last executing test programs: 14.078688636s ago: executing program 4 (id=911): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) (async, rerun: 32) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 32) r3 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfd], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) openat(0xffffffffffffff9c, 0x0, 0x141802, 0x0) (async, rerun: 64) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002002, 0x0) (async, rerun: 64) bind$unix(0xffffffffffffffff, 0x0, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010001fff2cad70000000000000000000", @ANYRES32=0x0, @ANYBLOB="c848010000010000200012800b000100697036746e6c000110000280050009002900000004001300080004"], 0x50}, 0x1, 0x0, 0x0, 0x20040081}, 0x14) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000600)={'ip_vti0\x00', 0x0, 0x8000, 0x80, 0x1, 0x3ff, {{0x3a, 0x4, 0x2, 0x3, 0xe8, 0x64, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@timestamp_addr={0x44, 0x2c, 0x11, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@remote, 0x9d9}, {@empty, 0x6}, {@multicast2, 0x3}, {@multicast1, 0x2}]}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x2, [{@broadcast, 0x20000000}]}, @timestamp_prespec={0x44, 0x3c, 0x2c, 0x3, 0x8, [{@local, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa}, {@rand_addr=0x64010101, 0x6}, {@loopback, 0x4}, {@rand_addr=0x64010101, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc08b}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0xfff}]}, @cipso={0x86, 0x59, 0x2, [{0x5, 0x11, "515a5efd07aba651df96549ac3d1c7"}, {0x1, 0x4, "19a4"}, {0x0, 0xc, "6a53d2d48bc7f9f744e4"}, {0x7, 0x9, "106f12bb6313ea"}, {0x2, 0x7, "66ecfee20e"}, {0x0, 0x9, "1168e5ac05683d"}, {0x5, 0x12, "f6cc36f5f0c466104febe71275ab3bdb"}, {0x0, 0x7, "154dc65cb6"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x5, 0x1, 0xc, @ipv4={'\x00', '\xff\xff', @remote}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x28, 0x4, 0xfffffff5}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'gre0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x20, 0x8000, 0x6307e650, 0x40, {{0x13, 0x4, 0x1, 0x9, 0x4c, 0x68, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, {[@cipso={0x86, 0x12, 0x3, [{0x0, 0xc, "f947c4dba1a9150e534e"}]}, @ssrr={0x89, 0x23, 0xb1, [@rand_addr=0x64010100, @empty, @empty, @broadcast, @multicast2, @remote, @private=0xa010100, @loopback]}]}}}}}) pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff}, 0x800) io_setup(0x9, &(0x7f0000000240)=0x0) (async) r8 = eventfd2(0xf, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) io_submit(r7, 0x1, &(0x7f0000000b80)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xff45, r6, 0x0, 0x0, 0x7, 0x0, 0x5, r8}]) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r10 = socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000100)={0x1d, r11, 0x0, {0x0, 0x0, 0x4}}, 0x18) (async, rerun: 32) connect$can_j1939(r10, &(0x7f0000000080)={0x1d, r11, 0x0, {0x0, 0xf0}, 0x1}, 0x18) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x97, 0x6, 0x2, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x10, 0x200, 0x49d4}}) (async, rerun: 64) socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 64) 13.745353406s ago: executing program 4 (id=916): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0xfffffffffffffeae, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2002) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000280), &(0x7f0000000140)=r0}, 0x22) ioctl$XFS_IOC_FSINUMBERS(r3, 0xc0205867, &(0x7f0000000240)={&(0x7f0000000000)=0x9, 0xc7, &(0x7f0000000040)=[{}], &(0x7f0000000180)}) sendmsg$inet(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x4000) 13.590331901s ago: executing program 4 (id=917): pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) fsopen(&(0x7f0000000040)='reiserfs\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x100300, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xfe) 13.035308139s ago: executing program 1 (id=923): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0xff6}], 0x1}, 0x8000}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x2710], 0x48}}, 0x0) 13.035148089s ago: executing program 4 (id=924): r0 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$sock_int(r0, 0x1, 0x27, 0x0, &(0x7f0000000080)) 12.99716523s ago: executing program 4 (id=925): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x5, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="6000000002060300000000000000000000000000050001000700000014000300686173683a69702c706f72742c697000140007800800124008070000080008400000001405000500020000000500040000000000090002"], 0x60}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x0, 0xee, 0x2, 0x10020, r4, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x9, @void, @value, @value=r4}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000100)='L', &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000028c0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000029c0)={0x19, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x2, 0x1, 0x3, 0x8, 0x0, 0x6, 0x10}]}, 0x0, 0x7, 0x1000, &(0x7f0000001500)=""/4096, 0x41100, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000240)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1, 0x0, 0x2, 0xffffffffffffbbfe, 0x0, 0x4, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r8, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280050021"], 0x4c}}, 0x0) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @random="30cebbab0924", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001000", 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa198", 0x0, 0x3c, 0x0, @remote, @empty, [@srh={0x2f, 0x0, 0x4, 0x0, 0x4}, @fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}]}}}}}}}, 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') r9 = socket$nl_route(0x10, 0x3, 0x0) fchdir(r9) 12.650227791s ago: executing program 4 (id=931): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0xc) fcntl$notify(r5, 0x402, 0x1d) r6 = getpid() r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7, 0x0, 0x9, 0x9}) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xfd6d, 0xfffffffffffffe5d, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb066}}, &(0x7f0000000100)='syzkaller\x00', 0xfff, 0x2d, &(0x7f0000000140)=""/45, 0x41000, 0x2c, '\x00', 0x0, @fallback=0x2a, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x5, 0x5, 0x1, 0x2}, 0x10, 0xffffffffffffffff, r8, 0x1, &(0x7f00000001c0)=[r5, r5, r5, r5, r5, r5, 0xffffffffffffffff, r5], &(0x7f0000000340)=[{0x4, 0x5, 0xb, 0x7}], 0x10, 0x7f}, 0x94) r9 = fcntl$getown(r2, 0x9) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r9, 0x7, r5, &(0x7f0000000040)={r5, r0}) 10.747348081s ago: executing program 2 (id=935): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000200000000007111b7000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x22) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xba, 0x69f, &(0x7f0000000f00)="$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") open_by_handle_at(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[], 0x0) 10.676431873s ago: executing program 1 (id=936): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4004000) socket$kcm(0x10, 0x400000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = socket(0x2d, 0x2, 0x0) bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x1000000c}, 0x10) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x160, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x69f0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4008800}, 0x1) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x8, 0xfffffffffffffff9}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)={0x64, 0x18, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0x12d, 0x0, 0x1, [@nested={0x48, 0x146, 0x0, 0x1, [@nested={0x44, 0x58, 0x0, 0x1, [@nested={0x3d, 0xef, 0x0, 0x1, [@generic="439cfa371a5900a273b51ffbd0a0adb0d16ce2342bdc5d543fec9377a4ddb3f71f134d3ed1796ef0f3e0c8d75c667ab7772be501294df2ad28"]}]}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52}, 0x28) getsockopt$inet6_int(r1, 0x29, 0xb, 0x0, &(0x7f0000000800)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c4000000003280004800800024000000012080001"], 0xa4}}, 0x0) 10.676149793s ago: executing program 3 (id=937): perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, @perf_bp={0x0, 0x8}, 0x90, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_dev$sg(0x0, 0x0, 0x401) r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r0, 0x10e, 0x7, &(0x7f00000000c0)=""/194, &(0x7f00000001c0)=0xc2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000700)={'ip_vti0\x00', 0x0, 0x10, 0x20, 0x0, 0x5b, {{0x15, 0x4, 0x0, 0x5, 0x54, 0x67, 0x0, 0xf3, 0x4, 0x0, @rand_addr=0x64010100, @multicast1, {[@rr={0x7, 0x23, 0xa2, [@rand_addr=0x64010101, @empty, @empty, @remote, @local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @end, @rr={0x7, 0xb, 0xeb, [@multicast1, @local]}, @lsrr={0x83, 0xf, 0x63, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x4}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x59}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000840)={0x324, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r5}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x324}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0xc8d0, &(0x7f0000000280)=ANY=[@ANYRES32=0x0], 0x1, 0x314, &(0x7f00000002c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) rmdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 10.536653978s ago: executing program 0 (id=938): perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, @perf_bp={0x0, 0x8}, 0x90, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_dev$sg(0x0, 0x0, 0x401) r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r0, 0x10e, 0x7, &(0x7f00000000c0)=""/194, &(0x7f00000001c0)=0xc2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000700)={'ip_vti0\x00', 0x0, 0x10, 0x20, 0x0, 0x5b, {{0x15, 0x4, 0x0, 0x5, 0x54, 0x67, 0x0, 0xf3, 0x4, 0x0, @rand_addr=0x64010100, @multicast1, {[@rr={0x7, 0x23, 0xa2, [@rand_addr=0x64010101, @empty, @empty, @remote, @local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @end, @rr={0x7, 0xb, 0xeb, [@multicast1, @local]}, @lsrr={0x83, 0xf, 0x63, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x4}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x59}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000840)={0x324, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r5}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x324}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0xc8d0, &(0x7f0000000280)=ANY=[@ANYRES32=0x0], 0x1, 0x314, &(0x7f00000002c0)="$eJzs3M9rE1sUwPGTNEnTlHayeLzHE6QX3ehmaONeDNKCNGCpjfgDxGkz0ZAxKZlQiYhtV25ciH+Ei9JldwXtP9CNO1du3HUjuLALcSQzkx9tE1vTpLH2+4Eyh7n3zNybacK5AzM7d14/yWdtPWuUJRhVEhAR2RWJS1BqAv426MYRabYil4e/fjx/6+696WQqNTmr1FRy7kpCKTU69u7p8yG/2+agbMcf7HxJfN7+d/v/nR9zj3O2ytmqUCwrQ80XP5WNectUmZyd15WasUzDNlWuYJslr91ZFrFMlbWKi4sVZRQyI7HFkmnbyihUVN6sqHJRlUsVZTwycgWl67oaiQkOk16bnTWSHSYvdHkw6JFSKWkMiMjQgZb0Wl8GBAAA+sqv/+vVfrBa0ndS/4emk6mQv7NR/69f2CoP394Y9ev/zUi1/hdpqv8fNo5lqkywXv9HRaRR/xe99UG36/+DFdHp9mrvxRHHqYeRVv2PVf/jlKjW/zH/++tavb8+7gbU/wAAAAAAAAAAAAAAAAAAAAAAnAa7jqM5jqN52wF/r6MNikjUfYLEa+/zMNEje69/44/rfzY0XtwRGhWxXi6ll9Le1u+wJSKWmDIumnx3/x981TiyotxOqiou761lP395Ke39liSzknPzJ0ST+P58x5m6kZqcUJ69+WGJNecnRJN/Wucn9ueHq9uIXLrYlK+LJh8WpCiWZPwn42r5LyaUun4zte/8Q24/AAAAAAD+Brqqq6/fB5vb9YPt3vrYa/fW1yFpfX/AW1+Pt1zfh+RcqF+zBgAAAADgbLErz/KGZZmlHgWrItLjU7QJajM8albtBblt+gQk0K6pC0Ht5J2lV8fWtfGEj/SJBTsa6ljkNy9Ky6B226hdH5np5MiOJnLcz/C/N2+//bqPd2dM5CgHvLoRPWSmnQaRw2YaPrEfIAAAAAAnplH01/Zc6++AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4g07iVXz9niMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwp/gZAAD//8mG/kg=") openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) rmdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 10.536052948s ago: executing program 2 (id=939): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x78, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0xb, @local, 0x4}, 0x1c) r1 = socket(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x2}, 0x102260, 0x10000, 0x4, 0x1, 0x8, 0x20005, 0xa48, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000080)='big_key\x00', &(0x7f0000000100)='%&\x86$,.#+!\x00') keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x8) r4 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x80082, 0x8) move_mount(r3, &(0x7f0000000180)='./file0\x00', r4, &(0x7f0000000200)='./file0\x00', 0x44) 10.278120966s ago: executing program 2 (id=940): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x9, 0x5, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x400000200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) modify_ldt$write(0x1, &(0x7f0000000300)={0x2, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x25181e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r3, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x8c, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x10290, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x808000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x3, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0xffff, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b8aca04}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x4040) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00'}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40a}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r7, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x2}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x904}, 0x4000010) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6", 0x41}], 0x1}, 0x4) 9.863077269s ago: executing program 3 (id=941): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x57, 0x4080) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000040)=""/51) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x100000001, 0x101000) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f00000000c0)=""/4) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f0000000100)={0x800, 0x800}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x82200, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x80, 0xc, 0x7f, 0x23, @mcast1, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x40, 0x8, 0x4, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r7, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xffffbc84, 0x5, 0x7fffffff, 0x7}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004041}, 0x20000000) syz_genetlink_get_family_id$fou(&(0x7f0000000540), r6) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r6, 0x8010671f, &(0x7f0000000680)={&(0x7f0000000580)=""/200, 0xc8}) r8 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000006c0), 0x206400, 0x0) r9 = pidfd_getfd(r8, r0, 0x0) sendto$inet6(r2, &(0x7f0000000700)="ddb745942493e5bf99d1718967f31a2a7ed030e741be4b30be7d12eb944813bd49492bffc327648848f6c2ff5d4e2e08968f201f473da1604b5324e573c8990d034d9fcccecca8b1d9caf3f7b60f2859cba2b9c360678cbe6d45099c5003f8729f8463f69e86bcf4046222dfc418e67f16e017f11e9ffcdfbf7ac73411f8b72dd62a536aa01fff55cbda0fd28703fcb7ece95a8f9a019f94609ad9cea5bd8a89d66907219c11a61d904da4ee7881ba8e2214c2e27ef8123443e90c958c4c4640a05002043f2dcefdbf209427a2c8aaf523fc", 0xd2, 0x8400, &(0x7f0000000800)={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, '\x00', 0x35}, 0xfffffffe}, 0x1c) recvmmsg(r2, &(0x7f0000004980)=[{{&(0x7f0000000840)=@un=@abs, 0x80, &(0x7f0000001e40)=[{&(0x7f00000008c0)=""/145, 0x91}, {&(0x7f0000000980)=""/233, 0xe9}, {&(0x7f0000000a80)=""/10, 0xa}, {&(0x7f0000000ac0)=""/113, 0x71}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001bc0)=""/236, 0xec}, {&(0x7f0000001cc0)=""/244, 0xf4}, {&(0x7f0000001dc0)=""/108, 0x6c}], 0x9, &(0x7f0000001f00)=""/118, 0x76}, 0x80000001}, {{&(0x7f0000001f80)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002200)=[{&(0x7f0000002000)=""/100, 0x64}, {&(0x7f0000002080)=""/67, 0x43}, {&(0x7f0000002100)=""/240, 0xf0}], 0x3}, 0x9b8}, {{&(0x7f0000002240)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000004740)=[{&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/21, 0x15}, {&(0x7f0000003300)=""/15, 0xf}, {&(0x7f0000003340)=""/15, 0xf}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000004380)=""/240, 0xf0}, {&(0x7f0000004480)=""/68, 0x44}, {&(0x7f0000004500)=""/196, 0xc4}, {&(0x7f0000004600)=""/74, 0x4a}, {&(0x7f0000004680)=""/138, 0x8a}], 0xa}, 0x9}, {{&(0x7f0000004800)=@alg, 0x80, &(0x7f0000004900)=[{&(0x7f0000004880)=""/100, 0x64}], 0x1, &(0x7f0000004940)=""/57, 0x39}, 0x1}], 0x4, 0x40000020, &(0x7f0000004a80)={0x77359400}) ioctl$SIOCX25GCALLUSERDATA(r9, 0x89e4, &(0x7f0000004ac0)={0x2b, "210f4f1a0a31108e6fa520c56dd2391ebef60bd27722aecf73d37fa4c0f994ebb46ef0c8b5fc2ab7eb52a0839e229c8fe852e778245601afb0df9c165efc91757a19ac2d86c6e552ee8e920b3f525846558cf2c8cdfec4898f4bdd535301bc05a055c14f9e1f40d0b5a5e42be549734276ba01f5fb3077b5530f0a50ac8fc9d7"}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000004b80)=0xe) setsockopt$RDS_GET_MR(r9, 0x114, 0x2, &(0x7f0000004c40)={{&(0x7f0000004bc0)=""/35, 0x23}, &(0x7f0000004c00), 0x32}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000004c80)="e100751d129d688946a012f3ef3ae6767d2203f134a9af039bc9912a4517e7145186951b0d7aee3885f50fdbc10ed4d905aa8cd9a0ecda64e94eb85e670017d65772a365edf6adb941a0e3c0860f8699ca7dc19cd7842b03e93d6499f98a668dd28ee99806de5a7a1f66bb5c2e0f3ec299294b4f48bf6e7286b48e5559c220afc9ba2035f6d6f0a5118fd1c4a27e95570fc6b9632542bad20d25f23f91964a6c21560676201a6a96a9baad8b24204e4ca29ca1af8da864b185b5ea051672686b5b69e00f96a17023fa2de1b921cac13af9975b037992e88f34adb3ac4de028840a6d6b", 0xe3, 0x40000090, &(0x7f0000004d80)={0xa, 0x4e20, 0x380, @private0, 0x2}, 0x1c) ioctl$XFS_IOC_GET_RESBLKS(r6, 0x80105873, &(0x7f0000004dc0)) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, &(0x7f0000004f40)={&(0x7f0000004e00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000004f00)={&(0x7f0000004e40)={0xa0, r3, 0x300, 0x70bd2d, 0x81, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8}, @ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x9}]}, 0xa0}}, 0x4000) cachestat(r11, &(0x7f0000004f80)={0x5, 0xdc1}, &(0x7f0000004fc0), 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000005000)=0x0) syz_open_procfs(r12, &(0x7f0000005040)='net/dev_mcast\x00') pipe2(&(0x7f0000005080), 0x4080) 9.850305009s ago: executing program 3 (id=942): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='syscall\x00') pread64(r1, &(0x7f0000002180)=""/4105, 0x137, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000006a00)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x48804) 9.807912281s ago: executing program 3 (id=943): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sysvipc/sem\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, 0x0) keyctl$session_to_parent(0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_read_part_table(0x105e, &(0x7f0000001080)="$eJzsz7FRwzAYx9G/JR+2j2MQtmADKkoqChjDM7ABLdtkhWyRSjlHzgpJiveK73Q/naRTuK8yZ0kO78lLD1PWfWvN9PvUWk3yV3tqpebzuy5J6WFuydCXS8ZtZLiGyz1vX/O4HWyn5yTHn/K6v7uNj/8b/hQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHtY5AAD//xu7Dyk=") bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r5, 0xffffffffffffffff, 0x60000000}, 0xc) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file1\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$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") r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) preadv2(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x86a, 0x0, 0x8b) lseek(r0, 0xf5, 0x0) futex(&(0x7f00000000c0), 0xd, 0x2, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) 9.737885153s ago: executing program 1 (id=944): connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x5, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x200008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x3, 0xffffffffffffffff, 0x1) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000005c0)=ANY=[@ANYBLOB='utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00al,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,fowner<', @ANYRESDEC=0x0, @ANYRES32], 0x2, 0xa2f, &(0x7f0000000ec0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x9}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$nl_netfilter(0x10, 0x3, 0xc) kexec_load(0xfffffffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000}], 