591] loop0: p3 < > p4 < > [ 106.925036][ T3591] loop0: partition table partially beyond EOD, truncated [ 106.940998][ T3591] loop0: p3 start 4284289 is beyond EOD, truncated [ 106.952321][ T5752] loop0: p3 < > p4 < > [ 106.956478][ T5752] loop0: partition table partially beyond EOD, truncated [ 106.971731][ T5752] loop0: p3 start 4284289 is beyond EOD, truncated [ 107.051487][ T5755] loop0: detected capacity change from 0 to 128 [ 107.073659][ T5755] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.101432][ T5755] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.374698][ T5761] netlink: 88 bytes leftover after parsing attributes in process `syz.0.592'. [ 107.962413][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 108.112877][ T5764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.594'. [ 108.769904][ T3312] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.842591][ T5777] loop3: detected capacity change from 0 to 128 [ 108.889721][ T5777] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.912854][ T5782] FAULT_INJECTION: forcing a failure. [ 108.912854][ T5782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.931202][ T5777] ext4 filesystem being mounted at /135/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.990586][ T5782] CPU: 0 UID: 0 PID: 5782 Comm: syz.0.601 Tainted: G W syzkaller #0 PREEMPT(full) [ 108.990614][ T5782] Tainted: [W]=WARN [ 108.990619][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 108.990629][ T5782] Call Trace: [ 108.990635][ T5782] [ 108.990643][ T5782] __dump_stack+0x1d/0x30 [ 108.990675][ T5782] dump_stack_lvl+0x95/0xd0 [ 108.990693][ T5782] dump_stack+0x15/0x1b [ 108.990794][ T5782] should_fail_ex+0x263/0x280 [ 108.990817][ T5782] should_fail+0xb/0x20 [ 108.990843][ T5782] should_fail_usercopy+0x1a/0x20 [ 108.990866][ T5782] _copy_from_user+0x1c/0xb0 [ 108.990898][ T5782] __sys_bpf+0x183/0x7e0 [ 108.990924][ T5782] __x64_sys_bpf+0x41/0x50 [ 108.990955][ T5782] x64_sys_call+0x10cb/0x3020 [ 108.991005][ T5782] do_syscall_64+0x12c/0x370 [ 108.991025][ T5782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.991047][ T5782] RIP: 0033:0x7f57e64ac799 [ 108.991135][ T5782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.991152][ T5782] RSP: 002b:00007f57e4eff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 108.991215][ T5782] RAX: ffffffffffffffda RBX: 00007f57e6725fa0 RCX: 00007f57e64ac799 [ 108.991227][ T5782] RDX: 000000000000000c RSI: 00002000000003c0 RDI: 000000000000000a [ 108.991238][ T5782] RBP: 00007f57e4eff090 R08: 0000000000000000 R09: 0000000000000000 [ 108.991248][ T5782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.991259][ T5782] R13: 00007f57e6726038 R14: 00007f57e6725fa0 R15: 00007ffedda2a578 [ 108.991310][ T5782] [ 108.992328][ T3311] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.382974][ T5788] loop0: detected capacity change from 0 to 512 [ 109.391755][ T5788] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 109.488310][ T5788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.501880][ T5788] FAULT_INJECTION: forcing a failure. [ 109.501880][ T5788] name failslab, interval 1, probability 0, space 0, times 0 [ 109.514581][ T5788] CPU: 1 UID: 0 PID: 5788 Comm: syz.0.603 Tainted: G W syzkaller #0 PREEMPT(full) [ 109.514685][ T5788] Tainted: [W]=WARN [ 109.514691][ T5788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 109.514701][ T5788] Call Trace: [ 109.514707][ T5788] [ 109.514713][ T5788] __dump_stack+0x1d/0x30 [ 109.514737][ T5788] dump_stack_lvl+0x95/0xd0 [ 109.514795][ T5788] dump_stack+0x15/0x1b [ 109.514816][ T5788] should_fail_ex+0x263/0x280 [ 109.514836][ T5788] should_failslab+0x8c/0xb0 [ 109.514926][ T5788] __kmalloc_noprof+0xb8/0x4e0 [ 109.514945][ T5788] ? sock_kmalloc+0x85/0xc0 [ 109.515052][ T5788] sock_kmalloc+0x85/0xc0 [ 109.515079][ T5788] ip6_mc_msfilter+0x31e/0x7c0 [ 109.515105][ T5788] ipv6_set_mcast_msfilter+0x201/0x250 [ 109.515125][ T5788] do_ipv6_setsockopt+0xfe5/0x21d0 [ 109.515215][ T5788] ? kstrtoull+0x111/0x140 [ 109.515231][ T5788] ? __rcu_read_unlock+0x4e/0x70 [ 109.515251][ T5788] ? avc_has_perm_noaudit+0xab/0x130 [ 109.515277][ T5788] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 109.515371][ T5788] ipv6_setsockopt+0x59/0x130 [ 109.515393][ T5788] tcp_setsockopt+0x98/0xb0 [ 109.515464][ T5788] sock_common_setsockopt+0x69/0x80 [ 109.515481][ T5788] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 109.515502][ T5788] __sys_setsockopt+0x184/0x200 [ 109.515529][ T5788] __x64_sys_setsockopt+0x64/0x80 [ 109.515609][ T5788] x64_sys_call+0x2327/0x3020 [ 109.515633][ T5788] do_syscall_64+0x12c/0x370 [ 109.515683][ T5788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.515706][ T5788] RIP: 0033:0x7f57e64ac799 [ 109.515722][ T5788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.515813][ T5788] RSP: 002b:00007f57e4df4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 109.515830][ T5788] RAX: ffffffffffffffda RBX: 00007f57e6726180 RCX: 00007f57e64ac799 [ 109.515842][ T5788] RDX: 0000000000000030 RSI: 0000000000000029 RDI: 0000000000000009 [ 109.515855][ T5788] RBP: 00007f57e4df4090 R08: 0000000000000310 R09: 0000000000000000 [ 109.515870][ T5788] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 109.515884][ T5788] R13: 00007f57e6726218 R14: 00007f57e6726180 R15: 00007ffedda2a578 [ 109.515934][ T5788] [ 109.519860][ T5787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5787 comm=syz.3.602 [ 110.654054][ T28] audit: type=1400 audit(1772963693.537:1804): avc: denied { write } for pid=5794 comm="syz.5.605" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 110.802247][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.902151][ T28] audit: type=1400 audit(1772963693.737:1805): avc: denied { write } for pid=5801 comm="syz.0.606" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.000033][ T5803] ipvlan4: entered allmulticast mode [ 111.047942][ T28] audit: type=1400 audit(1772963693.737:1806): avc: denied { bind } for pid=5801 comm="syz.0.606" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.573620][ T5832] netlink: 5 bytes leftover after parsing attributes in process `syz.0.608'. [ 111.760882][ T28] audit: type=1400 audit(1772963694.647:1807): avc: denied { read } for pid=5848 comm="syz.4.616" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 111.801600][ T5838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5838 comm=syz.2.610 [ 111.834609][ T5853] netlink: 'syz.4.616': attribute type 1 has an invalid length. [ 111.845631][ T5853] loop4: detected capacity change from 0 to 512 [ 111.857657][ T5853] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.616: inode has both inline data and extents flags [ 111.887276][ T28] audit: type=1400 audit(1772963694.647:1808): avc: denied { open } for pid=5848 comm="syz.4.616" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 111.912674][ T5853] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 111.912860][ T5853] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.616: couldn't read orphan inode 15 (err -117) [ 111.922043][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 111.922066][ C1] EXT4-fs (loop4): initial error at time 1772963694: ext4_orphan_get:1391: inode 15 [ 111.922099][ C1] EXT4-fs (loop4): last error at time 1772963694: ext4_orphan_get:1391: inode 15 [ 112.005614][ T28] audit: type=1400 audit(1772963694.767:1809): avc: denied { read } for pid=5846 comm="syz.5.