last executing test programs: 2m33.770762801s ago: executing program 32 (id=60): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x400, @loopback, 0x15}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) 2m10.501068431s ago: executing program 33 (id=777): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f0000000cc0)="b44c806748f063", 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffff6}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 2m8.810926999s ago: executing program 34 (id=807): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1m54.208655236s ago: executing program 7 (id=1135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xd, 0xb}, {0xe, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x1, 0x406, 0x1, 0xffffffff, 0x9}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x8, 0x653d}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, 0x0, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x5) 1m54.003028987s ago: executing program 7 (id=1136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) 1m53.895524784s ago: executing program 7 (id=1140): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6a, 0xfc, "2af01c3d0040fbffffffffffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETS(r1, 0x5402, &(0x7f00000001c0)={0x8ff7f, 0x0, 0xfffffffc, 0x4, 0x5, "db2d416fbecfc34b5452b768e08ee2df361089"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0xd) 1m53.803308119s ago: executing program 35 (id=1141): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0x5, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000380)="b4", 0x1, 0x40080, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 1m53.758993842s ago: executing program 7 (id=1144): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9567, 0x3, 0x0, 0x0, 0x1f, 0x5, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4, 0x100]}) 1m53.563530553s ago: executing program 7 (id=1146): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0x6}, {0xfff1, 0x9}, {0x2, 0xffff}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x24000044) 1m53.0968117s ago: executing program 7 (id=1153): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000004c0)='./file1\x00', 0x3000046, &(0x7f0000000080)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x72b}}, {@data_err_abort}, {@jqfmt_vfsold}, {@delalloc}, {@errors_remount}, {@discard}, {@data_err_ignore}, {@mblk_io_submit}, {@noblock_validity}, {@user_xattr}, {@block_validity}, {@norecovery}]}, 0x1, 0x57b, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000019340)='\x00', 0x1, 0x9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x4, 0x2}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c00000000010102001c2800698c6423000000000000000c400000000008000c40000000002800164000000005000080010000ffff0000000a000000040000000300400001000000000001000008facfcc1194c12c910164cda221ca3443c812f297a1ebe57f99ea207ec551738d0447fd2b96b0d10ded0eb5cb623b3302997206c614e99df148cf204c05000000e3"], 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x8000, 0x8, 0xfffffffa, 0x8, {{0x2e, 0x4, 0x2, 0x9, 0xb8, 0x65, 0x0, 0x2, 0x3, 0x0, @multicast1, @multicast1, {[@ssrr={0x89, 0x1b, 0x7d, [@loopback, @private=0xa010102, @multicast2, @empty, @multicast2, @local]}, @timestamp_addr={0x44, 0x2c, 0x56, 0x1, 0x1, [{@private=0xa010102, 0x3}, {@private=0xa010102, 0x1}, {@loopback, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0x41, 0x0, 0xd, [0x9da9, 0x0, 0x8, 0x7]}, @ssrr={0x89, 0x1b, 0x8, [@dev={0xac, 0x14, 0x14, 0xc}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x33}, @empty, @remote, @multicast1]}, @cipso={0x86, 0x25, 0x3, [{0x7, 0xe, "54cb3223435eb62ba183480b"}, {0x1, 0x11, "52b33dffb99ea8ab3cbbd25718afa9"}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r0, 0x58, &(0x7f0000000500)}, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vxcan0\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x100fb8, 0x6, 0x0, 0x0, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="1a040500d3fc03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x6, 0x6, @remote}, 0x14) 1m53.09646861s ago: executing program 36 (id=1153): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000004c0)='./file1\x00', 0x3000046, &(0x7f0000000080)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x72b}}, {@data_err_abort}, {@jqfmt_vfsold}, {@delalloc}, {@errors_remount}, {@discard}, {@data_err_ignore}, {@mblk_io_submit}, {@noblock_validity}, {@user_xattr}, {@block_validity}, {@norecovery}]}, 0x1, 0x57b, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000019340)='\x00', 0x1, 0x9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x4, 0x2}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c00000000010102001c2800698c6423000000000000000c400000000008000c40000000002800164000000005000080010000ffff0000000a000000040000000300400001000000000001000008facfcc1194c12c910164cda221ca3443c812f297a1ebe57f99ea207ec551738d0447fd2b96b0d10ded0eb5cb623b3302997206c614e99df148cf204c05000000e3"], 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x8000, 0x8, 0xfffffffa, 0x8, {{0x2e, 0x4, 0x2, 0x9, 0xb8, 0x65, 0x0, 0x2, 0x3, 0x0, @multicast1, @multicast1, {[@ssrr={0x89, 0x1b, 0x7d, [@loopback, @private=0xa010102, @multicast2, @empty, @multicast2, @local]}, @timestamp_addr={0x44, 0x2c, 0x56, 0x1, 0x1, [{@private=0xa010102, 0x3}, {@private=0xa010102, 0x1}, {@loopback, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0x41, 0x0, 0xd, [0x9da9, 0x0, 0x8, 0x7]}, @ssrr={0x89, 0x1b, 0x8, [@dev={0xac, 0x14, 0x14, 0xc}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x33}, @empty, @remote, @multicast1]}, @cipso={0x86, 0x25, 0x3, [{0x7, 0xe, "54cb3223435eb62ba183480b"}, {0x1, 0x11, "52b33dffb99ea8ab3cbbd25718afa9"}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r0, 0x58, &(0x7f0000000500)}, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vxcan0\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x100fb8, 0x6, 0x0, 0x0, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="1a040500d3fc03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x6, 0x6, @remote}, 0x14) 1m0.953446724s ago: executing program 1 (id=2238): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x41, 0x0, 0x0, 0x0, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000180)={0xfffff2d4, 0x200ffffd, 0x7, 0xfffffff2, 0x0, "4d6b5ccb000000000000000000000000000004", 0x8}) readv(r2, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/166, 0xa6}], 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)) syz_usb_connect$lan78xx(0x6, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$eJzs281rHOUfAPDvTLKb9teX5FfrS2vVaBGCYtKkVXvwolQQqSjooR5jsi2h20aaKLYWm4p4EqSgZ/Eo+hd4E0HUk+DVkycpFO2lrafITGaSTbp5odlk0+7nAzP7PDPP7Dzfnbdnn2c3gI7Vn82SiJ0R8UdE9M5lFxfon3u5ef3i2K3rF8eSmJ198+8kL3fj+sWxsmi53Y4iM5BGpJ8kxU4Wmzp/4fRovV47V+SHps+8OzR1/sIz758ZPVU7VTs7cvTokcPDzz838mxL4sziurH/o8kD+155+8prYyeuvPPLd1l9dxbrG+Nolf4s8H9mc0vXPdnqnbXZrnzek8+T7jZXhjXriojscFXy6783umLh4PXGyx+3tXLAhsqeTT3Lr56ZBe5hSay1ZKXhngHc/coHffb9t5w2odmxZVx7ce4LUBb3zWKaW9MdaVGmMv/9tvX6I+LEzL9fZVNsUD8EAECjz8a+PF6Nnvjw1revZm2P3vk1aTyQv/6Zz3cXYyh9EfH/iNgTEfdFxN6IuD8iL/tgRDy0zvrc3v5Jr67zLVeUtf9eKMa2Frf/ytZf9HUVuV15/JXk5ES9dqj4TAai0pPlh1fYxw/Hfv98uXWN7b9syvZftgWLelztXtJBNz46PRqV9US94NrliP3dzeJP5kcCkojYFxH757da0wDP7jIx8dQ3B5YrtHr8K2jBONPs11l4M1n8M7Ek/lLSOD45cdv45NC2qNcODZVnxe1+/e3TN5bb/7rib4FrtbnXhuO/tEhf0jheO9Xa/d/h+Z9Wk7fyceZqMeb4wej09LnhiGpyPM9Xi7L58pGFbct8WT47/wcONr/+9xTbZPE/HBHZSfxIRDwaEY8VdX88Ip6IiIMrxPjzS6vHH2mbjv/liPGm97/583/J8T9/4XR5a1xYsmKi6/RP3y+3/7Ud/yN5aqBYkt//VtGsOt1NqnynnxsAAADcTdL8N/BJOjifTtPBwbnf8O+N/6X1yanpp09Ovnd2fO638n1RScuert6iP7Q+Ua8NJzPFO1aSY1GvjRR9xWV/6eGi3/iLru15fnBssj7e5tih0+1Y5vrP/NXV7toBG2x706Uj1U2vCNAGS8fR08XZS6+HmwHcq/xfGzrXKtd/uln1ADaf5z90rmbX/6UleWMBcG/y/IfO5fqHDpX+2O4aAG3k+Q8dadU/77cnsa1xSXXlwtUtUueWJbbqQckTEWUi3RL1kdigRLvvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK3xXwAAAP//uIXZzg==") socket$kcm(0x10, 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, 0x0) 1m0.225855357s ago: executing program 1 (id=2255): socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0xf4ff, 0x0, 0x0, 0x2}, 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) 1m0.105106904s ago: executing program 1 (id=2258): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800010025bd7000080000001d01040008000a00", @ANYRES32=r1, @ANYBLOB="08009d55", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x20004000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="1000"/20], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x34, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000020000000000000800000018110000", @ANYRES32, @ANYBLOB="00000000000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000019b0010008000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="e06921e8682d85ff9782762f86dd", 0x0, 0xc7d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) syz_emit_ethernet(0x46, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1) write(r5, &(0x7f0000000340), 0x11000) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000080)='./bus/file0\x00', 0x2004006, &(0x7f0000000000)=ANY=[@ANYRESHEX=r3], 0x25, 0x352, &(0x7f0000000c80)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r7 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020601020000000000000000000000001400078008001740fffff8010800084000000030050001000600000005000500070000000d0003006c6973743a736574000000000900020073797a3100000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000000), 0x4) syz_clone(0x8200000, 0x0, 0xffffffffffffffcd, 0x0, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r10, r9, 0x0, 0x3a) 1m0.034400948s ago: executing program 1 (id=2261): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0xd07, 0x81}, 0x100b28, 0xa, 0x9, 0x6, 0x8, 0x22005, 0xb, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000000000000a000000fbffff7f"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000003000000090000000100000000040000", @ANYRES32=r0, @ANYBLOB="0900000000000081ccf4ef000000000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="02000000020000000400"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=r0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x80) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) munmap(&(0x7f00007b2000/0x3000)=nil, 0x3000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 58.765878212s ago: executing program 1 (id=2273): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0xdf, &(0x7f0000001400)=""/223}, 0x94) 56.851058222s ago: executing program 1 (id=2302): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x41, 0x0, 0x0, 0x0, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000180)={0xfffff2d4, 0x200ffffd, 0x7, 0xfffffff2, 0x0, "4d6b5ccb000000000000000000000000000004", 0x8}) socket$nl_route(0x10, 0x3, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r3, 0xee01, r4) keyctl$setperm(0x5, r3, 0x30925) keyctl$read(0xb, r3, &(0x7f0000000000)=""/201, 0xc9) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x4, 0x40, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r7, &(0x7f0000000640)=ANY=[], 0x200002e6) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$setpipe(r7, 0x407, 0x7000000) write(r7, &(0x7f0000000280)='9f', 0x2) readv(r2, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/166, 0xa6}], 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)) 56.850645442s ago: executing program 37 (id=2302): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x41, 0x0, 0x0, 0x0, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000180)={0xfffff2d4, 0x200ffffd, 0x7, 0xfffffff2, 0x0, "4d6b5ccb000000000000000000000000000004", 0x8}) socket$nl_route(0x10, 0x3, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r3, 0xee01, r4) keyctl$setperm(0x5, r3, 0x30925) keyctl$read(0xb, r3, &(0x7f0000000000)=""/201, 0xc9) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x4, 0x40, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r7, &(0x7f0000000640)=ANY=[], 0x200002e6) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$setpipe(r7, 0x407, 0x7000000) write(r7, &(0x7f0000000280)='9f', 0x2) readv(r2, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/166, 0xa6}], 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)) 56.309180664s ago: executing program 0 (id=2309): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000001010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a3100"], 0xf4}}, 0x10) 56.162760442s ago: executing program 0 (id=2310): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 56.139390683s ago: executing program 0 (id=2311): syz_emit_ethernet(0xd2, &(0x7f0000000840)=ANY=[@ANYBLOB="0180c200000effffffffffff86dd6a01a604009c1101fc010000000000000000000000000000ff020000000000000000f5ff000000014e234e20009c90"], 0x0) 56.088251657s ago: executing program 0 (id=2312): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x603}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@errors_continue}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x103495, 0x0) chroot(&(0x7f0000000100)='./file0\x00') getcwd(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x110cc0, 0x91d, 0xf, 0x0, 0x6, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x0, 0x8400, 0x1}) r0 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xfe15, 0x10, 0x0, 0x30f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x21, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0xe0, 0x21, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000c7b2238861e2f568000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0x3, &(0x7f0000000300)=ANY=[@ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x10, 0xfa00, {0x8000000000000003, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r4, 0x8001}}, 0x48) 55.435244804s ago: executing program 0 (id=2318): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000040), 0xf}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c00018006000600894f"], 0x24}}, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x345}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fedbdf25170000004800068008000600000000003c0004"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4040800) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)={0x2a0, r6, 0x120, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x94b5}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6ff1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x69}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x87}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x1054}, 0x4005800) io_uring_enter(r2, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0xfffffffffffffe00, r1, 0x51c, 0x70bd28}, 0x14}}, 0x0) 55.197459448s ago: executing program 0 (id=2320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 55.130816052s ago: executing program 38 (id=2320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 27.418758639s ago: executing program 8 (id=2782): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 27.301385466s ago: executing program 8 (id=2785): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000006c0)={0x2c, 0x1, 0x2, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @private=0xa010100}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40810}, 0x20000000) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="240000006800010000000000000000000a000100000000000400040008000500", @ANYRES32=0x0, @ANYBLOB="f5ddceeeb5103044bf3dc50206aa9ede9eedb51a637c3b227f25e5ea930046181459302b44bc4abff4763400afcda50ce3c58485f5565dce843a"], 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x4040040) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x40}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x14, 0x0, "e35940a0528ecfc99fd18d9936dec27f7b1504e8a87f0bfc6c1f42a8d1e0838eb2fad47db60000000000000050c4951700", "4d3ce44dbdb2f9d4bb3c72b70234ff8f6b7dfbb2952a389402b6610d7efdd97ab637b1fc590a822d18f753b9e8b8cc83e1d0301a04e4005ac358c7ec9f6e430c", "740b91e8ea5534e9d7e22f0000000a00540d60966a9dca4100010e76e4c3e0ff", [0x4]}) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 27.300666576s ago: executing program 8 (id=2786): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000980), 0x8) fchdir(r0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x158}, 0x1, 0x0, 0x0, 0x1}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="48000000680001002dbd70000000008000000200000000000c00088008"], 0x48}}, 0x44010) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001200010029bd7000fbdbdf2500"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x800) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x15, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x30000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80080000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa81}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 26.116706655s ago: executing program 8 (id=2799): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) r0 = syz_io_uring_setup(0x1a0, &(0x7f0000000380)={0x0, 0x60d0, 0x1, 0x0, 0x3df}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r4, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6003, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001700)=""/216, 0xd8}], 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x28, 0x0, 0x0) 25.782628064s ago: executing program 8 (id=2804): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) r2 = socket(0x10, 0x803, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0xbf22}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fcdbdf250b0000000400018020000180140002006d0dd7e24fb66e3000000000000000000800030001000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008064) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000180)=@udp=r2}, 0x20) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xe, 0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0xb, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}}, 0x4000010) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x240, 0x30, 0x51b, 0x0, 0x0, {}, [{0x22c, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{}, 0x4}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x5d25f55903485e1f}}}}, @m_tunnel_key={0x114, 0x0, 0x0, 0x0, {{0xf}, {0x7c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x5}}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x26c, 0x0, 0x1, 0x1, 0xff}, 0x1}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x81, 0x3, 0x2, 0x7, 0x7}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x240}}, 0x0) (async) r7 = socket(0xa, 0x5, 0x0) listen(r7, 0x100) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000a80)="d80000001d0081044e81f777db44b904021d080201000000040000a1bc0001000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c16fb4007134cf6ee08000a0e408e8d8ef075c11503c6bbace801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322107c9fd6", 0x81}, {&(0x7f00000006c0)="54f6d4d87eb3f140c5", 0x9}, {&(0x7f0000000980)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e635cbe848495e723490d8e93db224d82d4fbfe76bd22fd358cd467795ad7febfc220d72f", 0x4e}], 0x3, 0x0, 0x0, 0x7400}, 0x10) (async) sendmsg$inet_sctp(r7, &(0x7f00000000c0)={&(0x7f0000000200)=@in6={0xa, 