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0)=0x6, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x1004, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0xffffffffffffc, 0x9}, 0x102270, 0xfffd, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000820000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') read$snapshot(r6, &(0x7f0000000000)=""/31, 0x1f) preadv(r6, &(0x7f0000001900)=[{&(0x7f00000002c0)=""/190, 0xbe}], 0x1, 0x4004, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 9.722765464s ago: executing program 0 (id=945): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getrlimit(0x8, &(0x7f0000000040)) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000000180)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x9c8, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7fff}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000290000000b0000000000000300f8ffff13000000000000002900000043"], 0x30}}], 0x1, 0x240080c1) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000002440)=@delchain={0x1118, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_rsvp6={{0xa}, {0x10e8, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xc, 0xd}}, @TCA_RSVP_POLICE={0x838, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xf, 0x8, 0x4, 0x9, 0x5, 0x8000, 0xfff, 0x9, 0x9, 0x80, 0xe, 0x1000, 0xc4, 0xcdd4, 0x1, 0x5, 0x81, 0xff, 0x9, 0x8, 0x129, 0x3, 0xf, 0x400, 0x4, 0x5, 0xb2, 0x0, 0x5, 0x1, 0x5, 0x0, 0x7, 0x6aa3, 0x9, 0x1, 0x9, 0x8, 0x32, 0x0, 0x6, 0x7f, 0x10001, 0x3, 0x3d, 0x89b, 0x0, 0x5df16282, 0x9, 0x4, 0x3, 0x9, 0x25, 0x6, 0x9, 0x101, 0xc33e, 0x8, 0x3, 0x2, 0x5, 0x2, 0x9, 0x8000, 0xdb, 0x2, 0x3, 0xb5f7, 0x9, 0xab, 0xd0bc, 0x6, 0xfffffff7, 0x4, 0x348, 0x6, 0x5, 0xee30, 0xfffffff6, 0x529b, 0x3ff, 0x4, 0x8, 0x6, 0x7, 0x2aa, 0x4, 0x6, 0x6, 0xf6c, 0x43, 0x5, 0x3, 0x2, 0x0, 0x6, 0x6, 0x9, 0x913, 0x4, 0x36, 0x9a, 0x40, 0x423, 0x5, 0xfffffffb, 0x4, 0x8, 0x7, 0x0, 0x53b, 0x8, 0x7f, 0x1, 0xff, 0x3ff, 0x5a5545b3, 0x907b, 0xd082, 0xfffffff7, 0x10, 0x1, 0x0, 0xd1, 0xd, 0x6, 0x2, 0xca5, 0x71, 0x5, 0x6, 0x101, 0xa6, 0x6, 0xfffffffd, 0x1000, 0xfffffffc, 0x7f, 0x7fffffff, 0x1, 0x3378000, 0xc, 0x1, 0x5, 0x1c0000, 0x4, 0x112, 0x76822645, 0xf, 0x7, 0x3, 0x97, 0x400, 0x7, 0x5, 0x2, 0x9, 0x8000, 0xfffffffd, 0xff, 0xb, 0xd, 0x6, 0x9, 0x5, 0x80000001, 0x8, 0x4d47, 0x1ff, 0x2, 0x6, 0x6, 0xad, 0x401, 0x8, 0x5, 0xd, 0x6, 0x1, 0x7fff, 0x7e5, 0x4, 0x8, 0x2, 0x6, 0x1ff, 0x1, 0x0, 0x8, 0x3, 0x200, 0x0, 0x800, 0x8, 0xdb0f, 0x6, 0x2, 0x2, 0x4, 0x100, 0x7, 0x2, 0x2, 0x89, 0x4dde000, 0x10000, 0x0, 0xfffff7ac, 0x5, 0x200, 0x4, 0x4, 0x7, 0x22, 0x400, 0x8, 0x7d, 0x9, 0x6, 0x3, 0x2947, 0x3, 0x1, 0x8, 0x81, 0x0, 0x9, 0x4, 0x1, 0xd4, 0x3, 0x0, 0x1, 0x4fb3b3f8, 0x6, 0x7b, 0x4, 0xa765, 0x6, 0x6, 0x1, 0x8a, 0x0, 0x1, 0x9, 0x2, 0x78634b23, 0x9, 0x7, 0x696, 0xad, 0x3, 0x0, 0x0, 0x4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x40000000000000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0x8d, 0xb, 0x101, 0xe, 0x5, 0x96c0, 0x2, 0x2, 0x8, 0x10001, 0x64, 0x1, 0x3, 0xa, 0x1, 0x9, 0x1000, 0x7, 0x0, 0xffffff19, 0x1, 0x1, 0x0, 0x5, 0x7ff, 0x3, 0x9, 0x0, 0xf, 0x7, 0x9, 0x2, 0x2, 0x2, 0x80000001, 0x380, 0x3, 0x0, 0x5, 0x1ff, 0x5, 0x20000000, 0x4, 0x3, 0x9, 0x4, 0xff, 0x1, 0xff, 0x12, 0x2, 0x1, 0x81, 0x9, 0x3, 0x0, 0x5, 0x3, 0x1000, 0x6, 0x10, 0x5, 0x2, 0x7559, 0x400, 0x7fff, 0xc11c, 0x6, 0x6, 0x97e8, 0x10, 0x8, 0x30, 0x1, 0x9, 0x1c, 0x1, 0x2f2086a8, 0xffffffff, 0x9b2, 0x8000, 0x0, 0x621f, 0x4, 0xfff, 0xfffffff7, 0x2, 0x6, 0x3, 0x8, 0x8, 0x9, 0x4, 0x8, 0x1, 0xfffffbff, 0x7fff, 0x0, 0x3, 0xa, 0x5, 0x10000, 0x0, 0x5, 0x7, 0x0, 0x80, 0x5, 0x8, 0x4, 0x9, 0x200, 0x3fb, 0x5f3f, 0xa3, 0x81, 0x1, 0xf1, 0x90, 0x7, 0x8, 0x6, 0x200, 0xffffffff, 0x8, 0xc50, 0x3ff, 0xa, 0x8001, 0xa9a, 0x1, 0x1, 0x8, 0xfff, 0xffffffff, 0xfffffffc, 0x3, 0x8, 0xbf, 0x7, 0x7, 0x8, 0xf, 0x69615f, 0x1, 0xc1, 0x2, 0xffff, 0xf, 0x44, 0x9, 0x1, 0xb, 0x6, 0x2, 0x88, 0x200, 0x10000, 0xc, 0x1, 0x5, 0xac, 0x10000, 0xfffffffd, 0x2, 0x8, 0x7, 0x9, 0x7f, 0xefc6, 0xf, 0x7, 0xc0, 0x100, 0xdff6, 0x5c9, 0x6, 0x7, 0x6, 0x8, 0x3, 0x2, 0x7, 0x2, 0x1, 0x200, 0xfffffffa, 0x4, 0x400, 0x10001, 0x4, 0x40, 0x5, 0x6, 0x3, 0x101, 0x2, 0xa5, 0x10001, 0x6, 0x9, 0x6, 0xe0e, 0x4, 0x50ba, 0xe9e, 0x48, 0x8, 0x4, 0x5461, 0x80000001, 0xff, 0x1ff000, 0xac, 0x2d, 0x7fff, 0xfffffffa, 0xffffffff, 0xfffff9c4, 0x2a, 0x800, 0x4, 0x4, 0x5, 0x5, 0x3, 0xffffffff, 0x3, 0x4, 0x4, 0x8, 0x1ff, 0x7, 0x8000, 0x1b, 0x7, 0x9, 0xffffffff, 0x9, 0x5, 0x7ff, 0xe63d, 0x0, 0x1e4, 0xe2b, 0x8, 0x3, 0x101, 0x5, 0x6, 0x1, 0x6, 0x0, 0xcc9, 0x200]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x6, 0x4}}, @TCA_RSVP_POLICE={0x2c, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xe95}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x10, 0xa}}, @TCA_RSVP_DST={0x14, 0x2, @mcast1}, @TCA_RSVP_ACT={0x854, 0x6, [@m_xt={0x208, 0x14, 0x0, 0x0, {{0x7}, {0x158, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x65, 0x6, {0x5a, 'filter\x00', 0xdd, 0x9, "421afb04bd4f34bb4e0101cf7be13218c075e2e816b8b5028e2ac0845cd5b6765fda9157c9b9c6708b28a22441978a5aa33ad2221adadfc645ee5c"}}, @TCA_IPT_TARG={0xb5, 0x6, {0x2, 'raw\x00', 0x0, 0x8, "eaf957fb465b9ddc7af57fc871ff419016145573fbd0667c6429d45636b8cd4137558d9b12838a79f7cf35ec8c56357b977a62335295519bef7e545f248334724a6a391a37a25c703813a33c6446e6d796bf39c0af370f8adb95d176543b097cd5fd3564a43023efe4b1b354d3aa910c7809bea658689aa4ca8f054202854963219ecf3901ff69d5927390"}}]}, {0x89, 0x6, "c90b6c0ce2fdcb9d28485947c7f2aadc7072fd043eb5d6653bb45a7fe8c1c6a75f29adf71acb1113b9fff1f86d83f779d0fa0f2a6401843013f1b59715aaa819f80c8f44d8ad1672dc2bc0d46c2fd21a0b660885f429898a48e6cab5332aaa0d19568757d28ff1693a282b1cd99330800e3d7a44e3f8b5bcb07ba2e3abb170b6e0bf4ce3fd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_nat={0x2c, 0x5, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x715a96b04967857, 0x3}}}}, @m_skbmod={0x164, 0x1b, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0xc, 0x20000000, 0x6, 0x9}, 0x2}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x96}]}, {0xcd, 0x6, "ce1479f34cfbffac730d1b89412695f9f62a883554492d7af0bfc57a2334d3d2dd9b05f1f17d111c18331493785dc6e063919e93f336c85ca27904c130d09f48e10be49e68605f2a6de8f0258e80070b3ff6b5869a8a8179f2c15d55342218589e298ed3d24eda1515fde57a2813524da3a4106d599153aa1c5e701d835fd4b306442c85a335e55534b05944e4473e1e495a41e79f387febd069a8680812e29a926f49e26db181ff1f92306a1149a4db4ab91e9150a87818be0499c3df8cdbd8c7ae002cab0ef581f7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x78, 0x16, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4, 0x3, 0x9, 0x9}}]}, {0x29, 0x6, "12ddf4f57a93285076c0538c19e52479fc7994836657d6c86625083f75fe267ac9208d5b29"}, {0xc}, {0xc, 0x8, {0x1, 0x7}}}}, @m_police={0x440, 0x13, 0x0, 0x0, {{0xb}, {0x414, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xe, 0x4d, 0x3, 0x3, 0x3, 0x8001, 0x7fffffff, 0xc, 0xfd, 0x3, 0x7, 0x4, 0x8, 0xc5, 0x3, 0x6, 0x7, 0x7ff, 0x200, 0x2, 0x76, 0xffffffff, 0x8, 0x3, 0x8000, 0x7f, 0x0, 0xb, 0x8, 0x101, 0xfffff0ba, 0x8, 0xf8, 0x7fffffff, 0x124, 0xfffffffd, 0x5e, 0x7, 0x101, 0x10000, 0x7, 0xfffffffd, 0x10001, 0x6, 0x4, 0x400, 0x4, 0x3, 0x10000, 0x9, 0x4, 0x401, 0x200, 0xfff, 0x5, 0x0, 0x8, 0x2bf, 0xffffffff, 0x0, 0x6, 0x40, 0xa087, 0x80000001, 0xb, 0x2, 0x2, 0x0, 0x9, 0x6, 0x5, 0x8, 0x1000, 0xffff0000, 0x2, 0xb, 0x6, 0x3, 0x8, 0x10000, 0x8, 0x5, 0x1, 0x2, 0x1, 0x5, 0x80, 0x101, 0x7f, 0xffff, 0x7, 0x5, 0xe64, 0x0, 0x7, 0x5, 0x1, 0x200, 0x9, 0x400, 0x5525, 0x6, 0x3ff, 0x1, 0xae, 0x3, 0x7, 0xffff, 0x80000001, 0x6, 0x71af, 0x10, 0x400, 0x2, 0x1a93, 0x3, 0x8001, 0x7, 0xd, 0x0, 0xffffffff, 0x2, 0x1, 0x5d1, 0xc, 0x2, 0x5, 0x0, 0x8, 0x0, 0x23e, 0x5, 0x8, 0x2, 0x7, 0x4, 0xf1a, 0x8a4, 0xa58e, 0x5, 0x20e, 0x8, 0x2, 0xbb4edaf6, 0xfffff660, 0x6, 0x5, 0x4, 0x0, 0x9, 0x5, 0x9, 0xffff, 0x1, 0xaf40, 0x1, 0x4, 0x6, 0x5, 0x4, 0x8, 0x5, 0xfffff801, 0x6, 0x9, 0x10000, 0x4, 0x80000001, 0x607, 0xfffffffd, 0x8, 0x9, 0x4, 0x400, 0x1000, 0x1, 0x10001, 0x1, 0x1, 0x9, 0x1df22292, 0xaa, 0x6, 0x0, 0xffffff2b, 0xbe, 0x189, 0xf2, 0x7, 0x3, 0x35f6, 0x5, 0x7, 0x2, 0x101, 0x9, 0x5, 0x6, 0xff, 0xb, 0x3d5, 0x81, 0x5, 0xff, 0x8, 0x7d2, 0x1, 0x6, 0x0, 0x5, 0x8, 0x0, 0x1, 0x8, 0x7f, 0x6a, 0x0, 0x101, 0x129, 0x0, 0x3, 0x1, 0xd, 0x1810, 0x7, 0xfffffffe, 0x4, 0x1, 0x5, 0x80, 0xfd01, 0x0, 0x3ff, 0x5, 0xd, 0x1, 0xf, 0xd0a7, 0x9, 0x7, 0x1335d295, 0x7, 0x3, 0x3ff, 0xb8e, 0xffffffff, 0x7, 0x7, 0x3, 0x9, 0x2, 0x9, 0x2, 0x6, 0x8000, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x539}], []]}, {0x4}, {0xc, 0x7, {0x1, 0xeea12236c61d8cae}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1118}, 0x1, 0x0, 0x0, 0x810}, 0x41) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x2, 0x7, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x4040000) socket$nl_generic(0x10, 0x3, 0x10) syz_read_part_table(0x5d9, &(0x7f0000000000)="$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") 7.683118028s ago: executing program 2 (id=946): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0xff6}], 0x1}, 0x8000}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 4.423597171s ago: executing program 0 (id=947): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000dc0), 0x10b000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000e00)={0x2, 0x0, 0x3ff, 0x0, 0xffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03"], 0x0, 0x52}, 0x28) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) 4.357060273s ago: executing program 2 (id=948): connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x5, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x200008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x3, 0xffffffffffffffff, 0x1) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000005c0)=ANY=[@ANYBLOB='utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00al,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,fowner<', @ANYRESDEC=0x0, @ANYRES32], 0x2, 0xa2f, &(0x7f0000000ec0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x9}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) kexec_load(0xfffffffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000}], 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4.355331163s ago: executing program 0 (id=949): connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x5, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x200008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x3, 0xffffffffffffffff, 0x1) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000005c0)=ANY=[@ANYBLOB='utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00al,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,fowner<', @ANYRESDEC=0x0, @ANYRES32], 0x2, 0xa2f, &(0x7f0000000ec0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x9}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) kexec_load(0xfffffffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000}], 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4.289722565s ago: executing program 1 (id=950): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0, 0x31}, &(0x7f0000000780)=0x40) lsetxattr$system_posix_acl(&(0x7f00000006c0)='./file1\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000980)={{}, {0x1, 0x2}, [], {0x4, 0x4}, [], {}, {0x20, 0x7}}, 0x24, 0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000100), 0x0, 0x0) r4 = memfd_secret(0x0) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f00000000c0)={0x2, 0xd, 0x8}) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0x1a, 0x0, @void}, 0x10) sched_setscheduler(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0xd2, &(0x7f00000002c0)={0x0, 0xf475, 0x80, 0x0, 0x2da}) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 4.216835887s ago: executing program 3 (id=951): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10100, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r0, 0x5452, &(0x7f0000001840)=0x5d4) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0xc) socket$inet6(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000200)={[{@nogrpid}, {@dax_inode}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@i_version}]}, 0x3, 0x45a, &(0x7f0000000700)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0x11) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0xd, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0xb, 0x9, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x5, 0x311, 0x66d1, 0x9, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x380, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x10, 0xa, 0x6b0f, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x1ff, 0x0, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xff, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x2, 0x7, 0xc4c, 0x400045e3, 0x5, 0x7, 0x8, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0x6, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x3, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x8, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0xb, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0xfffeffff, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x5e, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80001000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xfffefffd, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x4, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0xfdad, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x8001, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x8000000, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x1, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x1, 0x3, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x9, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x0, 0x9b3, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0xa, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xffffffde, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x8, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x3fc, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0x1, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x1, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x8, 0x5, 0x7ff, 0x6, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x5, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x1, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x3, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x6, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0xb6f, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=ANY=[@ANYBLOB="14311aa3d300010027bd6600fcdbdf25000000004fddbdd84c0c8dc29bfe667939a3fda0a697e44d1fa5d37c064bd9dddf2a59278c25bb25"], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x15) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x114, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x9}, 0x16fb8, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0x8a8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad4209069"], 0x6, 0x2b7, &(0x7f0000000a40)="$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") mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) 539.596003ms ago: executing program 0 (id=952): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x1a90, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x7}}}}]}, {0x1994, 0x1, [@m_tunnel_key={0x107c, 0x1d, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x43, 0x8, 0xfffffeff, 0x5}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x1004, 0x6, "40ae93be79860702731db2c8e27b4e9b742b9bbbb3a9858425d71b98643644aa13b5f87577ef070303412fa0c13697e01f1b1cef35722d1f75f0a3c5744aa1d7d3be66c386036ace293f356842a1e117f3356181b36100dc56b671f87461d18b5d8429b9ccb73a5b2f9dc849458b8159117ced73c56398ed77fcf3940ab700e6ea0d9ad9041ee971b37a7184564c554ba435588fbc50453d7f13afd797231f5af16febd8c6fe7210d8adf41b5c6181cd53c8c0775490b436938abd3709767988964b18166e97412806e9cd7382fffa33c22506a43abdccad814603eede09bf486c90d2327069e41b96bf7c5a15dc58e06d50ee2de77dbd7c1bb65ac63af853fe748647b0b8446cceb62f00bbed1216eeb60d58b6f8a29da6db37a4872b2b56ddc38d334260964cf61e7bbcb1bb585d91f4ec16f0360713fa7d3e994d4bc7a4a1348ee3a04911af49a2b4adb51ac8c793782238c1049f24a048906bda2d62bcbfffe090f9e993c380ab69c389403ff73f6d5aa8817998e3cf432550abc1912fd7755b9ddfddfe6bcc53757ec3fc2b4e83a5fce74615e0f8a2cac6e961b515e69a37cdd06257e48410e9460952ef7fe5d4d8d5a6488275c3d475f090f38228264c3b90d036e33d92c8b4535030877ade9c55531afb6bf35722f71aae1429e0d13666188a74c5457d660355923aa011ba2a240679f109cec95c6d0725a9c1c5850b1edcb74c1b52a8b9f638084519a07a91d60237d8f6cac5f941535fe4fa2ab7ce9bb50c30881a221e81984efdbf7c39834423585eabde74c9c6a7037af8ec8ad1f80aa2a0c4ba4eacbb580e6bd7fd1e1cd75b50d2c1dff7777010542afb84ca07420ce0b1470ca197befa584e557bfd30eb9b9b44a26e18e957c60228c085ea0bf565d01f71809ce61072c611e259714ef2924ad2520b1de1bcf63af30d9d0322410cbf6e4a7fae21e1002f2c03972cdad0984f83c358c1dbc65a3e7db4c00a4258028f7300bcd0f3723e3ad57f038237c82904969a7c2a09c5a7e85be88761c9a9f02c1f1a54640b9c699f05617f2c756bbea746c40a83fc7ab22c295dbf6bab990fdf3fef7bdfa10a6223820b4293d8d3df540bdccf893b43b47012bc932810dcef19a67037f2cbe20fc7e2e4f45e7af3a25947ee55c7a36585872c067ec4a6141655c8c78ff90b894201185651ccf822e637891d82376a62161f49632bfb92a31f0b08172daeada770cb413c127280159ac2d854e5b27ccf63818479ab58c1be1fddfcdaee6536651478bd801d16def70b560727857b1a25aac012d987faa6dcd53394e30154c09669ac54bbd5307c447acec40d6e20f6b14dda5c8ec0572cba6191381787d86d448ae47fbdac00789d0184080ce38c1419c2eafb66aedaf8936608e29405487d7e446ae486360a07c59136420012f72fd186cb551a471963433c21ff2b491b6c4283051ca842944481405861b4b35055929a55a5ab318ecf68a41637496f983d8f94e4f78d9b2f7e64f7ea8499c85aeae69124f0c2b52bc4937d161f8d6bbccaf9f7bf283ec1a9e9ac8d075f9791eb6613afecc3dedb5cebd4da3253dcc53b2da36b5b39e9debdd295daf802d2dc26ef010655c56cf4e00e3521cb4bf2760434151d614000b22f9de4167d89da4fb82cde688e71a90aef0ee99aab1ac2753137723415980ff8a3d2012da8f473db79c5d1ea94a7d986dd7288242c16d0af06def10a9b30d78bf042c756a533a72f712f3447b3a404a7b7f5de6d21f589a8c99c86e0d4cc55d8fccc8add385aedb2e60574b83778818a584c1385ff81c1ae33d92f00b2ceec4621eafb92c0e557ec24e2c68100baddb385ed4610b3581e85a6c293cc6fd4a92e6957f86c3ab0b373785de577efcd7fee64d96e901604d8fdd3f7538696856fef2a97833bc3db2a1068367d26211ce8aa6c42f88bccf7db7632f6c93632f70672b330cb28e60f2365017ee1137d17cc12ef99c1ae806939c5a809fec8e939baca6ed3b08f68b9a1ba1a69b99d4a67bfc55944b33adf4518d45b416ee081e4c2750312f52123c99cf9df934d927d79c30a8a46f10c36c021218920369c2bd0ba4b06f20d4bfd80fb832bd541728e15dc2f4caf61a55380220c66d644ac0434c11a86af013475487a05c3ee4646f2ae534f7ed9a2bd711c5c42737d6f210df34db2069dc6e24a0cefe2a5e5260a5c408f4472dc4b8dcad76c2f5a696daa01be66dd2b22eecb19bf3caa99c0857dc7d6828426fcbe014ecfb5fcf1f7a14f5b760489f52a6aa5d21716cf2da57d1edbb1cc89526ed3a43aee24467cabb98242c95f7ceeed8350ed81ab2bcbc4901edcdd2895411cd4e1602f7ebba29012c60b0ab2fb905391ac321a3194b08f9a22b9aceee58f0151c7aef5255d84136079c5882968ae05d1bb9976d6043b6ef15ba35fc01f61d7ec2874ff8fd72683ffa8cb665780dd1f21e90e089d48118b278b6297c49a5a3c13d897f0f600b741f3a2b38fc80ccd31c6df2e2dd0da38443ed21dad3fb1296f49ad4e37beab3c36225cde02a6f7217f064bb2e5f8d507446703c8e6792a248ec2f3f81abbf6c096efc23a33cc7f873a32f0c17207dd5f8eb0204e06651dd2099010c0a368054620a05a4a1dae7f51b1d9f65b3c829c0166b0d8c8dd005dd609af692694c54aa85ca52fedc8f8ed734e00938991db4928422cba3d1f7de56935fe36a90b0651ee5f91fff3860c92ec3a890f9113a2f719870802948af917d4ffe3a8b00b18058b031531a7289b197c123c14a2d8058d9302398195ad3295aba6919eb374ed09fa04a52352a9d1744f2c00d2389764915608967cc09778461a9ecea25248ce4651105410c41c62326d0bcb7c9238aa106970df3d0a73542150806ba52447022b1ca724bfb7e02342c31f906c77eb309d3f89c8a0d5a20d313e138c3c0bd30781f63de193d382327f1c32dabf73f49ee7cc02097ed71763192fe8e08671e37f6db4a33bb4541020ebcdd43d05583aa82bf48d6793089e6c2d58f36f4b13b77ef51a7087bdcb168f06fa9cecfa7616766b2fcf6602707c0c6ac9bedbcb6bf6c036b296ed2e78a3fda808580018f6e5b5a01273dc58d6750a338eaa3bd8de471094eebad764789814ee413fa5b6bfc7db45aa0822f1e374b2ed8750b77603c71e81394d857c4bf52a21832ef77e1f5e9fb9ce8a2381017b3e1290240e6001b653072269cfa1877293099aab4a01bc84dc7ed5ec320dbdb302f134bfd27a71b8952f24cae9a4c633db0227223c041cfb4c3d9a0e02c81f77ff8419b047056c06c257203e3293062d23ea5160fc9b45a91c180c1dc9432a971d8dbc300a71b06af55529bfa5bd0d9f23304af5c80eb441beb7b2f276596294c24a5b16818c3c16e6e46217ea4595ae958eac5e3f21300b8d863a817350a44441b495bc90e515320d37021e91a1363cfc93a5fcaf9d3d73d420c463b63c34dec1d0b29868c1bb5eebfcc0b2ce267684f55be468a1961460e411fa9e939f4178f5eaf8f1a9cc4a851184a14f380fb9db61253c88e44008df1147c46607c29bc9db94568165a18a26b08e185f8a16070d0d2b4c1a339f74a4ad6c8e2a6b632c808a68087d54fb0cd4896882eb1eda3658cd7f0370d37553774629315d4c7f52f8c987a9b8c0f0790a0447423f315571f0eb4fb119827f9cd0981960b7bbf22a7e743d881f024fe313ef6d29612e8e608cca8b9887ac9da95b7b5fc508fdaf3061c074b1b69bed56b66ddb5fd7b22d3985d68569eb83f8776db4256d2ab7c0e8a2e0d4a1399b4af5388d83c41b1447d3d7c45de6707c03d9b31ad9390b9d68b899562b7c85822180bce188c400180b4d55ca8ea4f09ec1fc638ae08a2745d6c5e2b24d4f53b3b54e9356fe82825c5fb6d07fef87e4eb1fe3c1f041540852a88cc6462be418535037c915c3ddb29480659972e3ec579a5c873fc6c201f5b8608c12409bd688f211e784399c27668fe3fb406fcba7ae3413c3e8193370a4dc014ee84655cfbae7d73c72f97f76b6da98757c194cb6a037e04e18c3d2d265c132d0b0037c73bf7a8436f0d8bb832f594265bd880ee9d320bfd4c092c45a5c6eeb41627dfe4a6b021e563f8b9f29afadc3e30c63e796eebab7e8a2f307e9619fd1a4390aef35b1f0efff3ac4d564a0bdbeed0b8d31349ed4e0f311519aa18d5f3fdef064808ef1e12d6ecf084398dec9aa08dccaa120459436623f74937b3a597aa00f9f25a5267cdbd8e248ecf8746ddb855b715eab8e75e4c0dc199080f5d200a4f78515ac17c90052f0f8f25fe5aa88e5885aeb2794b591c30ce9da2794efc85e2769247c551855ba733b8774d01c2ee5816d2503781e0772cb95333aba06d05cf12a67bd507a7f98d56dbb83a8b496dcb00e83ddb4fbf0b64db9bee57d797661501070ce1c42c106fea6dc315c7bc83fdddb5097a65fee29e45c67e6ee9386c2ef26918c3dcf2d935d2815b07836a5430fe1816f1ee055969c68bdfd762fffbcad940da056de34c2ede935461bb611c29088bc09b8308dc09853248d1f92e83d6249165037eeb8f4e37f7afbcf1bbfcca87bfd083b8f8a89ea2ece4c968efa0cc9507c57bb32eaedd01ad36b2e67930076950911281ef3488c08b617b034557e662f129746d86a1d4e5fddab953ca5d869556b85281ba3b46cc932fefd4e63213bb3d771aab5364ea495adda3fa03c1e28b50d141a1614b94553c5afbaa7e11097cebc79b72d6d9bc8ca17b6961abca1dbe0b24ca9705e408816c1c4d551405d22dbf39b300532b9cc11977179fede0fd333fdc86878c901cdc1a8d1e9bd08db8079b2d88ab84672628084cd75d28fc632bbcd3fc0509316ad9199b98d79858d8a64b13b57f51dc7901bde74d70ea47cd6f94aaed7362d4c85bfbb9b074d87c1c50dfc7c833c677e9853d754e661f7a6c57032ea71f6c27886a7d9d66aba5d214aa7c5690a59e5ca1489587ef95972076fb1e66a12731a8de0d704350aff0ccc0b66cbba02181e2d0d626c56d46e22610b9764b16c27cc7c6ee8006b0ad41b963de9e35d66558972bcaf6211c7a7573fecdcd41c05e11875c23811e733b9404cbd4e5b3391f5eef701314c3a1c962d3c82f67a4aee9cee49b5584a0d8897beb326f18dc915aac24e397b76a76e5d36c9b80e038751c2c83fa3a6392c60425c0578f7b052e1be323c3c553679ee17a38948a67c2af7922b120895ba3ed4452f80f199791eba40e969836915426d2455359c0d41653747ac6b804e005ced4d70f58d47c866f0993d2cf362f11817d08d649d15a5a3db71654bda0039c5e76c24e6cc56fd70b99f8a20a19b58510d0ffe6c02cc16e34a5ff08132d287cfadf9151f9b7d513c4946360877161e1fec1cc19d55c76f84eb8fd9b78131ef8ce8bdab85aa21e89b9f241baffbe8e4cf86caa1c4113bf21eecf1de73a18afbf8a0c1b3208f6833904ff0cee89096a33f4fc6bab6e2c7608452843e7bffb749fc6f7214936c948ec12359b93ca89204df4a2e6f27089276b5e4b95e2e186c7973f5d17f717d8f7fad3c87106dd4518078cc9c6085bb850cca69f67778900204f120cf283b58051f3457642df3dc204c515990e70b61a3e5228e1880717f452eea93ae8178118fa9726a6a01787d18bf7a5acc5c43298b0f31deba9a0aed9c34dad61fab0edd50ee2f5c22e4c8cb5fcdae98773357a29a95bec14db637b23b55e6cb929d89d0b3086dd96727809c11465fdd5276ec19e62b29737693bcc733b2266d73de87aa5243f3c1"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbmod={0x1a8, 