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 112.047846][ T5862] FAULT_INJECTION: forcing a failure. [ 112.047846][ T5862] name failslab, interval 1, probability 0, space 0, times 0 [ 112.088801][ T5858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5858 comm=syz.2.617 [ 112.113010][ T28] audit: type=1400 audit(1772963694.767:1810): avc: denied { connect } for pid=5846 comm="syz.5.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 112.135838][ T5853] loop4: lost filesystem error report for type 5 error -117 [ 112.136138][ T5862] CPU: 1 UID: 0 PID: 5862 Comm: syz.5.619 Tainted: G W syzkaller #0 PREEMPT(full) [ 112.136232][ T5862] Tainted: [W]=WARN [ 112.136240][ T5862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 112.136252][ T5862] Call Trace: [ 112.136260][ T5862] [ 112.136269][ T5862] __dump_stack+0x1d/0x30 [ 112.136294][ T5862] dump_stack_lvl+0x95/0xd0 [ 112.136322][ T5862] dump_stack+0x15/0x1b [ 112.136344][ T5862] should_fail_ex+0x263/0x280 [ 112.136444][ T5862] ? rtm_new_nexthop+0x1827/0x4f00 [ 112.136460][ T5862] should_failslab+0x8c/0xb0 [ 112.136486][ T5862] __kmalloc_cache_noprof+0x5f/0x410 [ 112.136511][ T5862] rtm_new_nexthop+0x1827/0x4f00 [ 112.136615][ T5862] ? selinux_capable+0x31/0x40 [ 112.136640][ T5862] ? security_capable+0x7b/0x90 [ 112.136703][ T5862] ? ns_capable+0x7c/0xb0 [ 112.136797][ T5862] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 112.136832][ T5862] rtnetlink_rcv_msg+0x64b/0x720 [ 112.136864][ T5862] netlink_rcv_skb+0x123/0x220 [ 112.136891][ T5862] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 112.136999][ T5862] rtnetlink_rcv+0x1c/0x30 [ 112.137025][ T5862] netlink_unicast+0x5c0/0x690 [ 112.137046][ T5862] netlink_sendmsg+0x5c8/0x6f0 [ 112.137102][ T5862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.137132][ T5862] ____sys_sendmsg+0x563/0x5b0 [ 112.137163][ T5862] ___sys_sendmsg+0x195/0x1e0 [ 112.137197][ T5862] __x64_sys_sendmsg+0xd4/0x160 [ 112.137270][ T5862] x64_sys_call+0x194c/0x3020 [ 112.137291][ T5862] do_syscall_64+0x12c/0x370 [ 112.137351][ T5862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.137373][ T5862] RIP: 0033:0x7fa1d1fcc799 [ 112.137389][ T5862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.137407][ T5862] RSP: 002b:00007fa1d0a1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.137433][ T5862] RAX: ffffffffffffffda RBX: 00007fa1d2245fa0 RCX: 00007fa1d1fcc799 [ 112.137444][ T5862] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 112.137484][ T5862] RBP: 00007fa1d0a1f090 R08: 0000000000000000 R09: 0000000000000000 [ 112.137497][ T5862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.137510][ T5862] R13: 00007fa1d2246038 R14: 00007fa1d2245fa0 R15: 00007ffca77d9a48 [ 112.137530][ T5862] [ 112.138092][ T5853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.401974][ T28] audit: type=1400 audit(1772963694.847:1811): avc: denied { getopt } for pid=5846 comm="syz.5.615" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.472755][ T28] audit: type=1400 audit(1772963695.357:1812): avc: denied { setattr } for pid=5848 comm="syz.4.616" name="file0" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 112.541174][ T28] audit: type=1400 audit(1772963695.407:1813): avc: denied { write } for pid=5877 comm="syz.5.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.622244][ T5884] Cannot find add_set index 0 as target [ 112.674848][ T28] audit: type=1400 audit(1772963695.557:1814): avc: denied { execute } for pid=5848 comm="syz.4.616" name="file0" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 112.709489][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.736289][ T5884] loop5: detected capacity change from 0 to 256 [ 113.144739][ T5891] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5891 comm=syz.0.631 [ 113.166129][ T5897] loop4: detected capacity change from 0 to 1024 [ 113.176501][ T5897] EXT4-fs: Ignoring removed bh option [ 113.194532][ T5897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 113.208836][ T5897] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.260371][ T5897] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: comm syz.4.632: lblock 0 mapped to illegal pblock 0 (length 1) [ 113.274352][ T5897] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #15: comm syz.4.632: lblock 0 mapped to illegal pblock 0 (length 1) [ 113.288016][ T5897] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #15: comm syz.4.632: lblock 0 mapped to illegal pblock 0 (length 1) [ 113.301788][ T5897] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #15: comm syz.4.632: lblock 0 mapped to illegal pblock 0 (length 1) [ 113.315339][ T5897] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #15: comm syz.4.632: lblock 0 mapped to illegal pblock 0 (length 1) [ 113.329166][ T5906] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #15: comm syz.4.632: lblock 0 mapped to illegal pblock 0 (length 1) [ 113.342770][ T5897] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #15: comm syz.4.632: lblock 0 mapped to illegal pblock 0 (length 1) [ 113.394504][ T5911] FAULT_INJECTION: forcing a failure. [ 113.394504][ T5911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.408740][ T5911] CPU: 1 UID: 0 PID: 5911 Comm: syz.0.637 Tainted: G W syzkaller #0 PREEMPT(full) [ 113.408828][ T5911] Tainted: [W]=WARN [ 113.408835][ T5911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 113.408847][ T5911] Call Trace: [ 113.408926][ T5911] [ 113.408934][ T5911] __dump_stack+0x1d/0x30 [ 113.409033][ T5911] dump_stack_lvl+0x95/0xd0 [ 113.409054][ T5911] dump_stack+0x15/0x1b [ 113.409070][ T5911] should_fail_ex+0x263/0x280 [ 113.409090][ T5911] should_fail+0xb/0x20 [ 113.409106][ T5911] should_fail_usercopy+0x1a/0x20 [ 113.409194][ T5911] _copy_from_iter+0xcf/0xea0 [ 113.409215][ T5911] ? __alloc_skb+0x4f6/0x690 [ 113.409234][ T5911] ? __alloc_skb+0x200/0x690 [ 113.409302][ T5911] netlink_sendmsg+0x4ae/0x6f0 [ 113.409344][ T5911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.409410][ T5911] ____sys_sendmsg+0x563/0x5b0 [ 113.409436][ T5911] ___sys_sendmsg+0x195/0x1e0 [ 113.409475][ T5911] __x64_sys_sendmsg+0xd4/0x160 [ 113.409514][ T5911] x64_sys_call+0x194c/0x3020 [ 113.409546][ T5911] do_syscall_64+0x12c/0x370 [ 113.409564][ T5911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.409621][ T5911] RIP: 0033:0x7f57e64ac799 [ 113.409637][ T5911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.409654][ T5911] RSP: 002b:00007f57e4eff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.409715][ T5911] RAX: ffffffffffffffda RBX: 00007f57e6725fa0 RCX: 00007f57e64ac799 [ 113.409730][ T5911] RDX: 000000002400c800 RSI: 0000200000000b00 RDI: 0000000000000005 [ 113.409744][ T5911] RBP: 00007f57e4eff090 R08: 0000000000000000 R09: 0000000000000000 [ 113.409755][ T5911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.409766][ T5911] R13: 00007f57e6726038 R14: 00007f57e6725fa0 R15: 00007ffedda2a578 [ 113.409849][ T5911] [ 113.470073][ T5897] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #15: comm syz.4.632: lblock 0 mapped to illegal pblock 0 (length 1) [ 113.636655][ T5912] ipvlan2: entered allmulticast mode [ 113.642223][ T5912] macvlan0: entered allmulticast mode [ 113.647705][ T5912] veth1_vlan: entered allmulticast mode [ 114.213811][ T5914] loop2: detected capacity change from 0 to 256 [ 114.376733][ T5896] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #15: comm syz.4.632: lblock 0 mapped to illegal pblock 0 (length 1) [ 114.400503][ T5896] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #15: comm syz.4.632: lblock 0 mapped to illegal pblock 0 (length 1) [ 116.281126][ T5914] FAT-fs (loop2): Directory bread(block 64) failed [ 116.287827][ T5914] FAT-fs (loop2): Directory bread(block 65) failed [ 116.294378][ T5914] FAT-fs (loop2): Directory bread(block 66) failed [ 116.301006][ T5914] FAT-fs (loop2): Directory bread(block 67) failed [ 116.307551][ T5914] FAT-fs (loop2): Directory bread(block 68) failed [ 116.314203][ T5914] FAT-fs (loop2): Directory bread(block 69) failed [ 116.320936][ T5914] FAT-fs (loop2): Directory bread(block 70) failed [ 116.327466][ T5914] FAT-fs (loop2): Directory bread(block 71) failed [ 116.333995][ T5914] FAT-fs (loop2): Directory bread(block 72) failed [ 116.340550][ T5914] FAT-fs (loop2): Directory bread(block 73) failed [ 116.451079][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 116.469633][ T5930] loop0: detected capacity change from 0 to 128 [ 116.524781][ T5936] FAULT_INJECTION: forcing a failure. [ 116.524781][ T5936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.550926][ T5936] CPU: 1 UID: 0 PID: 5936 Comm: syz.5.646 Tainted: G W syzkaller #0 PREEMPT(full) [ 116.550985][ T5936] Tainted: [W]=WARN [ 116.550991][ T5936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 116.551076][ T5936] Call Trace: [ 116.551082][ T5936] [ 116.551127][ T5936] __dump_stack+0x1d/0x30 [ 116.551207][ T5936] dump_stack_lvl+0x95/0xd0 [ 116.551230][ T5936] dump_stack+0x15/0x1b [ 116.551250][ T5936] should_fail_ex+0x263/0x280 [ 116.551288][ T5936] should_fail+0xb/0x20 [ 116.551304][ T5936] should_fail_usercopy+0x1a/0x20 [ 116.551325][ T5936] _copy_to_user+0x20/0xa0 [ 116.551352][ T5936] simple_read_from_buffer+0xb5/0x130 [ 116.551463][ T5936] proc_fail_nth_read+0x10e/0x150 [ 116.551490][ T5936] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 116.551520][ T5936] vfs_read+0x1ab/0x7f0 [ 116.551576][ T5936] ? __rcu_read_unlock+0x4e/0x70 [ 116.551651][ T5936] ? __fget_files+0x184/0x1c0 [ 116.551672][ T5936] ? mutex_lock+0x57/0x90 [ 116.551697][ T5936] ksys_read+0xdc/0x1a0 [ 116.551778][ T5936] __x64_sys_read+0x40/0x50 [ 116.551865][ T5936] x64_sys_call+0x2886/0x3020 [ 116.551890][ T5936] do_syscall_64+0x12c/0x370 [ 116.551909][ T5936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.551930][ T5936] RIP: 0033:0x7fa1d1f8cfce [ 116.551944][ T5936] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 116.551960][ T5936] RSP: 002b:00007fa1d0a1efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 116.551978][ T5936] RAX: ffffffffffffffda RBX: 00007fa1d0a1f6c0 RCX: 00007fa1d1f8cfce [ 116.551992][ T5936] RDX: 000000000000000f RSI: 00007fa1d0a1f0a0 RDI: 0000000000000004 [ 116.552005][ T5936] RBP: 00007fa1d0a1f090 R08: 0000000000000000 R09: 0000000000000000 [ 116.552082][ T5936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.552093][ T5936] R13: 00007fa1d2246038 R14: 00007fa1d2245fa0 R15: 00007ffca77d9a48 [ 116.552108][ T5936] [ 116.552697][ T5930] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.765671][ T5930] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.918686][ T5944] loop5: detected capacity change from 0 to 1024 [ 118.764250][ T5948] netlink: 88 bytes leftover after parsing attributes in process `syz.0.643'. [ 118.800790][ T5944] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.130196][ T5957] netlink: 'syz.2.649': attribute type 1 has an invalid length. [ 119.140307][ T5938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5938 comm=syz.3.647 [ 119.176626][ T5957] bond1: (slave geneve2): making interface the new active one [ 119.202015][ T5957] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 119.234901][ T4348] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 119.258366][ T4348] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 119.379297][ T4348] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 119.421972][ T4348] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 119.898865][ T3312] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.946193][ T5963] ipvlan4: entered allmulticast mode [ 119.981746][ T5967] netlink: 'syz.4.653': attribute type 32 has an invalid length. [ 120.010006][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.653'. [ 120.019085][ T5967] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 120.057000][ T5977] loop0: detected capacity change from 0 to 1024 [ 120.073262][ T5977] EXT4-fs: Ignoring removed bh option [ 120.104669][ T5977] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 120.148738][ T5977] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.258736][ T5984] loop4: detected capacity change from 0 to 512 [ 120.294944][ T5977] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: comm syz.0.655: lblock 0 mapped to illegal pblock 0 (length 1) [ 120.319635][ T5977] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.655: lblock 0 mapped to illegal pblock 0 (length 1) [ 120.349376][ T5977] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.655: lblock 0 mapped to illegal pblock 0 (length 1) [ 120.379343][ T5977] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.655: lblock 0 mapped to illegal pblock 0 (length 1) [ 120.409502][ T5986] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.655: lblock 0 mapped to illegal pblock 0 (length 1) [ 120.440313][ T5986] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.655: lblock 0 mapped to illegal pblock 0 (length 1) [ 120.467065][ T5977] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.655: lblock 0 mapped to illegal pblock 0 (length 1) [ 120.491971][ T5977] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.655: lblock 0 mapped to illegal pblock 0 (length 1) [ 120.505720][ T5976] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.655: lblock 0 mapped to illegal pblock 0 (length 1) [ 120.519575][ T5976] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.655: lblock 0 mapped to illegal pblock 0 (length 1) [ 120.564732][ T4518] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.580400][ T28] kauditd_printk_skb: 91 callbacks suppressed [ 120.580414][ T28] audit: type=1400 audit(1772963703.468:1906): avc: denied { kexec_image_load } for pid=5987 comm="syz.4.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 120.641367][ T28] audit: type=1400 audit(1772963703.528:1907): avc: denied { read } for pid=5987 comm="syz.4.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 120.726103][ T5994] random: crng reseeded on system resumption [ 120.739154][ T28] audit: type=1400 audit(1772963703.608:1908): avc: denied { write } for pid=5993 comm="syz.5.660" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 120.880512][ T28] audit: type=1400 audit(1772963703.648:1909): avc: denied { ioctl } for pid=5993 comm="syz.5.660" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x330b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 120.912768][ T5996] netlink: 16 bytes leftover after parsing attributes in process `syz.5.661'. [ 120.939283][ T5996] netlink: 16 bytes leftover after parsing attributes in process `syz.5.661'. [ 120.988395][ T5998] loop3: detected capacity change from 0 to 512 [ 121.025718][ T5998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.051154][ T5998] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.070520][ T5998] netlink: 'syz.3.662': attribute type 2 has an invalid length. [ 121.078186][ T5998] netlink: 36 bytes leftover after parsing attributes in process `syz.3.662'. [ 121.124833][ T28] audit: type=1400 audit(1772963703.998:1910): avc: denied { execute } for pid=6002 comm="syz.5.663" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=13729 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 121.173012][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.184498][ T28] audit: type=1400 audit(1772963704.048:1911): avc: denied { connect } for pid=5997 comm="syz.3.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 121.234378][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 121.370601][ T6007] wireguard0: entered promiscuous mode [ 121.384470][ T28] audit: type=1326 audit(1772963704.268:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6019 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb460cfc799 code=0x7ffc0000 [ 121.411084][ T6007] wireguard0: entered allmulticast mode [ 121.434007][ T28] audit: type=1326 audit(1772963704.268:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6019 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb460cfc799 code=0x7ffc0000 [ 121.435026][ T6012] loop0: detected capacity change from 0 to 4096 [ 121.482011][ T6024] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6024 comm=syz.4.668 [ 121.487971][ T28] audit: type=1326 audit(1772963704.268:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6019 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb460cfc799 code=0x7ffc0000 [ 121.521712][ T6012] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 121.551503][ T28] audit: type=1326 audit(1772963704.268:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6019 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb460cfc799 code=0x7ffc0000 [ 121.616109][ T6031] loop0: detected capacity change from 0 to 256 [ 121.669174][ T6031] netlink: 764 bytes leftover after parsing attributes in process `syz.0.671'. [ 121.735623][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.671'. [ 121.761385][ T6034] loop4: detected capacity change from 0 to 4096 [ 121.796451][ T6034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.854346][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.884491][ T6036] loop3: detected capacity change from 0 to 4096 [ 121.928800][ T6036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.969921][ T6031] macvlan2: entered promiscuous mode [ 121.970014][ T6031] macvlan2: entered allmulticast mode [ 121.970146][ T6031] veth0_virt_wifi: entered allmulticast mode [ 121.985879][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.996981][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.000502][ T6039] bridge_slave_1: left allmulticast mode [ 122.000522][ T6039] bridge_slave_1: left promiscuous mode [ 122.000661][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.004369][ T6039] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 122.019323][ T6044] tipc: Enabled bearer , priority 10 [ 122.085604][ T6051] loop3: detected capacity change from 0 to 1024 [ 122.086022][ T6051] EXT4-fs: Ignoring removed bh option [ 122.090279][ T6049] loop5: detected capacity change from 0 to 4096 [ 122.120850][ T6051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 122.167977][ T6049] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.183531][ T6051] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.195616][ T6051] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: comm syz.3.676: lblock 0 mapped to illegal pblock 0 (length 1) [ 122.230645][ T6051] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #15: comm syz.3.676: lblock 0 mapped to illegal pblock 0 (length 1) [ 122.273100][ T6051] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #15: comm syz.3.676: lblock 0 mapped to illegal pblock 0 (length 1) [ 122.288699][ T4518] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.315728][ T6059] netlink: 580 bytes leftover after