0x4e24, 0x2, @private0={0xfc, 0x0, '\x00', 0x41}, 0x81}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000100)="ca", 0x1}], 0x1, &(0x7f0000000180)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0xaaa}}], 0x18, 0x1e891}, 0x8050) (async) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) (async) syz_create_resource$binfmt(&(0x7f0000000240)='./file0\x00') r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 25.533153589s ago: executing program 8 (id=2808): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x110cc0, 0x91d, 0xf, 0x0, 0x6, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0x3, &(0x7f0000000300)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r2, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 25.485265101s ago: executing program 39 (id=2808): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x110cc0, 0x91d, 0xf, 0x0, 0x6, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0x3, &(0x7f0000000300)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r2, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 15.150264221s ago: executing program 5 (id=2941): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0xfffffffb, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) 15.150101831s ago: executing program 5 (id=2942): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4000, r2}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3da5e2d3f7be78134494029bc3fbea764b655fcce5028061e2e7b190", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',k']) 15.135489852s ago: executing program 5 (id=2943): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000050000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004"], 0xf4}}, 0x10) 15.066889726s ago: executing program 5 (id=2945): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x3b6, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105842, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0x5, 0x7, 0x6, 0x4, 0xa, 0x0, 0x1, 0xde, 0x0, 0x10}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={r2, 0x8fd, 0x5, 0x8}, 0x10) writev(r0, &(0x7f0000000a40)=[{&(0x7f0000000e00)='t', 0x1}], 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb005}, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'macvtap0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000380)="0b031407e0ff640f020047540f68a12cb1000e00080008004803f49cbacbe37f6605c048ac1d858fe3d78a6f5ac3b574e0c53eae51239716739e14c0ef1c150460a1fc1f1da06c30113fdf016eb18358c8d1f271d9d785a50ee82138157cd38115751b8d45d493516d", 0xa387, 0x20000000, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0xfc}, 0x14) setuid(0xee01) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000100)=0x9, 0x4) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000300)={r2, 0x1000, 0x7f}, &(0x7f0000000340)=0x8) sendto$inet6(r3, &(0x7f0000000000)="836bb66f", 0x18, 0x0, 0x0, 0x0) 14.65699303s ago: executing program 5 (id=2953): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@type_tag={0x3, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x30, 0x61]}}, 0x0, 0x28, 0x0, 0x1, 0xe2c}, 0x28) io_setup(0x81, &(0x7f0000001440)=0x0) r1 = syz_io_uring_setup(0x2afc, &(0x7f00000002c0)={0x0, 0x59cd, 0x13090, 0x0, 0x72}, &(0x7f0000000100), &(0x7f0000000080)) io_submit(r0, 0x1, &(0x7f0000000800)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7e2, r1, 0x0}]) io_uring_enter(r1, 0x21d2, 0x2707, 0x23, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x24, &(0x7f0000000640)={0x2, 0x4, 0x5, 0xe}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80080a, &(0x7f0000001c80)={[{@barrier_val}, {@resuid}, {@errors_remount}, {@usrjquota}]}, 0x1, 0x7b8, &(0x7f0000000980)="$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") 14.487257729s ago: executing program 5 (id=2957): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="300000002000010000000000000000000200000060000000000000000c00144000000000000000000500130001"], 0x30}}, 0x4000) 14.457653901s ago: executing program 40 (id=2957): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="300000002000010000000000000000000200000060000000000000000c00144000000000000000000500130001"], 0x30}}, 0x4000) 1.607396877s ago: executing program 6 (id=3194): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "d285b6853bc4dc54c6910c1d66f8841a"}]}}}}}}}, 0x0) 1.55849516s ago: executing program 6 (id=3196): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x69, 0x8, 0x2, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0x10000, 0x4, 0x9, 0x7, 0x2, 0x1, 0x3, 0x0, 0x2, 0x0, 0x9}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000000c0)={0x1, 0x80, 0x1, 0x95, 0x3, 0xa2, 0x0, 0x80000000, 0x8020, 0xa, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x8000000000000000, 0x8}, 0x10800, 0x6, 0x7, 0x9, 0x0, 0x0, 0x77, 0x0, 0x2, 0x0, 0x400}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) ioctl$TIOCMBIC(r2, 0x5417, 0x0) 1.494307603s ago: executing program 6 (id=3199): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x4000000, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") socket$nl_generic(0x10, 0x3, 0x10) r3 = epoll_create(0x3) r4 = socket(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000001280)={0x20000012}) 1.338518602s ago: executing program 3 (id=3201): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=@newtaction={0x14, 0x1d, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x4, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00}, 0x94) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfffc}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0xa, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xd}, 0x94) (rerun: 64) 1.120568145s ago: executing program 9 (id=3202): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x8000, 0x8, 0xfffffffa, 0x8, {{0xc, 0x4, 0x2, 0x9, 0x30, 0x65, 0x0, 0x2, 0x3, 0x0, @multicast1, @multicast1, {[@ssrr={0x89, 0x1b, 0x7d, [@loopback, @private=0xa010102, @multicast2, @empty, @multicast2, @local]}]}}}}}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="1a040500d3fc03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14) (fail_nth: 8) 837.342951ms ago: executing program 9 (id=3205): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000000000a8ea0000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x322f7f2843671a4a}, 0xc1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x3, {0x0, 0x0, 0x1}, 0xfe}, 0x18) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) pwritev(r4, &(0x7f0000000480)=[{&(0x7f00000001c0)="e7", 0x1}], 0x1000000000000020, 0xfffffffe, 0x80) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0xff, 0x4}}, 0x18) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 766.566495ms ago: executing program 3 (id=3207): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x110cc0, 0x91d, 0xf, 0x0, 0x6, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0x3, &(0x7f0000000300)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r2, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 746.017336ms ago: executing program 2 (id=3209): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xf}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x6}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}]}}]}, 0x3c}}, 0x20044055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000001000000100000038000180060001001d00000008000600776c630008000900640000000c000700000000000000000008000500000000000800080000000000"], 0x4c}}, 0x0) 697.696859ms ago: executing program 4 (id=3210): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x2000}, @val={0x3, 0x1, 0x81, 0x7, 0x6, 0x4}, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x4e20, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0xe0000001}}}}}}}}, 0x40) 634.491023ms ago: executing program 2 (id=3211): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ECN={0x8}, @TCA_PIE_BETA={0x8, 0x5, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004001}, 0x20008000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_init() (async) r3 = inotify_init() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000001000000080000000b"], 0x50) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000001000000080000000b"], 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) (async) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='\a\x00'/12, @ANYRES32, @ANYBLOB="bec1501a98798f", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r4}, 0x8) (async) r10 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r4}, 0x8) ioctl$FICLONE(r10, 0x40049409, r8) write$eventfd(r5, &(0x7f0000000640)=0x9, 0x8) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="14000200000000000000ecff1400060005000000ffffffff0100008004000000ff23ab7b9267f78dda0cce654a2272da37a93cd169ad2d0b5104de5af92c79f5288a4e565d34e9a0e90bd77bd116df9128f0d816fd8c67d8d62f4f3da872beda3df73125ae00ca8e12f34d59fd4f70b925c6710e9179dd58bfd62777d8e322c73fd67a7eda54bdc23aae2ac6a956f0f6a1"], 0x48}}, 0x0) (async) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="14000200000000000000ecff1400060005000000ffffffff0100008004000000ff23ab7b9267f78dda0cce654a2272da37a93cd169ad2d0b5104de5af92c79f5288a4e565d34e9a0e90bd77bd116df9128f0d816fd8c67d8d62f4f3da872beda3df73125ae00ca8e12f34d59fd4f70b925c6710e9179dd58bfd62777d8e322c73fd67a7eda54bdc23aae2ac6a956f0f6a1"], 0x48}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 633.995993ms ago: executing program 9 (id=3212): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380470a, &(0x7f0000000a00)={[{@quota}, {@bsdgroups}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) (async) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x6}, &(0x7f00000001c0)=0x8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) write$sndseq(r2, 0x0, 0x0) (async) write$sndseq(r2, 0x0, 0x0) write$sndseq(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000f80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xac) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 633.179593ms ago: executing program 4 (id=3213): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x34}, 0x7, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1, 0x0, 0xfc}, 0x0) 608.607344ms ago: executing program 6 (id=3214): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x10, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0xae72, 0x80, 0x3, 0x3da}, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="200000005f0001"], 0x20}], 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e22, 0x5, @local, 0xffffff01}}, 0x3, 0x7, 0x3, 0x9, 0x8}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r2, 0x7, 0x134, 0x50a, 0x0, 0xc00000}, 0x14) 584.657956ms ago: executing program 4 (id=3215): bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x4b}, 0x1f) 525.546519ms ago: executing program 3 (id=3216): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac00000012000105000000000000000000000000000000000500"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000feffffff0000000000040002"], 0xac}}, 0x4000) 474.848892ms ago: executing program 4 (id=3217): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$unix(0x1, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) syz_io_uring_setup(0x10d2, 0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x98}}, 0x4048010) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="c40000001900674c0000000004000000fc000000000000000000000000000002e00000020000000000000000000000000000000000000000020020"], 0xc4}, 0x1, 0x20000000}, 0x0) 474.141982ms ago: executing program 6 (id=3218): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='macvlan1\x00', 0x10) setsockopt$inet_int(r1, 0x0, 0x3, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x8) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="0200000020"], 0xfe44, 0x0) sendmmsg$inet(r1, &(0x7f0000000b80)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x86) close(r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000001a40)={0x1, &(0x7f0000001a00)=[{0x100, 0xfc01}]}) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000140) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r6) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0xfffffffe, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x4a}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 443.175514ms ago: executing program 6 (id=3219): perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) mq_notify(r1, &(0x7f0000000100)={0x0, 0x2, 0x1, @thr={&(0x7f0000000040)="3f24ff2a897a9553f454bf8966ac73987e6ea212d498b2ee7c6985ff0e073bb5ba459147754d85424307710720ffd02498bf6bca7a6912cddb711c60210370b95977b21f07548be5bb587f3201072d6e57f756f2dc5ffbb6bc9e2e9eb1b17643246bedd34d0665a4ade4daa289e42035d632a82b6251b2c04eb51ad31ca806fba3c035dbcad9853d17afc1d5f2544a70959a9eec15ebe8d0330cfc0256c727878520c36bd1ad832ad5d7fa34d509e4072c0601", &(0x7f00000001c0)="b8df2da30ca8f1500e94e03332fd2de50c2ca65f4b7f7d765953efa6bbaf062662737ae69c19714d7b3ebfd0da4fd3357e1de0e206067a58bdc048cd3ee77127d1d1dbdc1faee3498b2b4dc8b01f987af73e29d6b0967aeeb341520b6d961744b081cd9da8f54d1bd2a696efd4955eb876463df0bc6310c3bd7cb55a1efd03a2c7b7edc4e047fc253e9710f21d9db7cb83"}}) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x1, 0x2c, 0x2, 0x0, @local}, 0x10) 410.718386ms ago: executing program 2 (id=3220): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x0, 0x0, 0x0) 360.736539ms ago: executing program 3 (id=3221): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 360.215819ms ago: executing program 9 (id=3222): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000004140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4845}, 0x20000080) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x4}}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) (async) pwritev(r1, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r5 = socket$rxrpc(0x21, 0x2, 0x2) recvfrom$rxrpc(r5, &(0x7f0000000040)=""/220, 0xdc, 0x0, &(0x7f0000000140)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x4, @loopback, 0xd}}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a02fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407030000000000001d440000000000006b0a04fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 358.626169ms ago: executing program 2 (id=3223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 325.611621ms ago: executing program 4 (id=3224): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x20040014) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="180100002100010000000000fefffffffc000000000000000000000000000000ac1414bb000000000000000000000000fffc0000000000040a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000009c001100ac1414aa000000000000000000000000fc00000000000000000001a800000001fc020000"], 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x42000) 324.730591ms ago: executing program 2 (id=3225): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xf, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x100003fff8001}, 0x1820, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setreuid(0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r2, 0x8, 0x4000, 0x4000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:2 m'], 0x9) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x8002, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000400)={'pim6reg1\x00'}) r10 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lsm_list_modules(0x0, 0x0, 0x0) getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r11, 0x40489, 0x400}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r11}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="40000000100039040000000000000000000003e4", @ANYRES32=r11, @ANYBLOB="000000000000000020001280080001007369740014000280080014"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) r12 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r12, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803fd, 0x1, 0x800}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x37, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x2, 0x0, 0x1, 0x5, 0x4, 0xffffffffffffffc0, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}, @jmp={0x5, 0x0, 0x6, 0xe823e75201ee2cf5, 0x2, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0xb, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x5f2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x33c8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x1d, 0xde, &(0x7f0000000580)=""/222, 0x41000, 0x0, '\x00', r11, 0x0, r12, 0x8, &(0x7f0000000180)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0xe, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000780)=[{0x3, 0x2, 0xe, 0xc}, {0x1, 0x3, 0xf, 0x9}, {0x5, 0x1, 0xd, 0x1}, {0x8, 0x3}, {0x0, 0x3, 0x8, 0x9}, {0x5, 0x2, 0xf, 0x2}, {0x5, 0x3, 0x8, 0xa}, {0x2, 0x5, 0x6, 0x3}, {0x4, 0x1, 0x0, 0xc}], 0x10, 0x9}, 0x94) 300.807332ms ago: executing program 4 (id=3226): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0xe3b4, @loopback}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000000)="826bb66f", 0x4, 0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_print_times', 0x90d00, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000003c0)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000400)=0x2c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f0000000240)=r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000100)={0xe, 0xf9, 0xc42f}) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@int=0x40, 0x4) 207.671048ms ago: executing program 9 (id=3227): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)=@bridge_getvlan={0x18, 0x72, 0x301, 0x4000001, 0x4}, 0x18}, 0x1, 0xf00, 0x0, 0x80}, 0x4000810) 207.232908ms ago: executing program 3 (id=3228): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_config_ext={0x1, 0x9}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x268, 0x300, 0x2a0, 0x268, 0x3b0, 0x460, 0x460, 0x3b0, 0x460, 0x9, 0x0, {[{{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xffffffff], [0xff, 0x0, 0xff, 0xffffffff], 'nicvf0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x0, 0xa, 0x1, 0x10}, 0x0, 0x240, 0x2a0, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x80000000, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 0x4e20, 0x4e23, 0x4e22, 0x4e20, 0xfffff801, 0x883, 0x4, 0x0, 0x10001}}}, {{@ipv6={@private2, @remote, [0x0, 0xffffff00], [], 'ip6gretap0\x00', 'ip6_vti0\x00', {0xff}}, 0x0, 0xa8, 0x110, 0x0, {0x8000000}}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) 206.895207ms ago: executing program 9 (id=3229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000006c0)={0x2c, 0x1, 0x2, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @private=0xa010100}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40810}, 0x20000000) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="240000006800010000000000000000000a000100000000000400040008000500", @ANYRES32=0x0, @ANYBLOB="f5ddceeeb5103044bf3dc50206aa9ede9eedb51a637c3b227f25e5ea930046181459302b44bc4abff4763400afcda50ce3c58485f5565dce843a"], 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x4040040) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x40}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300"/15], 