0x16, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xfffffff8, 0x3, 0x1, 0x7, 0x40}, 0xc}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0xff, 0x0, 0xef8, 0x9}, 0xa}}]}, {0xfa, 0x6, "ec9c48c9773a861516fa3433a9a41eb6441fbcb7d1d53bd9ddf1ef11f7d75f241522f27aa9f4b45a7ae5c18734ec5e869da1f4c7f725f01bb850feaab639a1c77dc30a21c8399612193fb485d3a7cf9d6d34ad4e470333e14d1bc3b0a3861eb94bc9f6fad77b9d50f51f64279ee872431e6e4312c731c7f34ec5f91b823e3eb026cc5d8950eeb881bbee5c6853eec585c8b6ee683264a023b31c8c3a72f5c5deb4b7ca00f8e88c8c326ef27528347ccdf8f6db16167e40136be51e049fd010097984d95629d6e8040adbceeae1cda6da741d02ce6da1d482e2fb755d3d8d684a24887aebc4cbe5349a0c23fed3ed31f3d9ac939be078"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbmod={0x140, 0x15, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}]}, {0xf3, 0x6, "7a110daad8f732dcd258c8d63d47687f1c367fcfb211728c99dac83f8483a9b5fe51c08e17c8000a91708f43122bd55dbb9023529322e8a208b5cb8b7f514149ef69473ff2b7e5766969cb5db10f12af53347a9496f15efa1221a2c0ef955583e9f0ff0ce4a60865544b4acb4d26931ff639287705212ba888a33ad07ff3c100e8328d03a3e7d740870c5c4c6dfc47bba6f7a5cf570368c54295ae8c0182ad8adedec7afcfc630ccf23e17a7c8e665f30cfe2234f863e30eb1e1796896377dd549b15a3f11433e66bb0b4886bb7d643db1a8ff7360bbdec80651389050afbfe0465efaa4a7852f7f338a46758b52a8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0x16c, 0x1, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x11dd90cf9a5d7966}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd, 0xf}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0xe}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}]}, {0xf8, 0x6, "4f69872c98e710d736a614f27441fc1b032425f330efe41a5fe85a76ab71e7f99e714fffaa116717c9fae5a7cb9bb48db9b4fa166a7a5deb0078a3649065be2e62309262cac45421d7e8d2ddd6ecc364dcf63e6dabd688ada50ac67e5336ec5a55e5fc1eb46bda82030ec1b179f73911079fee55436c1f99a0aded396fc2aa549c21080c297100afe60c7f9188b6ce4ce37121453e20096272c311273ec41738647706a869be49e99b4d46173fb3821a4ec38b42ea878736184f606f974edac317de9026b232bcfc58d14fbc36166bf1bc5f3915eeb31b68c7550f7fca6f66a2529392909e18ba30538643f7c8dd13c251356531"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x150, 0x17, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x30, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x10}, @IFE_META_PRIO={0x8, 0x3, @val=0x80000000}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xffff}]}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x4}]}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, @TCA_IFE_TYPE={0x6, 0x5, 0xa}]}, {0xd8, 0x6, "0fd6f4bce42fb38aec99dcfdc4ea89dc759ddfab231e513881027ef36fc08c64e722869b434db977fb914b209ffc1b939a46677d774a05161d7d5af7a12505b105db3b13a0347d0f9735112dce034efb5253f149fbba260466f365683a67dc72fe31b1021abf7e7689ec8aad207c9b04cd63e568df2dd430a8e5b3f3ccf1db236ff7fcb43682f1f57ab5127a530a64fe40018aa2ae7c02db0d33bb36e1c73621b45ba66356b9167b4fe134fabe8cc05a6073ed0060f96dd0decf22e2480f12baaa1afa0d8c7ee5efda2bbe8c0ada1345bfc98d1a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0x108, 0x13, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xd6, 0x3, 0x9, 0x4}, 0x371f}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10000, 0x9, 0x6, 0x6, 0x7fffffff}, 0x1000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0xffff, 0x5, 0x9, 0x9}, 0x687}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x9c9, 0xfffffffffffffff9, 0x80000001}, 0x6}}]}, {0x65, 0x6, "6c7272b468f8181aa9c8e0b22e467242af864ec871664fdbe5af2da64e82f38f12336a5ff04e8b708e49ed6924a7779a0b7b23de31c65264043374f9d4241a3076b27e84d519d7032d5c55e4948b1cb47d38d281c2e7e430ffc2c0a289b8a69267"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x8c, 0xb, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfff, 0x1, 0x5, 0x1}, @multicast1, @loopback, 0xffffffff, 0x1}}]}, {0x3b, 0x6, "b8f5b4af825e4da670a67746bda9cebae1dd6cd9f1b70ce460e9d3ac5a7aed9b92c79dfc47b8be4282114d02a9f9c345c4da4a54f60268"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_mpls={0x104, 0xb, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x2e, 0x1, 0x2, 0xf240, 0x5}, 0x3}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x81, 0x4, 0x6, 0x4aa4, 0x8}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88ca}]}, {0x98, 0x6, "727258bf0c494ef2051dc464d2c0a3138a80bb06672e78f2de367dacbe58b877c373638312d14a4f696749f2ecee60a86bc477cee141f0f01b90920ced2664a0c5c81bba4d2c64afe9f27f00b8bd80c84a8f09815211de9232b822ab90fb83ff687de60bfa448e1d10023956da50ced28b45347f5644ff825512f48521e4d6df0514b45b065c30d3cf8adca9365008eba3389727"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0xd8, 0x5, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x10000, 0xffffffffffffffff, 0x1, 0x3f}, 0x3}}]}, {0x90, 0x6, "0108bf81ee040967fcad951abb31c1478e25a802615973b81ae9f2ca886d2d24cb6f296805349de7ae9beb7d19acfdc7f70e81d91aae9c0b4e8f18004ba4cc11504b79f1aeae0331236a093579f4cace2e351116219f6a27a6054326f7226fb9a3aa45963ec81b9377cb796d3a1401ca1faded49d9bb71d70d7c9dc5373a936830353045936c4f0e50f2c9d1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0xb4, 0x1, [@m_vlan={0xb0, 0xd, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2a46c14b, 0xb90, 0x20000000, 0x81, 0x9}, 0x2}}]}, {0x66, 0x6, "b14f238a313f5efe2e9da4832ba8d2cd6efbf766085b6bc4bf5a619774227065894d68b8f12e2b088dafda0f19bc3baa14fef98a73b20e6a4641c9d082e87902b98a216f2b88b14d6c2f6e1f35e79c51e70fa9257f837be7df88b5653e84f5ec8b50"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x1a90}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xa98, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)='\x00\x00\x00\x00\x00\x00', 0x0, 0x7, 0x0, 0x8000000, 0x0}) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000005, 0x810, r1, 0x27df4000) listen(r0, 0x8) r2 = accept4(r0, 0x0, 0x0, 0x0) poll(&(0x7f00000020c0)=[{r1, 0x116}], 0x1, 0xfffffff3) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) sendmsg$NFT_BATCH(r2, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8840) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x5}, &(0x7f00000001c0)=0x8) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x330, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f00000002c0)={'dummy0\x00', @remote}) 382.395559ms ago: executing program 2 (id=953): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xba, 0x69f, &(0x7f0000000f00)="$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") open_by_handle_at(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[], 0x0) 268.946642ms ago: executing program 1 (id=954): r0 = timerfd_create(0x1, 0x80000) mmap(&(0x7f00000cc000/0x2000)=nil, 0x2000, 0xa, 0x30, r0, 0x34385000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x80800}, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4840, 0x1) socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fadvise64(r4, 0xfffffffffffffff8, 0xf, 0x2) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r3, 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x745, 0x9}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000000380)={0xfffffffc, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) fremovexattr(r5, &(0x7f0000000140)=@random={'security.', 'wireguard\x00'}) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, 0x0) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r7], 0x1c8}}, 0x0) 204.696934ms ago: executing program 3 (id=955): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4004000) socket$kcm(0x10, 0x400000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = socket(0x2d, 0x2, 0x0) bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x1000000c}, 0x10) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x160, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x69f0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4008800}, 0x1) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x8, 0xfffffffffffffff9}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)={0x64, 0x18, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0x12d, 0x0, 0x1, [@nested={0x48, 0x146, 0x0, 0x1, [@nested={0x44, 0x58, 0x0, 0x1, [@nested={0x3d, 0xef, 0x0, 0x1, [@generic="439cfa371a5900a273b51ffbd0a0adb0d16ce2342bdc5d543fec9377a4ddb3f71f134d3ed1796ef0f3e0c8d75c667ab7772be501294df2ad28"]}]}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52}, 0x28) getsockopt$inet6_int(r1, 0x29, 0xb, 0x0, &(0x7f0000000800)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c4000000003280004800800024000000012080001"], 0xa4}}, 0x0) 7.89358ms ago: executing program 1 (id=956): syz_read_part_table(0x104a, &(0x7f0000002140)="$eJzsz8EJwjAABdCvrdoiKIg7uJaTSDfx7smtHMGjEq1mAsHCe4fwyQ8fEv5AsxnD4Zomp/2uNpll9Y5tkvP6W3R5vK6Ke2n7IVnUza4c8yTH2+dZhj7ZtlmO08nlt/8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGl4BgAA///gdQeE") 0s ago: executing program 0 (id=957): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x9, 0x5, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x400000200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x10290, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x808000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f0000000000000900000085000000d0000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x4c, r7, 0x511, 0x400000, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c810}, 0x2) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=@RTM_DELMDB={0x58, 0x55, 0x93d, 0x70bd26, 0x2, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x2, {0x0, 0x0, 0x1, 0x3, {@in6_addr=@empty, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x2, 0x0, {@ip4=@multicast2, 0x86dd}}}]}, 0x58}}, 0x80) kernel console output (not intermixed with test programs): 0000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 114.440241][ T5039] RBP: 00007ff64dfbf090 R08: 0000000000000000 R09: 0000000000000000 [ 114.440259][ T5039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.440275][ T5039] R13: 00007ff64f7e6038 R14: 00007ff64f7e5fa0 R15: 00007fff3d3164c8 [ 114.440310][ T5039] [ 114.782167][ T5057] loop0: detected capacity change from 0 to 128 [ 114.786951][ T5055] loop4: detected capacity change from 0 to 8192 [ 114.791125][ T5057] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 114.857675][ T5057] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 114.897346][ T3858] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 115.350023][ T5084] openvswitch: netlink: Key type 1542 is out of range max 32 [ 115.364262][ T5071] loop0: detected capacity change from 0 to 128 [ 115.403046][ T5088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.481'. [ 115.495295][ T5093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.483'. [ 115.505431][ T5089] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 115.515839][ T5089] SELinux: failed to load policy [ 115.574268][ T5097] netlink: 24 bytes leftover after parsing attributes in process `syz.0.484'. [ 115.594590][ T5084] loop2: detected capacity change from 0 to 4096 [ 115.621944][ T5084] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.653223][ T5104] netlink: 'syz.3.476': attribute type 10 has an invalid length. [ 115.668832][ T5104] veth0_macvtap: left promiscuous mode [ 115.719111][ T5107] loop4: detected capacity change from 0 to 4096 [ 115.727560][ T5107] EXT4-fs: Ignoring removed bh option [ 115.774963][ T5107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.799037][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.868386][ T5113] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=43 sclass=netlink_tcpdiag_socket pid=5113 comm=syz.2.488 [ 116.430608][ T5129] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.514004][ T5126] SELinux: policydb magic number 0x6f5f626d does not match expected magic number 0xf97cff8c [ 116.526349][ T5126] SELinux: failed to load policy [ 116.589332][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.636243][ T5136] netlink: 24 bytes leftover after parsing attributes in process `syz.0.497'. [ 116.671995][ T5136] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 116.771961][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.139121][ T5154] FAULT_INJECTION: forcing a failure. [ 117.139121][ T5154] name failslab, interval 1, probability 0, space 0, times 0 [ 117.167850][ T5154] CPU: 0 UID: 0 PID: 5154 Comm: syz.3.502 Not tainted syzkaller #0 PREEMPT(full) [ 117.167887][ T5154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 117.167903][ T5154] Call Trace: [ 117.167911][ T5154] [ 117.167921][ T5154] __dump_stack+0x1d/0x30 [ 117.168017][ T5154] dump_stack_lvl+0x95/0xd0 [ 117.168045][ T5154] dump_stack+0x15/0x1b [ 117.168070][ T5154] should_fail_ex+0x263/0x280 [ 117.168183][ T5154] should_failslab+0x8c/0xb0 [ 117.168225][ T5154] __kmalloc_noprof+0xb8/0x4d0 [ 117.168273][ T5154] ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 117.168320][ T5154] genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 117.168357][ T5154] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 117.168387][ T5154] ? selinux_capable+0x31/0x40 [ 117.168476][ T5154] ? security_capable+0x7b/0x90 [ 117.168510][ T5154] ? ns_capable+0x7c/0xb0 [ 117.168591][ T5154] genl_rcv_msg+0x432/0x470 [ 117.168622][ T5154] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 117.168737][ T5154] netlink_rcv_skb+0x123/0x220 [ 117.168852][ T5154] ? __pfx_genl_rcv_msg+0x10/0x10 [ 117.168880][ T5154] genl_rcv+0x28/0x40 [ 117.168898][ T5154] netlink_unicast+0x5a8/0x680 [ 117.168935][ T5154] netlink_sendmsg+0x5c8/0x6f0 [ 117.168994][ T5154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.169036][ T5154] ____sys_sendmsg+0x563/0x5b0 [ 117.169075][ T5154] ___sys_sendmsg+0x195/0x1e0 [ 117.169202][ T5154] __x64_sys_sendmsg+0xd4/0x160 [ 117.169242][ T5154] x64_sys_call+0x194c/0x3020 [ 117.169354][ T5154] do_syscall_64+0x12c/0x3b0 [ 117.169386][ T5154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.169485][ T5154] RIP: 0033:0x7f4d0e62ce59 [ 117.169506][ T5154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.169527][ T5154] RSP: 002b:00007f4d0d07f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.169589][ T5154] RAX: ffffffffffffffda RBX: 00007f4d0e8a5fa0 RCX: 00007f4d0e62ce59 [ 117.169607][ T5154] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 117.169624][ T5154] RBP: 00007f4d0d07f090 R08: 0000000000000000 R09: 0000000000000000 [ 117.169640][ T5154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.169722][ T5154] R13: 00007f4d0e8a6038 R14: 00007f4d0e8a5fa0 R15: 00007ffd78ae1ae8 [ 117.169748][ T5154] [ 117.509657][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 117.509675][ T28] audit: type=1400 audit(1779530070.678:810): avc: denied { getopt } for pid=5164 comm="syz.2.