parsing attributes in process `syz.4.678'. [ 122.325607][ T6051] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #15: comm syz.3.676: lblock 0 mapped to illegal pblock 0 (length 1) [ 122.339220][ T6059] netlink: 88 bytes leftover after parsing attributes in process `syz.4.678'. [ 122.349370][ T6051] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #15: comm syz.3.676: lblock 0 mapped to illegal pblock 0 (length 1) [ 122.389074][ T6050] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #15: comm syz.3.676: lblock 0 mapped to illegal pblock 0 (length 1) [ 122.429190][ T6051] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #15: comm syz.3.676: lblock 0 mapped to illegal pblock 0 (length 1) [ 122.457512][ T6061] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #15: comm syz.3.676: lblock 0 mapped to illegal pblock 0 (length 1) [ 122.499001][ T6050] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #15: comm syz.3.676: lblock 0 mapped to illegal pblock 0 (length 1) [ 122.534089][ T6051] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #15: comm syz.3.676: lblock 0 mapped to illegal pblock 0 (length 1) [ 122.549226][ T6065] loop5: detected capacity change from 0 to 128 [ 122.565094][ T6065] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.640000][ T6065] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 122.757078][ T6073] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6073 comm=syz.2.682 [ 122.929230][ T6077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.683'. [ 122.965204][ T6077] veth1_vlan (unregistering): left allmulticast mode [ 122.968363][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 123.002721][ T6080] netlink: 'syz.3.684': attribute type 12 has an invalid length. [ 123.010947][ T6080] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.104655][ T6085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.174517][ T6090] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 123.212839][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.347064][ T4518] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.402235][ T6106] xt_TCPMSS: Only works on TCP SYN packets [ 123.443192][ T6108] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6108 comm=syz.2.694 [ 123.513069][ T6114] netlink: 'syz.2.696': attribute type 3 has an invalid length. [ 123.520887][ T6110] loop4: p1 p2 p3 p4 [ 123.531221][ T6110] loop4: p1 start 17825536 is beyond EOD, truncated [ 123.541910][ T6110] loop4: p2 size 4294901964 extends beyond EOD, truncated [ 123.549072][ T6117] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 123.549072][ T6117] The task syz.5.693 (6117) triggered the difference, watch for misbehavior. [ 123.574876][ T6110] loop4: p3 start 458752 is beyond EOD, truncated [ 123.587233][ T6117] EXT4-fs: Ignoring removed bh option [ 123.593024][ T6117] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.594191][ T6110] loop4: p4 size 8388352 extends beyond EOD, [ 123.609858][ T6117] EXT4-fs: dax option not supported [ 123.615982][ T6110] truncated [ 123.633488][ T6120] ipvlan5: entered allmulticast mode [ 123.670877][ T6123] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 123.711826][ T6123] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.748432][ T3931] udevd[3931]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 123.759425][ T3591] udevd[3591]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 123.953704][ T6129] __nla_validate_parse: 3 callbacks suppressed [ 123.953836][ T6129] netlink: 172 bytes leftover after parsing attributes in process `syz.2.699'. [ 124.054594][ T6131] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 124.838485][ T6127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.858721][ T41] Bluetooth: hci0: Frame reassembly failed (-84) [ 124.966120][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.133175][ T6138] set_capacity_and_notify: 7 callbacks suppressed [ 125.133338][ T6138] loop4: detected capacity change from 0 to 1024 [ 125.150760][ T6140] FAULT_INJECTION: forcing a failure. [ 125.150760][ T6140] name failslab, interval 1, probability 0, space 0, times 0 [ 125.163414][ T6140] CPU: 1 UID: 0 PID: 6140 Comm: syz.5.704 Tainted: G W syzkaller #0 PREEMPT(full) [ 125.163446][ T6140] Tainted: [W]=WARN [ 125.163453][ T6140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 125.163463][ T6140] Call Trace: [ 125.163468][ T6140] [ 125.163542][ T6140] __dump_stack+0x1d/0x30 [ 125.163567][ T6140] dump_stack_lvl+0x95/0xd0 [ 125.163612][ T6140] dump_stack+0x15/0x1b [ 125.163693][ T6140] should_fail_ex+0x263/0x280 [ 125.163717][ T6140] ? tipc_nametbl_insert_publ+0x44/0x930 [ 125.163746][ T6140] should_failslab+0x8c/0xb0 [ 125.163866][ T6140] __kmalloc_cache_noprof+0x5f/0x410 [ 125.163963][ T6140] tipc_nametbl_insert_publ+0x44/0x930 [ 125.164004][ T6140] ? tipc_topsrv_kern_subscr+0x1a9/0x1e0 [ 125.164030][ T6140] tipc_nametbl_publish+0x112/0x1c0 [ 125.164058][ T6140] tipc_sk_join+0x34c/0x480 [ 125.164082][ T6140] tipc_setsockopt+0x598/0x620 [ 125.164103][ T6140] ? __pfx_tipc_setsockopt+0x10/0x10 [ 125.164130][ T6140] __sys_setsockopt+0x184/0x200 [ 125.164158][ T6140] __x64_sys_setsockopt+0x64/0x80 [ 125.164236][ T6140] x64_sys_call+0x2327/0x3020 [ 125.164319][ T6140] do_syscall_64+0x12c/0x370 [ 125.164337][ T6140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.164355][ T6140] RIP: 0033:0x7fa1d1fcc799 [ 125.164378][ T6140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.164499][ T6140] RSP: 002b:00007fa1d0a1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 125.164520][ T6140] RAX: ffffffffffffffda RBX: 00007fa1d2245fa0 RCX: 00007fa1d1fcc799 [ 125.164533][ T6140] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000005 [ 125.164544][ T6140] RBP: 00007fa1d0a1f090 R08: 0000000000000010 R09: 0000000000000000 [ 125.164568][ T6140] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 125.164579][ T6140] R13: 00007fa1d2246038 R14: 00007fa1d2245fa0 R15: 00007ffca77d9a48 [ 125.164615][ T6140] [ 125.415062][ T6138] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 125.427755][ T6138] System zones: [ 125.427847][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.475014][ T6148] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6148 comm=syz.5.707 [ 125.488636][ T6138] 0-1, 3-36 [ 125.492476][ T6151] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 125.498980][ T6151] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 125.511569][ T6138] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.703: bad orphan inode 134217728 [ 125.527867][ T6151] vhci_hcd vhci_hcd.0: Device attached [ 125.537033][ T6138] loop4: lost filesystem error report for type 5 error -117 [ 125.541695][ T6153] vhci_hcd: connection closed [ 125.543581][ T6138] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.567086][ T2138] vhci_hcd vhci_hcd.2: stop threads [ 125.572339][ T2138] vhci_hcd vhci_hcd.2: release socket [ 125.578567][ T2138] vhci_hcd vhci_hcd.2: disconnect device [ 125.785002][ T6162] wireguard0: entered promiscuous mode [ 125.815451][ T6162] wireguard0: entered allmulticast mode [ 125.873313][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.177083][ T6177] loop4: detected capacity change from 0 to 512 [ 126.191550][ T6177] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 126.251663][ T6177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.573538][ T6186] loop3: detected capacity change from 0 to 128 [ 126.659411][ T6186] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 126.930595][ T3609] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 126.954157][ T6186] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.083630][ T6200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6200 comm=syz.2.719 [ 128.609316][ T6196] netlink: 172 bytes leftover after parsing attributes in process `syz.3.717'. [ 128.643242][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.708398][ T6201] loop5: detected capacity change from 0 to 4096 [ 128.754013][ T6201] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.782025][ T6204] loop0: detected capacity change from 0 to 1024 [ 128.812693][ T6204] EXT4-fs: Ignoring removed bh option [ 128.835579][ T6204] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 128.853485][ T6204] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.867188][ T6204] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: comm syz.0.721: lblock 0 mapped to illegal pblock 0 (length 1) [ 128.880992][ T6204] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.721: lblock 0 mapped to illegal pblock 0 (length 1) [ 128.894647][ T6204] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.721: lblock 0 mapped to illegal pblock 0 (length 1) [ 128.908166][ T6204] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.721: lblock 0 mapped to illegal pblock 0 (length 1) [ 128.922204][ T6204] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.721: lblock 0 mapped to illegal pblock 0 (length 1) [ 128.936149][ T6204] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.721: lblock 0 mapped to illegal pblock 0 (length 1) [ 128.951966][ T6207] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.721: lblock 0 mapped to illegal pblock 0 (length 1) [ 128.965683][ T6204] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.721: lblock 0 mapped to illegal pblock 0 (length 1) [ 128.980849][ T6207] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.721: lblock 0 mapped to illegal pblock 0 (length 1) [ 128.994370][ T6204] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.721: lblock 0 mapped to illegal pblock 0 (length 1) [ 129.093064][ T4518] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.360318][ T28] kauditd_printk_skb: 853 callbacks suppressed [ 129.360332][ T28] audit: type=1400 audit(1772963712.249:2769): avc: denied { bind } for pid=6232 comm="syz.4.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 129.420223][ T6236] netlink: 72 bytes leftover after parsing attributes in process `syz.5.723'. [ 129.436803][ T3311] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.466240][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 129.466724][ T6223] wireguard0: entered promiscuous mode [ 129.489451][ T6223] wireguard0: entered allmulticast mode [ 129.722540][ T6249] loop4: detected capacity change from 0 to 4096 [ 129.736813][ T6249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.813128][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.991898][ T6255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6255 comm=syz.4.735 [ 130.047346][ T6264] loop3: detected capacity change from 0 to 128 [ 130.057217][ T6264] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 130.066115][ T6264] System zones: 1-3, 19-19, 35-36 [ 130.072552][ T6264] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.087474][ T6264] ext4 filesystem being mounted at /160/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 130.129562][ T28] audit: type=1400 audit(1772963713.020:2770): avc: denied { map } for pid=6266 comm="syz.2.739" path="/dev/vcsa" dev="devtmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 130.157253][ T28] audit: type=1400 audit(1772963713.040:2771): avc: denied { create } for pid=6266 comm="syz.2.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 130.205698][ T6270] loop5: detected capacity change from 0 to 128 [ 130.223903][ T6270] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.236187][ T6272] loop2: detected capacity change from 0 to 1024 [ 130.243453][ T6270] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.243826][ T6272] EXT4-fs: Ignoring removed bh option [ 130.273019][ T6272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.286112][ T6273] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #12: block 7: comm syz.2.741: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 130.307826][ T6273] EXT4-fs (loop2): Remounting filesystem read-only [ 130.324502][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.435570][ T3311] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.471439][ T6283] netlink: 172 bytes leftover after parsing attributes in process `syz.5.740'. [ 130.540669][ T6280] loop2: detected capacity change from 0 to 512 [ 130.576784][ T6280] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 130.616432][ T6280] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.742: invalid indirect mapped block 4294967295 (level 1) [ 130.631911][ T6280] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 130.633600][ T6280] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.742: invalid indirect mapped block 4294967295 (level 1) [ 130.643297][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 130.643406][ C0] EXT4-fs (loop2): initial error at time 1772963713: ext4_free_branches:1023: inode 11 [ 130.643623][ C0] EXT4-fs (loop2): last error at time 1772963713: ext4_free_branches:1023: inode 11 [ 130.689539][ T6280] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 130.692242][ T6280] EXT4-fs (loop2): 2 truncates cleaned up [ 130.795106][ T6280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.833691][ T6286] loop4: detected