0x0}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x14, 0x0, "e35940a0528ecfc99fd18d9936dec27f7b1504e8a87f0bfc6c1f42a8d1e0838eb2fad47db60000000000000050c4951700", "4d3ce44dbdb2f9d4bb3c72b70234ff8f6b7dfbb2952a389402b6610d7efdd97ab637b1fc590a822d18f753b9e8b8cc83e1d0301a04e4005ac358c7ec9f6e430c", "740b91e8ea5534e9d7e22f0000000a00540d60966a9dca4100010e76e4c3e0ff", [0x4]}) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 201.929668ms ago: executing program 3 (id=3230): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf6d0e000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000100000000000000010000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffe7ffff3, 0x20031, 0xffffffffffffffff, 0xbe9f5000) syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000024c0)=[{&(0x7f0000000000)=""/224, 0xe0}, {&(0x7f0000000100)=""/47, 0x2f}, {&(0x7f0000000140)=""/201, 0xc9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/169, 0xa9}, {&(0x7f0000001300)=""/183, 0xb7}, {&(0x7f00000013c0)=""/67, 0x43}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/42, 0x2a}, {&(0x7f0000002480)}], 0xa, 0x7, 0xe) setreuid(0x0, 0xee00) msync(&(0x7f00009e1000/0x3000)=nil, 0x3000, 0x5) 0s ago: executing program 2 (id=3231): socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x1, 0x0, &(0x7f0000000380)="e4", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x7], &(0x7f0000000380), 0x0, 0x1}}, 0x40) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x12, r3, 0x0) kernel console output (not intermixed with test programs): ][T11502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.831587][T11502] RSP: 002b:00007f114493f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 160.831602][T11502] RAX: ffffffffffffffda RBX: 00007f1146165fa0 RCX: 00007f1145eeaf79 [ 160.831612][T11502] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 160.831692][T11502] RBP: 00007f114493f090 R08: 0000000000000000 R09: 0000000000000000 [ 160.831701][T11502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.831710][T11502] R13: 00007f1146166038 R14: 00007f1146165fa0 R15: 00007fff516c9358 [ 160.831723][T11502] [ 160.831728][T11502] Mem-Info: [ 161.051280][T11502] active_anon:7556 inactive_anon:0 isolated_anon:0 [ 161.051280][T11502] active_file:25075 inactive_file:2556 isolated_file:0 [ 161.051280][T11502] unevictable:0 dirty:252 writeback:0 [ 161.051280][T11502] slab_reclaimable:4179 slab_unreclaimable:24446 [ 161.051280][T11502] mapped:29403 shmem:261 pagetables:1370 [ 161.051280][T11502] sec_pagetables:0 bounce:0 [ 161.051280][T11502] kernel_misc_reclaimable:0 [ 161.051280][T11502] free:1853047 free_pcp:7643 free_cma:0 [ 161.097584][T11502] Node 0 active_anon:30224kB inactive_anon:0kB active_file:100300kB inactive_file:10224kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117612kB dirty:1008kB writeback:0kB shmem:1044kB kernel_stack:4736kB pagetables:5712kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 161.126886][T11502] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 161.144571][T11515] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 161.158441][T11502] lowmem_reserve[]: 0 2879 7858 7858 [ 161.172150][T11502] Node 0 DMA32 free:2944844kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948372kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 161.203616][T11502] lowmem_reserve[]: 0 0 4978 4978 [ 161.208915][T11502] Node 0 Normal free:4447848kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30456kB inactive_anon:0kB active_file:100300kB inactive_file:10224kB unevictable:0kB writepending:1008kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:26288kB local_pcp:10560kB free_cma:0kB [ 161.243124][T11502] lowmem_reserve[]: 0 0 0 0 [ 161.247898][T11502] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 161.261687][T11502] Node 0 DMA32: 3*4kB (M) 4*8kB (M) 4*16kB (M) 3*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944844kB [ 161.278919][T11502] Node 0 Normal: 830*4kB (UE) 868*8kB (UM) 891*16kB (UM) 425*32kB (UM) 438*64kB (UM) 314*128kB (UME) 187*256kB (UM) 118*512kB (UME) 80*1024kB (UM) 63*2048kB (UM) 982*4096kB (UM) = 4447848kB [ 161.298356][T11502] Node 0 hugepages_total=6 hugepages_free=6 hugepages_surp=2 hugepages_size=2048kB [ 161.307950][T11502] 27867 total pagecache pages [ 161.312834][T11502] 0 pages in swap cache [ 161.317377][T11502] Free swap = 124996kB [ 161.321736][T11502] Total swap = 124996kB [ 161.326010][T11502] 2097051 pages RAM [ 161.330653][T11502] 0 pages HighMem/MovableOnly [ 161.335851][T11502] 81558 pages reserved [ 161.503256][T11529] FAULT_INJECTION: forcing a failure. [ 161.503256][T11529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.517710][T11529] CPU: 1 UID: 0 PID: 11529 Comm: syz.9.2773 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 161.517750][T11529] Tainted: [W]=WARN [ 161.517759][T11529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 161.517773][T11529] Call Trace: [ 161.517781][T11529] [ 161.517789][T11529] __dump_stack+0x1d/0x30 [ 161.517819][T11529] dump_stack_lvl+0x95/0xd0 [ 161.517866][T11529] dump_stack+0x15/0x1b [ 161.517889][T11529] should_fail_ex+0x263/0x280 [ 161.517922][T11529] should_fail+0xb/0x20 [ 161.517958][T11529] should_fail_usercopy+0x1a/0x20 [ 161.517996][T11529] _copy_to_user+0x20/0xa0 [ 161.518038][T11529] simple_read_from_buffer+0xb5/0x130 [ 161.518128][T11529] proc_fail_nth_read+0x10e/0x150 [ 161.518158][T11529] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 161.518239][T11529] vfs_read+0x1ab/0x7f0 [ 161.518356][T11529] ? ldsem_up_read+0x8a/0xd0 [ 161.518395][T11529] ? __rcu_read_unlock+0x4e/0x70 [ 161.518430][T11529] ? __fget_files+0x184/0x1c0 [ 161.518457][T11529] ? tiocsti+0x19a/0x1d0 [ 161.518547][T11529] ? mutex_lock+0x57/0x90 [ 161.518578][T11529] ksys_read+0xdc/0x1a0 [ 161.518603][T11529] __x64_sys_read+0x40/0x50 [ 161.518623][T11529] x64_sys_call+0x2889/0x3000 [ 161.518647][T11529] do_syscall_64+0xc0/0x2a0 [ 161.518687][T11529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.518714][T11529] RIP: 0033:0x7f1145eab84e [ 161.518734][T11529] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 161.518756][T11529] RSP: 002b:00007f114491dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 161.518823][T11529] RAX: ffffffffffffffda RBX: 00007f114491e6c0 RCX: 00007f1145eab84e [ 161.518839][T11529] RDX: 000000000000000f RSI: 00007f114491e0a0 RDI: 0000000000000004 [ 161.518853][T11529] RBP: 00007f114491e090 R08: 0000000000000000 R09: 0000000000000000 [ 161.518866][T11529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.518879][T11529] R13: 00007f1146166128 R14: 00007f1146166090 R15: 00007fff516c9358 [ 161.518901][T11529] [ 161.794288][T11532] __nla_validate_parse: 18 callbacks suppressed [ 161.794307][T11532] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2776'. [ 161.811808][T11532] netlink: 'syz.6.2776': attribute type 30 has an invalid length. [ 161.867289][ T37] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.881042][ T37] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.890459][ T37] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.899537][ T37] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.025086][T11544] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2780'. [ 162.055881][T11550] loop3: detected capacity change from 0 to 1024 [ 162.108437][T11550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.189056][T11559] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.228719][T11564] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2786'. [ 162.258629][T10139] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.269177][T11568] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2790'. [ 162.333582][T11570] FAULT_INJECTION: forcing a failure. [ 162.333582][T11570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.347069][T11570] CPU: 1 UID: 0 PID: 11570 Comm: syz.3.2788 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 162.347110][T11570] Tainted: [W]=WARN [ 162.347119][T11570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 162.347142][T11570] Call Trace: [ 162.347151][T11570] [ 162.347212][T11570] __dump_stack+0x1d/0x30 [ 162.347308][T11570] dump_stack_lvl+0x95/0xd0 [ 162.347329][T11570] dump_stack+0x15/0x1b [ 162.347350][T11570] should_fail_ex+0x263/0x280 [ 162.347385][T11570] should_fail+0xb/0x20 [ 162.347463][T11570] should_fail_usercopy+0x1a/0x20 [ 162.347500][T11570] _copy_to_user+0x20/0xa0 [ 162.347526][T11570] simple_read_from_buffer+0xb5/0x130 [ 162.347569][T11570] proc_fail_nth_read+0x10e/0x150 [ 162.347612][T11570] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.347642][T11570] vfs_read+0x1ab/0x7f0 [ 162.347665][T11570] ? __rcu_read_unlock+0x4e/0x70 [ 162.347726][T11570] ? __fget_files+0x184/0x1c0 [ 162.347749][T11570] ? mutex_lock+0x57/0x90 [ 162.347773][T11570] ksys_read+0xdc/0x1a0 [ 162.347948][T11570] __x64_sys_read+0x40/0x50 [ 162.347993][T11570] x64_sys_call+0x2889/0x3000 [ 162.348054][T11570] do_syscall_64+0xc0/0x2a0 [ 162.348087][T11570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.348114][T11570] RIP: 0033:0x7f5cacd3b84e [ 162.348143][T11570] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 162.348167][T11570] RSP: 002b:00007f5cab7cefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 162.348204][T11570] RAX: ffffffffffffffda RBX: 00007f5cab7cf6c0 RCX: 00007f5cacd3b84e [ 162.348267][T11570] RDX: 000000000000000f RSI: 00007f5cab7cf0a0 RDI: 0000000000000003 [ 162.348283][T11570] RBP: 00007f5cab7cf090 R08: 0000000000000000 R09: 0000000000000000 [ 162.348297][T11570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.348389][T11570] R13: 00007f5cacff6038 R14: 00007f5cacff5fa0 R15: 00007ffe245e3428 [ 162.348411][T11570] [ 162.614824][T11583] loop6: detected capacity change from 0 to 512 [ 162.630585][T11583] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 162.640712][T11583] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 162.649328][T11583] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.672787][ T5536] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.827031][T11590] FAULT_INJECTION: forcing a failure. [ 162.827031][T11590] name failslab, interval 1, probability 0, space 0, times 0 [ 162.840151][T11590] CPU: 1 UID: 0 PID: 11590 Comm: syz.9.2796 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 162.840191][T11590] Tainted: [W]=WARN [ 162.840277][T11590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 162.840291][T11590] Call Trace: [ 162.840300][T11590] [ 162.840310][T11590] __dump_stack+0x1d/0x30 [ 162.840355][T11590] dump_stack_lvl+0x95/0xd0 [ 162.840382][T11590] dump_stack+0x15/0x1b [ 162.840406][T11590] should_fail_ex+0x263/0x280 [ 162.840485][T11590] should_failslab+0x8c/0xb0 [ 162.840539][T11590] kmem_cache_alloc_noprof+0x68/0x490 [ 162.840567][T11590] ? skb_ext_add+0xd4/0x380 [ 162.840638][T11590] skb_ext_add+0xd4/0x380 [ 162.840667][T11590] ? vsnprintf+0x7ee/0x860 [ 162.840692][T11590] xfrm_input+0x4e2/0x3a50 [ 162.840755][T11590] ? bpf_verifier_vlog+0x28a/0x5a0 [ 162.840794][T11590] vti_input+0x386/0x410 [ 162.840882][T11590] vti_input_proto+0x28/0x40 [ 162.840916][T11590] xfrm4_rcv_encap+0x1ef/0x280 [ 162.840947][T11590] ? csum_partial+0x180/0x1d0 [ 162.840968][T11590] xfrm4_udp_encap_rcv+0x3ef/0x4c0 [ 162.841065][T11590] ? __pfx_xfrm6_udp_encap_rcv+0x10/0x10 [ 162.841156][T11590] xfrm6_udp_encap_rcv+0x51/0x4d0 [ 162.841187][T11590] ? __skb_checksum_complete+0x13a/0x1c0 [ 162.841283][T11590] ? __pfx_xfrm6_udp_encap_rcv+0x10/0x10 [ 162.841308][T11590] udp_queue_rcv_one_skb+0xb8e/0xc20 [ 162.841423][T11590] udp_queue_rcv_skb+0x20e/0x2b0 [ 162.841467][T11590] __udp4_lib_mcast_deliver+0x6e8/0x790 [ 162.841558][T11590] __udp4_lib_rcv+0x96f/0x1260 [ 162.841590][T11590] ? __pfx_udp_rcv+0x10/0x10 [ 162.841613][T11590] udp_rcv+0x4f/0x60 [ 162.841712][T11590] ip_protocol_deliver_rcu+0x3f9/0x780 [ 162.841800][T11590] ip_local_deliver_finish+0x1fc/0x2f0 [ 162.841830][T11590] ip_local_deliver+0xe8/0x1e0 [ 162.841865][T11590] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 162.841923][T11590] ip_sublist_rcv+0x42b/0x6d0 [ 162.841954][T11590] ? __pfx_ip_rcv_finish+0x10/0x10 [ 162.841990][T11590] ip_list_rcv+0x261/0x290 [ 162.842070][T11590] ? __pfx_ip_list_rcv+0x10/0x10 [ 162.842106][T11590] __netif_receive_skb_list_core+0x4dc/0x500 [ 162.842191][T11590] netif_receive_skb_list_internal+0x47d/0x5f0 [ 162.842221][T11590] netif_receive_skb_list+0x31/0x1f0 [ 162.842249][T11590] bpf_test_run_xdp_live+0x104c/0x1360 [ 162.842329][T11590] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 162.842352][T11590] ? 0xffffffffa02080c0 [ 162.842369][T11590] ? bpf_test_run_xdp_live+0x434/0x1360 [ 162.842418][T11590] bpf_prog_test_run_xdp+0x57b/0xa10 [ 162.842471][T11590] ? __rcu_read_unlock+0x4e/0x70 [ 162.842509][T11590] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 162.842571][T11590] bpf_prog_test_run+0x204/0x340 [ 162.842621][T11590] __sys_bpf+0x4c0/0x7b0 [ 162.842670][T11590] __x64_sys_bpf+0x41/0x50 [ 162.842699][T11590] x64_sys_call+0x28e1/0x3000 [ 162.842809][T11590] do_syscall_64+0xc0/0x2a0 [ 162.842845][T11590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.842905][T11590] RIP: 0033:0x7f1145eeaf79 [ 162.842925][T11590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.842948][T11590] RSP: 002b:00007f114493f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 162.842978][T11590] RAX: ffffffffffffffda RBX: 00007f1146165fa0 RCX: 00007f1145eeaf79 [ 162.842996][T11590] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 162.843012][T11590] RBP: 00007f114493f090 R08: 0000000000000000 R09: 0000000000000000 [ 162.843037][T11590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 162.843051][T11590] R13: 00007f1146166038 R14: 00007f1146165fa0 R15: 00007fff516c9358 [ 162.843074][T11590] [ 163.243411][T11594] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2798'. [ 163.317734][T11596] loop8: detected capacity change from 0 to 1024 [ 163.340761][T11598] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2800'. [ 163.350049][T11598] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2800'. [ 163.384419][T11596] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.426201][T11604] selinux_netlink_send: 25 callbacks suppressed [ 163.426221][T11604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11604 comm=syz.6.2801 [ 163.480110][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 163.480128][ T29] audit: type=1400 audit(1770645417.864:954): avc: denied { sys_module } for pid=11599 comm="syz.6.2801" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 163.564691][T11612] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2803'. [ 163.578237][ T29] audit: type=1400 audit(1770645417.964:955): avc: denied { create } for pid=11595 comm="syz.8.2799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 163.632837][ T29] audit: type=1400 audit(1770645418.014:956): avc: denied { rmdir } for pid=6668 comm="syz-executor" name="lost+found" dev="loop8" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 163.657879][ T29] audit: type=1400 audit(1770645418.014:957): avc: denied { unlink } for pid=6668 comm="syz-executor" name="file0" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 163.703987][ T3386] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.714941][ T6668] syz_tun (unregistering): left promiscuous mode [ 163.780719][T11629] netlink: 'syz.9.2806': attribute type 46 has an invalid length. [ 163.896311][T11641] ieee802154 phy0 wpan0: encryption failed: -22 [ 164.142677][T11647] lo speed is unknown, defaulting to 1000 [ 164.352226][T11707] loop6: detected capacity change from 0 to 512 [ 164.378762][T11707] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 164.436720][T11707] EXT4-fs (loop6): 1 truncate cleaned up [ 164.444744][T11647] chnl_net:caif_netlink_parms(): no params data found [ 164.463934][T11707] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.540985][ T5536] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.563635][T11647] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.570833][T11647] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.624581][T11647] bridge_slave_0: entered allmulticast mode [ 164.633229][T11647] bridge_slave_0: entered promiscuous mode [ 164.642510][T11647] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.649894][T11647] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.672490][T11647] bridge_slave_1: entered allmulticast mode [ 164.685504][T11721] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2812'. [ 164.714078][T11647] bridge_slave_1: entered promiscuous mode [ 164.716346][T11723] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2813'. [ 164.760908][T11647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.787232][T11647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.829469][ T29] audit: type=1400 audit(1770645419.214:958): avc: denied { ioctl } for pid=11726 comm="syz.9.2815" path="socket:[34882]" dev="sockfs" ino=34882 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 164.865236][T11647] team0: Port device team_slave_0 added [ 164.872366][ T29] audit: type=1400 audit(1770645419.254:959): avc: denied { bind } for pid=11726 comm="syz.9.2815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 164.880472][T11729] netlink: 'syz.9.2816': attribute type 5 has an invalid length. [ 164.903834][T11647] team0: Port device team_slave_1 added [ 164.931834][T11647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.939050][T11647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.966445][T11647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.033996][T11647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.041240][T11647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.068009][T11647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.100068][T11647] hsr_slave_0: entered promiscuous mode [ 165.123516][T11647] hsr_slave_1: entered promiscuous mode [ 165.129796][T11647] debugfs: 'hsr0' already exists in 'hsr' [ 165.136121][T11647] Cannot create hsr debugfs directory [ 165.168978][T11736] program syz.9.2819 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.230646][T11738] loop9: detected capacity change from 0 to 512 [ 165.257217][T11738] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 165.267323][T11738] EXT4-fs (loop9): filesystem is read-only [ 165.327166][T11738] netlink: 'syz.9.2820': attribute type 1 has an invalid length. [ 165.386375][T11738] bond2: (slave geneve2): making interface the new active one [ 165.413449][T11738] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 165.422605][ T9857] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 165.436221][T11647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.469858][ T9857] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 165.496678][T11647] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.522762][T11750] loop3: detected capacity change from 0 to 512 [ 165.532782][ T9857] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 165.564286][ T9856] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.571664][ T9856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.588776][T11750] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 165.608020][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.615354][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.625014][ T9857] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 165.641840][T11750] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2822: iget: bad i_size value: 38620345925642 [ 165.658761][T11647] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 165.669714][T11647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.683643][T11750] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2822: couldn't read orphan inode 15 (err -117) [ 165.710947][T11750] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.761230][T11750] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2822: bg 0: block 5: invalid block bitmap [ 165.793605][ T29] audit: type=1326 audit(1770645420.184:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.9.