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 117.551498][ T5166] ------------[ cut here ]------------ [ 117.557008][ T5166] WARNING: kernel/signal.c:2174 at do_notify_parent+0x5c3/0x600, CPU#0: syz.2.507/5166 [ 117.566744][ T5166] Modules linked in: [ 117.570661][ T5166] CPU: 0 UID: 0 PID: 5166 Comm: syz.2.507 Not tainted syzkaller #0 PREEMPT(full) [ 117.579898][ T5166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 117.589988][ T5166] RIP: 0010:do_notify_parent+0x5c3/0x600 [ 117.595804][ T5166] Code: 8b 05 e1 a8 f6 07 48 3b 44 24 48 75 41 44 89 f0 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d e9 04 48 5f 04 cc e8 2e 1c 1e 00 90 <0f> 0b 90 45 31 f6 eb cc e8 20 1c 1e 00 90 0f 0b 90 e9 af fa ff ff [ 117.615439][ T5166] RSP: 0018:ffffc90011133dd8 EFLAGS: 00010093 [ 117.621559][ T5166] RAX: ffffffff813b1762 RBX: ffff888103805500 RCX: ffff888103805500 [ 117.629597][ T5166] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 117.637618][ T5166] RBP: 0000000000000080 R08: ffff888103806000 R09: 0000000000000000 [ 117.645606][ T5166] R10: ffffc90011133df0 R11: 0001c90011133df0 R12: ffff888103805500 [ 117.653607][ T5166] R13: ffff888103805d28 R14: ffff8881049f3190 R15: 0000000000000080 [ 117.661595][ T5166] FS: 0000000000000000(0000) GS:ffff8882ae8f8000(0000) knlGS:0000000000000000 [ 117.670540][ T5166] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.677147][ T5166] CR2: 00007ff64f7e7dac CR3: 000000010d346000 CR4: 00000000003506f0 [ 117.685136][ T5166] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 117.693132][ T5166] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 117.701124][ T5166] Call Trace: [ 117.704478][ T5166] [ 117.707432][ T5166] do_exit+0xc13/0x1530 [ 117.711661][ T5166] __x64_sys_exit+0x1f/0x20 [ 117.716295][ T5166] x64_sys_call+0x301d/0x3020 [ 117.721006][ T5166] do_syscall_64+0x12c/0x3b0 [ 117.725656][ T5166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.731616][ T5166] RIP: 0033:0x7ff2162fce59 [ 117.736061][ T5166] Code: Unable to access opcode bytes at 0x7ff2162fce2f. [ 117.743185][ T5166] RSP: 002b:0000200000000498 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 117.751625][ T5166] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007ff2162fce59 [ 117.759640][ T5166] RDX: 00007ff2162fce59 RSI: 00002000000004c0 RDI: 000000000000000b [ 117.767635][ T5166] RBP: 00007ff216392d6f R08: 0000200000000b00 R09: e6bb5e741b6e2659 [ 117.775679][ T5166] R10: 0000200000000b00 R11: 0000000000000246 R12: 0000000000000000 [ 117.783760][ T5166] R13: 00007ff216576038 R14: 00007ff216575fa0 R15: 00007ffc6daf10b8 [ 117.791770][ T5166] [ 117.794854][ T5166] ---[ end trace 0000000000000000 ]--- [ 117.819805][ T5169] EXT4-fs: Ignoring removed bh option [ 117.853026][ T5169] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.901103][ T5174] bridge1: entered promiscuous mode [ 117.919505][ T5174] bridge1: entered allmulticast mode [ 118.034606][ T5179] dummy0: entered promiscuous mode [ 118.075061][ T28] audit: type=1400 audit(1779530071.238:811): avc: denied { read write } for pid=5181 comm="syz.2.513" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 118.101448][ T28] audit: type=1400 audit(1779530071.268:812): avc: denied { open } for pid=5181 comm="syz.2.513" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 118.131867][ T5179] dummy0: left promiscuous mode [ 118.296579][ T5192] netlink: 24 bytes leftover after parsing attributes in process `syz.3.515'. [ 118.451688][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.561940][ T5192] bridge_slave_0: left allmulticast mode [ 118.576248][ T5192] bridge_slave_0: left promiscuous mode [ 118.590288][ T5192] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.631642][ T5192] bridge_slave_1: left allmulticast mode [ 118.638045][ T5192] bridge_slave_1: left promiscuous mode [ 118.650592][ T5192] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.697527][ T5192] bond0: (slave bond_slave_0): Releasing backup interface [ 118.765387][ T5192] bond0: (slave bond_slave_1): Releasing backup interface [ 118.839373][ T5192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.857545][ T5192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.883364][ T5192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.902323][ T5192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.943227][ T5192] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 118.992095][ T5195] veth0_vlan: left promiscuous mode [ 119.041498][ T5204] set_capacity_and_notify: 5 callbacks suppressed [ 119.041516][ T5204] loop0: detected capacity change from 0 to 128 [ 119.063675][ T5195] veth0_vlan: entered promiscuous mode [ 119.175954][ T5195] bridge0: port 1(veth0_vlan) entered blocking state [ 119.186215][ T5195] bridge0: port 1(veth0_vlan) entered disabled state [ 119.226872][ T5195] veth0_vlan: entered allmulticast mode [ 119.271454][ T5195] veth0_vlan: left allmulticast mode [ 119.328996][ T5200] ipvlan2: entered promiscuous mode [ 119.733752][ T5218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.522'. [ 119.882314][ T5229] loop3: detected capacity change from 0 to 4096 [ 119.893643][ T5229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.919053][ T5228] SELinux: policydb magic number 0x6f5f626d does not match expected magic number 0xf97cff8c [ 119.931552][ T5228] SELinux: failed to load policy [ 120.041427][ T5232] loop2: detected capacity change from 0 to 4096 [ 120.070036][ T5232] EXT4-fs: Ignoring removed bh option [ 120.089735][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.108875][ T5232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.167462][ T5237] FAULT_INJECTION: forcing a failure. [ 120.167462][ T5237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.193776][ T5237] CPU: 1 UID: 0 PID: 5237 Comm: syz.4.529 Tainted: G W syzkaller #0 PREEMPT(full) [ 120.193814][ T5237] Tainted: [W]=WARN [ 120.193823][ T5237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 120.193838][ T5237] Call Trace: [ 120.193846][ T5237] [ 120.193853][ T5237] __dump_stack+0x1d/0x30 [ 120.193899][ T5237] dump_stack_lvl+0x95/0xd0 [ 120.193920][ T5237] dump_stack+0x15/0x1b [ 120.193944][ T5237] should_fail_ex+0x263/0x280 [ 120.193981][ T5237] should_fail+0xb/0x20 [ 120.194029][ T5237] should_fail_usercopy+0x1a/0x20 [ 120.194145][ T5237] strncpy_from_user+0x27/0x250 [ 120.194230][ T5237] ? __kmalloc_cache_noprof+0x18a/0x400 [ 120.194278][ T5237] __se_sys_memfd_create+0x20f/0x3b0 [ 120.194325][ T5237] __x64_sys_memfd_create+0x31/0x40 [ 120.194415][ T5237] x64_sys_call+0x1f22/0x3020 [ 120.194439][ T5237] do_syscall_64+0x12c/0x3b0 [ 120.194518][ T5237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.194678][ T5237] RIP: 0033:0x7f4a2278ce59 [ 120.194698][ T5237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.194735][ T5237] RSP: 002b:00007f4a211dee08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 120.194757][ T5237] RAX: ffffffffffffffda RBX: 0000000000000539 RCX: 00007f4a2278ce59 [ 120.194834][ T5237] RDX: 00007f4a211deee0 RSI: 0000000000000000 RDI: 00007f4a22822f4f [ 120.194848][ T5237] RBP: 0000200000000c40 R08: 00000000ffffffff R09: 0000000000000000 [ 120.194865][ T5237] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000640 [ 120.194881][ T5237] R13: 00007f4a211deee0 R14: 00007f4a211deea0 R15: 0000200000000140 [ 120.194916][ T5237] [ 120.385769][ T5237] loop4: detected capacity change from 0 to 512 [ 120.413869][ T5241] team0: Port device bridge2 added [ 120.447228][ T5242] loop3: detected capacity change from 0 to 128 [ 120.519320][ T5237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.547560][ T5251] loop1: detected capacity change from 0 to 1024 [ 120.556224][ T5251] EXT4-fs (loop1): bad geometry: first data block 0 is beyond end of filesystem (0) [ 120.576486][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.600907][ T5251] loop1: detected capacity change from 0 to 1024 [ 120.616338][ T5251] EXT4-fs: Ignoring removed bh option [ 120.650040][ T5251] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 120.673015][ T28] audit: type=1326 audit(1779530073.838:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5254 comm="syz.3.534" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d0e62ce59 code=0x0 [ 120.708430][ T5251] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 2: comm syz.1.532: lblock 2 mapped to illegal pblock 2 (length 1) [ 120.722623][ T5251] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 120.722783][ T5251] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 120.731907][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 120.731931][ C0] EXT4-fs (loop1): initial error at time 1779530073: ext4_map_blocks:791: inode 3: block 2 [ 120.731974][ C0] EXT4-fs (loop1): last error at time 1779530073: ext4_map_blocks:791: inode 3: block 2 [ 120.771383][ T5262] loop0: detected capacity change from 0 to 512 [ 120.777955][ T5251] EXT4-fs error (device loop1): __ext4_get_inode_loc:4885: comm syz.1.532: Invalid inode table block 1 in block_group 0 [ 120.790651][ T5251] loop1: lost filesystem error report for type 5 error -117 [ 120.790810][ T5251] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 120.807570][ T5251] loop1: lost filesystem error report for type 5 error -117 [ 120.807742][ T5251] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.532: mark_inode_dirty error [ 120.826161][ T5251] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 120.826910][ T5251] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 120.844793][ T5251] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.532: Failed to acquire dquot type 0 [ 120.855990][ T5251] loop1: lost filesystem error report for type 5 error -117 [ 120.856139][ T5251] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 120.884843][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.895430][ T5251] loop1: lost filesystem error report for type 5 error -117 [ 120.895528][ T5251] EXT4-fs error (device loop1): ext4_evict_inode:267: inode #11: comm syz.1.532: mark_inode_dirty error [ 120.914886][ T5251] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 120.915010][ T5251] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 120.941196][ T5262] dummy0: entered promiscuous mode [ 120.949363][ T5262] dummy0: left promiscuous mode [ 120.956667][ T5251] EXT4-fs (loop1): 1 orphan inode deleted [ 120.963372][ T5251] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.976165][ T5264] loop2: detected capacity change from 0 to 2048 [ 120.983227][ T5264] EXT4-fs: Ignoring removed nobh option [ 120.989145][ T5264] EXT4-fs: test_dummy_encryption option not supported [ 120.995988][ T3855] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:26: lblock 1 mapped to illegal pblock 1 (length 1) [ 121.020077][ T3855] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 121.028713][ T3855] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:26: Failed to release dquot type 0 [ 121.052232][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.061734][ T3307] EXT4-fs error (device loop1): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 121.075851][ T3307] loop1: lost filesystem error report for type 5 error -117 [ 121.076050][ T3307] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 121.082378][ T5267] netlink: 'syz.2.539': attribute type 29 has an invalid length. [ 121.083920][ T3307] loop1: lost filesystem error report for type 5 error -117 [ 121.093031][ T5267] netlink: 28 bytes leftover after parsing attributes in process `syz.2.539'. [ 121.103824][ T3307] EXT4-fs error (device loop1): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 121.129359][ T3307] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 121.177348][ T28] audit: type=1400 audit(1779530074.348:814): avc: denied { read } for pid=5271 comm="syz.2.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.293655][ T28] audit: type=1400 audit(1779530074.458:815): avc: denied { create } for pid=5268 comm="syz.1.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 121.700025][ T5283] loop3: detected capacity change from 0 to 128 [ 122.643048][ T5288] netlink: 144 bytes leftover after parsing attributes in process `syz.3.545'. [ 122.869589][ T5296] EXT4-fs: Ignoring removed bh option [ 123.296394][ T5306] netlink: 40 bytes leftover after parsing attributes in process `syz.0.549'. [ 123.883298][ T5306] 9p: Bad value for 'rfdno' [ 124.245828][ T5296] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.468029][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.608826][ T5319] set_capacity_and_notify: 2 callbacks suppressed [ 124.608841][ T5319] loop2: detected capacity change from 0 to 512 [ 124.637502][ T5319] EXT4-fs (loop2): 1 truncate cleaned up [ 124.648467][ T5319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.673150][ T5319] FAULT_INJECTION: forcing a failure. [ 124.673150][ T5319] name failslab, interval 1, probability 0, space 0, times 0 [ 124.702131][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.2.553 Tainted: G W syzkaller #0 PREEMPT(full) [ 124.702236][ T5319] Tainted: [W]=WARN [ 124.702243][ T5319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 124.702255][ T5319] Call Trace: [ 124.702262][ T5319] [ 124.702270][ T5319] __dump_stack+0x1d/0x30 [ 124.702316][ T5319] dump_stack_lvl+0x95/0xd0 [ 124.702414][ T5319] dump_stack+0x15/0x1b [ 124.702433][ T5319] should_fail_ex+0x263/0x280 [ 124.702466][ T5319] should_failslab+0x8c/0xb0 [ 124.702580][ T5319] __kmalloc_noprof+0xb8/0x4d0 [ 124.702621][ T5319] ? ext4_htree_store_dirent+0x52/0x2e0 [ 124.702651][ T5319] ext4_htree_store_dirent+0x52/0x2e0 [ 124.702804][ T5319] ? ext4_read_inline_data+0xb5/0x170 [ 124.702874][ T5319] ext4_inlinedir_to_tree+0x691/0x7c0 [ 124.702920][ T5319] ext4_htree_fill_tree+0x36f/0xa60 [ 124.702944][ T5319] ? path_openat+0x1b01/0x2050 [ 124.702978][ T5319] ? inode_query_iversion+0xb9/0x110 [ 124.703153][ T5319] ext4_readdir+0x1915/0x1f80 [ 124.703177][ T5319] ? __rcu_read_unlock+0x4e/0x70 [ 124.703200][ T5319] ? get_pid_task+0x96/0xd0 [ 124.703259][ T5319] ? proc_fail_nth_write+0x13b/0x160 [ 124.703293][ T5319] ? avc_policy_seqno+0x15/0x30 [ 124.703343][ T5319] ? selinux_file_permission+0x1e1/0x320 [ 124.703411][ T5319] iterate_dir+0x114/0x330 [ 124.703446][ T5319] __se_sys_getdents+0xd2/0x220 [ 124.703484][ T5319] ? __pfx_filldir+0x10/0x10 [ 124.703532][ T5319] __x64_sys_getdents+0x43/0x50 [ 124.703564][ T5319] x64_sys_call+0xea8/0x3020 [ 124.703629][ T5319] do_syscall_64+0x12c/0x3b0 [ 124.703667][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.703688][ T5319] RIP: 0033:0x7ff2162fce59 [ 124.703703][ T5319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.703730][ T5319] RSP: 002b:00007ff214d4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 124.703752][ T5319] RAX: ffffffffffffffda RBX: 00007ff216575fa0 RCX: 00007ff2162fce59 [ 124.703766][ T5319] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 124.703841][ T5319] RBP: 00007ff214d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 124.703856][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.703871][ T5319] R13: 00007ff216576038 R14: 00007ff216575fa0 R15: 00007ffc6daf10b8 [ 124.703894][ T5319] [ 124.999512][ T5288] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 125.093851][ T28] audit: type=1326 audit(1779530078.258:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5321 comm="syz.0.554" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff64f56ce59 code=0x0 [ 125.153885][ T5311] loop1: detected capacity change from 0 to 2048 [ 125.160660][ T5311] EXT4-fs: Ignoring removed nobh option [ 125.166302][ T5311] EXT4-fs: test_dummy_encryption option not supported [ 125.223670][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.318133][ T5327] loop3: detected capacity change from 0 to 128 [ 125.561070][ T5353] loop2: detected capacity change from 0 to 2048 [ 126.412860][ T5359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65050 sclass=netlink_route_socket pid=5359 comm=syz.0.565 [ 128.453829][ T5361] bridge0: port 1(veth0_vlan) entered blocking state [ 128.519338][ T5361] bridge0: port 1(veth0_vlan) entered disabled state [ 128.550130][ T5361] veth0_vlan: entered allmulticast mode [ 128.643048][ T5365] loop0: detected capacity change from 0 to 128 [ 128.669923][ T5361] veth0_vlan: left allmulticast mode [ 128.706175][ T5362] ipvlan2: entered promiscuous mode [ 128.896191][ T5371] loop2: detected capacity change from 0 to 512 [ 128.919332][ T5373] loop4: detected capacity change from 0 to 736 [ 129.053823][ T5372] loop1: detected capacity change from 0 to 2048 [ 129.060487][ T5372] EXT4-fs: Ignoring removed nobh option [ 129.066337][ T5372] EXT4-fs: test_dummy_encryption option not supported [ 129.217526][ T5379] loop3: detected capacity change from 0 to 2048 [ 129.389809][ T5376] loop0: detected capacity change from 0 to 128 [ 129.472836][ T5371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.548126][ T5371] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.643096][ T28] audit: type=1400 audit(1779530082.808:817): avc: denied { write } for pid=5368 comm="syz.2.570" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.898278][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.929732][ T28] audit: type=1400 audit(1779530082.838:818): avc: denied { write } for pid=5368 comm="syz.2.570" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 130.145166][ T5405] siw: device registration error -23 [ 132.403137][ T5424] pimreg: entered allmulticast mode [ 132.532846][ T5424] pimreg: left allmulticast mode [ 132.825228][ T5417] loop2: detected capacity change from 0 to 128 [ 132.838255][ T5415] loop0: detected capacity change from 0 to 2048 [ 132.844959][ T5415] EXT4-fs: Ignoring removed nobh option [ 132.850542][ T5415] EXT4-fs: test_dummy_encryption option not supported [ 132.870503][ T28] audit: type=1400 audit(1779530086.038:819): avc: denied { mounton } for pid=5442 comm="syz.4.588" path="/proc/286/cgroup" dev="proc" ino=11259 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 132.911874][ T5441] netlink: 24 bytes leftover after parsing attributes in process `syz.1.587'. [ 133.068800][ T28] audit: type=1400 audit(1779530086.228:820): avc: denied { execute } for pid=5446 comm="syz.3.589" name="file1" dev="tmpfs" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 133.091077][ T5449] loop0: detected capacity change from 0 to 256 [ 133.102499][ T5441] loop1: detected capacity change from 0 to 4096 [ 133.132086][ T5441] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.149422][ T28] audit: type=1400 audit(1779530086.228:821): avc: denied { execute_no_trans } for pid=5446 comm="syz.3.589" path="/117/file1" dev="tmpfs" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 133.154468][ T5449] netlink: 'syz.0.590': attribute type 4 has an invalid length. [ 133.173896][ T28] audit: type=1400 audit(1779530086.318:822): avc: denied { write } for pid=5440 comm="syz.1.587" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.206870][ T28] audit: type=1400 audit(1779530086.368:823): avc: denied { write } for pid=5440 comm="syz.1.587" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.229109][ T28] audit: type=1400 audit(1779530086.368:824): avc: denied { remove_name } for pid=5440 comm="syz.1.587" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.252011][ T28] audit: type=1400 audit(1779530086.368:825): avc: denied { rmdir } for pid=5440 comm="syz.1.587" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.315710][ T5449] netlink: 'syz.0.590': attribute type 4 has an invalid length. [ 133.331909][ T3858] Bluetooth: hci0: Frame reassembly failed (-84) [ 133.339579][ T4612] Bluetooth: hci0: unexpected event 0x05 length: 0 < 4 [ 133.358892][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.630241][ T5443] syz.4.588 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 133.675678][ T5443] CPU: 1 UID: 0 PID: 5443 Comm: syz.4.588 Tainted: G W syzkaller #0 PREEMPT(full) [ 133.675720][ T5443] Tainted: [W]=WARN [ 133.675727][ T5443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 133.675740][ T5443] Call Trace: [ 133.675746][ T5443] [ 133.675753][ T5443] __dump_stack+0x1d/0x30 [ 133.675858][ T5443] dump_stack_lvl+0x95/0xd0 [ 133.675904][ T5443] dump_stack+0x15/0x1b [ 133.675924][ T5443] dump_header+0x80/0x240 [ 133.675950][ T5443] oom_kill_process+0x295/0x350 [ 133.676030][ T5443] out_of_memory+0x97d/0xb80 [ 133.676071][ T5443] try_charge_memcg+0x62f/0xa10 [ 133.676108][ T5443] ? irqentry_exit+0x7d/0x5d0 [ 133.676142][ T5443] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 133.676221][ T5443] __alloc_frozen_pages_noprof+0x18a/0x350 [ 133.676269][ T5443] alloc_pages_mpol+0xb3/0x260 [ 133.676301][ T5443] alloc_pages_noprof+0x8f/0x140 [ 133.676328][ T5443] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 133.676359][ T5443] __kvmalloc_node_noprof+0x3d4/0x640 [ 133.676397][ T5443] ? futex_hash_allocate+0x190/0x9a0 [ 133.676439][ T5443] ? futex_hash_allocate+0x190/0x9a0 [ 133.676487][ T5443] futex_hash_allocate+0x190/0x9a0 [ 133.676602][ T5443] ? cap_task_prctl+0x13f/0x6b0 [ 133.676633][ T5443] futex_hash_prctl+0xd8/0xf0 [ 133.676715][ T5443] __se_sys_prctl+0x4f4/0x1400 [ 133.676752][ T5443] __x64_sys_prctl+0x67/0x80 [ 133.676778][ T5443] x64_sys_call+0x2533/0x3020 [ 133.676851][ T5443] do_syscall_64+0x12c/0x3b0 [ 133.676902][ T5443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.676951][ T5443] RIP: 0033:0x7f4a2278ce59 [ 133.676967][ T5443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.676986][ T5443] RSP: 002b:00007f4a211df028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 133.677015][ T5443] RAX: ffffffffffffffda RBX: 00007f4a22a05fa0 RCX: 00007f4a2278ce59 [ 133.677033][ T5443] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 133.677045][ T5443] RBP: 00007f4a22822d6f R08: 0000000000000000 R09: 0000000000000000 [ 133.677058][ T5443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.677069][ T5443] R13: 00007f4a22a06038 R14: 00007f4a22a05fa0 R15: 00007ffd17227358 [ 133.677091][ T5443] [ 133.948084][ T5443] memory: usage 307200kB, limit 307200kB, failcnt 256 [ 133.955287][ T5443] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 133.965633][ T5443] kmem: usage 307060kB, limit 9007199254740988kB, failcnt 0 [ 133.973265][ T5443] Memory cgroup stats for /syz4: [ 133.973499][ T5443] cache 0 [ 133.982031][ T5443] rss 0 [ 133.984959][ T5443] shmem 0 [ 133.989114][ T5443] mapped_file 0 [ 133.992868][ T5443] dirty 0 [ 133.995914][ T5443] writeback 0 [ 133.999990][ T5443] workingset_refault_anon 5 [ 134.004810][ T5443] workingset_refault_file 192 [ 134.011654][ T5443] swap 204800 [ 134.015370][ T5443] swapcached 225280 [ 134.020238][ T5443] pgpgin 57574 [ 134.024390][ T5443] pgpgout 57574 [ 134.028438][ T5443] pgfault 74367 [ 134.031998][ T5443] pgmajfault 7 [ 134.035428][ T5443] inactive_anon 0 [ 134.040234][ T5443] active_anon 0 [ 134.043789][ T5443] inactive_file 0 [ 134.048718][ T5443] active_file 0 [ 134.052505][ T5443] unevictable 0 [ 134.056132][ T5443] hierarchical_memory_limit 314572800 [ 134.061997][ T5443] hierarchical_memsw_limit 9223372036854771712 [ 134.068851][ T5443] total_cache 0 [ 134.072575][ T5443] total_rss 0 [ 134.075981][ T5443] total_shmem 0 [ 134.081158][ T5443] total_mapped_file 0 [ 134.085361][ T5443] total_dirty 0 [ 134.090094][ T5443] total_writeback 0 [ 134.094128][ T5443] total_workingset_refault_anon 5 [ 134.099514][ T5443] total_workingset_refault_file 192 [ 134.105102][ T5443] total_swap 204800 [ 134.110192][ T5443] total_swapcached 225280 [ 134.114654][ T5443] total_pgpgin 57574 [ 134.120568][ T5443] total_pgpgout 57574 [ 134.124635][ T5443] total_pgfault 74367 [ 134.129037][ T5443] total_pgmajfault 7 [ 134.133138][ T5443] total_inactive_anon 0 [ 134.138458][ T5443] total_active_anon 0 [ 134.142617][ T5443] total_inactive_file 0 [ 134.146971][ T5443] total_active_file 0 [ 134.151748][ T5443] total_unevictable 0 [ 134.155804][ T5443] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.588,pid=5442,uid=0 [ 134.172032][ T5443] Memory cgroup out of memory: Killed process 5442 (syz.4.588) total-vm:94168kB, anon-rss:1236kB, file-rss:22492kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 134.356964][ T5472] pimreg: entered allmulticast mode [ 134.390422][ T5472] pimreg: left allmulticast mode [ 134.754036][ T28] audit: type=1400 audit(1779530087.918:826): avc: denied { ioctl } for pid=5471 comm="syz.4.597" path="socket:[10112]" dev="sockfs" ino=10112 ioctlcmd=0xf507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 135.302244][ T5492] loop4: detected capacity change from 0 to 128 [ 135.367920][ T5465] Bluetooth: hci0: command 0x1003 tx timeout [ 135.374462][ T3722] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 135.428986][ T5480] loop3: detected capacity change from 0 to 2048 [ 135.459807][ T4612] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 135.472187][ T5480] EXT4-fs: Ignoring removed nobh option [ 135.480827][ T5501] loop4: detected capacity change from 0 to 512 [ 135.484433][ T5499] netlink: 'syz.2.605': attribute type 21 has an invalid length. [ 135.493380][ T5480] EXT4-fs: test_dummy_encryption option not supported [ 135.594942][ T5501] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.606: corrupted in-inode xattr: invalid ea_ino [ 135.595501][ T5499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.605'. [ 135.608203][ T5501] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 135.634156][ T5501] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.606: couldn't read orphan inode 15 (err -117) [ 135.634194][ T5501] loop4: lost filesystem error report for type 5 error -117 [ 135.634747][ T5501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.792739][ T5506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.605'. [ 137.037973][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.263152][ T3855] Bluetooth: hci0: Frame reassembly failed (-84) [ 137.280861][ T3722] Bluetooth: hci0: unexpected event 0x05 length: 0 < 4 [ 138.000104][ T5545] pimreg: entered allmulticast mode [ 138.007141][ T5543] loop3: detected capacity change from 0 to 2048 [ 138.013908][ T5543] EXT4-fs: Ignoring removed nobh option [ 138.019706][ T5543] EXT4-fs: test_dummy_encryption option not supported [ 138.027468][ T5545] pimreg: left allmulticast mode [ 138.086413][ T5553] netlink: 'syz.3.623': attribute type 27 has an invalid length. [ 138.189993][ T3855] Bluetooth: hci1: Frame reassembly failed (-84) [ 138.220850][ T28] audit: type=1400 audit(1779530091.388:827): avc: denied { map } for pid=5556 comm="syz.2.624" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 138.244937][ T5549] loop4: detected capacity change from 0 to 128 [ 138.258126][ T5553] vcan1: left allmulticast mode [ 138.263094][ T5553] vcan2: left allmulticast mode [ 138.313132][ T5555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.406158][ T5555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.459093][ T5557] loop2: detected capacity change from 0 to 1024 [ 138.472922][ T5555] veth1_macvtap: left promiscuous mode [ 138.481646][ T5555] veth1_macvtap: entered promiscuous mode [ 138.492096][ T5555] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 138.500605][ T5555] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 138.509003][ T5555] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 138.517982][ T5555] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 138.526652][ T5557] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 138.551569][ T5557] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.624: Invalid block bitmap block 0 in block_group 0 [ 138.565136][ T5557] loop2: lost filesystem error report for type 5 error -117 [ 138.565393][ T5557] Quota error (device loop2): write_blk: dquota write failed [ 138.575677][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 138.575708][ C1] EXT4-fs (loop2): initial error at time 1779530091: ext4_read_block_bitmap_nowait:483 [ 138.575813][ C1] EXT4-fs (loop2): last error at time 1779530091: ext4_read_block_bitmap_nowait:483 [ 138.617301][ T5557] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 138.658599][ T5557] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.624: Failed to acquire dquot type 0 [ 138.678384][ T5557] loop2: lost filesystem error report for type 5 error -117 [ 138.681564][ T5557] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.624: Freeing blocks not in datazone - block = 0, count = 4096 [ 138.704265][ T5557] loop2: lost filesystem error report for type 5 error -117 [ 138.705972][ T5557] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.624: Invalid inode bitmap blk 0 in block_group 0 [ 138.728709][ T3858] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-7 [ 138.728811][ T3858] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:29: Failed to release dquot type 0 [ 138.728838][ T3858] loop2: lost filesystem error report for type 5 error -117 [ 138.752193][ T5557] loop2: lost filesystem error report for type 5 error -117 [ 138.759958][ T5557] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 138.778890][ T5557] loop2: lost filesystem error report for type 5 error -117 [ 138.782650][ T5557] EXT4-fs (loop2): 1 orphan inode deleted [ 138.796247][ T5557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.072207][ T5583] loop3: detected capacity change from 0 to 1764 [ 139.452885][ T5584] loop4: detected capacity change from 0 to 1764 [ 139.845702][ T4612] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 140.844586][ T5465] Bluetooth: hci1: command 0x1003 tx timeout [ 140.858391][ T3722] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 141.168737][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.187408][ T28] audit: type=1400 audit(1779530094.348:828): avc: denied { nosuid_transition } for pid=5591 comm="syz.1.644" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 142.162366][ T28] audit: type=1400 audit(1779530094.348:829): avc: denied { transition } for pid=5591 comm="syz.1.644" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 142.192709][ T28] audit: type=1400 audit(1779530094.348:830): avc: denied { entrypoint } for pid=5591 comm="syz.1.644" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1163 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 142.445150][ T28] audit: type=1400 audit(1779530094.348:831): avc: denied { noatsecure } for pid=5591 comm="syz.1.644" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 142.550605][ T28] audit: type=1400 audit(1779530095.688:832): avc: denied { getopt } for pid=5598 comm="syz.2.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 142.578069][ T5599] loop0: detected capacity change from 0 to 128 [ 142.584374][ T28] audit: type=1400 audit(1779530095.688:833): avc: denied { setopt } for pid=5598 comm="syz.2.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 142.812389][ T5609] loop3: detected capacity change from 0 to 512 [ 142.868483][ T5609] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.638: inode has both inline data and extents flags [ 142.881942][ T5609] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 142.882194][ T5609] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.638: couldn't read orphan inode 15 (err -117) [ 142.891378][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 142.891395][ C1] EXT4-fs (loop3): initial error at time 1779530096: ext4_orphan_get:1397: inode 15 [ 142.891436][ C1] EXT4-fs (loop3): last error at time 1779530096: ext4_orphan_get:1397: inode 15 [ 142.892659][ T5595] loop1: detected capacity change from 0 to 4096 [ 142.927970][ T5609] loop3: lost filesystem error report for type 5 error -117 [ 142.928493][ T5609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.228344][ T3722] Bluetooth: hci0: sending frame failed (-49) [ 143.234494][ T3722] Bluetooth: hci0: unexpected event 0x05 length: 0 < 4 [ 143.241549][ T4612] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 143.248106][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 143.248121][ T28] audit: type=1400 audit(1779530096.418:839): avc: denied { write } for pid=5607 comm="syz.0.639" path="socket:[11588]" dev="sockfs" ino=11588 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 143.250152][ T5595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.382564][ T5595] SELinux: policydb magic number 0x6f5f626d does not match expected magic number 0xf97cff8c [ 143.420468][ T5595] SELinux: failed to load policy [ 143.479508][ T5622] loop2: detected capacity change from 0 to 512 [ 143.509040][ T5622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.542490][ T28] audit: type=1400 audit(1779530096.708:840): avc: denied { write } for pid=5628 comm="syz.0.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 143.549075][ T5622] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.579168][ T5622] capability: warning: `syz.2.642' uses deprecated v2 capabilities in a way that may be insecure [ 143.600147][ T28] audit: type=1400 audit(1779530096.748:841): avc: denied { create } for pid=5630 comm="syz.4.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 143.650593][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.653064][ T28] audit: type=1400 audit(1779530096.818:842): avc: denied { watch } for pid=5628 comm="syz.0.646" path="/147/file0" dev="tmpfs" ino=795 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 143.683105][ T28] audit: type=1400 audit(1779530096.848:843): avc: denied { write } for pid=5620 comm="syz.2.642" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 143.704641][ T28] audit: type=1400 audit(1779530096.848:844): avc: denied { write } for pid=5620 comm="syz.2.642" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 143.727265][ T28] audit: type=1400 audit(1779530096.848:845): avc: denied { rename } for pid=5620 comm="syz.2.642" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 143.750140][ T28] audit: type=1400 audit(1779530096.848:846): avc: denied { unlink } for pid=5620 comm="syz.2.642" name="file3" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 143.777263][ T28] audit: type=1400 audit(1779530096.888:847): avc: denied { write } for pid=5620 comm="syz.2.642" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 143.817330][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.970777][ T5640] netlink: 24 bytes leftover after parsing attributes in process `syz.2.649'. [ 144.060951][ T5641] netlink: 20 bytes leftover after parsing attributes in process `syz.4.648'. [ 144.143085][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.162479][ T5642] syz2: rxe_newlink: already configured on bond_slave_1 [ 144.462530][ T5640] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 144.518611][ T5648] netlink: 24 bytes leftover after parsing attributes in process `syz.0.651'. [ 144.528301][ T5648] netlink: 100 bytes leftover after parsing attributes in process `syz.0.651'. [ 144.547930][ T5648] netlink: 32 bytes leftover after parsing attributes in process `syz.0.651'. [ 144.692534][ T5654] loop0: detected capacity change from 0 to 256 [ 144.718647][ T5656] FAULT_INJECTION: forcing a failure. [ 144.718647][ T5656] name failslab, interval 1, probability 0, space 0, times 0 [ 144.738090][ T5654] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.753426][ T5656] CPU: 1 UID: 0 PID: 5656 Comm: syz.4.654 Tainted: G W syzkaller #0 PREEMPT(full) [ 144.753509][ T5656] Tainted: [W]=WARN [ 144.753586][ T5656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 144.753603][ T5656] Call Trace: [ 144.753611][ T5656] [ 144.753666][ T5656] __dump_stack+0x1d/0x30 [ 144.753699][ T5656] dump_stack_lvl+0x95/0xd0 [ 144.753726][ T5656] dump_stack+0x15/0x1b [ 144.753769][ T5656] should_fail_ex+0x263/0x280 [ 144.753808][ T5656] should_failslab+0x8c/0xb0 [ 144.753843][ T5656] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 144.753887][ T5656] ? __d_alloc+0x37/0x340 [ 144.753945][ T5656] __d_alloc+0x37/0x340 [ 144.753976][ T5656] ? mpol_shared_policy_init+0xce/0x510 [ 144.754057][ T5656] d_alloc_pseudo+0x1e/0x80 [ 144.754089][ T5656] alloc_file_pseudo+0x91/0x190 [ 144.754123][ T5656] __shmem_file_setup+0x226/0x260 [ 144.754182][ T5656] shmem_file_setup+0x3b/0x50 [ 144.754201][ T5656] memfd_alloc_file+0x4e/0x300 [ 144.754235][ T5656] __se_sys_memfd_create+0x2e1/0x3b0 [ 144.754273][ T5656] __x64_sys_memfd_create+0x31/0x40 [ 144.754368][ T5656] x64_sys_call+0x1f22/0x3020 [ 144.754401][ T5656] do_syscall_64+0x12c/0x3b0 [ 144.754432][ T5656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.754461][ T5656] RIP: 0033:0x7f4a2278ce59 [ 144.754560][ T5656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.754579][ T5656] RSP: 002b:00007f4a211ded58 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 144.754600][ T5656] RAX: ffffffffffffffda RBX: 000000000000059f RCX: 00007f4a2278ce59 [ 144.754636][ T5656] RDX: 00007f4a211deddc RSI: 0000000000000000 RDI: 00007f4a22822f4f [ 144.754653][ T5656] RBP: 0000200000000c40 R08: 00000000ffffffff R09: 0000000000000000 [ 144.754671][ T5656] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000001 [ 144.754686][ T5656] R13: 00007f4a211deddc R14: 00007f4a211dede0 R15: 00007ffd17227358 [ 144.754777][ T5656] [ 145.146064][ T5669] FAULT_INJECTION: forcing a failure. [ 145.146064][ T5669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.178495][ T5669] CPU: 0 UID: 0 PID: 5669 Comm: syz.2.659 Tainted: G W syzkaller #0 PREEMPT(full) [ 145.178576][ T5669] Tainted: [W]=WARN [ 145.178583][ T5669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 145.178596][ T5669] Call Trace: [ 145.178605][ T5669] [ 145.178614][ T5669] __dump_stack+0x1d/0x30 [ 145.178638][ T5669] dump_stack_lvl+0x95/0xd0 [ 145.178684][ T5669] dump_stack+0x15/0x1b [ 145.178708][ T5669] should_fail_ex+0x263/0x280 [ 145.178744][ T5669] should_fail+0xb/0x20 [ 145.178790][ T5669] should_fail_usercopy+0x1a/0x20 [ 145.178872][ T5669] _copy_to_user+0x20/0xa0 [ 145.178942][ T5669] simple_read_from_buffer+0xb5/0x130 [ 145.179065][ T5669] proc_fail_nth_read+0x10e/0x150 [ 145.179101][ T5669] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.179130][ T5669] vfs_read+0x1ab/0x7f0 [ 145.179184][ T5669] ksys_read+0xdc/0x1a0 [ 145.179223][ T5669] __x64_sys_read+0x40/0x50 [ 145.179254][ T5669] x64_sys_call+0x2886/0x3020 [ 145.179277][ T5669] do_syscall_64+0x12c/0x3b0 [ 145.179360][ T5669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.179384][ T5669] RIP: 0033:0x7ff2162bd68e [ 145.179400][ T5669] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 145.179421][ T5669] RSP: 002b:00007ff214d4efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 145.179454][ T5669] RAX: ffffffffffffffda RBX: 00007ff214d4f6c0 RCX: 00007ff2162bd68e [ 145.179473][ T5669] RDX: 000000000000000f RSI: 00007ff214d4f0a0 RDI: 0000000000000004 [ 145.179498][ T5669] RBP: 00007ff214d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 145.179516][ T5669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.179537][ T5669] R13: 00007ff216576038 R14: 00007ff216575fa0 R15: 00007ffc6daf10b8 [ 145.179557][ T5669] [ 145.407911][ T28] audit: type=1400 audit(1779530098.568:848): avc: denied { read } for pid=5671 comm="syz.2.660" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 145.477517][ T5670] loop4: detected capacity change from 0 to 4096 [ 145.500385][ T5670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.527833][ T5667] SELinux: policydb magic number 0x6f5f626d does not match expected magic number 0xf97cff8c [ 145.538058][ T5667] SELinux: failed to load policy [ 145.645161][ T5654] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 145.653315][ T5654] FAT-fs (loop0): Filesystem has been set read-only [ 145.660693][ T5654] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 145.672053][ T5654] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 145.680398][ T5654] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 145.735808][ T5679] netlink: 'syz.3.663': attribute type 3 has an invalid length. [ 145.755404][ T5679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.663'. [ 145.873924][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.900303][ T5684] loop3: detected capacity change from 0 to 4096 [ 145.910034][ T5684] EXT4-fs: Ignoring removed bh option [ 145.911238][ T5685] netlink: 'syz.2.664': attribute type 1 has an invalid length. [ 145.952431][ T5684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.968436][ T5685] netlink: 'syz.2.664': attribute type 3 has an invalid length. [ 145.990153][ T5685] netlink: 132 bytes leftover after parsing attributes in process `syz.2.664'. [ 146.346904][ T5716] loop4: detected capacity change from 0 to 1764 [ 147.687268][ T5722] netlink: 20 bytes leftover after parsing attributes in process `syz.0.670'. [ 148.351451][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.473274][ T28] kauditd_printk_skb: 291 callbacks suppressed [ 148.473290][ T28] audit: type=1326 audit(1779530101.638:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5681 comm="syz.2.664" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff2162fce59 code=0x7ffc0000 [ 148.624314][ T28] audit: type=1400 audit(1779530101.678:1141): avc: denied { map } for pid=5728 comm="syz.1.673" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 148.653249][ T5740] loop1: detected capacity change from 0 to 2048 [ 148.764633][ T28] audit: type=1400 audit(1779530101.678:1142): avc: denied { read write } for pid=5728 comm="syz.1.673" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 149.254146][ T28] audit: type=1400 audit(1779530101.848:1143): avc: denied { remount } for pid=5737 comm="syz.1.676" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 149.452712][ T5740] loop1: detected capacity change from 0 to 512 [ 149.484469][ T5740] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 149.543734][ T28] audit: type=1400 audit(1779530102.068:1144): avc: denied { create } for pid=5743 comm="syz.2.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 149.760855][ T28] audit: type=1400 audit(1779530102.068:1145): avc: denied { getopt } for pid=5743 comm="syz.2.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 149.825745][ T28] audit: type=1400 audit(1779530102.588:1146): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 149.879823][ T5740] EXT4-fs (loop1): 1 orphan inode deleted [ 149.885700][ T5740] EXT4-fs (loop1): 1 truncate cleaned up [ 149.893514][ T5740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.974545][ T28] audit: type=1400 audit(1779530102.608:1147): avc: denied { ioctl } for pid=5746 comm="syz.3.672" path="socket:[11757]" dev="sockfs" ino=11757 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 150.068331][ T28] audit: type=1400 audit(1779530102.618:1148): avc: denied { write } for pid=5737 comm="syz.1.