capacity change from 0 to 4096 [ 130.936516][ T6286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.978223][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.083473][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.181213][ T6291] wireguard0: entered promiscuous mode [ 131.187034][ T6291] wireguard0: entered allmulticast mode [ 131.386289][ T6298] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 131.594209][ T6310] bridge1: entered promiscuous mode [ 131.605032][ T6310] bridge1: entered allmulticast mode [ 131.701549][ T6314] loop3: detected capacity change from 0 to 256 [ 131.844927][ T6318] loop3: detected capacity change from 0 to 512 [ 131.877013][ T6318] EXT4-fs: Ignoring removed i_version option [ 131.900019][ T6318] EXT4-fs: Ignoring removed bh option [ 131.906437][ T4518] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.976532][ T6318] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.000884][ T6318] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.059943][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.167636][ T6335] loop3: detected capacity change from 0 to 512 [ 132.198682][ T6328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6328 comm=syz.0.755 [ 132.212295][ T6335] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 132.256408][ T6335] EXT4-fs (loop3): 1 truncate cleaned up [ 132.284659][ T6335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.296856][ T28] audit: type=1400 audit(1772963715.170:2772): avc: denied { mount } for pid=6341 comm="syz.5.760" name="/" dev="hugetlbfs" ino=13272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 132.347665][ T28] audit: type=1400 audit(1772963715.210:2773): avc: denied { unmount } for pid=4518 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 132.399273][ T6349] syzkaller0: entered promiscuous mode [ 132.399292][ T6349] syzkaller0: entered allmulticast mode [ 132.432212][ T28] audit: type=1400 audit(1772963715.310:2774): avc: denied { open } for pid=6348 comm="syz.4.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 132.432238][ T28] audit: type=1400 audit(1772963715.320:2775): avc: denied { kernel } for pid=6348 comm="syz.4.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 132.432259][ T28] audit: type=1400 audit(1772963715.320:2776): avc: denied { create } for pid=6348 comm="syz.4.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 132.465888][ T28] audit: type=1400 audit(1772963715.360:2777): avc: denied { map } for pid=6331 comm="syz.3.756" path="/165/file1/memory.events" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 132.474915][ T28] audit: type=1400 audit(1772963715.360:2778): avc: denied { getopt } for pid=6331 comm="syz.3.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 132.519743][ T6350] loop4: detected capacity change from 0 to 512 [ 132.547259][ T6350] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 132.551247][ T6350] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #13: comm syz.4.762: iget: bad i_size value: 12154757448730 [ 132.551396][ T6350] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 132.552290][ T6350] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.762: couldn't read orphan inode 13 (err -117) [ 132.552460][ T6350] loop4: lost filesystem error report for type 5 error -117 [ 132.557296][ T6350] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.616598][ T6350] EXT4-fs warning (device loop4): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 132.675080][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.705214][ T6359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.763'. [ 132.750133][ T6359] loop4: detected capacity change from 0 to 4096 [ 132.873439][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.940180][ T6364] loop3: detected capacity change from 0 to 128 [ 133.069618][ T6364] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.087214][ T6364] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.217911][ T6359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.326322][ T6378] netlink: 172 bytes leftover after parsing attributes in process `syz.3.764'. [ 133.392504][ T6362] wireguard0: entered promiscuous mode [ 133.441077][ T6362] wireguard0: entered allmulticast mode [ 133.857347][ T6392] FAULT_INJECTION: forcing a failure. [ 133.857347][ T6392] name failslab, interval 1, probability 0, space 0, times 0 [ 133.870169][ T6392] CPU: 1 UID: 0 PID: 6392 Comm: syz.5.772 Tainted: G W syzkaller #0 PREEMPT(full) [ 133.870203][ T6392] Tainted: [W]=WARN [ 133.870209][ T6392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 133.870222][ T6392] Call Trace: [ 133.870229][ T6392] [ 133.870314][ T6392] __dump_stack+0x1d/0x30 [ 133.870391][ T6392] dump_stack_lvl+0x95/0xd0 [ 133.870413][ T6392] dump_stack+0x15/0x1b [ 133.870436][ T6392] should_fail_ex+0x263/0x280 [ 133.870512][ T6392] should_failslab+0x8c/0xb0 [ 133.870530][ T6392] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 133.870549][ T6392] ? __d_alloc+0x37/0x340 [ 133.870574][ T6392] __d_alloc+0x37/0x340 [ 133.870645][ T6392] ? default_pointer+0xf2/0x5e0 [ 133.870691][ T6392] d_alloc+0x2e/0x100 [ 133.870718][ T6392] lookup_one_qstr_excl+0x99/0x250 [ 133.870743][ T6392] start_dirop+0x3e/0x70 [ 133.870782][ T6392] simple_start_creating+0xa2/0xd0 [ 133.870837][ T6392] debugfs_start_creating+0xda/0x150 [ 133.870872][ T6392] __debugfs_create_file+0x70/0x2b0 [ 133.870893][ T6392] debugfs_create_file_full+0x3f/0x60 [ 133.870923][ T6392] ? __pfx_ipgre_tunnel_setup+0x10/0x10 [ 133.870953][ T6392] ref_tracker_dir_debugfs+0x10e/0x220 [ 133.871064][ T6392] alloc_netdev_mqs+0x1a7/0xa40 [ 133.871159][ T6392] ? sized_strscpy+0x157/0x1a0 [ 133.871180][ T6392] __ip_tunnel_create+0x2b1/0x430 [ 133.871207][ T6392] ip_tunnel_ctl+0x394/0x750 [ 133.871225][ T6392] ipgre_tunnel_ctl+0x22f/0x560 [ 133.871257][ T6392] ip_tunnel_siocdevprivate+0x77/0xe0 [ 133.871281][ T6392] dev_ifsioc+0x923/0xf60 [ 133.871310][ T6392] dev_ioctl+0x78c/0x960 [ 133.871451][ T6392] sock_ioctl+0x593/0x610 [ 133.871502][ T6392] ? __pfx_sock_ioctl+0x10/0x10 [ 133.871525][ T6392] __se_sys_ioctl+0xce/0x140 [ 133.871541][ T6392] __x64_sys_ioctl+0x43/0x50 [ 133.871571][ T6392] x64_sys_call+0x1563/0x3020 [ 133.871607][ T6392] do_syscall_64+0x12c/0x370 [ 133.871667][ T6392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.871690][ T6392] RIP: 0033:0x7fa1d1fcc799 [ 133.871707][ T6392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.871724][ T6392] RSP: 002b:00007fa1d0a1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.871742][ T6392] RAX: ffffffffffffffda RBX: 00007fa1d2245fa0 RCX: 00007fa1d1fcc799 [ 133.871755][ T6392] RDX: 0000200000000200 RSI: 00000000000089f1 RDI: 0000000000000006 [ 133.871840][ T6392] RBP: 00007fa1d0a1f090 R08: 0000000000000000 R09: 0000000000000000 [ 133.871854][ T6392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.871868][ T6392] R13: 00007fa1d2246038 R14: 00007fa1d2245fa0 R15: 00007ffca77d9a48 [ 133.871887][ T6392] [ 134.213076][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.420319][ T6401] netlink: 64 bytes leftover after parsing attributes in process `syz.5.775'. [ 134.451770][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 134.451785][ T28] audit: type=1400 audit(1772963717.340:2783): avc: denied { write } for pid=6397 comm="syz.5.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 134.481028][ T6401] lo speed is unknown, defaulting to 1000 [ 134.500864][ T6401] lo speed is unknown, defaulting to 1000 [ 134.521360][ T6401] lo speed is unknown, defaulting to 1000 [ 134.533455][ T6402] bridge2: entered promiscuous mode [ 134.541712][ T6401] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 134.578052][ T6401] lo speed is unknown, defaulting to 1000 [ 134.586646][ T6401] lo speed is unknown, defaulting to 1000 [ 134.597785][ T6401] lo speed is unknown, defaulting to 1000 [ 134.611586][ T6401] lo speed is unknown, defaulting to 1000 [ 134.624168][ T6401] lo speed is unknown, defaulting to 1000 [ 134.716280][ T28] audit: type=1400 audit(1772963717.600:2784): avc: denied { tracepoint } for pid=6397 comm="syz.5.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 134.737683][ T3311] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.767854][ T6404] netlink: 16 bytes leftover after parsing attributes in process `syz.0.774'. [ 134.779178][ T28] audit: type=1400 audit(1772963717.620:2785): avc: denied { cpu } for pid=6396 comm="syz.0.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 134.798653][ T6404] netlink: 16 bytes leftover after parsing attributes in process `syz.0.774'. [ 134.898800][ T6410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6410 comm=syz.3.776 [ 134.997796][ T28] audit: type=1400 audit(1772963717.890:2786): avc: denied { ioctl } for pid=6426 comm="syz.4.783" path="socket:[15407]" dev="sockfs" ino=15407 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.077519][ T28] audit: type=1400 audit(1772963717.950:2787): avc: denied { ioctl } for pid=6430 comm="syz.0.784" path="socket:[14413]" dev="sockfs" ino=14413 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 135.200202][ T28] audit: type=1400 audit(1772963718.090:2788): avc: denied { write } for pid=6440 comm="syz.4.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 135.299995][ T28] audit: type=1400 audit(1772963718.190:2789): avc: denied { name_bind } for pid=6450 comm="syz.4.793" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 135.348303][ T6451] netlink: 'syz.4.793': attribute type 10 has an invalid length. [ 135.366435][ T6451] netlink: 40 bytes leftover after parsing attributes in process `syz.4.793'. [ 135.383717][ T6455] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 135.386505][ T6451] bridge0: port 3(veth1_macvtap) entered blocking state [ 135.392807][ T6455] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 135.392937][ T6455] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 135.417979][ T6455] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 135.419955][ T6451] bridge0: port 3(veth1_macvtap) entered disabled state [ 135.427085][ T6455] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 135.427114][ T6455] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 135.452150][ T6455] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 135.461272][ T6455] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 135.464215][ T6451] veth1_macvtap: entered allmulticast mode [ 135.470331][ T6455] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 135.485220][ T6455] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 135.513516][ T6451] veth1_macvtap: left allmulticast mode [ 136.308935][ T6500] syzkaller0: entered promiscuous mode [ 136.325820][ T6500] syzkaller0: entered allmulticast mode [ 136.344741][ T28] audit: type=1400 audit(1772963719.230:2790): avc: denied { create } for pid=6499 comm="syz.5.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 136.532664][ T28] audit: type=1400 audit(1772963719.420:2791): avc: denied { ioctl } for pid=6519 comm="syz.5.821" path="cgroup:[4026532371]" dev="nsfs" ino=4026532371 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 136.562735][ T6518] netlink: 14 bytes leftover after parsing attributes in process `syz.2.820'. [ 136.565571][ T28] audit: type=1400 audit(1772963719.450:2792): avc: denied { write } for pid=6519 comm="syz.5.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 136.612958][ T3708] ================================================================== [ 136.621079][ T3708] BUG: KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll [ 136.630291][ T3708] [ 136.632605][ T3708] read-write to 0xffff88811b1063e0 of 8 bytes by task 3414 on cpu 0: [ 136.640653][ T3708] wg_packet_rx_poll+0xed7/0x10f0 [ 136.645675][ T3708] __napi_poll+0x61/0x330 [ 136.649998][ T3708] napi_threaded_poll_loop+0x1db/0x660 [ 136.655448][ T3708] napi_threaded_poll+0x193/0x240 [ 136.660461][ T3708] kthread+0x22a/0x280 [ 136.664512][ T3708] ret_from_fork+0x150/0x360 [ 136.669094][ T3708] ret_from_fork_asm+0x1a/0x30 [ 136.673849][ T3708] [ 136.676154][ T3708] read-write to 0xffff88811b1063e0 of 8 bytes by task 3708 on cpu 1: [ 136.684215][ T3708] wg_packet_handshake_receive_worker+0x49f/0x5d0 [ 136.690626][ T3708] process_scheduled_works+0x4de/0x9e0 [ 136.696076][ T3708] worker_thread+0x581/0x770 [ 136.700654][ T3708] kthread+0x22a/0x280 [ 136.704703][ T3708] ret_from_fork+0x150/0x360 [ 136.709282][ T3708] ret_from_fork_asm+0x1a/0x30 [ 136.714034][ T3708] [ 136.716340][ T3708] value changed: 0x00000000000007e8 -> 0x0000000000000808 [ 136.723465][ T3708] [ 136.725770][ T3708] Reported by Kernel Concurrency Sanitizer on: [ 136.731907][ T3708] CPU: 1 UID: 0 PID: 3708 Comm: kworker/1:4 Tainted: G W syzkaller #0 PREEMPT(full) [ 136.742826][ T3708] Tainted: [W]=WARN [ 136.746609][ T3708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 136.756649][ T3708] Workqueue: wg-kex-wg0 wg_packet_handshake_receive_worker [ 136.763844][ T3708] ================================================================== [ 136.778982][ T6524] netlink: 'syz.2.820': attribute type 39 has an invalid length.