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1145eeaf79 code=0x7ffc0000 [ 165.819266][ T29] audit: type=1326 audit(1770645420.184:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.9.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1145eeaf79 code=0x7ffc0000 [ 165.851917][T11750] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 165.864852][T11750] EXT4-fs (loop3): This should not happen!! Data will be lost [ 165.864852][T11750] [ 165.874711][T11750] EXT4-fs (loop3): Total free blocks count 0 [ 165.881469][T11750] EXT4-fs (loop3): Free/Dirty block details [ 165.888221][T11750] EXT4-fs (loop3): free_blocks=0 [ 165.893490][T11750] EXT4-fs (loop3): dirty_blocks=64 [ 165.898619][T11750] EXT4-fs (loop3): Block reservation details [ 165.905024][T11750] EXT4-fs (loop3): i_reserved_data_blocks=64 [ 165.922540][ T29] audit: type=1326 audit(1770645420.214:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.9.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1145eeaf79 code=0x7ffc0000 [ 165.948118][T11771] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 165.958655][T11647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.033464][ T29] audit: type=1326 audit(1770645420.404:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.9.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1145eeaf79 code=0x7ffc0000 [ 166.139910][T11786] 9p: Bad value for 'wfdno' [ 166.272223][T11647] veth0_vlan: entered promiscuous mode [ 166.281251][T11647] veth1_vlan: entered promiscuous mode [ 166.317992][T11647] veth0_macvtap: entered promiscuous mode [ 166.326848][T10139] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.339820][T11796] FAULT_INJECTION: forcing a failure. [ 166.339820][T11796] name failslab, interval 1, probability 0, space 0, times 0 [ 166.352587][T11796] CPU: 1 UID: 0 PID: 11796 Comm: syz.6.2832 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 166.352623][T11796] Tainted: [W]=WARN [ 166.352632][T11796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 166.352647][T11796] Call Trace: [ 166.352654][T11796] [ 166.352664][T11796] __dump_stack+0x1d/0x30 [ 166.352689][T11796] dump_stack_lvl+0x95/0xd0 [ 166.352725][T11796] dump_stack+0x15/0x1b [ 166.352750][T11796] should_fail_ex+0x263/0x280 [ 166.352781][T11796] should_failslab+0x8c/0xb0 [ 166.352815][T11796] __kmalloc_cache_noprof+0x64/0x4a0 [ 166.352922][T11796] ? ip6_setup_cork+0x113/0x7a0 [ 166.352965][T11796] ip6_setup_cork+0x113/0x7a0 [ 166.352997][T11796] ? lockref_put_return+0xf7/0x130 [ 166.353021][T11796] ip6_append_data+0x187/0x240 [ 166.353110][T11796] ? __pfx_raw6_getfrag+0x10/0x10 [ 166.353145][T11796] rawv6_sendmsg+0x1093/0x1210 [ 166.353240][T11796] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 166.353354][T11796] inet_sendmsg+0xc5/0xd0 [ 166.353531][T11796] __sys_sendto+0x3f4/0x4d0 [ 166.353570][T11796] __x64_sys_sendto+0x76/0x90 [ 166.353603][T11796] x64_sys_call+0x29a7/0x3000 [ 166.353630][T11796] do_syscall_64+0xc0/0x2a0 [ 166.353739][T11796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.353761][T11796] RIP: 0033:0x7f5c62efaf79 [ 166.353778][T11796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.353796][T11796] RSP: 002b:00007f5c61957028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 166.353880][T11796] RAX: ffffffffffffffda RBX: 00007f5c63175fa0 RCX: 00007f5c62efaf79 [ 166.353898][T11796] RDX: 0000000000000018 RSI: 0000200000000000 RDI: 0000000000000003 [ 166.353912][T11796] RBP: 00007f5c61957090 R08: 0000000000000000 R09: 0000000000000000 [ 166.353929][T11796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.353945][T11796] R13: 00007f5c63176038 R14: 00007f5c63175fa0 R15: 00007ffdefa3c768 [ 166.353993][T11796] [ 166.395633][T11799] FAULT_INJECTION: forcing a failure. [ 166.395633][T11799] name failslab, interval 1, probability 0, space 0, times 0 [ 166.577633][T11799] CPU: 0 UID: 0 PID: 11799 Comm: syz.9.2833 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 166.577672][T11799] Tainted: [W]=WARN [ 166.577682][T11799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 166.577697][T11799] Call Trace: [ 166.577706][T11799] [ 166.577716][T11799] __dump_stack+0x1d/0x30 [ 166.577758][T11799] dump_stack_lvl+0x95/0xd0 [ 166.577782][T11799] dump_stack+0x15/0x1b [ 166.577841][T11799] should_fail_ex+0x263/0x280 [ 166.577896][T11799] should_failslab+0x8c/0xb0 [ 166.577952][T11799] __kvmalloc_node_noprof+0x148/0x680 [ 166.577987][T11799] ? alloc_netdev_mqs+0x54f/0xa40 [ 166.578057][T11799] alloc_netdev_mqs+0x54f/0xa40 [ 166.578095][T11799] rtnl_create_link+0x239/0x720 [ 166.578178][T11799] rtnl_newlink_create+0x174/0x650 [ 166.578223][T11799] rtnl_newlink+0xf5b/0x1370 [ 166.578283][T11799] ? should_fail_ex+0xd9/0x280 [ 166.578310][T11799] ? __rcu_read_unlock+0x33/0x70 [ 166.578343][T11799] ? __memcg_slab_free_hook+0x135/0x230 [ 166.578419][T11799] ? __rcu_read_unlock+0x4e/0x70 [ 166.578525][T11799] ? avc_has_perm_noaudit+0xab/0x130 [ 166.578632][T11799] ? cred_has_capability+0x224/0x290 [ 166.578660][T11799] ? selinux_capable+0x31/0x40 [ 166.578680][T11799] ? security_capable+0x7b/0x90 [ 166.578752][T11799] ? ns_capable+0x7c/0xb0 [ 166.578777][T11799] ? __pfx_rtnl_newlink+0x10/0x10 [ 166.578800][T11799] rtnetlink_rcv_msg+0x64b/0x720 [ 166.578892][T11799] netlink_rcv_skb+0x123/0x220 [ 166.578928][T11799] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 166.579030][T11799] rtnetlink_rcv+0x1c/0x30 [ 166.579056][T11799] netlink_unicast+0x5c0/0x690 [ 166.579094][T11799] netlink_sendmsg+0x5c8/0x6f0 [ 166.579180][T11799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.579215][T11799] ____sys_sendmsg+0x5af/0x600 [ 166.579242][T11799] ___sys_sendmsg+0x195/0x1e0 [ 166.579278][T11799] __x64_sys_sendmsg+0xd4/0x160 [ 166.579365][T11799] x64_sys_call+0x17ba/0x3000 [ 166.579397][T11799] do_syscall_64+0xc0/0x2a0 [ 166.579427][T11799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.579487][T11799] RIP: 0033:0x7f1145eeaf79 [ 166.579506][T11799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.579527][T11799] RSP: 002b:00007f114491e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.579549][T11799] RAX: ffffffffffffffda RBX: 00007f1146166090 RCX: 00007f1145eeaf79 [ 166.579563][T11799] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000c [ 166.579576][T11799] RBP: 00007f114491e090 R08: 0000000000000000 R09: 0000000000000000 [ 166.579601][T11799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 166.579616][T11799] R13: 00007f1146166128 R14: 00007f1146166090 R15: 00007fff516c9358 [ 166.579675][T11799] [ 166.594520][T11647] veth1_macvtap: entered promiscuous mode [ 166.599849][T11647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.603752][T11647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.636358][T11804] lo speed is unknown, defaulting to 1000 [ 166.845625][T11815] netlink: 'syz.5.2838': attribute type 4 has an invalid length. [ 167.027945][T11818] netlink: 'syz.5.2838': attribute type 4 has an invalid length. [ 167.049028][T11819] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.057004][T11819] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.131859][T11819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.140755][T11826] netlink: 'syz.9.2840': attribute type 10 has an invalid length. [ 167.142902][T11819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.303807][T11826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.322935][T11826] batadv0: entered promiscuous mode [ 167.330685][T11826] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 167.354283][T11829] __nla_validate_parse: 9 callbacks suppressed [ 167.354302][T11829] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2841'. [ 167.364985][T11832] loop5: detected capacity change from 0 to 128 [ 167.380317][T11829] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2841'. [ 167.402907][T11834] loop9: detected capacity change from 0 to 512 [ 167.425750][T11834] EXT4-fs: Ignoring removed orlov option [ 167.449252][T11834] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 167.475433][T11834] EXT4-fs (loop9): orphan cleanup on readonly fs [ 167.484051][T11834] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2843: bg 0: block 248: padding at end of block bitmap is not set [ 167.537943][T11839] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2844'. [ 167.551989][T11834] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.2843: Failed to acquire dquot type 1 [ 167.602939][T11834] EXT4-fs (loop9): 1 truncate cleaned up [ 167.626228][T11834] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 167.657958][T11834] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 167.673342][T11834] EXT4-fs error (device loop9): __ext4_remount:6789: comm syz.9.2843: Abort forced by user [ 167.685091][T11834] EXT4-fs (loop9): Remounting filesystem read-only [ 167.692703][T11834] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 167.703386][T11834] ext4 filesystem being remounted at /358/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.703701][T11835] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 167.752586][ T6702] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.078048][T11854] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2850'. [ 168.097262][T11856] FAULT_INJECTION: forcing a failure. [ 168.097262][T11856] name failslab, interval 1, probability 0, space 0, times 0 [ 168.110383][T11856] CPU: 1 UID: 0 PID: 11856 Comm: syz.9.2851 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 168.110408][T11856] Tainted: [W]=WARN [ 168.110488][T11856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 168.110497][T11856] Call Trace: [ 168.110501][T11856] [ 168.110507][T11856] __dump_stack+0x1d/0x30 [ 168.110526][T11856] dump_stack_lvl+0x95/0xd0 [ 168.110541][T11856] dump_stack+0x15/0x1b [ 168.110556][T11856] should_fail_ex+0x263/0x280 [ 168.110584][T11856] should_failslab+0x8c/0xb0 [ 168.110600][T11856] __kvmalloc_node_noprof+0x148/0x680 [ 168.110619][T11856] ? nf_hook_entries_grow+0x1cb/0x460 [ 168.110645][T11856] nf_hook_entries_grow+0x1cb/0x460 [ 168.110687][T11856] __nf_register_net_hook+0x18e/0x480 [ 168.110702][T11856] nf_register_net_hook+0x88/0x130 [ 168.110715][T11856] nf_register_net_hooks+0x44/0x150 [ 168.110730][T11856] ip_vs_register_hooks+0x9b/0xe0 [ 168.110810][T11856] ip_vs_add_service+0x244/0xa70 [ 168.110831][T11856] ip_vs_genl_set_cmd+0x572/0xc30 [ 168.110849][T11856] ? __nla_validate_parse+0x1650/0x1cf0 [ 168.110977][T11856] ? __nla_parse+0x40/0x60 [ 168.111002][T11856] ? genl_family_rcv_msg_attrs_parse+0x13b/0x190 [ 168.111021][T11856] ? genl_family_rcv_msg_attrs_parse+0x184/0x190 [ 168.111041][T11856] genl_family_rcv_msg_doit+0x187/0x1f0 [ 168.111087][T11856] genl_rcv_msg+0x432/0x470 [ 168.111104][T11856] ? __pfx_ip_vs_genl_set_cmd+0x10/0x10 [ 168.111139][T11856] netlink_rcv_skb+0x123/0x220 [ 168.111160][T11856] ? __pfx_genl_rcv_msg+0x10/0x10 [ 168.111321][T11856] genl_rcv+0x28/0x40 [ 168.111336][T11856] netlink_unicast+0x5c0/0x690 [ 168.111368][T11856] netlink_sendmsg+0x5c8/0x6f0 [ 168.111415][T11856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.111428][T11856] ____sys_sendmsg+0x5af/0x600 [ 168.111444][T11856] ___sys_sendmsg+0x195/0x1e0 [ 168.111488][T11856] __x64_sys_sendmsg+0xd4/0x160 [ 168.111505][T11856] x64_sys_call+0x17ba/0x3000 [ 168.111522][T11856] do_syscall_64+0xc0/0x2a0 [ 168.111619][T11856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.111634][T11856] RIP: 0033:0x7f1145eeaf79 [ 168.111647][T11856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.111662][T11856] RSP: 002b:00007f114493f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.111678][T11856] RAX: ffffffffffffffda RBX: 00007f1146165fa0 RCX: 00007f1145eeaf79 [ 168.111753][T11856] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 168.111762][T11856] RBP: 00007f114493f090 R08: 0000000000000000 R09: 0000000000000000 [ 168.111771][T11856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 168.111779][T11856] R13: 00007f1146166038 R14: 00007f1146165fa0 R15: 00007fff516c9358 [ 168.111793][T11856] [ 168.467083][T11861] loop9: detected capacity change from 0 to 1024 [ 168.495962][T11867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2854'. [ 168.511719][T11863] lo speed is unknown, defaulting to 1000 [ 168.536773][T11867] vlan2: entered allmulticast mode [ 168.547471][T11868] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 168.550775][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 168.550792][ T29] audit: type=1400 audit(1770645422.934:979): avc: denied { load_policy } for pid=11862 comm="syz.5.2855" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 168.558282][T11868] SELinux: failed to load policy [ 168.595411][T11861] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.616479][T11872] loop6: detected capacity change from 0 to 512 [ 168.628744][ T29] audit: type=1400 audit(1770645423.014:980): avc: denied { watch watch_reads } for pid=11860 comm="syz.9.2853" path="/362/file1/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 168.661816][T11872] EXT4-fs: Ignoring removed orlov option [ 168.705710][T11872] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.743254][T11861] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 168.825061][ T29] audit: type=1400 audit(1770645423.194:981): avc: denied { module_load } for pid=11871 comm="syz.6.2857" path="/418/file1/file3" dev="loop6" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=system permissive=1 [ 168.855416][ T5536] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.865084][ T6702] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.892455][T11874] loop3: detected capacity change from 0 to 256 [ 169.112183][T11883] loop6: detected capacity change from 0 to 256 [ 169.239452][T11885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.250750][T11899] netlink: 'syz.3.2867': attribute type 3 has an invalid length. [ 169.251723][T11899] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2867'. [ 169.274056][T11899] loop3: detected capacity change from 0 to 128 [ 169.281041][T11899] ext4: Unknown parameter 'smackfsfloor' [ 169.323716][T11885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.374166][T11903] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2868'. [ 169.401016][T11885] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 169.492455][T11912] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2872'. [ 169.501973][T11912] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2872'. [ 169.514612][T11912] team0: entered promiscuous mode [ 169.519907][T11912] team_slave_0: entered promiscuous mode [ 169.525935][T11912] team_slave_1: entered promiscuous mode [ 169.532488][T11912] team0: left promiscuous mode [ 169.537377][T11912] team_slave_0: left promiscuous mode [ 169.543306][T11912] team_slave_1: left promiscuous mode [ 169.659789][T11916] lo speed is unknown, defaulting to 1000 [ 169.695357][T11917] tmpfs: Unknown parameter 'nr_inodes,4' [ 169.730049][ T29] audit: type=1400 audit(1770645424.114:982): avc: denied { connect } for pid=11919 comm="syz.5.2875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 169.847925][T11925] loop5: detected capacity change from 0 to 256 [ 170.120283][T11939] loop6: detected capacity change from 0 to 1024 [ 170.179624][T11939] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.212916][T11948] loop9: detected capacity change from 0 to 512 [ 170.259550][T11942] loop3: detected capacity change from 0 to 256 [ 170.268177][T11949] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 170.305881][T11948] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 170.329685][T11948] System zones: 0-2, 18-18, 34-34 [ 170.354967][T11948] EXT4-fs (loop9): orphan cleanup on readonly fs [ 170.380692][T11948] Quota error (device loop9): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 170.394162][T11948] EXT4-fs warning (device loop9): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 170.415378][T11952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.436562][T11948] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 170.444058][T11948] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.2886: bad orphan inode 4095 [ 170.457932][T11952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.530563][T11945] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 170.547507][T11948] EXT4-fs (loop9): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 170.611833][T11948] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 170.621674][T11948] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 170.653501][T11948] EXT4-fs (loop9): re-mounted 00800000-0000-0000-0000-000000000000. [ 170.686560][T11948] lo speed is unknown, defaulting to 1000 [ 170.696864][T11956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.723917][T11956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.933036][ T6702] EXT4-fs (loop9): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 170.986235][ T5536] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.125707][T11965] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2891'. [ 171.247658][T11966] netlink: 'syz.9.2890': attribute type 1 has an invalid length. [ 171.265824][T11966] bond3: entered promiscuous mode [ 171.271454][T11966] bond3: entered allmulticast mode [ 171.277473][T11966] 8021q: adding VLAN 0 to HW filter on device bond3 [ 171.295087][T11966] bridge2: entered promiscuous mode [ 171.301144][T11966] bridge2: entered allmulticast mode [ 171.307564][T11966] bond3: (slave bridge2): Enslaving as a backup interface with an up link [ 171.338308][ T29] audit: type=1400 audit(1770645425.724:983): avc: denied { connect } for pid=11968 comm="syz.4.2719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 171.358655][ T29] audit: type=1400 audit(1770645425.724:984): avc: denied { write } for pid=11968 comm="syz.4.2719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 171.373059][ T9855] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 