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 150.073518][ T5744] loop2: detected capacity change from 0 to 4096 [ 150.129853][ T28] audit: type=1400 audit(1779530103.078:1149): avc: denied { quotaon } for pid=5737 comm="syz.1.676" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 150.159042][ T5761] loop0: detected capacity change from 0 to 4096 [ 150.485686][ T5761] EXT4-fs: Ignoring removed bh option [ 150.490748][ T5744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.570316][ T5765] loop3: detected capacity change from 0 to 1024 [ 150.579909][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.582383][ T5744] SELinux: policydb magic number 0x6f5f626d does not match expected magic number 0xf97cff8c [ 150.601059][ T5765] EXT4-fs: inline encryption not supported [ 150.601083][ T5765] EXT4-fs: Ignoring removed oldalloc option [ 150.609006][ T5765] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 150.671819][ T5744] SELinux: failed to load policy [ 150.769318][ T5761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.871808][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.031910][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.066871][ T5770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.683'. [ 151.176060][ T5784] FAULT_INJECTION: forcing a failure. [ 151.176060][ T5784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.207930][ T5784] CPU: 1 UID: 0 PID: 5784 Comm: syz.2.690 Tainted: G W syzkaller #0 PREEMPT(full) [ 151.207977][ T5784] Tainted: [W]=WARN [ 151.207986][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 151.208002][ T5784] Call Trace: [ 151.208011][ T5784] [ 151.208021][ T5784] __dump_stack+0x1d/0x30 [ 151.208109][ T5784] dump_stack_lvl+0x95/0xd0 [ 151.208141][ T5784] dump_stack+0x15/0x1b [ 151.208165][ T5784] should_fail_ex+0x263/0x280 [ 151.208198][ T5784] should_fail+0xb/0x20 [ 151.208222][ T5784] should_fail_usercopy+0x1a/0x20 [ 151.208325][ T5784] _copy_from_user+0x1c/0xb0 [ 151.208358][ T5784] ___sys_sendmsg+0xc1/0x1e0 [ 151.208399][ T5784] __x64_sys_sendmsg+0xd4/0x160 [ 151.208437][ T5784] x64_sys_call+0x194c/0x3020 [ 151.208465][ T5784] do_syscall_64+0x12c/0x3b0 [ 151.208497][ T5784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.208568][ T5784] RIP: 0033:0x7ff2162fce59 [ 151.208585][ T5784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.208608][ T5784] RSP: 002b:00007ff214d4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.208632][ T5784] RAX: ffffffffffffffda RBX: 00007ff216575fa0 RCX: 00007ff2162fce59 [ 151.208649][ T5784] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 151.208744][ T5784] RBP: 00007ff214d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 151.208756][ T5784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.208768][ T5784] R13: 00007ff216576038 R14: 00007ff216575fa0 R15: 00007ffc6daf10b8 [ 151.208790][ T5784] [ 151.230485][ T5786] loop2: detected capacity change from 0 to 764 [ 151.465343][ T5782] netlink: 20 bytes leftover after parsing attributes in process `syz.3.685'. [ 152.034668][ T5806] loop4: detected capacity change from 0 to 4096 [ 152.061507][ T5806] EXT4-fs: Ignoring removed bh option [ 152.126867][ T5806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.261383][ T5813] loop1: detected capacity change from 0 to 1764 [ 153.094449][ T5811] netlink: 20 bytes leftover after parsing attributes in process `syz.0.696'. [ 153.694691][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.709270][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 153.709288][ T28] audit: type=1400 audit(1779530106.838:1173): avc: denied { create } for pid=5819 comm="syz.3.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 153.813784][ T28] audit: type=1400 audit(1779530106.848:1174): avc: denied { bind } for pid=5819 comm="syz.3.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 153.897271][ T28] audit: type=1400 audit(1779530106.848:1175): avc: denied { connect } for pid=5819 comm="syz.3.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 153.971690][ T28] audit: type=1400 audit(1779530106.848:1176): avc: denied { write } for pid=5819 comm="syz.3.700" path="socket:[11945]" dev="sockfs" ino=11945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 154.004916][ T5839] loop2: detected capacity change from 0 to 512 [ 154.050914][ T5839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.074617][ T28] audit: type=1400 audit(1779530106.928:1177): avc: denied { read write } for pid=5827 comm="syz.2.702" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 154.103557][ T5839] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.155356][ T28] audit: type=1400 audit(1779530106.928:1178): avc: denied { open } for pid=5827 comm="syz.2.702" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 154.198848][ T28] audit: type=1400 audit(1779530107.298:1179): avc: denied { write } for pid=5838 comm="syz.2.706" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.250400][ T28] audit: type=1400 audit(1779530107.298:1180): avc: denied { write } for pid=5838 comm="syz.2.706" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.293099][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.332121][ T5846] netlink: 68 bytes leftover after parsing attributes in process `syz.4.701'. [ 154.375953][ T28] audit: type=1400 audit(1779530107.298:1181): avc: denied { remove_name } for pid=5838 comm="syz.2.706" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.529464][ T28] audit: type=1400 audit(1779530107.298:1182): avc: denied { rename } for pid=5838 comm="syz.2.706" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 154.825951][ T5860] loop1: detected capacity change from 0 to 1764 [ 155.367735][ T5861] loop4: detected capacity change from 0 to 1764 [ 158.517557][ T5868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.715'. [ 158.754174][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 158.754263][ T28] audit: type=1400 audit(1779530111.918:1195): avc: denied { write } for pid=5876 comm="syz.3.717" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 158.801580][ T5878] loop1: detected capacity change from 0 to 1764 [ 159.111340][ T28] audit: type=1400 audit(1779530112.228:1196): avc: denied { ioctl } for pid=5881 comm="syz.0.718" path="socket:[12060]" dev="sockfs" ino=12060 ioctlcmd=0x9424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 159.165612][ T5884] macvlan0: entered promiscuous mode [ 159.222897][ T5885] macvlan0: entered allmulticast mode [ 159.305394][ T5884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.719'. [ 159.528909][ T28] audit: type=1400 audit(1779530112.328:1197): avc: denied { ioctl } for pid=5883 comm="syz.4.719" path="socket:[12067]" dev="sockfs" ino=12067 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 159.562126][ T5885] veth1_vlan: entered allmulticast mode [ 159.606587][ T5884] veth1_vlan: left allmulticast mode [ 159.682160][ T5884] macvlan0 (unregistering): left promiscuous mode [ 159.750445][ T5884] macvlan0 (unregistering): left allmulticast mode [ 159.791522][ T28] audit: type=1400 audit(1779530112.468:1198): avc: denied { connect } for pid=5883 comm="syz.4.719" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 159.922206][ T28] audit: type=1326 audit(1779530112.798:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5888 comm="syz.3.721" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d0e62ce59 code=0x7ffc0000 [ 160.040770][ T5896] loop3: detected capacity change from 0 to 164 [ 160.047263][ T28] audit: type=1326 audit(1779530112.798:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5888 comm="syz.3.721" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d0e62ce59 code=0x7ffc0000 [ 160.161120][ T5896] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 160.162522][ T28] audit: type=1326 audit(1779530112.798:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5888 comm="syz.3.721" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d0e62ce59 code=0x7ffc0000 [ 160.712836][ T5906] loop3: detected capacity change from 0 to 1764 [ 161.150628][ T28] audit: type=1326 audit(1779530112.808:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5888 comm="syz.3.721" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d0e62ce59 code=0x7ffc0000 [ 161.176087][ T28] audit: type=1326 audit(1779530112.808:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5888 comm="syz.3.721" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f4d0e62ce59 code=0x7ffc0000 [ 161.709112][ T5913] loop1: detected capacity change from 0 to 2048 [ 162.153278][ T28] audit: type=1326 audit(1779530112.868:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5888 comm="syz.3.721" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d0e62ce59 code=0x7ffc0000 [ 164.664377][ T5913] veth3: entered promiscuous mode [ 164.970891][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 164.970906][ T28] audit: type=1400 audit(1779530118.138:1237): avc: denied { bind } for pid=5933 comm="syz.3.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 165.228711][ T28] audit: type=1400 audit(1779530118.168:1238): avc: denied { mount } for pid=5933 comm="syz.3.733" name="/" dev="rpc_pipefs" ino=12723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 165.612783][ T5941] netlink: 20 bytes leftover after parsing attributes in process `syz.0.734'. [ 165.691418][ T5943] loop1: detected capacity change from 0 to 164 [ 166.358767][ T5959] netlink: 32 bytes leftover after parsing attributes in process `syz.3.733'. [ 166.436436][ T5961] loop2: detected capacity change from 0 to 1764 [ 167.351152][ T28] audit: type=1400 audit(1779530120.518:1239): avc: denied { create } for pid=5967 comm="syz.4.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.501270][ T28] audit: type=1400 audit(1779530120.538:1240): avc: denied { bind } for pid=5967 comm="syz.4.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 169.522170][ T28] audit: type=1400 audit(1779530120.538:1241): avc: denied { write } for pid=5967 comm="syz.4.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 169.725459][ T5976] loop4: detected capacity change from 0 to 1764 [ 170.074969][ T5985] netlink: 28 bytes leftover after parsing attributes in process `syz.0.748'. [ 170.326394][ T5993] loop4: detected capacity change from 0 to 512 [ 170.448741][ T28] audit: type=1400 audit(1779530123.558:1242): avc: denied { name_bind } for pid=6000 comm="syz.2.754" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 170.680970][ T28] audit: type=1400 audit(1779530123.558:1243): avc: denied { node_bind } for pid=6000 comm="syz.2.754" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 170.769862][ T6010] loop2: detected capacity change from 0 to 1764 [ 170.857202][ T28] audit: type=1400 audit(1779530124.018:1244): avc: denied { write } for pid=6011 comm="syz.4.757" name="anycast6" dev="proc" ino=4026532817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 171.940384][ T6021] loop1: detected capacity change from 0 to 128 [ 171.993229][ T28] audit: type=1400 audit(1779530125.098:1245): avc: denied { create } for pid=6019 comm="syz.1.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 172.016958][ T28] audit: type=1400 audit(1779530125.098:1246): avc: denied { getopt } for pid=6019 comm="syz.1.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 172.038431][ T28] audit: type=1400 audit(1779530125.108:1247): avc: denied { ioctl } for pid=6019 comm="syz.1.759" path="socket:[12232]" dev="sockfs" ino=12232 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 172.191875][ T6016] netlink: 20 bytes leftover after parsing attributes in process `syz.3.758'. [ 172.246839][ T28] audit: type=1400 audit(1779530125.408:1248): avc: denied { mount } for pid=6019 comm="syz.1.759" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 172.446706][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.762'. [ 172.476162][ T28] audit: type=1400 audit(1779530125.638:1249): avc: denied { read write } for pid=6030 comm="syz.3.762" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 172.541122][ T6031] syz.3.762: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 172.583655][ T28] audit: type=1400 audit(1779530125.668:1250): avc: denied { open } for pid=6030 comm="syz.3.762" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 172.631752][ T6031] CPU: 0 UID: 0 PID: 6031 Comm: syz.3.762 Tainted: G W syzkaller #0 PREEMPT(full) [ 172.631831][ T6031] Tainted: [W]=WARN [ 172.631838][ T6031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 172.631851][ T6031] Call Trace: [ 172.631857][ T6031] [ 172.631865][ T6031] __dump_stack+0x1d/0x30 [ 172.631908][ T6031] dump_stack_lvl+0x95/0xd0 [ 172.631929][ T6031] dump_stack+0x15/0x1b [ 172.631947][ T6031] warn_alloc+0x145/0x1c0 [ 172.631973][ T6031] __vmalloc_node_range_noprof+0xa5/0x11c0 [ 172.632016][ T6031] ? avc_lookup+0x14/0x1a0 [ 172.632052][ T6031] ? __sanitizer_cov_trace_pc+0x54/0x70 [ 172.632087][ T6031] ? __rcu_read_unlock+0x4e/0x70 [ 172.632111][ T6031] ? avc_has_perm_noaudit+0xab/0x130 [ 172.632227][ T6031] vmalloc_user_noprof+0x7d/0xb0 [ 172.632286][ T6031] ? xskq_create+0x80/0xe0 [ 172.632323][ T6031] xskq_create+0x80/0xe0 [ 172.632500][ T6031] xsk_init_queue+0x70/0xb0 [ 172.632533][ T6031] xsk_setsockopt+0x477/0x640 [ 172.632571][ T6031] ? __pfx_xsk_setsockopt+0x10/0x10 [ 172.632650][ T6031] __sys_setsockopt+0x184/0x200 [ 172.632682][ T6031] __x64_sys_setsockopt+0x64/0x80 [ 172.632733][ T6031] x64_sys_call+0x2327/0x3020 [ 172.632816][ T6031] do_syscall_64+0x12c/0x3b0 [ 172.632857][ T6031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.632886][ T6031] RIP: 0033:0x7f4d0e62ce59 [ 172.632933][ T6031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.632951][ T6031] RSP: 002b:00007f4d0d07f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 172.633039][ T6031] RAX: ffffffffffffffda RBX: 00007f4d0e8a5fa0 RCX: 00007f4d0e62ce59 [ 172.633053][ T6031] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009 [ 172.633066][ T6031] RBP: 00007f4d0e6c2d6f R08: 0000000000000004 R09: 0000000000000000 [ 172.633082][ T6031] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 172.633156][ T6031] R13: 00007f4d0e8a6038 R14: 00007f4d0e8a5fa0 R15: 00007ffd78ae1ae8 [ 172.633175][ T6031] [ 172.843314][ T6031] Mem-Info: [ 172.850925][ T6031] active_anon:10914 inactive_anon:4 isolated_anon:0 [ 172.850925][ T6031] active_file:21531 inactive_file:2544 isolated_file:0 [ 172.850925][ T6031] unevictable:0 dirty:137 writeback:0 [ 172.850925][ T6031] slab_reclaimable:3328 slab_unreclaimable:19514 [ 172.850925][ T6031] mapped:32396 shmem:3273 pagetables:5186 [ 172.850925][ T6031] sec_pagetables:0 bounce:0 [ 172.850925][ T6031] kernel_misc_reclaimable:0 [ 172.850925][ T6031] free:1869843 free_pcp:7817 free_cma:0 [ 172.901303][ T28] audit: type=1400 audit(1779530125.668:1251): avc: denied { create } for pid=6030 comm="syz.3.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 172.931503][ T6031] Node 0 active_anon:44236kB inactive_anon:16kB active_file:86124kB inactive_file:10176kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129584kB dirty:548kB writeback:0kB shmem:13092kB kernel_stack:3808kB pagetables:20744kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 172.968464][ T6031] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 173.014307][ T6031] lowmem_reserve[]: 0 2878 7857 7857 [ 173.020274][ T6031] Node 0 DMA32 free:2944384kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948012kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:104kB free_cma:0kB [ 173.059333][ T6031] lowmem_reserve[]: 0 0 4978 4978 [ 173.064715][ T6031] Node 0 Normal free:4527820kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45048kB inactive_anon:16kB active_file:86124kB inactive_file:10176kB unevictable:0kB writepending:548kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:26544kB local_pcp:20708kB free_cma:0kB [ 173.102015][ T6031] lowmem_reserve[]: 0 0 0 0 [ 173.107060][ T6031] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 173.155408][ T6031] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 1*16kB (M) 3*32kB (M) 2*64kB (M) 3*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944384kB [ 173.248000][ T6031] Node 0 Normal: 1666*4kB (UM) 1116*8kB (UME) 719*16kB (UM) 495*32kB (UME) 245*64kB (UME) 81*128kB (UME) 34*256kB (UME) 13*512kB (UM) 16*1024kB (UM) 8*2048kB (UME) 1079*4096kB (UM) = 4536696kB [ 173.268047][ T6031] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 173.309570][ T6031] 25578 total pagecache pages [ 173.314404][ T6031] 4 pages in swap cache [ 173.320039][ T6031] Free swap = 124980kB [ 173.324234][ T6031] Total swap = 124996kB [ 173.328788][ T6031] 2097051 pages RAM [ 173.332753][ T6031] 0 pages HighMem/MovableOnly [ 173.339423][ T6031] 81649 pages reserved [ 173.360167][ T3860] Bluetooth: hci1: Frame reassembly failed (-84) [ 173.367651][ T5465] Bluetooth: hci1: unexpected event 0x05 length: 0 < 4 [ 174.071434][ T6056] loop4: detected capacity change from 0 to 2048 [ 174.150504][ T4612] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 174.234890][ T6061] syzkaller0: entered promiscuous mode [ 174.241200][ T6061] syzkaller0: entered allmulticast mode [ 175.022137][ T6068] loop3: detected capacity change from 0 to 1764 [ 175.427245][ T5465] Bluetooth: hci1: command 0x1003 tx timeout [ 175.433367][ T3722] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 175.712776][ T6079] loop0: detected capacity change from 0 to 512 [ 175.769365][ T6070] loop4: detected capacity change from 0 to 128 [ 175.782259][ T6079] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.777: inode has both inline data and extents flags [ 175.795349][ T6079] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 175.795881][ T6079] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.777: couldn't read orphan inode 15 (err -117) [ 175.805687][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 175.805706][ C1] EXT4-fs (loop0): initial error at time 1779530128: ext4_orphan_get:1397: inode 15 [ 175.805745][ C1] EXT4-fs (loop0): last error at time 1779530128: ext4_orphan_get:1397: inode 15 [ 176.181007][ T6079] loop0: lost filesystem error report for type 5 error -117 [ 176.181726][ T6079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.223102][ T6085] loop1: detected capacity change from 0 to 4096 [ 176.266204][ T6085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.291752][ T6089] loop4: detected capacity change from 0 to 512 [ 176.309164][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 176.309178][ T28] audit: type=1400 audit(1779530129.478:1254): avc: denied { write } for pid=6078 comm="syz.0.777" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 176.364506][ T6089] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.779: inode has both inline data and extents flags [ 176.409475][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.427076][ T28] audit: type=1400 audit(1779530129.508:1255): avc: denied { write open } for pid=6078 comm="syz.0.777" path="/175/file1/file0" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 176.453945][ T6089] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 176.454193][ T6089] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.779: couldn't read orphan inode 15 (err -117) [ 176.463383][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 176.463405][ C1] EXT4-fs (loop4): initial error at time 1779530129: ext4_orphan_get:1397: inode 15 [ 176.463437][ C1] EXT4-fs (loop4): last error at time 1779530129: ext4_orphan_get:1397: inode 15 [ 176.541959][ T6093] SELinux: Context system_u:object_r:crypt_device_t:s0 is not valid (left unmapped). [ 176.570737][ T28] audit: type=1400 audit(1779530129.508:1256): avc: denied { setattr } for pid=6078 comm="syz.0.777" name="file0" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 176.620744][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.630735][ T6089] loop4: lost filesystem error report for type 5 error -117 [ 176.631330][ T6089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.686352][ T28] audit: type=1400 audit(1779530129.558:1257): avc: denied { write } for pid=6076 comm="syz.1.776" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 176.732907][ T3858] Bluetooth: hci0: Frame reassembly failed (-84) [ 176.749459][ T28] audit: type=1400 audit(1779530129.558:1258): avc: denied { read write } for pid=6076 comm="syz.1.776" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 176.889511][ T6099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.781'. [ 177.007786][ T28] audit: type=1400 audit(1779530129.558:1259): avc: denied { open } for pid=6076 comm="syz.1.776" path="/142/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 177.038258][ T6099] loop1: detected capacity change from 0 to 4096 [ 177.058114][ T28] audit: type=1400 audit(1779530129.698:1260): avc: denied { nlmsg_read } for pid=6092 comm="syz.0.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 177.080596][ T28] audit: type=1400 audit(1779530129.708:1261): avc: denied { create } for pid=6092 comm="syz.0.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 177.100704][ T6099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.140622][ T6099] SELinux: policydb magic number 0x6f5f626d does not match expected magic number 0xf97cff8c [ 177.162176][ T6099] SELinux: failed to load policy [ 177.174158][ T28] audit: type=1400 audit(1779530129.708:1262): avc: denied { mac_admin } for pid=6092 comm="syz.0.780" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 177.195966][ T28] audit: type=1400 audit(1779530129.768:1263): avc: denied { relabelto } for pid=6092 comm="syz.0.780" name="ptmx" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:crypt_device_t:s0" [ 177.327058][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.391968][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.492939][ T3861] Bluetooth: hci1: Frame reassembly failed (-84) [ 177.500966][ T4612] Bluetooth: hci1: unexpected event 0x05 length: 0 < 4 [ 177.502323][ T3861] Bluetooth: hci1: Frame reassembly failed (-84) [ 177.534618][ T6107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.548564][ T6107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.116785][ T6115] loop1: detected capacity change from 0 to 2048 [ 178.807810][ T3722] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 178.854686][ T6121] loop3: detected capacity change from 0 to 1764 [ 179.577760][ T5465] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 180.037605][ T6130] loop0: detected capacity change from 0 to 256 [ 180.044208][ T6130] msdos: Bad value for 'uid' [ 180.049808][ T6123] loop1: detected capacity change from 0 to 128 [ 180.056636][ T6130] msdos: Bad value for 'uid' [ 180.699854][ T6131] loop2: detected capacity change from 0 to 512 [ 180.729398][ T6131] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 180.794105][ T6131] EXT4-fs (loop2): 1 truncate cleaned up [ 180.815859][ T6131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.774964][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.033850][ T6159] loop3: detected capacity change from 0 to 1764 [ 182.502659][ T6161] loop1: detected capacity change from 0 to 1764 [ 184.732917][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 184.732932][ T28] audit: type=1400 audit(1779530137.898:1284): avc: denied { write } for pid=6166 comm="syz.2.802" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 184.774928][ T6167] loop2: detected capacity change from 0 to 512 [ 184.784930][ T6167] EXT4-fs: Ignoring removed nomblk_io_submit option [ 184.906439][ T6167] EXT4-fs: Ignoring removed nomblk_io_submit option [ 184.909070][ T28] audit: type=1400 audit(1779530137.938:1285): avc: denied { setopt } for pid=6166 comm="syz.2.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 185.021136][ T6167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.061849][ T6167] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 185.126504][ T6167] netlink: 'syz.2.802': attribute type 4 has an invalid length. [ 185.145919][ T28] audit: type=1400 audit(1779530138.308:1286): avc: denied { read } for pid=6166 comm="syz.2.802" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 185.188288][ T6180] netlink: 168 bytes leftover after parsing attributes in process `syz.4.807'. [ 185.196013][ T3858] Bluetooth: hci0: Frame reassembly failed (-84) [ 185.203828][ T6180] tc_dump_action: action bad kind [ 185.212536][ T6169] loop1: detected capacity change from 0 to 128 [ 185.305759][ T28] audit: type=1400 audit(1779530138.468:1287): avc: denied { append } for pid=6176 comm="syz.0.805" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 185.340451][ T6185] netlink: 'syz.0.805': attribute type 2 has an invalid length. [ 185.371997][ T5465] Bluetooth: hci0: unexpected event 0x05 length: 0 < 4 [ 185.391373][ T28] audit: type=1400 audit(1779530138.558:1288): avc: denied { create } for pid=6176 comm="syz.0.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 185.414074][ T6167] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.434646][ T3395] IPVS: starting estimator thread 0... [ 185.462738][ T28] audit: type=1400 audit(1779530138.628:1289): avc: denied { bind } for pid=6189 comm="syz.1.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 185.485647][ T28] audit: type=1400 audit(1779530138.648:1290): avc: denied { connect } for pid=6189 comm="syz.1.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 185.527440][ T6192] netlink: 20 bytes leftover after parsing attributes in process `syz.4.808'. [ 185.711603][ T6190] loop1: detected capacity change from 0 to 512 [ 185.815099][ T6190] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.840853][ T6190] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.883549][ T28] audit: type=1400 audit(1779530139.048:1291): avc: denied { write } for pid=6189 comm="syz.1.809" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 185.936167][ T28] audit: type=1400 audit(1779530139.098:1292): avc: denied { lock } for pid=6189 comm="syz.1.809" path="/149/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 186.017505][ T6191] IPVS: using max 1968 ests per chain, 98400 per kthread [ 186.283196][ T6203] loop2: detected capacity change from 0 to 1764 [ 187.192328][ T6210] loop4: detected capacity change from 0 to 1764 [ 187.208012][ T4612] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 188.182889][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.002379][ T28] audit: type=1400 audit(1779530142.168:1293): avc: denied { mount } for pid=6212 comm="syz.1.814" name="/" dev="configfs" ino=2064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 189.517732][ T6217] loop2: detected capacity change from 0 to 1764 [ 189.761834][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 189.761849][ T28] audit: type=1326 audit(1779530142.928:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6212 comm="syz.1.814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e610fce59 code=0x7ffc0000 [ 190.056714][ T28] audit: type=1326 audit(1779530142.958:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6212 comm="syz.1.814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e610fce59 code=0x7ffc0000 [ 190.132337][ T28] audit: type=1326 audit(1779530142.738:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6212 comm="syz.1.814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7e610fce59 code=0x7ffc0000 [ 190.165048][ T28] audit: type=1326 audit(1779530142.968:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6212 comm="syz.1.814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f7e610fce59 code=0x7ffc0000 [ 190.282177][ T28] audit: type=1326 audit(1779530142.968:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6212 comm="syz.1.814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e610fce59 code=0x7ffc0000 [ 190.381468][ T28] audit: type=1326 audit(1779530142.968:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6212 comm="syz.1.814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e610fce59 code=0x7ffc0000 [ 190.483543][ T28] audit: type=1326 audit(1779530142.968:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6212 comm="syz.1.814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e610fce59 code=0x7ffc0000 [ 190.581124][ T28] audit: type=1326 audit(1779530142.968:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6212 comm="syz.1.814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e610fce59 code=0x7ffc0000 [ 190.685600][ T28] audit: type=1326 audit(1779530142.968:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6212 comm="syz.1.814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7e610fce59 code=0x7ffc0000 [ 190.773874][ T28] audit: type=1326 audit(1779530142.968:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6212 comm="syz.1.814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e610fce59 code=0x7ffc0000 [ 191.189645][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.822'. [ 191.290360][ T3082] IPVS: starting estimator thread 0... [ 191.302870][ T6241] loop0: detected capacity change from 0 to 1024 [ 191.310491][ T6241] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 191.345363][ T6244] netlink: 96 bytes leftover after parsing attributes in process `syz.1.824'. [ 191.389489][ T3722] Bluetooth: hci1: unexpected event 0x05 length: 0 < 4 [ 191.457151][ T6241] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.471418][ T6254] netlink: 20 bytes leftover after parsing attributes in process `syz.2.823'. [ 191.508252][ T6242] IPVS: using max 2304 ests per chain, 115200 per kthread [ 191.552335][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.372043][ T3722] Bluetooth: hci0: command 0x1003 tx timeout [ 192.389474][ T5465] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 192.630320][ T6259] netlink: 20 bytes leftover after parsing attributes in process `syz.1.827'. [ 192.630718][ T6263] dummy0: mtu less than device minimum [ 192.648158][ T6263] netlink: 220 bytes leftover after parsing attributes in process `syz.3.829'. [ 192.658305][ T6263] tc_dump_action: action bad kind [ 192.863851][ T6270] loop0: detected capacity change from 0 to 2048 [ 193.447216][ T4612] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 194.034452][ T6274] loop2: detected capacity change from 0 to 1764 [ 195.391839][ T28] kauditd_printk_skb: 156 callbacks suppressed [ 195.391858][ T28] audit: type=1400 audit(1779530148.558:1467): avc: denied { write } for pid=6286 comm="syz.4.836" name="ptmx" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:crypt_device_t:s0" [ 195.430975][ T6288] loop3: detected capacity change from 0 to 512 [ 195.465715][ T6287] loop4: detected capacity change from 0 to 512 [ 195.481056][ T6288] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 195.523186][ T6288] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 195.649452][ T6288] EXT4-fs (loop3): orphan cleanup on readonly fs [ 195.681945][ T6288] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 195.703789][ T6287] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 195.712259][ T6287] System zones: 1-12 [ 195.717030][ T6288] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 195.724651][ T6287] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.836: corrupted in-inode xattr: e_value size too large [ 195.728017][ T6288] EXT4-fs (loop3): 1 orphan inode deleted [ 195.745816][ T6288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 195.753699][ T6287] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 195.760523][ T6287] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.836: couldn't read orphan inode 15 (err -117) [ 195.769862][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 195.769910][ C0] EXT4-fs (loop4): initial error at time 1779530148: ext4_iget_extra_inode:5128: inode 15 [ 195.770009][ C0] EXT4-fs (loop4): last error at time 1779530148: ext4_iget_extra_inode:5128: inode 15 [ 195.817912][ T6287] loop4: lost filesystem error report for type 5 error -117 [ 195.819540][ T6287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.849856][ T28] audit: type=1400 audit(1779530149.018:1468): avc: denied { write } for pid=6286 comm="syz.4.836" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 195.879478][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.896786][ T28] audit: type=1400 audit(1779530149.058:1469): avc: denied { ioctl } for pid=6286 comm="syz.4.836" path="socket:[13290]" dev="sockfs" ino=13290 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 195.923166][ T6287] syzkaller1: entered allmulticast mode [ 195.979627][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.138230][ T28] audit: type=1400 audit(1779530149.308:1470): avc: denied { connect } for pid=6308 comm="syz.3.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 196.167641][ T6314] loop0: detected capacity change from 0 to 512 [ 196.239658][ T28] audit: type=1400 audit(1779530149.408:1471): avc: denied { watch } for pid=6315 comm="syz.1.843" path="/157" dev="tmpfs" ino=852 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 196.284596][ T6316] loop1: detected capacity change from 0 to 4096 [ 196.293974][ T6316] EXT4-fs: Ignoring removed mblk_io_submit option [ 196.313265][ T6316] EXT4-fs: test_dummy_encryption option not supported [ 196.475978][ T6318] SELinux: policydb version 1182882067 does not match my version range 15-35 [ 196.495961][ T6318] SELinux: failed to load policy [ 196.539444][ T6317] 8021q: adding VLAN 0 to HW filter on device eth0 [ 196.561403][ T6317] 8021q: adding VLAN 0 to HW filter on device eth1 [ 196.596321][ T6317] 8021q: adding VLAN 0 to HW filter on device eth2 [ 196.614419][ T6317] 8021q: adding VLAN 0 to HW filter on device eth3 [ 196.635389][ T6317] veth3: left promiscuous mode [ 196.657837][ T3381] syz0: Port: 1 Link ACTIVE [ 196.796752][ T28] audit: type=1326 audit(1779530149.958:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6325 comm="syz.0.845" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64f56ce59 code=0x7ffc0000 [ 196.843663][ T28] audit: type=1326 audit(1779530149.988:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6325 comm="syz.0.845" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64f56ce59 code=0x7ffc0000 [ 196.896712][ T28] audit: type=1326 audit(1779530149.988:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6325 comm="syz.0.845" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64f56ce59 code=0x7ffc0000 [ 196.982754][ T3860] Bluetooth: hci1: Frame reassembly failed (-84) [ 196.992478][ T28] audit: type=1326 audit(1779530149.988:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6325 comm="syz.0.845" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff64f56ce59 code=0x7ffc0000 [ 196.992774][ T3722] Bluetooth: hci1: unexpected event 0x05 length: 0 < 4 [ 197.026102][ T28] audit: type=1326 audit(1779530149.988:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6325 comm="syz.0.845" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64f56ce59 code=0x7ffc0000 [ 197.366610][ T6339] loop1: detected capacity change from 0 to 256 [ 197.418419][ T6347] loop4: detected capacity change from 0 to 1764 [ 197.567889][ T6348] netlink: 'syz.0.853': attribute type 298 has an invalid length. [ 197.788334][ T6349] netlink: 68 bytes leftover after parsing attributes in process `syz.1.851'. [ 197.823675][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.851'. [ 197.889336][ T6349] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 197.898925][ T6349] FAT-fs (loop1): Filesystem has been set read-only [ 198.020328][ T5465] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 198.275369][ T6357] FAULT_INJECTION: forcing a failure. [ 198.275369][ T6357] name failslab, interval 1, probability 0, space 0, times 0 [ 198.293746][ T6357] CPU: 0 UID: 0 PID: 6357 Comm: syz.0.857 Tainted: G W syzkaller #0 PREEMPT(full) [ 198.293778][ T6357] Tainted: [W]=WARN [ 198.293787][ T6357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 198.293803][ T6357] Call Trace: [ 198.293811][ T6357] [ 198.293852][ T6357] __dump_stack+0x1d/0x30 [ 198.293883][ T6357] dump_stack_lvl+0x95/0xd0 [ 198.293909][ T6357] dump_stack+0x15/0x1b [ 198.293933][ T6357] should_fail_ex+0x263/0x280 [ 198.293965][ T6357] should_failslab+0x8c/0xb0 [ 198.294083][ T6357] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 198.294116][ T6357] ? __alloc_skb+0x2d6/0x690 [ 198.294142][ T6357] __alloc_skb+0x2d6/0x690 [ 198.294171][ T6357] ? __alloc_skb+0x200/0x690 [ 198.294197][ T6357] netlink_dump+0x10d/0x870 [ 198.294229][ T6357] ? __rcu_read_unlock+0x4e/0x70 [ 198.294334][ T6357] __netlink_dump_start+0x43e/0x520 [ 198.294374][ T6357] ? __pfx_tc_dump_action+0x10/0x10 [ 198.294399][ T6357] rtnetlink_rcv_msg+0x59f/0x720 [ 198.294466][ T6357] ? __pfx_tc_dump_action+0x10/0x10 [ 198.294493][ T6357] ? __pfx_rtnl_dumpit+0x10/0x10 [ 198.294533][ T6357] ? __pfx_tc_dump_action+0x10/0x10 [ 198.294556][ T6357] netlink_rcv_skb+0x123/0x220 [ 198.294593][ T6357] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 198.294627][ T6357] rtnetlink_rcv+0x1c/0x30 [ 198.294704][ T6357] netlink_unicast+0x5a8/0x680 [ 198.294732][ T6357] netlink_sendmsg+0x5c8/0x6f0 [ 198.294805][ T6357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.294896][ T6357] ____sys_sendmsg+0x563/0x5b0 [ 198.295012][ T6357] ___sys_sendmsg+0x195/0x1e0 [ 198.295078][ T6357] __x64_sys_sendmsg+0xd4/0x160 [ 198.295115][ T6357] x64_sys_call+0x194c/0x3020 [ 198.295184][ T6357] do_syscall_64+0x12c/0x3b0 [ 198.295216][ T6357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.295258][ T6357] RIP: 0033:0x7ff64f56ce59 [ 198.295273][ T6357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.295292][ T6357] RSP: 002b:00007ff64dfbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.295318][ T6357] RAX: ffffffffffffffda RBX: 00007ff64f7e5fa0 RCX: 00007ff64f56ce59 [ 198.295336][ T6357] RDX: 0000000010000084 RSI: 00002000000002c0 RDI: 0000000000000003 [ 198.295433][ T6357] RBP: 00007ff64dfbf090 R08: 0000000000000000 R09: 0000000000000000 [ 198.295449][ T6357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.295465][ T6357] R13: 00007ff64f7e6038 R14: 00007ff64f7e5fa0 R15: 00007fff3d3164c8 [ 198.295485][ T6357] [ 198.622841][ T6363] FAULT_INJECTION: forcing a failure. [ 198.622841][ T6363] name failslab, interval 1, probability 0, space 0, times 0 [ 198.694037][ T6363] CPU: 0 UID: 0 PID: 6363 Comm: syz.1.859 Tainted: G W syzkaller #0 PREEMPT(full) [ 198.694158][ T6363] Tainted: [W]=WARN [ 198.694167][ T6363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 198.694183][ T6363] Call Trace: [ 198.694260][ T6363] [ 198.694268][ T6363] __dump_stack+0x1d/0x30 [ 198.694353][ T6363] dump_stack_lvl+0x95/0xd0 [ 198.694372][ T6363] dump_stack+0x15/0x1b [ 198.694395][ T6363] should_fail_ex+0x263/0x280 [ 198.694451][ T6363] ? __pfx_cond_bools_destroy+0x10/0x10 [ 198.694486][ T6363] should_failslab+0x8c/0xb0 [ 198.694622][ T6363] __kmalloc_node_track_caller_noprof+0xc3/0x550 [ 198.694669][ T6363] ? cond_bools_copy+0x30/0x80 [ 198.694782][ T6363] ? __pfx_cond_bools_destroy+0x10/0x10 [ 198.694821][ T6363] kmemdup_noprof+0x2b/0x70 [ 198.694899][ T6363] ? __pfx_cond_bools_destroy+0x10/0x10 [ 198.694928][ T6363] cond_bools_copy+0x30/0x80 [ 198.694965][ T6363] ? __pfx_cond_bools_destroy+0x10/0x10 [ 198.695009][ T6363] hashtab_duplicate+0x11e/0x360 [ 198.695064][ T6363] ? __pfx_cond_bools_copy+0x10/0x10 [ 198.695186][ T6363] cond_policydb_dup+0xd2/0x4e0 [ 198.695230][ T6363] security_set_bools+0xa0/0x340 [ 198.695265][ T6363] sel_commit_bools_write+0x1e9/0x270 [ 198.695320][ T6363] vfs_writev+0x42b/0x900 [ 198.695345][ T6363] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 198.695388][ T6363] do_writev+0xe9/0x210 [ 198.695408][ T6363] __x64_sys_writev+0x45/0x50 [ 198.695459][ T6363] x64_sys_call+0x1c0c/0x3020 [ 198.695486][ T6363] do_syscall_64+0x12c/0x3b0 [ 198.695517][ T6363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.695538][ T6363] RIP: 0033:0x7f7e610fce59 [ 198.695557][ T6363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.695660][ T6363] RSP: 002b:00007f7e5fb57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 198.695759][ T6363] RAX: ffffffffffffffda RBX: 00007f7e61375fa0 RCX: 00007f7e610fce59 [ 198.695774][ T6363] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000006 [ 198.695787][ T6363] RBP: 00007f7e5fb57090 R08: 0000000000000000 R09: 0000000000000000 [ 198.695800][ T6363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 198.695812][ T6363] R13: 00007f7e61376038 R14: 00007f7e61375fa0 R15: 00007ffd2ce178c8 [ 198.695836][ T6363] [ 199.041484][ T6372] loop2: detected capacity change from 0 to 512 [ 199.049317][ T3722] Bluetooth: hci1: command 0x1003 tx timeout [ 199.055381][ T4612] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 199.090477][ T6376] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 199.104946][ T6372] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 199.156327][ T3859] Bluetooth: hci0: Frame reassembly failed (-84) [ 199.259889][ T6391] loop0: detected capacity change from 0 to 512 [ 199.269950][ T6391] EXT4-fs error (device loop0): ext4_get_journal_inode:5896: comm syz.0.868: inode #1792: comm syz.0.868: iget: illegal inode # [ 199.290130][ T6391] loop0: lost filesystem error report for type 5 error -117 [ 199.297206][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 199.311045][ C1] EXT4-fs (loop0): initial error at time 1779530152: ext4_get_journal_inode:5896 [ 199.320233][ C1] EXT4-fs (loop0): last error at time 1779530152: ext4_get_journal_inode:5896 [ 199.335996][ T6391] EXT4-fs (loop0): Remounting filesystem read-only [ 199.350298][ T6393] loop3: detected capacity change from 0 to 512 [ 199.356679][ T6391] EXT4-fs (loop0): no journal found [ 199.367202][ T6391] EXT4-fs (loop0): can't get journal size [ 199.376483][ T6391] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 199.385935][ T6395] loop4: detected capacity change from 0 to 512 [ 199.396502][ T6395] EXT4-fs: Ignoring removed mblk_io_submit option [ 199.405207][ T6391] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 199.423981][ T6393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 199.428777][ T6391] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.449858][ T6393] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.471830][ T6391] ip6tnl1: entered allmulticast mode [ 199.566562][ T6395] EXT4-fs: Mount option(s) incompatible with ext3 [ 199.574088][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.400872][ T6411] loop0: detected capacity change from 0 to 128 [ 200.405053][ T6411] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 200.405167][ T6411] ext4 filesystem being mounted at /198/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 200.406930][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 200.406990][ T28] audit: type=1400 audit(1779530153.568:1500): avc: denied { write } for pid=6410 comm="syz.0.872" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 200.566237][ T6414] loop2: detected capacity change from 0 to 128 [ 200.619654][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 200.655341][ T28] audit: type=1400 audit(1779530153.818:1501): avc: denied { create } for pid=6416 comm="syz.4.