171.380433][ T29] audit: type=1400 audit(1770645425.734:985): avc: denied { bind } for pid=11968 comm="syz.4.2719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 171.410766][ T29] audit: type=1400 audit(1770645425.734:986): avc: denied { name_bind } for pid=11968 comm="syz.4.2719" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 171.434262][ T29] audit: type=1400 audit(1770645425.734:987): avc: denied { node_bind } for pid=11968 comm="syz.4.2719" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 171.523303][ T57] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 171.570680][T11988] loop3: detected capacity change from 0 to 1024 [ 171.578133][T11988] ext4: Unknown parameter 'su' [ 171.913435][T12007] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 172.065136][T12024] xt_hashlimit: size too large, truncated to 1048576 [ 172.244474][T12030] loop9: detected capacity change from 0 to 1024 [ 172.251245][T12030] EXT4-fs: inline encryption not supported [ 172.274750][T12030] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.292091][T12030] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.2914: Allocating blocks 497-513 which overlap fs metadata [ 172.306934][T12030] EXT4-fs (loop9): pa ffff88810b041d90: logic 256, phys. 369, len 9 [ 172.315482][T12030] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 172.380592][T12034] EXT4-fs error (device loop9): mb_free_blocks:2037: group 0, inode 15: block 433:freeing already freed block (bit 27); block bitmap corrupt. [ 172.415863][T12036] tmpfs: Bad value for 'mpol' [ 172.459256][T12039] __nla_validate_parse: 5 callbacks suppressed [ 172.459276][T12039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2916'. [ 172.474685][T12039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2916'. [ 172.486443][T12039] team0: entered promiscuous mode [ 172.492081][T12039] team_slave_0: entered promiscuous mode [ 172.497966][T12039] team_slave_1: entered promiscuous mode [ 172.505929][T12039] bond0: entered promiscuous mode [ 172.511571][T12039] bond_slave_0: entered promiscuous mode [ 172.517762][T12039] bond_slave_1: entered promiscuous mode [ 172.524731][T12039] debugfs: 'hsr1' already exists in 'hsr' [ 172.530824][T12039] Cannot create hsr debugfs directory [ 172.537666][T12039] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 172.649794][T12041] loop3: detected capacity change from 0 to 512 [ 172.656698][T12041] ext4: Unknown parameter 'pcr' [ 172.668854][T12041] netlink: 'syz.3.2927': attribute type 1 has an invalid length. [ 172.684611][T12041] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.699984][T12041] bond1: (slave dummy0): making interface the new active one [ 172.709340][T12041] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 172.741440][T12043] loop4: detected capacity change from 0 to 256 [ 172.777348][T12048] loop3: detected capacity change from 0 to 764 [ 172.869040][T12052] loop3: detected capacity change from 0 to 1024 [ 172.876524][T12052] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.904734][T12052] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.938677][T10139] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.987977][T12057] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2922'. [ 172.998611][T12057] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2922'. [ 173.008683][T12057] tipc: Enabling of bearer rejected, media not registered [ 173.047637][T12065] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 173.056290][T12065] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 173.065522][T12065] EXT4-fs (loop3): 1 truncate cleaned up [ 173.072123][T12065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.097111][ T6702] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.135720][T12065] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 173.179471][T10139] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.181210][T12074] FAULT_INJECTION: forcing a failure. [ 173.181210][T12074] name failslab, interval 1, probability 0, space 0, times 0 [ 173.201801][T12074] CPU: 1 UID: 0 PID: 12074 Comm: syz.9.2930 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 173.201841][T12074] Tainted: [W]=WARN [ 173.201850][T12074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 173.201865][T12074] Call Trace: [ 173.201874][T12074] [ 173.201885][T12074] __dump_stack+0x1d/0x30 [ 173.201992][T12074] dump_stack_lvl+0x95/0xd0 [ 173.202013][T12074] dump_stack+0x15/0x1b [ 173.202035][T12074] should_fail_ex+0x263/0x280 [ 173.202071][T12074] should_failslab+0x8c/0xb0 [ 173.202176][T12074] kmem_cache_alloc_noprof+0x68/0x490 [ 173.202205][T12074] ? skb_ext_add+0xd4/0x380 [ 173.202239][T12074] skb_ext_add+0xd4/0x380 [ 173.202348][T12074] ? __kfree_skb+0x109/0x150 [ 173.202377][T12074] ? sk_skb_reason_drop+0xbd/0x260 [ 173.202433][T12074] xfrm_input+0x4e2/0x3a50 [ 173.202463][T12074] ? bpf_verifier_vlog+0x28a/0x5a0 [ 173.202517][T12074] vti_input+0x386/0x410 [ 173.202554][T12074] vti_input_proto+0x28/0x40 [ 173.202594][T12074] xfrm4_rcv_encap+0x1ef/0x280 [ 173.202623][T12074] ? csum_partial+0x180/0x1d0 [ 173.202678][T12074] xfrm4_udp_encap_rcv+0x3ef/0x4c0 [ 173.202758][T12074] ? __pfx_xfrm6_udp_encap_rcv+0x10/0x10 [ 173.202791][T12074] xfrm6_udp_encap_rcv+0x51/0x4d0 [ 173.202822][T12074] ? __skb_checksum_complete+0x13a/0x1c0 [ 173.202928][T12074] ? __pfx_xfrm6_udp_encap_rcv+0x10/0x10 [ 173.203007][T12074] udp_queue_rcv_one_skb+0xb8e/0xc20 [ 173.203038][T12074] udp_queue_rcv_skb+0x20e/0x2b0 [ 173.203071][T12074] __udp4_lib_mcast_deliver+0x6e8/0x790 [ 173.203187][T12074] __udp4_lib_rcv+0x96f/0x1260 [ 173.203224][T12074] ? __pfx_udp_rcv+0x10/0x10 [ 173.203253][T12074] udp_rcv+0x4f/0x60 [ 173.203319][T12074] ip_protocol_deliver_rcu+0x3f9/0x780 [ 173.203413][T12074] ip_local_deliver_finish+0x1fc/0x2f0 [ 173.203448][T12074] ip_local_deliver+0xe8/0x1e0 [ 173.203477][T12074] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 173.203518][T12074] ip_sublist_rcv+0x42b/0x6d0 [ 173.203553][T12074] ? __pfx_ip_rcv_finish+0x10/0x10 [ 173.203604][T12074] ip_list_rcv+0x261/0x290 [ 173.203643][T12074] ? __pfx_ip_list_rcv+0x10/0x10 [ 173.203768][T12074] __netif_receive_skb_list_core+0x4dc/0x500 [ 173.203809][T12074] netif_receive_skb_list_internal+0x47d/0x5f0 [ 173.203838][T12074] netif_receive_skb_list+0x31/0x1f0 [ 173.203935][T12074] bpf_test_run_xdp_live+0x104c/0x1360 [ 173.203996][T12074] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 173.204021][T12074] ? bpf_dispatcher_xdp+0x800/0x1000 [ 173.204043][T12074] ? bpf_test_run_xdp_live+0x434/0x1360 [ 173.204098][T12074] bpf_prog_test_run_xdp+0x57b/0xa10 [ 173.204135][T12074] ? __rcu_read_unlock+0x4e/0x70 [ 173.204324][T12074] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 173.204389][T12074] bpf_prog_test_run+0x204/0x340 [ 173.204542][T12074] __sys_bpf+0x4c0/0x7b0 [ 173.204577][T12074] __x64_sys_bpf+0x41/0x50 [ 173.204602][T12074] x64_sys_call+0x28e1/0x3000 [ 173.204712][T12074] do_syscall_64+0xc0/0x2a0 [ 173.204741][T12074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.204767][T12074] RIP: 0033:0x7f1145eeaf79 [ 173.204842][T12074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.204862][T12074] RSP: 002b:00007f114493f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 173.204888][T12074] RAX: ffffffffffffffda RBX: 00007f1146165fa0 RCX: 00007f1145eeaf79 [ 173.204906][T12074] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 173.204921][T12074] RBP: 00007f114493f090 R08: 0000000000000000 R09: 0000000000000000 [ 173.205002][T12074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 173.205018][T12074] R13: 00007f1146166038 R14: 00007f1146165fa0 R15: 00007fff516c9358 [ 173.205037][T12074] [ 173.617305][T12078] FAULT_INJECTION: forcing a failure. [ 173.617305][T12078] name failslab, interval 1, probability 0, space 0, times 0 [ 173.630269][T12078] CPU: 1 UID: 0 PID: 12078 Comm: syz.5.2932 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 173.630411][T12078] Tainted: [W]=WARN [ 173.630418][T12078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 173.630430][T12078] Call Trace: [ 173.630438][T12078] [ 173.630446][T12078] __dump_stack+0x1d/0x30 [ 173.630471][T12078] dump_stack_lvl+0x95/0xd0 [ 173.630520][T12078] dump_stack+0x15/0x1b [ 173.630540][T12078] should_fail_ex+0x263/0x280 [ 173.630570][T12078] should_failslab+0x8c/0xb0 [ 173.630594][T12078] __kmalloc_node_track_caller_noprof+0xb8/0x590 [ 173.630685][T12078] ? vfs_parse_monolithic_sep+0x16a/0x270 [ 173.630711][T12078] kmemdup_nul+0x36/0xc0 [ 173.630733][T12078] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 173.630777][T12078] vfs_parse_monolithic_sep+0x16a/0x270 [ 173.630808][T12078] generic_parse_monolithic+0x24/0x30 [ 173.630832][T12078] parse_monolithic_mount_data+0x46/0x60 [ 173.630856][T12078] do_new_mount+0x251/0x700 [ 173.630905][T12078] ? security_capable+0x7b/0x90 [ 173.630968][T12078] path_mount+0x4d0/0xbc0 [ 173.630991][T12078] ? user_path_at+0xbf/0x130 [ 173.631027][T12078] __se_sys_mount+0x28c/0x2e0 [ 173.631049][T12078] ? fput+0x8f/0xc0 [ 173.631084][T12078] __x64_sys_mount+0x67/0x80 [ 173.631107][T12078] x64_sys_call+0x2cca/0x3000 [ 173.631134][T12078] do_syscall_64+0xc0/0x2a0 [ 173.631247][T12078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.631274][T12078] RIP: 0033:0x7fc660ddaf79 [ 173.631290][T12078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.631312][T12078] RSP: 002b:00007fc65f82f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 173.631333][T12078] RAX: ffffffffffffffda RBX: 00007fc661055fa0 RCX: 00007fc660ddaf79 [ 173.631383][T12078] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 173.631400][T12078] RBP: 00007fc65f82f090 R08: 0000200000000300 R09: 0000000000000000 [ 173.631441][T12078] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 173.631457][T12078] R13: 00007fc661056038 R14: 00007fc661055fa0 R15: 00007ffe0bc68358 [ 173.631480][T12078] [ 173.631500][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 173.631527][ T29] audit: type=1400 audit(1770645428.004:1086): avc: denied { write } for pid=12077 comm="syz.5.2932" name="vlan0" dev="proc" ino=4026534762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 173.651928][T12072] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.702847][T12083] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2931'. [ 173.733757][ T29] audit: type=1400 audit(1770645428.114:1087): avc: denied { create } for pid=12071 comm="syz.4.2928" name="\" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 173.912202][ T29] audit: type=1400 audit(1770645428.184:1088): avc: denied { ioctl } for pid=12086 comm="syz.3.2935" path="socket:[34599]" dev="sockfs" ino=34599 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 173.984193][T10006] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.013111][ T29] audit: type=1326 audit(1770645428.394:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12084 comm="syz.9.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1145eeaf79 code=0x7ffc0000 [ 174.037297][ T29] audit: type=1326 audit(1770645428.394:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12084 comm="syz.9.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1145eeaf79 code=0x7ffc0000 [ 174.062332][ T29] audit: type=1326 audit(1770645428.394:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12084 comm="syz.9.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f1145eeaf79 code=0x7ffc0000 [ 174.086579][ T29] audit: type=1326 audit(1770645428.394:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12084 comm="syz.9.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1145eeaf79 code=0x7ffc0000 [ 174.111471][ T29] audit: type=1326 audit(1770645428.394:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12084 comm="syz.9.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1145eeaf79 code=0x7ffc0000 [ 174.135528][ T29] audit: type=1326 audit(1770645428.394:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12084 comm="syz.9.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f1145eeaf79 code=0x7ffc0000 [ 174.159742][ T29] audit: type=1326 audit(1770645428.394:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12084 comm="syz.9.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1145eeaf79 code=0x7ffc0000 [ 174.186822][T12097] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2938'. [ 174.207649][T12096] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 174.255664][T12106] 9p: Bad value for 'rfdno' [ 174.257592][T12093] lo speed is unknown, defaulting to 1000 [ 174.279213][T12108] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2943'. [ 174.331528][T12118] FAULT_INJECTION: forcing a failure. [ 174.331528][T12118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.344965][T12118] CPU: 0 UID: 0 PID: 12118 Comm: syz.3.2946 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 174.345080][T12118] Tainted: [W]=WARN [ 174.345088][T12118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 174.345100][T12118] Call Trace: [ 174.345151][T12118] [ 174.345162][T12118] __dump_stack+0x1d/0x30 [ 174.345193][T12118] dump_stack_lvl+0x95/0xd0 [ 174.345219][T12118] dump_stack+0x15/0x1b [ 174.345243][T12118] should_fail_ex+0x263/0x280 [ 174.345281][T12118] should_fail+0xb/0x20 [ 174.345308][T12118] should_fail_usercopy+0x1a/0x20 [ 174.345344][T12118] _copy_from_iter+0xcf/0xea0 [ 174.345389][T12118] ? __alloc_skb+0x397/0x4b0 [ 174.345418][T12118] ? __alloc_skb+0x219/0x4b0 [ 174.345533][T12118] netlink_sendmsg+0x4ae/0x6f0 [ 174.345560][T12118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.345582][T12118] ____sys_sendmsg+0x5af/0x600 [ 174.345606][T12118] ___sys_sendmsg+0x195/0x1e0 [ 174.345722][T12118] __sys_sendmmsg+0x185/0x320 [ 174.345756][T12118] __x64_sys_sendmmsg+0x57/0x70 [ 174.345780][T12118] x64_sys_call+0x1e28/0x3000 [ 174.345810][T12118] do_syscall_64+0xc0/0x2a0 [ 174.345889][T12118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.345916][T12118] RIP: 0033:0x7f5cacd7af79 [ 174.345946][T12118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.345965][T12118] RSP: 002b:00007f5cab7cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 174.345987][T12118] RAX: ffffffffffffffda RBX: 00007f5cacff5fa0 RCX: 00007f5cacd7af79 [ 174.346001][T12118] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 174.346015][T12118] RBP: 00007f5cab7cf090 R08: 0000000000000000 R09: 0000000000000000 [ 174.346077][T12118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.346090][T12118] R13: 00007f5cacff6038 R14: 00007f5cacff5fa0 R15: 00007ffe245e3428 [ 174.346123][T12118] [ 174.572480][T12120] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 174.665710][T12116] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 174.683461][T12116] EXT4-fs (loop6): orphan cleanup on readonly fs [ 174.697597][T12116] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.2947: Failed to acquire dquot type 1 [ 174.720023][T11647] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 174.741011][T12138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2952'. [ 174.759642][T12116] EXT4-fs (loop6): Remounting filesystem read-only [ 174.774954][T11647] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 174.777159][T12116] EXT4-fs (loop6): 1 truncate cleaned up [ 174.798994][T12116] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 174.914213][T11691] bridge_slave_1: left allmulticast mode [ 174.920153][T11691] bridge_slave_1: left promiscuous mode [ 174.926682][T11691] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.973015][T11691] bridge_slave_0: left allmulticast mode [ 174.979239][T11691] bridge_slave_0: left promiscuous mode [ 174.986234][T11691] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.087327][T12151] set_capacity_and_notify: 5 callbacks suppressed [ 175.087353][T12151] loop9: detected capacity change from 0 to 128 [ 175.149122][T12160] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2962'. [ 175.166071][T11691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.177456][T11691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.224913][T12163] loop4: detected capacity change from 0 to 512 [ 175.235810][T11691] bond0 (unregistering): Released all slaves [ 175.289956][T12168] netlink: 'syz.4.2965': attribute type 12 has an invalid length. [ 175.298472][T12168] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2965'. [ 175.307983][T12156] lo speed is unknown, defaulting to 1000 [ 175.325667][T11691] hsr_slave_0: left promiscuous mode [ 175.345254][T11691] hsr_slave_1: left promiscuous mode [ 175.352504][T11691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.364253][ T5536] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.374879][T11691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.410204][T12175] FAULT_INJECTION: forcing a failure. [ 175.410204][T12175] name failslab, interval 1, probability 0, space 0, times 0 [ 175.423168][T12175] CPU: 1 UID: 0 PID: 12175 Comm: syz.4.2969 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 175.423253][T12175] Tainted: [W]=WARN [ 175.423260][T12175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 175.423272][T12175] Call Trace: [ 175.423279][T12175] [ 175.423287][T12175] __dump_stack+0x1d/0x30 [ 175.423367][T12175] dump_stack_lvl+0x95/0xd0 [ 175.423393][T12175] dump_stack+0x15/0x1b [ 175.423415][T12175] should_fail_ex+0x263/0x280 [ 175.423521][T12175] should_failslab+0x8c/0xb0 [ 175.423574][T12175] kmem_cache_alloc_noprof+0x68/0x490 [ 175.423666][T12175] ? security_inode_alloc+0x37/0x100 [ 175.423698][T12175] security_inode_alloc+0x37/0x100 [ 175.423840][T12175] inode_init_always_gfp+0x4b7/0x500 [ 175.423870][T12175] ? __pfx_sock_alloc_inode+0x10/0x10 [ 175.423902][T12175] alloc_inode+0x58/0x170 [ 175.423925][T12175] do_accept+0xa0/0x390 [ 175.423957][T12175] ? _raw_spin_lock+0x52/0xa0 [ 175.423992][T12175] __sys_accept4+0xbe/0x170 [ 175.424029][T12175] __x64_sys_accept4+0x51/0x60 [ 175.424106][T12175] x64_sys_call+0x2b3e/0x3000 [ 175.424133][T12175] do_syscall_64+0xc0/0x2a0 [ 175.424171][T12175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.424252][T12175] RIP: 0033:0x7f4cff27af79 [ 175.424272][T12175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.424290][T12175] RSP: 002b:00007f4cfdccf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 175.424315][T12175] RAX: ffffffffffffffda RBX: 00007f4cff4f5fa0 RCX: 00007f4cff27af79 [ 175.424362][T12175] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 175.424377][T12175] RBP: 00007f4cfdccf090 R08: 0000000000000000 R09: 0000000000000000 [ 175.424390][T12175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.424402][T12175] R13: 00007f4cff4f6038 R14: 00007f4cff4f5fa0 R15: 00007fff56386538 [ 175.424424][T12175] [ 175.700963][T11691] team0 (unregistering): Port device team_slave_1 removed [ 175.720629][T11691] team0 (unregistering): Port device team_slave_0 removed [ 175.805025][T12194] loop9: detected capacity change from 0 to 512 [ 175.956897][T12158] lo speed is unknown, defaulting to 1000 [ 176.049028][T12221] bond4: option