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 200.690638][ T6425] loop3: detected capacity change from 0 to 1024 [ 200.705876][ T28] audit: type=1400 audit(1779530153.818:1502): avc: denied { write } for pid=6416 comm="syz.4.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 200.735721][ T6425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.765021][ T28] audit: type=1400 audit(1779530153.918:1503): avc: denied { write } for pid=6423 comm="syz.3.875" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 200.797055][ T3858] Bluetooth: hci1: Frame reassembly failed (-84) [ 200.805587][ T5465] Bluetooth: hci1: unexpected event 0x05 length: 0 < 4 [ 200.820249][ T28] audit: type=1400 audit(1779530153.928:1504): avc: denied { append } for pid=6423 comm="syz.3.875" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 200.843074][ T28] audit: type=1400 audit(1779530153.928:1505): avc: denied { ioctl } for pid=6423 comm="syz.3.875" path="/168/file1/file1" dev="loop3" ino=15 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 200.872272][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.883991][ T28] audit: type=1400 audit(1779530153.928:1506): avc: denied { write } for pid=6423 comm="syz.3.875" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 200.907095][ T28] audit: type=1400 audit(1779530153.978:1507): avc: denied { shutdown } for pid=6423 comm="syz.3.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 200.982360][ T6443] loop2: detected capacity change from 0 to 128 [ 201.000970][ T6443] FAULT_INJECTION: forcing a failure. [ 201.000970][ T6443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.025592][ T6443] CPU: 0 UID: 0 PID: 6443 Comm: syz.2.880 Tainted: G W syzkaller #0 PREEMPT(full) [ 201.025633][ T6443] Tainted: [W]=WARN [ 201.025643][ T6443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 201.025660][ T6443] Call Trace: [ 201.025668][ T6443] [ 201.025676][ T6443] __dump_stack+0x1d/0x30 [ 201.025707][ T6443] dump_stack_lvl+0x95/0xd0 [ 201.025798][ T6443] dump_stack+0x15/0x1b [ 201.025817][ T6443] should_fail_ex+0x263/0x280 [ 201.025853][ T6443] should_fail+0xb/0x20 [ 201.025878][ T6443] should_fail_usercopy+0x1a/0x20 [ 201.025930][ T6443] strncpy_from_user+0x27/0x250 [ 201.025989][ T6443] ? kmem_cache_alloc_noprof+0x18c/0x3f0 [ 201.026033][ T6443] do_getname+0x59/0x1c0 [ 201.026052][ T6443] getname_flags+0x1d/0x30 [ 201.026070][ T6443] ksys_truncate+0x51/0x140 [ 201.026167][ T6443] __x64_sys_truncate+0x31/0x40 [ 201.026206][ T6443] x64_sys_call+0x19fb/0x3020 [ 201.026291][ T6443] do_syscall_64+0x12c/0x3b0 [ 201.026323][ T6443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.026365][ T6443] RIP: 0033:0x7ff2162fce59 [ 201.026425][ T6443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.026500][ T6443] RSP: 002b:00007ff214d4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 201.026520][ T6443] RAX: ffffffffffffffda RBX: 00007ff216575fa0 RCX: 00007ff2162fce59 [ 201.026533][ T6443] RDX: 0000000000000000 RSI: 00000000000042dc RDI: 00002000000001c0 [ 201.026550][ T6443] RBP: 00007ff214d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 201.026562][ T6443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.026596][ T6443] R13: 00007ff216576038 R14: 00007ff216575fa0 R15: 00007ffc6daf10b8 [ 201.026621][ T6443] [ 201.207906][ T5465] Bluetooth: hci0: command 0x1003 tx timeout [ 201.215700][ T4612] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 201.255305][ T28] audit: type=1400 audit(1779530154.418:1508): avc: denied { bind } for pid=6445 comm="syz.2.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 201.282723][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 201.340608][ T6451] loop3: detected capacity change from 0 to 1764 [ 201.933580][ T6456] loop2: detected capacity change from 0 to 1024 [ 201.941235][ T6453] qrtr: Invalid version 0 [ 201.949053][ T6456] ext4: Unknown parameter 'nojournal' [ 202.074379][ T28] audit: type=1400 audit(1779530154.418:1509): avc: denied { connect } for pid=6445 comm="syz.2.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 202.263040][ T6463] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.297996][ T6463] FAT-fs (loop0): Filesystem has been set read-only [ 202.608249][ T6481] syz.1.891 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 202.807302][ T3722] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 202.999699][ T4612] Bluetooth: hci1: command 0x1003 tx timeout [ 203.233247][ T3861] Bluetooth: hci0: Frame reassembly failed (-84) [ 203.405052][ T6495] EXT4-fs: Ignoring removed nobh option [ 203.793055][ T6495] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 204.384517][ T6501] pimreg: entered allmulticast mode [ 204.392224][ T6501] pimreg: left allmulticast mode [ 204.402692][ T6495] EXT4-fs (loop2): 1 truncate cleaned up [ 204.412232][ T6495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.653835][ T6497] netlink: 20 bytes leftover after parsing attributes in process `syz.3.893'. [ 204.824623][ T6508] xt_HMARK: spi-set and port-set can't be combined [ 204.876408][ T6505] Invalid ELF header magic: != ELF [ 204.919740][ T6511] netlink: 16 bytes leftover after parsing attributes in process `syz.2.895'. [ 204.929064][ T6511] netlink: 16 bytes leftover after parsing attributes in process `syz.2.895'. [ 204.941707][ T6511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.895'. [ 204.963827][ T6506] set_capacity_and_notify: 3 callbacks suppressed [ 204.963845][ T6506] loop0: detected capacity change from 0 to 512 [ 204.986988][ T6506] EXT4-fs: Ignoring removed nobh option [ 205.069731][ T6518] netlink: 292 bytes leftover after parsing attributes in process `syz.3.902'. [ 205.081205][ T6506] ------------[ cut here ]------------ [ 205.086714][ T6506] EA inode 11 i_nlink=1026 [ 205.086752][ T6506] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.0.897/6506 [ 205.101843][ T6506] Modules linked in: [ 205.105881][ T6506] CPU: 1 UID: 0 PID: 6506 Comm: syz.0.897 Tainted: G W syzkaller #0 PREEMPT(full) [ 205.116770][ T6506] Tainted: [W]=WARN [ 205.120675][ T6506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 205.130760][ T6506] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 205.137420][ T6506] Code: 54 58 98 ff 4c 8d 2d 9d 66 5c 05 49 8d 7e 40 e8 f4 17 b6 ff 49 8b 6e 40 4c 89 e7 e8 28 13 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 ef 2b d8 03 66 66 66 66 66 66 2e [ 205.157162][ T6506] RSP: 0000:ffffc900015c35a8 EFLAGS: 00010246 [ 205.163329][ T6506] RAX: ffff888104cbf100 RBX: ffff88811b82bb38 RCX: ffffffff81c0db58 [ 205.172649][ T6506] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871d41e0 [ 205.180701][ T6506] RBP: 000000000000000b R08: 000188811b82baeb R09: 0000000000000000 [ 205.188723][ T6506] R10: ffffc900015c34d8 R11: 0001c900015c34d8 R12: ffff88811b82bae8 [ 205.196731][ T6506] R13: ffffffff871d41e0 R14: ffff88811b82baa0 R15: 0000000000000001 [ 205.204740][ T6506] FS: 00007ff64df9e6c0(0000) GS:ffff8882ae9f8000(0000) knlGS:0000000000000000 [ 205.204769][ T6506] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 205.204809][ T6506] CR2: 0000000034747865 CR3: 00000001383ee000 CR4: 00000000003506f0 [ 205.204832][ T6506] DR0: 0000000000000008 DR1: 0000000000000000 DR2: 0000000000000000 [ 205.204845][ T6506] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 205.204859][ T6506] Call Trace: [ 205.204925][ T6506] [ 205.204940][ T6506] ext4_xattr_set_entry+0x77c/0x1010 [ 205.204991][ T6506] ext4_xattr_ibody_set+0x184/0x3c0 [ 205.205030][ T6506] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 205.205162][ T6506] __ext4_expand_extra_isize+0x246/0x280 [ 205.205197][ T6506] __ext4_mark_inode_dirty+0x29b/0x3d0 [ 205.205241][ T6506] ext4_evict_inode+0x8ba/0xe30 [ 205.205278][ T6506] ? __pfx_ext4_evict_inode+0x10/0x10 [ 205.205314][ T6506] evict+0x2af/0x510 [ 205.205348][ T6506] ? __dquot_initialize+0x146/0x7c0 [ 205.205461][ T6506] iput+0x41a/0x580 [ 205.205486][ T6506] ext4_process_orphan+0x1a9/0x1c0 [ 205.205519][ T6506] ext4_orphan_cleanup+0x69c/0x9f0 [ 205.205555][ T6506] ext4_fill_super+0x3408/0x37c0 [ 205.205619][ T6506] ? set_blocksize+0x14c/0x270 [ 205.205645][ T6506] ? setup_bdev_super+0x30e/0x370 [ 205.205740][ T6506] ? __pfx_ext4_fill_super+0x10/0x10 [ 205.205764][ T6506] get_tree_bdev_flags+0x291/0x300 [ 205.205858][ T6506] ? __pfx_ext4_fill_super+0x10/0x10 [ 205.205887][ T6506] get_tree_bdev+0x1f/0x30 [ 205.205924][ T6506] ext4_get_tree+0x1c/0x30 [ 205.357017][ T6506] vfs_get_tree+0x57/0x1d0 [ 205.361505][ T6506] do_new_mount+0x288/0x8d0 [ 205.366057][ T6506] path_mount+0x4d0/0xbc0 [ 205.370513][ T6506] __se_sys_mount+0x28c/0x2e0 [ 205.375267][ T6506] __x64_sys_mount+0x67/0x80 [ 205.380744][ T6506] x64_sys_call+0x2d61/0x3020 [ 205.385569][ T6506] do_syscall_64+0x12c/0x3b0 [ 205.390213][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.394199][ T4612] Bluetooth: hci0: command 0x1003 tx timeout [ 205.396127][ T6506] RIP: 0033:0x7ff64f56e0ca [ 205.396151][ T6506] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.396170][ T6506] RSP: 002b:00007ff64df9de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 205.396190][ T6506] RAX: ffffffffffffffda RBX: 00007ff64df9dee0 RCX: 00007ff64f56e0ca [ 205.396204][ T6506] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007ff64df9dea0 [ 205.440262][ T3722] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 205.442760][ T6506] RBP: 0000200000000180 R08: 00007ff64df9dee0 R09: 0000000000800718 [ 205.442782][ T6506] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 205.442796][ T6506] R13: 00007ff64df9dea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 205.501152][ T6506] [ 205.504424][ T6506] ---[ end trace 0000000000000000 ]--- [ 205.511119][ T6506] EXT4-fs (loop0): 1 orphan inode deleted [ 205.518051][ T6506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.535442][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.568346][ T6525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.608520][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 205.608538][ T28] audit: type=1400 audit(1779530158.768:1516): avc: denied { append } for pid=6526 comm="syz.3.905" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 205.645087][ T6525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.681708][ T28] audit: type=1400 audit(1779530158.838:1517): avc: denied { view } for pid=6524 comm="syz.2.904" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 205.700805][ T6533] netlink: 764 bytes leftover after parsing attributes in process `syz.4.908'. [ 205.711763][ T28] audit: type=1400 audit(1779530158.878:1518): avc: denied { ioctl } for pid=6524 comm="syz.2.904" path="socket:[14717]" dev="sockfs" ino=14717 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 205.831658][ T6537] loop1: detected capacity change from 0 to 128 [ 205.898901][ T6535] netlink: 24 bytes leftover after parsing attributes in process `syz.3.909'. [ 205.940956][ T6535] loop3: detected capacity change from 0 to 4096 [ 205.965296][ T6535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.979631][ T6535] SELinux: policydb magic number 0x6f5f626d does not match expected magic number 0xf97cff8c [ 205.989837][ T6535] SELinux: failed to load policy [ 205.997290][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.138833][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.171833][ T28] audit: type=1400 audit(1779530159.338:1519): avc: denied { mounton } for pid=6551 comm="syz.3.913" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 206.283925][ T6559] netlink: 20 bytes leftover after parsing attributes in process `syz.0.910'. [ 206.298241][ T28] audit: type=1400 audit(1779530159.338:1520): avc: denied { mount } for pid=6551 comm="syz.3.913" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 206.577565][ T28] audit: type=1400 audit(1779530159.688:1521): avc: denied { append } for pid=6566 comm="syz.3.919" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 206.605441][ T28] audit: type=1400 audit(1779530159.768:1522): avc: denied { sqpoll } for pid=6562 comm="syz.2.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 206.687214][ T4612] Bluetooth: hci0: sending frame failed (-49) [ 206.693479][ T3722] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 206.744481][ T28] audit: type=1400 audit(1779530159.888:1523): avc: denied { read } for pid=6566 comm="syz.3.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 206.770274][ T6577] loop1: detected capacity change from 0 to 512 [ 206.782342][ T6577] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.921: ea_inode with extended attributes [ 206.790563][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.918'. [ 206.794932][ T6577] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 206.806239][ T6577] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.921: error while reading EA inode 11 err=-117 [ 206.816127][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 206.816149][ C1] EXT4-fs (loop1): initial error at time 1779530159: ext4_xattr_inode_iget:441: inode 11 [ 206.816179][ C1] EXT4-fs (loop1): last error at time 1779530159: ext4_xattr_inode_iget:441: inode 11 [ 206.864455][ T6577] loop1: lost filesystem error report for type 5 error -117 [ 206.865208][ T6577] EXT4-fs (loop1): 1 orphan inode deleted [ 206.880407][ T6577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.938961][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.006363][ T28] audit: type=1326 audit(1779530160.168:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.2.922" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2162fce59 code=0x7ffc0000 [ 207.032380][ T6583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1793 sclass=netlink_route_socket pid=6583 comm=syz.2.922 [ 207.049531][ T28] audit: type=1326 audit(1779530160.168:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.2.922" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2162fce59 code=0x7ffc0000 [ 207.140764][ T6591] netlink: 16 bytes leftover after parsing attributes in process `syz.4.925'. [ 207.162444][ T6599] loop2: detected capacity change from 0 to 512 [ 207.181166][ T6599] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 207.197313][ T6599] EXT4-fs (loop2): mount failed [ 207.229519][ T6605] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=6605 comm=syz.2.928 [ 207.356995][ T6613] loop2: detected capacity change from 0 to 128 [ 207.633324][ T6617] loop3: detected capacity change from 0 to 2048 [ 207.899169][ T6621] loop2: detected capacity change from 0 to 8192 [ 207.986923][ T6621] loop2: p1 p2 p3 [ 207.991395][ T6621] loop2: p1 size 67111168 extends beyond EOD, truncated [ 208.012894][ T6621] loop2: p2 size 8388608 extends beyond EOD, truncated [ 208.022961][ T6621] loop2: p3 start 4294901760 is beyond EOD, truncated [ 208.191769][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 208.202615][ T3544] udevd[3544]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 209.263227][ T6632] loop2: detected capacity change from 0 to 164 [ 209.553499][ T6646] loop3: detected capacity change from 0 to 128 [ 210.066010][ T6647] set_capacity_and_notify: 1 callbacks suppressed [ 210.066027][ T6647] loop0: detected capacity change from 0 to 128 [ 211.039660][ T6669] loop1: detected capacity change from 0 to 1764 [ 215.878980][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 215.878994][ T28] audit: type=1400 audit(1779530169.048:1530): avc: denied { unmount } for pid=6680 comm="syz.3.951" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 215.952992][ T6683] loop3: detected capacity change from 0 to 512 [ 215.981519][ T6684] loop0: detected capacity change from 0 to 1764 [ 216.394014][ T6685] loop2: detected capacity change from 0 to 1764 [ 216.629643][ T6683] EXT4-fs: dax option not supported [ 216.876480][ T28] audit: type=1400 audit(1779530169.798:1531): avc: denied { mounton } for pid=6680 comm="syz.3.951" path="/186/file0" dev="rpc_pipefs" ino=14921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 217.642580][ T6681] loop3: detected capacity change from 0 to 256 [ 218.929745][ T28] audit: type=1400 audit(1779530172.098:1532): avc: denied { map } for pid=6686 comm="syz.1.950" path="socket:[14943]" dev="sockfs" ino=14943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 219.824629][ T6692] dummy0: mtu less than device minimum [ 220.075698][ T6705] __nla_validate_parse: 1 callbacks suppressed [ 220.075859][ T6705] netlink: 20 bytes leftover after parsing attributes in process `syz.3.955'. [ 220.157259][ T6704] ================================================================== [ 220.165405][ T6704] BUG: KCSAN: data-race in ktime_get / timekeeping_update_from_shadow [ 220.173615][ T6704] [ 220.175955][ T6704] write to 0xffffffff893aa488 of 304 bytes by interrupt on cpu 0: [ 220.183777][ T6704] timekeeping_update_from_shadow+0x40d/0x440 [ 220.189883][ T6704] __timekeeping_advance+0xa5d/0xc10 [ 220.195189][ T6704] update_wall_time+0x21/0x50 [ 220.199898][ T6704] tick_do_update_jiffies64+0x169/0x1c0 [ 220.205485][ T6704] tick_nohz_handler+0x8d/0x3d0 [ 220.210372][ T6704] __hrtimer_run_queues+0x276/0x4f0 [ 220.215612][ T6704] hrtimer_interrupt+0x261/0x850 [ 220.220595][ T6704] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 220.226532][ T6704] sysvec_apic_timer_interrupt+0x6f/0x80 [ 220.232191][ T6704] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 220.238205][ T6704] ____sys_recvmsg+0x1a1/0x280 [ 220.243002][ T6704] ___sys_recvmsg+0x11f/0x3b0 [ 220.247713][ T6704] do_recvmmsg+0x1ef/0x560 [ 220.252165][ T6704] __x64_sys_recvmmsg+0xe5/0x170 [ 220.257133][ T6704] x64_sys_call+0x80f/0x3020 [ 220.261757][ T6704] do_syscall_64+0x12c/0x3b0 [ 220.266384][ T6704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.272303][ T6704] [ 220.274645][ T6704] read to 0xffffffff893aa4a8 of 8 bytes by task 6704 on cpu 1: [ 220.282208][ T6704] ktime_get+0x130/0x240 [ 220.286491][ T6704] bpf_test_timer_continue+0x2ea/0x350 [ 220.291987][ T6704] bpf_prog_test_run_flow_dissector+0x27a/0x360 [ 220.298265][ T6704] bpf_prog_test_run+0x204/0x340 [ 220.303245][ T6704] __sys_bpf+0x52e/0x7e0 [ 220.307521][ T6704] __x64_sys_bpf+0x41/0x50 [ 220.311975][ T6704] x64_sys_call+0x10cb/0x3020 [ 220.316689][ T6704] do_syscall_64+0x12c/0x3b0 [ 220.321317][ T6704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.327253][ T6704] [ 220.329596][ T6704] value changed: 0x001300ef1fe71c7c -> 0x00139985a0168042 [ 220.336721][ T6704] [ 220.339060][ T6704] Reported by Kernel Concurrency Sanitizer on: [ 220.345244][ T6704] CPU: 1 UID: 0 PID: 6704 Comm: syz.0.957 Tainted: G W syzkaller #0 PREEMPT(full) [ 220.356042][ T6704] Tainted: [W]=WARN [ 220.359864][ T6704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 220.369936][ T6704] ================================================================== [ 220.449593][ T6702] loop1: detected capacity change from 0 to 8192 [ 220.599688][ T6706] IPVS: Unknown mcast interface: pimreg0