all_slaves_active: invalid value (5) [ 176.056845][T12221] bond4 (unregistering): Released all slaves [ 176.121455][ T3386] IPVS: starting estimator thread 0... [ 176.124766][T12158] chnl_net:caif_netlink_parms(): no params data found [ 176.218227][T12236] IPVS: using max 2448 ests per chain, 122400 per kthread [ 176.243875][T12158] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.250996][T12158] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.258807][T12158] bridge_slave_0: entered allmulticast mode [ 176.268747][T12158] bridge_slave_0: entered promiscuous mode [ 176.277910][T12158] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.285276][T12158] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.292917][T12158] bridge_slave_1: entered allmulticast mode [ 176.299859][T12158] bridge_slave_1: entered promiscuous mode [ 176.325325][T12158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.338260][T12158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.361485][T12158] team0: Port device team_slave_0 added [ 176.368614][T12158] team0: Port device team_slave_1 added [ 176.384389][T12158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.391938][T12158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.418956][T12158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.430372][T12158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.437702][T12158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.464784][T12158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.493962][T12158] hsr_slave_0: entered promiscuous mode [ 176.500416][T12158] hsr_slave_1: entered promiscuous mode [ 176.506554][T12158] debugfs: 'hsr0' already exists in 'hsr' [ 176.512755][T12158] Cannot create hsr debugfs directory [ 176.577616][T12158] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.587138][T12158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.594722][T12158] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.603022][T12158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.634807][T12158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.648077][T11691] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.656553][T11691] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.668242][T12158] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.679213][T11691] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.686499][T11691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.698327][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.706067][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.777288][T12158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.808242][T12276] program syz.3.2997 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.948818][T12158] veth0_vlan: entered promiscuous mode [ 176.964695][T12158] veth1_vlan: entered promiscuous mode [ 176.981742][T12158] veth0_macvtap: entered promiscuous mode [ 176.991111][T12158] veth1_macvtap: entered promiscuous mode [ 177.002679][T12158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.015135][T12158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.052303][T12294] FAULT_INJECTION: forcing a failure. [ 177.052303][T12294] name failslab, interval 1, probability 0, space 0, times 0 [ 177.065560][T12294] CPU: 0 UID: 0 PID: 12294 Comm: syz.3.3000 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 177.065612][T12294] Tainted: [W]=WARN [ 177.065688][T12294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 177.065700][T12294] Call Trace: [ 177.065708][T12294] [ 177.065716][T12294] __dump_stack+0x1d/0x30 [ 177.065803][T12294] dump_stack_lvl+0x95/0xd0 [ 177.065825][T12294] dump_stack+0x15/0x1b [ 177.065844][T12294] should_fail_ex+0x263/0x280 [ 177.065940][T12294] should_failslab+0x8c/0xb0 [ 177.065963][T12294] __kvmalloc_node_noprof+0x148/0x680 [ 177.065991][T12294] ? nf_hook_entries_grow+0x1cb/0x460 [ 177.066059][T12294] nf_hook_entries_grow+0x1cb/0x460 [ 177.066096][T12294] __nf_register_net_hook+0x18e/0x480 [ 177.066118][T12294] nf_register_net_hook+0x88/0x130 [ 177.066138][T12294] nf_register_net_hooks+0x44/0x150 [ 177.066236][T12294] ip_vs_register_hooks+0x9b/0xe0 [ 177.066268][T12294] ip_vs_add_service+0x244/0xa70 [ 177.066297][T12294] ip_vs_genl_set_cmd+0x572/0xc30 [ 177.066400][T12294] ? __nla_validate_parse+0x1650/0x1cf0 [ 177.066444][T12294] ? __nla_parse+0x40/0x60 [ 177.066522][T12294] ? genl_family_rcv_msg_attrs_parse+0x13b/0x190 [ 177.066549][T12294] ? genl_family_rcv_msg_attrs_parse+0x184/0x190 [ 177.066580][T12294] genl_family_rcv_msg_doit+0x187/0x1f0 [ 177.066696][T12294] genl_rcv_msg+0x432/0x470 [ 177.066798][T12294] ? __pfx_ip_vs_genl_set_cmd+0x10/0x10 [ 177.066861][T12294] netlink_rcv_skb+0x123/0x220 [ 177.066945][T12294] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.066981][T12294] genl_rcv+0x28/0x40 [ 177.067005][T12294] netlink_unicast+0x5c0/0x690 [ 177.067041][T12294] netlink_sendmsg+0x5c8/0x6f0 [ 177.067075][T12294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.067099][T12294] ____sys_sendmsg+0x5af/0x600 [ 177.067233][T12294] ___sys_sendmsg+0x195/0x1e0 [ 177.067270][T12294] __x64_sys_sendmsg+0xd4/0x160 [ 177.067347][T12294] x64_sys_call+0x17ba/0x3000 [ 177.067426][T12294] do_syscall_64+0xc0/0x2a0 [ 177.067461][T12294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.067485][T12294] RIP: 0033:0x7f5cacd7af79 [ 177.067504][T12294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.067528][T12294] RSP: 002b:00007f5cab7cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.067553][T12294] RAX: ffffffffffffffda RBX: 00007f5cacff5fa0 RCX: 00007f5cacd7af79 [ 177.067581][T12294] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 177.067595][T12294] RBP: 00007f5cab7cf090 R08: 0000000000000000 R09: 0000000000000000 [ 177.067609][T12294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 177.067622][T12294] R13: 00007f5cacff6038 R14: 00007f5cacff5fa0 R15: 00007ffe245e3428 [ 177.067644][T12294] [ 177.363278][ T9857] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 177.405818][T12300] loop9: detected capacity change from 0 to 512 [ 177.412828][T12300] EXT4-fs: Ignoring removed nobh option [ 177.423891][T12300] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 177.448401][T12300] EXT4-fs (loop9): 1 truncate cleaned up [ 177.467795][T12300] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.484438][T12308] __nla_validate_parse: 2 callbacks suppressed [ 177.484458][T12308] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2959'. [ 177.533634][T12300] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3002'. [ 177.585796][T12313] loop4: detected capacity change from 0 to 1024 [ 177.594225][T12313] ext4: Unknown parameter 'su' [ 177.641873][T12314] bond1: (slave dummy0): Releasing active interface [ 177.685011][ T6702] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.736225][T12326] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3010'. [ 177.745762][T12326] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3010'. [ 177.801011][ T31] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.827973][T12326] macvlan2: entered promiscuous mode [ 177.876555][ T31] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.927468][ T31] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.998114][ T31] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.011081][T12338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3013'. [ 178.118193][ T31] bridge_slave_1: left allmulticast mode [ 178.124346][ T31] bridge_slave_1: left promiscuous mode [ 178.130371][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.137672][T12349] loop3: detected capacity change from 0 to 128 [ 178.153641][ T31] bridge_slave_0: left allmulticast mode [ 178.159446][ T31] bridge_slave_0: left promiscuous mode [ 178.164146][T12353] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3017'. [ 178.165366][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.236917][T12357] loop9: detected capacity change from 0 to 2048 [ 178.297201][T12357] loop9: p1 < > p4 [ 178.308791][T12357] loop9: p4 size 8388608 extends beyond EOD, truncated [ 178.325439][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.354133][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.364172][ T31] bond0 (unregistering): Released all slaves [ 178.383101][T12355] IPv6: sit1: Disabled Multicast RS [ 178.411572][ T31] tipc: Left network mode [ 178.418676][T12365] 9p: Bad value for 'fscontext' [ 178.450450][ T31] hsr_slave_0: left promiscuous mode [ 178.456920][T12368] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3024'. [ 178.466810][ T31] hsr_slave_1: left promiscuous mode [ 178.478786][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.484060][T12355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12355 comm=syz.6.3019 [ 178.486691][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.522896][T12373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3025'. [ 178.605331][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.612944][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.627832][ T31] veth1_macvtap: left promiscuous mode [ 178.641534][ T31] veth0_macvtap: left promiscuous mode [ 178.651222][ T31] veth1_vlan: left promiscuous mode [ 178.659185][ T31] veth0_vlan: left promiscuous mode [ 178.686931][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 178.686949][ T29] audit: type=1400 audit(1770645434.077:1232): avc: denied { create } for pid=12398 comm="syz.2.3032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 178.730016][T12399] loop2: detected capacity change from 0 to 1024 [ 178.763186][ T29] audit: type=1400 audit(1770645434.107:1233): avc: denied { connect } for pid=12398 comm="syz.2.3032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 178.783842][ T29] audit: type=1400 audit(1770645434.107:1234): avc: denied { add_name } for pid=12370 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.793673][T12399] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.806980][ T29] audit: type=1400 audit(1770645434.107:1235): avc: denied { create } for pid=12370 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 178.829572][T12399] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.3032: iget: bad extended attribute block 4177526784 [ 178.842622][ T29] audit: type=1400 audit(1770645434.107:1236): avc: denied { write } for pid=12370 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=14741 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 178.863565][T12411] loop3: detected capacity change from 0 to 1024 [ 178.882608][ T29] audit: type=1400 audit(1770645434.107:1237): avc: denied { append } for pid=12370 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=14741 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 178.914129][ T29] audit: type=1400 audit(1770645434.117:1238): avc: denied { ioctl } for pid=12398 comm="syz.2.3032" path="socket:[36417]" dev="sockfs" ino=36417 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 178.914484][T12411] EXT4-fs: inline encryption not supported [ 178.941709][ T29] audit: type=1400 audit(1770645434.147:1239): avc: denied { remove_name } for pid=12404 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=14741 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.973397][ T29] audit: type=1400 audit(1770645434.147:1240): avc: denied { unlink } for pid=12404 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=14741 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 178.976326][T12411] EXT4-fs: Ignoring removed nobh option [ 179.003569][T12411] EXT4-fs: Ignoring removed bh option [ 179.009714][T12158] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.047060][T12414] loop2: detected capacity change from 0 to 512 [ 179.058910][T12411] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.087482][T12414] EXT4-fs (loop2): unsupported inode size: 1 [ 179.093708][T12414] EXT4-fs (loop2): blocksize: 1024 [ 179.129596][ T31] team0 (unregistering): Port device team_slave_1 removed [ 179.145474][ T31] team0 (unregistering): Port device team_slave_0 removed [ 179.178952][T12365] bridge0: entered promiscuous mode [ 179.185480][T12365] bridge0: port 3(vlan0) entered blocking state [ 179.192335][T12365] bridge0: port 3(vlan0) entered disabled state [ 179.204820][T12365] vlan0: entered allmulticast mode [ 179.209647][T12419] ext4: Unknown parameter 'su' [ 179.210103][T12365] bridge0: entered allmulticast mode [ 179.221851][T12365] vlan0: left allmulticast mode [ 179.227064][T12365] bridge0: left allmulticast mode [ 179.233722][T12365] bridge0: left promiscuous mode [ 179.242555][T12388] FAULT_INJECTION: forcing a failure. [ 179.242555][T12388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.257549][T12388] CPU: 1 UID: 0 PID: 12388 Comm: syz.4.3030 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 179.257655][T12388] Tainted: [W]=WARN [ 179.257698][T12388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 179.257711][T12388] Call Trace: [ 179.257738][T12388] [ 179.257749][T12388] __dump_stack+0x1d/0x30 [ 179.257791][T12388] dump_stack_lvl+0x95/0xd0 [ 179.257814][T12388] dump_stack+0x15/0x1b [ 179.257834][T12388] should_fail_ex+0x263/0x280 [ 179.257897][T12388] should_fail+0xb/0x20 [ 179.257930][T12388] should_fail_usercopy+0x1a/0x20 [ 179.257963][T12388] _copy_from_iter+0xcf/0xea0 [ 179.257983][T12388] ? __alloc_skb+0x397/0x4b0 [ 179.258030][T12388] ? __alloc_skb+0x219/0x4b0 [ 179.258058][T12388] netlink_sendmsg+0x4ae/0x6f0 [ 179.258083][T12388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.258132][T12388] ____sys_sendmsg+0x5af/0x600 [ 179.258166][T12388] ___sys_sendmsg+0x195/0x1e0 [ 179.258202][T12388] __sys_sendmmsg+0x185/0x320 [ 179.258233][T12388] __x64_sys_sendmmsg+0x57/0x70 [ 179.258261][T12388] x64_sys_call+0x1e28/0x3000 [ 179.258292][T12388] do_syscall_64+0xc0/0x2a0 [ 179.258328][T12388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.258372][T12388] RIP: 0033:0x7f4cff27af79 [ 179.258392][T12388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.258414][T12388] RSP: 002b:00007f4cfdccf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 179.258491][T12388] RAX: ffffffffffffffda RBX: 00007f4cff4f5fa0 RCX: 00007f4cff27af79 [ 179.258509][T12388] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 179.258525][T12388] RBP: 00007f4cfdccf090 R08: 0000000000000000 R09: 0000000000000000 [ 179.258541][T12388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 179.258556][T12388] R13: 00007f4cff4f6038 R14: 00007f4cff4f5fa0 R15: 00007fff56386538 [ 179.258578][T12388] [ 179.514260][T10139] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.531880][ T29] audit: type=1400 audit(1770645434.917:1241): avc: denied { create } for pid=12428 comm="syz.4.3039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 179.640277][T12443] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3040'. [ 179.656167][T12443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3040'. [ 179.689528][T12443] SELinux: Context system_u:object_r:tmpreaper_exec_t:s0 is not valid (left unmapped). [ 179.943504][T12475] Unable to read rock-ridge attributes [ 179.950467][T12475] isofs_fill_super: root inode is not a directory. Corrupted media? [ 180.020062][T12485] isofs_fill_super: bread failed, dev=loop2, iso_blknum=88, block=176 [ 180.165413][T12512] set_capacity_and_notify: 3 callbacks suppressed [ 180.165447][T12512] loop6: detected capacity change from 0 to 128 [ 180.206436][T12512] syz.6.3054: attempt to access beyond end of device [ 180.206436][T12512] loop6: rw=2049, sector=137, nr_sectors = 13 limit=128 [ 180.233816][ T2129] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 180.255740][T12512] syz.6.3054: attempt to access beyond end of device [ 180.255740][T12512] loop6: rw=8423425, sector=121, nr_sectors = 8 limit=128 [ 180.298118][T12512] syz.6.3054: attempt to access beyond end of device [ 180.298118][T12512] loop6: rw=8423425, sector=137, nr_sectors = 13 limit=128 [ 180.486682][T12541] FAULT_INJECTION: forcing a failure. [ 180.486682][T12541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.503086][T12541] CPU: 0 UID: 0 PID: 12541 Comm: syz.4.3061 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 180.503181][T12541] Tainted: [W]=WARN [ 180.503187][T12541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 180.503199][T12541] Call Trace: [ 180.503207][T12541] [ 180.503215][T12541] __dump_stack+0x1d/0x30 [ 180.503240][T12541] dump_stack_lvl+0x95/0xd0 [ 180.503268][T12541] dump_stack+0x15/0x1b [ 180.503348][T12541] should_fail_ex+0x263/0x280 [ 180.503379][T12541] should_fail+0xb/0x20 [ 180.503481][T12541] should_fail_usercopy+0x1a/0x20 [ 180.503520][T12541] _copy_from_user+0x1c/0xb0 [ 180.503597][T12541] copy_from_bpfptr+0x5c/0x90 [ 180.503633][T12541] bpf_prog_load+0x73a/0x1140 [ 180.503675][T12541] ? security_bpf+0x2b/0x90 [ 180.503703][T12541] __sys_bpf+0x469/0x7b0 [ 180.503797][T12541] __x64_sys_bpf+0x41/0x50 [ 180.503822][T12541] x64_sys_call+0x28e1/0x3000 [ 180.503846][T12541] do_syscall_64+0xc0/0x2a0 [ 180.503922][T12541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.503950][T12541] RIP: 0033:0x7f4cff27af79 [ 180.503971][T12541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.503993][T12541] RSP: 002b:00007f4cfdccf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 180.504016][T12541] RAX: ffffffffffffffda RBX: 00007f4cff4f5fa0 RCX: 00007f4cff27af79 [ 180.504034][T12541] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 180.504126][T12541] RBP: 00007f4cfdccf090 R08: 0000000000000000 R09: 0000000000000000 [ 180.504142][T12541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.504158][T12541] R13: 00007f4cff4f6038 R14: 00007f4cff4f5fa0 R15: 00007fff56386538 [ 180.504182][T12541] [ 180.751170][T12551] loop2: detected capacity change from 0 to 512 [ 180.768637][T12551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.784856][T12551] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.824550][T12551] xt_cgroup: xt_cgroup: no path or classid specified [ 180.883754][T12158] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.909008][T12556] loop9: detected capacity change from 0 to 8192 [ 180.965569][ T3826] loop9: p1 < > p2 p3 < p5 > p4 [ 180.972050][ T3826] loop9: partition table partially beyond EOD, truncated [ 180.984457][ T3826] loop9: p1 start 261888 is beyond EOD, truncated [ 180.992163][ T3826] loop9: p2 start 393216 is beyond EOD, truncated [ 181.001085][ T3826] loop9: p4 size 131081 extends beyond EOD, truncated [ 181.026760][ T3826] loop9: p5 start 393216 is beyond EOD, truncated [ 181.139871][T12556] loop9: p1 < > p2 p3 < p5 > p4 [ 181.144949][T12556] loop9: partition table partially beyond EOD, truncated [ 181.153189][T12556] loop9: p1 start 261888 is beyond EOD, truncated [ 181.160434][T12556] loop9: p2 start 393216 is beyond EOD, truncated [ 181.174375][T12556] loop9: p4 size 131081 extends beyond EOD, truncated [ 181.182667][T12556] loop9: p5 start 393216 is beyond EOD, truncated [ 181.337363][T12578] FAULT_INJECTION: forcing a failure. [ 181.337363][T12578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.351618][T12578] CPU: 1 UID: 0 PID: 12578 Comm: syz.9.3073 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 181.351662][T12578] Tainted: [W]=WARN [ 181.351670][T12578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 181.351684][T12578] Call Trace: [ 181.351692][T12578] [ 181.351702][T12578] __dump_stack+0x1d/0x30 [ 181.351757][T12578] dump_stack_lvl+0x95/0xd0 [ 181.351782][T12578] dump_stack+0x15/0x1b [ 181.351805][T12578] should_fail_ex+0x263/0x280 [ 181.351838][T12578] should_fail+0xb/0x20 [ 181.351869][T12578] should_fail_usercopy+0x1a/0x20 [ 181.352022][T12578] _copy_to_user+0x20/0xa0 [ 181.352046][T12578] simple_read_from_buffer+0xb5/0x130 [ 181.352087][T12578] proc_fail_nth_read+0x10e/0x150 [ 181.352130][T12578] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 181.352157][T12578] vfs_read+0x1ab/0x7f0 [ 181.352244][T12578] ? __rcu_read_unlock+0x4e/0x70 [ 181.352278][T12578] ? __fget_files+0x184/0x1c0 [ 181.352403][T12578] ? mutex_lock+0x57/0x90 [ 181.352476][T12578] ksys_read+0xdc/0x1a0 [ 181.352497][T12578] __x64_sys_read+0x40/0x50 [ 181.352551][T12578] x64_sys_call+0x2889/0x3000 [ 181.352579][T12578] do_syscall_64+0xc0/0x2a0 [ 181.352614][T12578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.352697][T12578] RIP: 0033:0x7f1145eab84e [ 181.352717][T12578] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 181.352738][T12578] RSP: 002b:00007f114493efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 181.352820][T12578] RAX: ffffffffffffffda RBX: 00007f114493f6c0 RCX: 00007f1145eab84e [ 181.352834][T12578] RDX: 000000000000000f RSI: 00007f114493f0a0 RDI: 0000000000000004 [ 181.352850][T12578] RBP: 00007f114493f090 R08: 0000000000000000 R09: 0000000000000000 [ 181.352902][T12578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 181.352990][T12578] R13: 00007f1146166038 R14: 00007f1146165fa0 R15: 00007fff516c9358 [ 181.353009][T12578] [ 181.655479][T12580] netlink: 'syz.4.3074': attribute type 10 has an invalid length. [ 181.691694][T12580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.720076][T12580] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 181.729612][T12582] netlink: 'syz.9.3075': attribute type 3 has an invalid length. [ 181.739976][T12582] netlink: 'syz.9.3075': attribute type 3 has an invalid length. [ 181.771068][T12584] bond0: entered promiscuous mode [ 181.776662][T12584] bond_slave_0: entered promiscuous mode [ 181.782608][T12584] bond_slave_1: entered promiscuous mode [ 181.788777][T12584] batadv0: entered promiscuous mode [ 181.803834][T12584] bond0: left promiscuous mode [ 181.809578][T12584] bond_slave_0: left promiscuous mode [ 181.816233][T12584] bond_slave_1: left promiscuous mode [ 181.822919][T12584] batadv0: left promiscuous mode [ 181.962185][T12573] syz.2.3068 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 181.977103][T12573] CPU: 1 UID: 0 PID: 12573 Comm: syz.2.3068 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 181.977179][T12573] Tainted: [W]=WARN [ 181.977186][T12573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 181.977199][T12573] Call Trace: [ 181.977208][T12573] [ 181.977217][T12573] __dump_stack+0x1d/0x30 [ 181.977244][T12573] dump_stack_lvl+0x95/0xd0 [ 181.977353][T12573] dump_stack+0x15/0x1b [ 181.977378][T12573] dump_header+0x80/0x240 [ 181.977404][T12573] oom_kill_process+0x295/0x350 [ 181.977433][T12573] out_of_memory+0x97d/0xb80 [ 181.977480][T12573] try_charge_memcg+0x62e/0xa10 [ 181.977507][T12573] obj_cgroup_charge_pages+0x23/0xc0 [ 181.977540][T12573] __memcg_kmem_charge_page+0x9e/0x170 [ 181.977577][T12573] __alloc_frozen_pages_noprof+0x18a/0x350 [ 181.977717][T12573] alloc_pages_mpol+0xb3/0x260 [ 181.977756][T12573] alloc_pages_noprof+0x8f/0x130 [ 181.977794][T12573] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 181.977849][T12573] __kvmalloc_node_noprof+0x471/0x680 [ 181.977937][T12573] ? ip_set_alloc+0x24/0x30 [ 181.977974][T12573] ? ip_set_alloc+0x24/0x30 [ 181.978009][T12573] ? __slab_alloc+0x25/0x50 [ 181.978053][T12573] ip_set_alloc+0x24/0x30 [ 181.978190][T12573] hash_netiface_create+0x282/0x740 [ 181.978229][T12573] ? __pfx_hash_netiface_create+0x10/0x10 [ 181.978344][T12573] ip_set_create+0x3cf/0x970 [ 181.978471][T12573] ? __nla_parse+0x40/0x60 [ 181.978491][T12573] nfnetlink_rcv_msg+0x509/0x5d0 [ 181.978567][T12573] netlink_rcv_skb+0x123/0x220 [ 181.978616][T12573] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 181.978649][T12573] nfnetlink_rcv+0x167/0x1720 [ 181.978681][T12573] ? __kfree_skb+0x109/0x150 [ 181.978785][T12573] ? nlmon_xmit+0x4f/0x60 [ 181.978816][T12573] ? consume_skb+0x49/0x140 [ 181.978900][T12573] ? nlmon_xmit+0x4f/0x60 [ 181.978936][T12573] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 181.979025][T12573] ? __dev_queue_xmit+0x139a/0x1f20 [ 181.979074][T12573] ? __dev_queue_xmit+0x148/0x1f20 [ 181.979146][T12573] ? ref_tracker_free+0x37d/0x3e0 [ 181.979181][T12573] ? __netlink_deliver_tap+0x4dc/0x500 [ 181.979223][T12573] netlink_unicast+0x5c0/0x690 [ 181.979346][T12573] netlink_sendmsg+0x5c8/0x6f0 [ 181.979435][T12573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.979458][T12573] ____sys_sendmsg+0x5af/0x600 [ 181.979485][T12573] ___sys_sendmsg+0x195/0x1e0 [ 181.979521][T12573] __x64_sys_sendmsg+0xd4/0x160 [ 181.979587][T12573] x64_sys_call+0x17ba/0x3000 [ 181.979626][T12573] do_syscall_64+0xc0/0x2a0 [ 181.979665][T12573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.979691][T12573] RIP: 0033:0x7fa290c8af79 [ 181.979712][T12573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.979748][T12573] RSP: 002b:00007fa28f6c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.979830][T12573] RAX: ffffffffffffffda RBX: 00007fa290f06090 RCX: 00007fa290c8af79 [ 181.979848][T12573] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 181.979917][T12573] RBP: 00007fa290d216e0 R08: 0000000000000000 R09: 0000000000000000 [ 181.979932][T12573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.980014][T12573] R13: 00007fa290f06128 R14: 00007fa290f06090 R15: 00007ffe5e57c3d8 [ 181.980037][T12573] [ 181.980053][T12573] memory: usage 307200kB, limit 307200kB, failcnt 701 [ 182.007204][T12597] loop4: detected capacity change from 0 to 512 [ 182.010638][T12573] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 182.014836][T12597] EXT4-fs: Ignoring removed nobh option [ 182.018367][T12573] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 182.018387][T12573] Memory cgroup stats for [ 182.042732][T12597] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 182.047323][T12573] /syz2 [ 182.068189][T12597] EXT4-fs (loop4): 1 truncate cleaned up [ 182.070725][T12573] : [ 182.083475][T12597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.108837][T12573] cache 4096 [ 182.397790][ T9857] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 182.399806][T12573] rss 0 [ 182.399819][T12573] shmem 0 [ 182.399828][T12573] mapped_file 0 [ 182.438926][T12573] dirty 0 [ 182.442476][T12573] writeback 0 [ 182.446863][T12573] workingset_refault_anon 45 [ 182.452181][T12573] workingset_refault_file 457 [ 182.458168][T12573] swap 188416 [ 182.461984][T12573] swapcached 4096 [ 182.465852][T12573] pgpgin 159457 [ 182.469936][T12573] pgpgout 159452 [ 182.477497][T12573] pgfault 47139 [ 182.481929][T12573] pgmajfault 1040 [ 182.486665][T12573] inactive_anon 0 [ 182.491183][T12573] active_anon 4096 [ 182.495532][T12573] inactive_file 0 [ 182.499867][T12573] active_file 16384 [ 182.504329][T12573] unevictable 0 [ 182.508249][T12573] hierarchical_memory_limit 314572800 [ 182.514969][T12573] hierarchical_memsw_limit 9223372036854771712 [ 182.521919][T12573] total_cache 4096 [ 182.526147][T12573] total_rss 0 [ 182.529864][T12573] total_shmem 0 [ 182.533387][T12573] total_mapped_file 0 [ 182.537859][T12573] total_dirty 0 [ 182.542052][T12573] total_writeback 0 [ 182.546413][T12573] total_workingset_refault_anon 45 [ 182.552006][T12573] total_workingset_refault_file 457 [ 182.557758][T12573] total_swap 188416 [ 182.562137][T12573] total_swapcached 4096 [ 182.566868][T12573] total_pgpgin 159457 [ 182.570999][T12573] total_pgpgout 159452 [ 182.575410][T12573] total_pgfault 47139 [ 182.579797][T12573] total_pgmajfault 1040 [ 182.584339][T12573] total_inactive_anon 0 [ 182.588499][T12573] total_active_anon 4096 [ 182.592999][T12573] total_inactive_file 0 [ 182.597502][T12573] total_active_file 16384 [ 182.601829][T12573] total_unevictable 0 [ 182.606108][T12573] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3068,pid=12567,uid=0 [ 182.622272][T12573] Memory cgroup out of memory: Killed process 12567 (syz.2.3068) total-vm:94144kB, anon-rss:1212kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 182.844785][T10006] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.916472][T12631] __nla_validate_parse: 8 callbacks suppressed [ 182.916491][T12631] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3091'. [ 182.955639][T12636] loop2: detected capacity change from 0 to 512 [ 182.962711][T12632] loop4: detected capacity change from 0 to 1024 [ 182.993670][T12632] ext4: Unknown parameter 'su' [ 183.022316][T12636] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 183.032151][T12645] loop3: detected capacity change from 0 to 2048 [ 183.033338][T12636] EXT4-fs (loop2): too many log groups per flexible block group [ 183.056550][T12636] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 183.064069][T12636] EXT4-fs (loop2): mount failed [ 183.070765][T12645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.175339][T12657] loop2: detected capacity change from 0 to 512 [ 183.196939][T12657] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 183.227492][T12657] EXT4-fs (loop2): orphan cleanup on readonly fs [ 183.251801][T12657] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 183.287247][T12672] sctp: [Deprecated]: syz.6.3105 (pid 12672) Use of struct sctp_assoc_value in delayed_ack socket option. [ 183.287247][T12672] Use struct sctp_sack_info instead [ 183.305302][T12657] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 183.314789][T12645] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3095'. [ 183.316825][T12657] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #13: comm syz.2.3099: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 183.324018][T12645] netem: unknown loss type 12 [ 183.348541][T12657] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3099: couldn't read orphan inode 13 (err -117) [ 183.362119][T12657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 183.384031][T12677] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3107'. [ 183.434896][T12158] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.484366][T12682] loop6: detected capacity change from 0 to 2048 [ 183.561444][T12680] loop9: detected capacity change from 0 to 8192 [ 183.633809][T12682] loop6: p1 p2 [ 183.656638][T12682] netlink: 204 bytes leftover after parsing attributes in process `syz.6.3109'. [ 183.709551][T12683] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3109'. [ 183.719377][T12683] netlink: 'syz.6.3109': attribute type 7 has an invalid length. [ 183.728307][T12683] netlink: 'syz.6.3109': attribute type 8 has an invalid length. [ 183.736751][T12683] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3109'. [ 183.751657][T12683] bridge0: entered promiscuous mode [ 183.759173][T12683] bridge0: left promiscuous mode [ 184.002341][T10139] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.051691][T12701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3118'. [ 184.060871][T12701] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3118'. [ 184.063573][T12703] FAULT_INJECTION: forcing a failure. [ 184.063573][T12703] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 184.072373][T12701] bond0: entered promiscuous mode [ 184.083767][T12703] CPU: 0 UID: 0 PID: 12703 Comm: syz.3.3116 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 184.083804][T12703] Tainted: [W]=WARN [ 184.083812][T12703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 184.083825][T12703] Call Trace: [ 184.083832][T12703] [ 184.083842][T12703] __dump_stack+0x1d/0x30 [ 184.083906][T12703] dump_stack_lvl+0x95/0xd0 [ 184.083940][T12703] dump_stack+0x15/0x1b [ 184.083961][T12703] should_fail_ex+0x263/0x280 [ 184.084005][T12703] should_fail_alloc_page+0xf2/0x100 [ 184.084032][T12703] __alloc_frozen_pages_noprof+0x108/0x350 [ 184.084067][T12703] alloc_pages_mpol+0xb3/0x260 [ 184.084142][T12703] alloc_pages_noprof+0x8f/0x130 [ 184.084205][T12703] alloc_skb_with_frags+0x193/0x470 [ 184.084241][T12703] sock_alloc_send_pskb+0x44d/0x500 [ 184.084286][T12703] ? __rcu_read_unlock+0x4e/0x70 [ 184.084368][T12703] packet_sendmsg+0x23c7/0x3370 [ 184.084449][T12703] ? avc_has_perm+0x101/0x190 [ 184.084482][T12703] ? selinux_socket_sendmsg+0x192/0x1c0 [ 184.084548][T12703] ? __pfx_packet_sendmsg+0x10/0x10 [ 184.084589][T12703] __sys_sendto+0x470/0x4d0 [ 184.084628][T12703] __x64_sys_sendto+0x76/0x90 [ 184.084735][T12703] x64_sys_call+0x29a7/0x3000 [ 184.084761][T12703] do_syscall_64+0xc0/0x2a0 [ 184.084793][T12703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.084873][T12703] RIP: 0033:0x7f5cacd7af79 [ 184.084891][T12703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.084910][T12703] RSP: 002b:00007f5cab7cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 184.084971][T12703] RAX: ffffffffffffffda RBX: 00007f5cacff5fa0 RCX: 00007f5cacd7af79 [ 184.084987][T12703] RDX: 0000000000010025 RSI: 00002000000002c0 RDI: 0000000000000003 [ 184.085001][T12703] RBP: 00007f5cab7cf090 R08: 0000200000000300 R09: 0000000000000014 [ 184.085085][T12703] R10: 0000000004000004 R11: 0000000000000246 R12: 0000000000000001 [ 184.085099][T12703] R13: 00007f5cacff6038 R14: 00007f5cacff5fa0 R15: 00007ffe245e3428 [ 184.085120][T12703] [ 184.127310][T12699] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 184.127412][T12701] bond_slave_0: entered promiscuous mode [ 184.139486][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 184.139503][ T29] audit: type=1400 audit(1770645439.527:1277): avc: denied { remount } for pid=12697 comm="syz.6.3117" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 184.141353][T12701] bond_slave_1: entered promiscuous mode [ 184.353255][T12701] batadv0: entered promiscuous mode [ 184.366067][T12701] bond0: left promiscuous mode [ 184.370987][T12701] bond_slave_0: left promiscuous mode [ 184.376594][T12701] bond_slave_1: left promiscuous mode [ 184.382433][T12701] batadv0: left promiscuous mode [ 184.435015][T12713] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3119'. [ 184.507145][T12715] ext4: Unknown parameter 'su' [ 184.532831][T12725] netlink: 324 bytes leftover after parsing attributes in process `syz.2.3125'. [ 184.543434][T12725] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12725 comm=syz.2.3125 [ 184.577753][T12731] ieee802154 phy0 wpan0: encryption failed: -22 [ 184.587824][ T29] audit: type=1400 audit(1770645439.967:1278): avc: denied { create } for pid=12722 comm="syz.9.3126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 184.612586][ T29] audit: type=1400 audit(1770645439.967:1279): avc: denied { write } for pid=12722 comm="syz.9.3126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 184.672586][ T29] audit: type=1400 audit(1770645440.057:1280): avc: denied { read } for pid=12722 comm="syz.9.3126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 184.765591][T12747] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 184.770431][T12748] lo speed is unknown, defaulting to 1000 [ 184.775577][T12747] EXT4-fs (loop6): filesystem is read-only [ 184.793809][ T29] audit: type=1400 audit(1770645440.187:1281): avc: denied { accept } for pid=12743 comm="syz.2.3132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 184.819171][T12750] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: 1 [ 184.828980][T12750] ref_ctr increment failed for inode: 0x2d4 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881043c9440 [ 184.850979][T12747] netlink: 'syz.6.3134': attribute type 1 has an invalid length. [ 184.918589][T12755] bond0: entered promiscuous mode [ 184.924522][T12755] bond_slave_0: entered promiscuous mode [ 184.930630][T12755] bond_slave_1: entered promiscuous mode [ 184.937763][T12748] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: -1 [ 184.947096][T12748] ref_ctr decrement failed for inode: 0x2d4 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881043c9440 [ 184.958503][T12755] bond0: left promiscuous mode [ 184.958542][T12748] uprobe: syz.4.3133:12748 failed to unregister, leaking uprobe [ 184.963604][T12755] bond_slave_0: left promiscuous mode [ 184.977718][T12755] bond_slave_1: left promiscuous mode [ 185.058802][ T29] audit: type=1400 audit(1770645440.447:1282): avc: denied { ioctl } for pid=12760 comm="syz.4.3138" path="socket:[38125]" dev="sockfs" ino=38125 ioctlcmd=0x942c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 185.107288][T12763] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.132706][ T29] audit: type=1400 audit(1770645440.487:1283): avc: denied { setopt } for pid=12764 comm="syz.2.3140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 185.153170][ T29] audit: type=1326 audit(1770645440.487:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12764 comm="syz.2.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa290c8af79 code=0x7ffc0000 [ 185.176599][T12768] lo speed is unknown, defaulting to 1000 [ 185.177689][ T29] audit: type=1326 audit(1770645440.487:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12764 comm="syz.2.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa290c8af79 code=0x7ffc0000 [ 185.207366][ T29] audit: type=1326 audit(1770645440.487:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12764 comm="syz.2.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa290c8af79 code=0x7ffc0000 [ 185.268728][T12775] batadv_slave_0: entered promiscuous mode [ 185.281045][T12775] batman_adv: batadv0: Adding interface: macsec1 [ 185.287644][T12775] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.314534][T12775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.325655][T12775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.337307][T12775] batman_adv: batadv0: Interface activated: macsec1 [ 185.350227][T12776] bridge0: entered promiscuous mode [ 185.360082][T12776] bridge0: port 3(macsec2) entered blocking state [ 185.366683][T12776] bridge0: port 3(macsec2) entered disabled state [ 185.373855][T12776] macsec2: entered allmulticast mode [ 185.379501][T12776] bridge0: entered allmulticast mode [ 185.393045][T12776] macsec2: left allmulticast mode [ 185.398296][T12776] bridge0: left allmulticast mode [ 185.409572][T12776] bridge0: left promiscuous mode [ 185.426561][T12788] ieee802154 phy0 wpan0: encryption failed: -22 [ 185.437102][T11691] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 185.475574][T12790] set_capacity_and_notify: 4 callbacks suppressed [ 185.475635][T12790] loop2: detected capacity change from 0 to 1024 [ 185.514624][T12790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.602487][T12790] program syz.2.3150 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.619514][T12801] loop4: detected capacity change from 0 to 512 [ 185.630086][T12801] EXT4-fs (loop4): orphan cleanup on readonly fs [ 185.636700][T12801] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 185.637530][T12804] loop3: detected capacity change from 0 to 512 [ 185.652515][T12804] EXT4-fs: Ignoring removed orlov option [ 185.656939][T12801] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 185.659095][T12804] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 185.685805][T12801] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.3154: attempt to clear invalid blocks 6 len 1 [ 185.706116][T12804] EXT4-fs error (device loop3): __ext4_fill_super:5553: inode #2: comm syz.3.3155: casefold flag without casefold feature [ 185.721809][T12801] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3154: invalid indirect mapped block 1819239214 (level 0) [ 185.724156][T12158] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.745939][T12801] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3154: invalid indirect mapped block 1819239214 (level 1) [ 185.760718][T12804] EXT4-fs (loop3): get root inode failed [ 185.766514][T12804] EXT4-fs (loop3): mount failed [ 185.779405][T12801] EXT4-fs (loop4): 1 truncate cleaned up [ 185.785873][T12801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 185.810246][T12809] No such timeout policy "syz1" [ 185.850436][T10006] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.887678][T12816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12816 comm=syz.2.3159 [ 185.901216][T12817] loop3: detected capacity change from 0 to 256 [ 186.140338][T12838] loop2: detected capacity change from 0 to 512 [ 186.149896][T12839] loop9: detected capacity change from 0 to 512 [ 186.174067][T12838] EXT4-fs: Ignoring removed nobh option [ 186.197390][T12838] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 186.198325][T12839] EXT4-fs error (device loop9): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.9.3166: corrupted xattr block 95: invalid header [ 186.229017][T12839] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.3166: bg 0: block 7: invalid block bitmap [ 186.242759][T12838] EXT4-fs (loop2): 1 truncate cleaned up [ 186.248587][T12839] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 186.258656][T12838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.271937][T12839] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2972: inode #11: comm syz.9.3166: corrupted xattr block 95: invalid header [ 186.286936][T12839] EXT4-fs warning (device loop9): ext4_evict_inode:273: xattr delete (err -117) [ 186.297866][T12839] EXT4-fs (loop9): 1 orphan inode deleted [ 186.304190][T12839] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.328371][T12846] loop6: detected capacity change from 0 to 1024 [ 186.344103][T12838] netlink: 'syz.2.3167': attribute type 1 has an invalid length. [ 186.355217][ T6702] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.398622][T12846] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.405380][T12838] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.468702][T12854] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.479392][T12854] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 186.521890][T12857] lo speed is unknown, defaulting to 1000 [ 186.539051][T12158] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.558718][T12854] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.569267][T12854] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 186.610962][T12859] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 186.654551][T12854] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.665082][T12859] SELinux: failed to load policy [ 186.670535][T12854] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 186.696172][T12865] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: 1 [ 186.705426][T12865] ref_ctr increment failed for inode: 0xcc offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881043c86c0 [ 186.718367][T12865] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: -1 [ 186.727635][T12865] ref_ctr decrement failed for inode: 0xcc offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881043c86c0 [ 186.738956][T12865] uprobe: syz.2.3174:12865 failed to unregister, leaking uprobe [ 186.766942][T12865] loop2: detected capacity change from 0 to 512 [ 186.783400][T12865] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 186.806758][T12865] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 186.822885][T12854] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.833515][T12854] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 186.995510][T11691] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 187.004455][T11691] netdevsim netdevsim9 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 187.014269][ T5536] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.034929][T11691] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 187.043492][T11691] netdevsim netdevsim9 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 187.052490][T11691] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 187.060827][T11691] netdevsim netdevsim9 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 187.072892][T11691] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 187.081462][T11691] netdevsim netdevsim9 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 187.135636][T12890] netlink: 'syz.2.3183': attribute type 3 has an invalid length. [ 187.170549][T12892] bond0: entered promiscuous mode [ 187.175920][T12892] bond_slave_0: entered promiscuous mode [ 187.181753][T12892] bond_slave_1: entered promiscuous mode [ 187.187716][T12892] batadv0: entered promiscuous mode [ 187.194902][T12892] bond0: left promiscuous mode [ 187.199709][T12892] bond_slave_0: left promiscuous mode [ 187.205394][T12892] bond_slave_1: left promiscuous mode [ 187.210969][T12892] batadv0: left promiscuous mode [ 187.253532][T12899] FAULT_INJECTION: forcing a failure. [ 187.253532][T12899] name failslab, interval 1, probability 0, space 0, times 0 [ 187.268299][T12899] CPU: 0 UID: 0 PID: 12899 Comm: syz.9.3187 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 187.268486][T12899] Tainted: [W]=WARN [ 187.268493][T12899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 187.268506][T12899] Call Trace: [ 187.268512][T12899] [ 187.268521][T12899] __dump_stack+0x1d/0x30 [ 187.268547][T12899] dump_stack_lvl+0x95/0xd0 [ 187.268573][T12899] dump_stack+0x15/0x1b [ 187.268627][T12899] should_fail_ex+0x263/0x280 [ 187.268665][T12899] should_failslab+0x8c/0xb0 [ 187.268750][T12899] __kvmalloc_node_noprof+0x148/0x680 [ 187.268784][T12899] ? alloc_netdev_mqs+0x873/0xa40 [ 187.268825][T12899] alloc_netdev_mqs+0x873/0xa40 [ 187.268905][T12899] rtnl_create_link+0x239/0x720 [ 187.268942][T12899] rtnl_newlink_create+0x174/0x650 [ 187.269028][T12899] ? security_capable+0x7b/0x90 [ 187.269057][T12899] ? netlink_ns_capable+0x86/0xa0 [ 187.269108][T12899] rtnl_newlink+0xf5b/0x1370 [ 187.269212][T12899] ? perf_trace_run_bpf_submit+0xe5/0x110 [ 187.269252][T12899] ? perf_trace_kmem_cache_free+0x128/0x160 [ 187.269277][T12899] ? __kfree_skb+0x109/0x150 [ 187.269380][T12899] ? __rcu_read_unlock+0x4e/0x70 [ 187.269415][T12899] ? avc_has_perm_noaudit+0xab/0x130 [ 187.269451][T12899] ? cred_has_capability+0x224/0x290 [ 187.269533][T12899] ? selinux_capable+0x31/0x40 [ 187.269552][T12899] ? security_capable+0x7b/0x90 [ 187.269658][T12899] ? ns_capable+0x7c/0xb0 [ 187.269689][T12899] ? __pfx_rtnl_newlink+0x10/0x10 [ 187.269718][T12899] rtnetlink_rcv_msg+0x64b/0x720 [ 187.269827][T12899] netlink_rcv_skb+0x123/0x220 [ 187.269885][T12899] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 187.269919][T12899] rtnetlink_rcv+0x1c/0x30 [ 187.270014][T12899] netlink_unicast+0x5c0/0x690 [ 187.270045][T12899] netlink_sendmsg+0x5c8/0x6f0 [ 187.270110][T12899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.270131][T12899] ____sys_sendmsg+0x5af/0x600 [ 187.270158][T12899] ___sys_sendmsg+0x195/0x1e0 [ 187.270190][T12899] __x64_sys_sendmsg+0xd4/0x160 [ 187.270284][T12899] x64_sys_call+0x17ba/0x3000 [ 187.270309][T12899] do_syscall_64+0xc0/0x2a0 [ 187.270390][T12899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.270412][T12899] RIP: 0033:0x7f1145eeaf79 [ 187.270431][T12899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.270485][T12899] RSP: 002b:00007f114493f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.270507][T12899] RAX: ffffffffffffffda RBX: 00007f1146165fa0 RCX: 00007f1145eeaf79 [ 187.270526][T12899] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000d [ 187.270543][T12899] RBP: 00007f114493f090 R08: 0000000000000000 R09: 0000000000000000 [ 187.270638][T12899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 187.270654][T12899] R13: 00007f1146166038 R14: 00007f1146165fa0 R15: 00007fff516c9358 [ 187.270675][T12899] [ 187.694744][T12913] netlink: 'syz.3.3192': attribute type 7 has an invalid length. [ 187.702707][T12913] netlink: 'syz.3.3192': attribute type 8 has an invalid length. [ 187.713939][T12913] syz_tun: entered promiscuous mode [ 187.721164][T12913] syz_tun: left promiscuous mode [ 187.744415][T12914] bond1: (slave dummy0): Releasing active interface [ 187.756046][T12914] batman_adv: batadv0: Adding interface: dummy0 [ 187.762801][T12914] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.789459][T12914] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 187.837310][T12922] x_tables: ip6_tables: hashlimit.2 match: invalid size 304 (kernel) != (user) 360 [ 187.877212][T12926] loop3: detected capacity change from 0 to 512 [ 187.884486][T12927] batadv_slave_1: entered promiscuous mode [ 187.894939][T12926] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.3197: corrupted inode contents [ 187.919785][T12926] EXT4-fs (loop3): Remounting filesystem read-only [ 187.926830][T12926] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 187.936464][T12926] EXT4-fs (loop3): 1 orphan inode deleted [ 187.943194][T12926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.963850][T12936] __nla_validate_parse: 12 callbacks suppressed [ 187.963868][T12936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3200'. [ 187.964679][T12926] batadv_slave_1: left promiscuous mode [ 187.970712][T12936] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3200'. [ 187.997453][ T9859] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 188.016530][T12936] bond0: entered promiscuous mode [ 188.021988][T12936] bond_slave_0: entered promiscuous mode [ 188.028438][T12936] bond_slave_1: entered promiscuous mode [ 188.034223][T12936] batadv0: entered promiscuous mode [ 188.044692][T12936] bond0: left promiscuous mode [ 188.049682][T12936] bond_slave_0: left promiscuous mode [ 188.055563][T12936] bond_slave_1: left promiscuous mode [ 188.061208][T12936] batadv0: left promiscuous mode [ 188.071013][T10139] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.161584][T12938] loop6: detected capacity change from 0 to 8192 [ 188.271692][T12940] FAULT_INJECTION: forcing a failure. [ 188.271692][T12940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.285418][T12940] CPU: 1 UID: 0 PID: 12940 Comm: syz.9.3202 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 188.285454][T12940] Tainted: [W]=WARN [ 188.285463][T12940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 188.285485][T12940] Call Trace: [ 188.285493][T12940] [ 188.285510][T12940] __dump_stack+0x1d/0x30 [ 188.285613][T12940] dump_stack_lvl+0x95/0xd0 [ 188.285637][T12940] dump_stack+0x15/0x1b [ 188.285656][T12940] should_fail_ex+0x263/0x280 [ 188.285767][T12940] should_fail+0xb/0x20 [ 188.285793][T12940] should_fail_usercopy+0x1a/0x20 [ 188.285858][T12940] _copy_from_iter+0xcf/0xea0 [ 188.285921][T12940] ? skb_set_owner_w+0x19b/0x200 [ 188.285954][T12940] ? sock_alloc_send_pskb+0x469/0x500 [ 188.285980][T12940] skb_copy_datagram_from_iter+0xb2/0x480 [ 188.286016][T12940] ? __rcu_read_unlock+0x4e/0x70 [ 188.286048][T12940] ? skb_put+0xa9/0xf0 [ 188.286075][T12940] packet_sendmsg+0x26ba/0x3370 [ 188.286139][T12940] ? selinux_socket_sendmsg+0x192/0x1c0 [ 188.286165][T12940] ? __pfx_packet_sendmsg+0x10/0x10 [ 188.286191][T12940] __sys_sendto+0x470/0x4d0 [ 188.286283][T12940] __x64_sys_sendto+0x76/0x90 [ 188.286327][T12940] x64_sys_call+0x29a7/0x3000 [ 188.286359][T12940] do_syscall_64+0xc0/0x2a0 [ 188.286399][T12940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.286421][T12940] RIP: 0033:0x7f1145eeaf79 [ 188.286439][T12940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.286462][T12940] RSP: 002b:00007f114493f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 188.286521][T12940] RAX: ffffffffffffffda RBX: 00007f1146165fa0 RCX: 00007f1145eeaf79 [ 188.286537][T12940] RDX: 0000000000010025 RSI: 00002000000002c0 RDI: 0000000000000003 [ 188.286550][T12940] RBP: 00007f114493f090 R08: 0000200000000300 R09: 0000000000000014 [ 188.286564][T12940] R10: 0000000004000004 R11: 0000000000000246 R12: 0000000000000001 [ 188.286577][T12940] R13: 00007f1146166038 R14: 00007f1146165fa0 R15: 00007fff516c9358 [ 188.286597][T12940] [ 188.586973][T12949] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3204'. [ 188.670303][T12957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3209'. [ 188.680097][T12957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3209'. [ 188.694197][T12957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3209'. [ 188.704107][T12957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3209'. [ 188.763694][T12963] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3211'. [ 188.797373][T12965] EXT4-fs: Ignoring removed oldalloc option [ 188.813288][T12969] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3211'. [ 188.853299][T12965] EXT4-fs (loop9): 1 truncate cleaned up [ 188.859561][T12965] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.940683][T12965] EXT4-fs error (device loop9): ext4_find_dest_de:2050: inode #2: block 13: comm syz.9.3212: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 188.969892][T12982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3217'. [ 188.982423][T12965] EXT4-fs (loop9): Remounting filesystem read-only [ 189.020868][ T6702] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.026698][T12990] vlan3: entered allmulticast mode [ 189.035370][T12990] vlan0: entered allmulticast mode [ 189.040763][T12990] veth0_vlan: entered allmulticast mode [ 189.143660][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 189.143680][ T29] audit: type=1326 audit(1770645444.527:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12995 comm="syz.2.3225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa290c8af79 code=0x7ffc0000 [ 189.174919][ T29] audit: type=1326 audit(1770645444.537:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12995 comm="syz.2.3225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa290c8af79 code=0x7ffc0000 [ 189.199840][ T29] audit: type=1326 audit(1770645444.537:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12995 comm="syz.2.3225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa290c8af79 code=0x7ffc0000 [ 189.224429][ T29] audit: type=1326 audit(1770645444.537:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12995 comm="syz.2.3225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa290c8af79 code=0x7ffc0000 [ 189.249051][ T29] audit: type=1326 audit(1770645444.537:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12995 comm="syz.2.3225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa290c8af79 code=0x7ffc0000 [ 189.274161][ T29] audit: type=1326 audit(1770645444.537:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12995 comm="syz.2.3225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa290c8af79 code=0x7ffc0000 [ 189.307941][ T29] audit: type=1326 audit(1770645444.587:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12995 comm="syz.2.3225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa290c8af79 code=0x7ffc0000 [ 189.332977][ T29] audit: type=1326 audit(1770645444.587:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12995 comm="syz.2.3225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa290c8af79 code=0x7ffc0000 [ 189.358018][ T29] audit: type=1326 audit(1770645444.587:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12995 comm="syz.2.3225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa290c8af79 code=0x7ffc0000 [ 189.382701][ T29] audit: type=1326 audit(1770645444.587:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12995 comm="syz.2.3225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7fa290c8af79 code=0x7ffc0000 [ 189.416993][T13004] ================================================================== [ 189.425741][T13004] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run [ 189.434525][T13004] [ 189.436947][T13004] write to 0xffff88812cc71378 of 8 bytes by task 13015 on cpu 0: [ 189.444844][T13004] cpu_map_kthread_run+0x4e7/0x1650 [ 189.450319][T13004] kthread+0x488/0x510 [ 189.454672][T13004] ret_from_fork+0x148/0x280 [ 189.459288][T13004] ret_from_fork_asm+0x1a/0x30 [ 189.464149][T13004] [ 189.466565][T13004] read to 0xffff88812cc71378 of 8 bytes by task 13004 on cpu 1: [ 189.474372][T13004] bq_flush_to_queue+0x124/0x350 [ 189.479409][T13004] cpu_map_enqueue+0x1a5/0x1c0 [ 189.484183][T13004] xdp_do_redirect_frame+0x27b/0x560 [ 189.489766][T13004] bpf_test_run_xdp_live+0xac3/0x1360 [ 189.495242][T13004] bpf_prog_test_run_xdp+0x57b/0xa10 [ 189.500636][T13004] bpf_prog_test_run+0x204/0x340 [ 189.505699][T13004] __sys_bpf+0x4c0/0x7b0 [ 189.509963][T13004] __x64_sys_bpf+0x41/0x50 [ 189.514831][T13004] x64_sys_call+0x28e1/0x3000 [ 189.519708][T13004] do_syscall_64+0xc0/0x2a0 [ 189.524326][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.530493][T13004] [ 189.532815][T13004] value changed: 0xffff888157d2c070 -> 0x0000000000000000 [ 189.540444][T13004] [ 189.542979][T13004] Reported by Kernel Concurrency Sanitizer on: [ 189.549312][T13004] CPU: 1 UID: 0 PID: 13004 Comm: syz.4.3226 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 189.561385][T13004] Tainted: [W]=WARN [ 189.565283][T13004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 189.575702][T13004] ================================================================== [ 189.647123][T13004] sctp: [Deprecated]: syz.4.3226 (pid 13004) Use of int in max_burst socket option deprecated. [ 189.647123][T13004] Use struct sctp_assoc_value instead [ 190.563976][T11691] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 193.754448][ T9857] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 194.395738][ T3386] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 195.033878][ T3386] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 195.674066][ T2129] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration