last executing test programs: 23.497846755s ago: executing program 0 (id=1663): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x0, 0xb}]}, 0x10) write$tun(r0, &(0x7f0000000380)={@void, @val={0x0, 0x0, 0x3ff, 0x6, 0x4, 0x2}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x20, 0x65, 0x0, 0x42, 0x11, 0x0, @private=0xa010104, @multicast1}, {0x4e22, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x1, 0x100, @void}}}}}, 0x2a) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbb8, &(0x7f0000000c00)="$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") socket$netlink(0x10, 0x3, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x7, 0x1) r3 = socket(0x2, 0x80805, 0x0) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000440)="07000000020000", 0x7) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x4cf, &(0x7f0000000500)="$eJzs3c1rG2caAPBHUuzYjnfzscuSZGETyEL2g1j+YIm9u7DsaXcPgaWBXlpIXVtxU8uWseQ0Njk47S2HHkpLC6WH3vsX9NKcGgql55ZeSw8lpU1daAsFFY2kxB+S46aO5Hh+P5ho5h1lnveVeF7PvDOjCSC1Ttf+yUQMRsRHEXG4vrjxDafrL2t3r0/VpkxUqxe/yiTvqy0339r8f4ciYjUi+iLiif9EPJvZGre8vDI7WSwWFhvL+crcQr68vHLuytzkTGGmMD8yfn5iYnx4bHRi19p68+Xnb15493+973z30p3br7z/Xq1ag41169uxm+pN74mj68oORMQ/H0WwLsg12tPf7YrwUGrf328i4kyS/4cjl3ybQBpUq9Xqj9WD7VavVoF9K5vsA2eyQxFRn89mh4bq+/C/jYFssVSu/PVyaWl+ur6vfCR6spevFAvDjWOFI9GTqS2PJPP3l0c3LY9FJPvAr+b6k+WhqVJxurNdHbDJoU35/22unv9ASjjkh/SS/5Be8h/SS/5Desl/SC/5D+kl/yG95D+kl/yH9JL/kF7b5X9vB+sBdNT/L1yoTdXm/e/TV5eXZktXz00XyrNDc0tTQ1OlxYWhmVJpJrlnZ+5B2yuWSgsjf4ula/lKoVzJl5dXLs2VluYrl5L7+i8VejrSKmAnjp669UkmIlb/3p9Mse5PvlyF/a1azUS370EGuiPX7Q4I6BpD/5BeP+MYv+2PhAGPtxY/0btBX+vif8XCIwkHdEC22xUAuubsCef/IK2M/0N6Gf+H9LKPDzzk+H88aPxf/wJ7l/F/SK/BNs//+tW6Z3cNR8SvI+LjXM/B5rO+gP0g+0Wmsf9/9vAfBzev7c18n5wi6I2IF968+Pq1yUplcaRW/vW98sobjfLRbtQf2KlmnjbzGABIr7W716eaUyfjfvnv+kUIW+MfaIxN9iXnEAbWMhuuVcjs0rULqzci4nir+JnG887rZz4G1nJb4h9rvGbqm0jqeyB5bnpn4p9YF/8P6+Kf/MWfCqTDrVr/M9wq/7JJTse9/NvY/wzu0rnN9v1f9l7/l2vT/53asKXVtjGee+vFz9vGvxFxsmX8Zry+JNbm+LW6nd1hG+88/eTv2q2rvl3fTqv4TbW5fGVuIV9eXjmX/I7cTGF+ZPz8xMT48NjoRD4Zo843R6q3+sfxD29v1/6BNvHr7f20ZftrZX/eYft/+P0HT53eJv6fzrT+/o8lr60///6I+MsO438z+tkz7dbV4k+3aX92m/i1srEdxi+/9l/3DgPAHlJeXpmdLBYLi2b2/kz/3qiGmTTMPKjnaH+8CTwe7id9t2sCAAAAAAAAAAAA7FQnLifudhsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPaDnwIAAP//J4fYHQ==") statx(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2000, 0x2dd8806920477201, 0x0) getpid() r4 = socket(0x11, 0xa, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000300), &(0x7f00000003c0)='system_u:object_r:mount_exec_t:s0\x00', 0x22, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) 22.738523409s ago: executing program 2 (id=1668): r0 = socket$rds(0x15, 0x5, 0x0) connect$rds(r0, 0x0, 0x0) 22.553198104s ago: executing program 2 (id=1670): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)=@ethtool_cmd={0x6, 0xfffffeff, 0xde, 0xa2, 0x2, 0xff, 0x58, 0x8, 0x70, 0x40, 0x4, 0x3a, 0x1, 0xff, 0x1, 0xff, [0x5, 0x3]}}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51a, &(0x7f0000001200)="$eJzs3c9vI1cdAPDvTOLd7G6KU0CoVKJUtGi3grU3DW0jhKBc4FQJKPclJE4UxY6j2CmbqKKp+A8QEkicOHFB4g9AQj3wB6BKleCCOCBAIARbOCABHTTjsZp17CTQrJ3Gn4/04vfm1/e9sfw8M36ZCWBqPRkRL0bETEQ8ExHVcnpapjjspXy5t++/upqnJLLs5b8mkZTT+tvKy7MRcaNcbS4ivvbliG8mx+N29g+2VprNxm5ZrndbO/XO/sHtzdbKRmOjsb20tPj88gvLzy3fyUrvqZ0L/cyPv/T5n3/6W7+7++db386r9bmPRCUG2nGeek2vFPuiL99Huw8j2ATMlO2pTLoiAACcSX6M/8GI+ERx/F+NmeJobsDMJGoGAAAAnJfsC/Px7yQiAwAAAC6tNCLmI0lr5ViA+UjTK+W1gQ/H9bTZ7nQ/td7e217L50UsRCVd32w27pRjhReikuTlxXKMbb/87EB5KSIejYjvVa8V5dpqu7k24WsfAAAAMC1uDJz//6OaFvnTDfk/AQAAAODiWhhZAAAAAC4Lp/wAAABw+Q2e/7vfPwAAAFwqX3nppTxl/edfr72yv7fVfuX2WqOzVWvtrdZW27s7tY12e6O4Z1/rtO012+2dz8T23r16t9Hp1jv7B3db7b3t7t3NBx6BDQAAAIzRox9/49dJRBx+9lqRorwPIMAD/jDpCgDnyVA/mF7u4g3TqzLpCgATl5wy3+AdAAB4/7v50eO///ef/+/aAFxuxvoAwPTx+z9Mr4oRgDC1ZstrAB/oFa+OWm7k7/+/PGukLIt4s3p0iuuLAAAwXvNFStJaeR4wH2laq0U8EpEuRCVZ32w27pTnB7+qVq7m5cVizeTUMcMAAAAAAAAAAAAAAAAAAAAAAAAAQE+WJZEBAAAAl1pE+qekuJt/xM3q0/OD1weuJP+sxh/Lwg9f/v69lW53dzGf/rfiWV5XIqL7g3L6syMfHwYAAACct+Rw5KzeeXr5ujjWWgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBd6+/+pqP40z7l++GBELw+LPxlzxOheViLj+9yRmj6yXRMTMOcQ/fD0iHhsWP4l3suy1KGsxLP61hxx/odg1w+OnEXHjHOLDNHsj739eHPb5S+PJ4nX452+2TO/V6P4vLSM/VvRzw/qfR45trTU0xuNv/bTey1WOx3894vHZ4f1Pv/9NRsR/6tjW/pVl2fH43/j6wcGo9mc/irg59PsneSBWvdvaqXf2D25vtlY2GhuN7aWlxeeXX1h+bvlOfX2z2Sj/Do3x3Y/97J1R8fP2Xx8S/7e/6fW/J7X/6VEbHfCft+7d/1Ave+wNyOPfemro9+9cjIiflt99nyzz+fyb/fxhL3/UEz9584mT2r82Yv+f9v7fOmP7n/nqd35/xkUBgDHo7B9srTSbjd0TMnNnWOb9mPnF3IWoxv+YyV7rvXMXpT7/byY/Wn13Sr9VF6BiRzLZWGJdLY7nz7rWlTG1faLdEgAA8BC8e9A/6ZoAAAAAAAAAAAAAAAAAAADA9BrHrdQGYx5OpqkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACf6bwAAAP//8yDcjQ==") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) r5 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ff9000/0x4000)=nil) shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r5, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) sendmsg$nl_route_sched(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e00)=@newqdisc={0x844, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x818, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x9, 0xffe0000, 0x8, 0xfff, 0x8, 0xcba, 0x0, 0x400, 0x2, 0x81, 0x4, 0x8, 0xeaf0, 0x8, 0x7ab, 0x2, 0xfffffffc, 0x6, 0xad22, 0x8, 0x6, 0x5, 0x4, 0x30, 0x8, 0x0, 0x5, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x4, 0x1, 0x1, 0x40, 0x7, 0x9, 0x1, 0xa0e3, 0x0, 0x7fffffff, 0x9, 0x7, 0x0, 0x2, 0x2, 0x7, 0x4, 0x0, 0x2, 0x80000001, 0x69, 0x3, 0x400, 0x4, 0x2, 0xf973, 0x5, 0x0, 0x868, 0x8, 0x100, 0x0, 0x367, 0x1, 0x2, 0x9939, 0x1, 0x38, 0x8, 0xffffffff, 0x0, 0x3, 0x7, 0x4, 0x4, 0x8, 0x5, 0x7ff, 0xc2, 0x7bd, 0x6, 0x8, 0x4, 0x9, 0x10000, 0x3, 0xd, 0x100, 0x7, 0x3ff, 0x4, 0x80000001, 0x4, 0x7, 0x3, 0x5, 0x5, 0x10000, 0x6, 0x83fe, 0x2, 0x5, 0x1000, 0x81, 0xf0, 0x6, 0x8, 0x3, 0x1, 0xdd, 0x9, 0x1ff, 0x6, 0xe, 0xfff, 0x717, 0x7, 0x8, 0x5, 0x10001, 0x6, 0x4, 0x2, 0x6f1, 0x7, 0xffff8924, 0x4, 0x0, 0x6, 0x6, 0x7fffffff, 0x1, 0xa, 0x5, 0x10001, 0x2, 0x6, 0x0, 0xe1b, 0x2, 0x8, 0xfffffffb, 0x2, 0x9, 0xa, 0x4, 0x0, 0x7, 0x80, 0x7, 0x7, 0x2, 0x5, 0x0, 0xd, 0x89e7, 0x3, 0x64e, 0x4f42c7f2, 0x69b, 0x3b3, 0xf3b8, 0xf, 0x5, 0x80000001, 0x1, 0x7, 0x1, 0x200, 0x4, 0x7, 0x4, 0xe, 0x0, 0x4, 0x1, 0x10, 0xacc, 0xda, 0x8, 0x6b540000, 0x1ff, 0x6, 0x401, 0xe, 0x6, 0x5, 0x4, 0xb, 0x900, 0x0, 0xe, 0x0, 0x9, 0x1, 0xffff0001, 0x8, 0x2, 0xe00000, 0xb57, 0x5, 0x7, 0x6, 0x2, 0x10001, 0x8, 0x1, 0xe, 0x6, 0x6, 0x7, 0xb91, 0xffff8000, 0x4, 0x3695b842, 0x101, 0x6, 0x3, 0x5, 0x3559, 0x8, 0x9, 0x401, 0xc, 0x2f8, 0x800, 0x5, 0x9, 0x5, 0x6, 0x5, 0x2, 0x5, 0x1, 0xfffffff8, 0x7106, 0x7, 0x0, 0xffff924f, 0x100, 0x3, 0x8c1, 0x9, 0x4, 0xfffffff7, 0x51c4, 0xba2, 0xb, 0x9, 0x100, 0xe, 0x2e, 0x100]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63e4, 0x0, 0x8000, 0x8, 0xff, 0x6, 0x6, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0x2, 0x200, 0x1, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x8, 0x3, 0x3, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0x101, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x955, 0x5, 0x6cdf13a0, 0x9, 0x3, 0x5, 0x10001, 0x80000001, 0x7fffffff, 0xed2, 0x1, 0xfffffffa, 0x2, 0x18d1, 0xfcf9, 0x3, 0x6, 0x80, 0x2, 0x80000000, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x8, 0x9, 0x1, 0x2, 0x8, 0x2, 0x0, 0x2, 0x7e, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0xb, 0x4, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xbffffffa, 0x5, 0x100008, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0x2d1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x800081, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0xfffffeff, 0x8dc3, 0x20000001, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7c, 0x7, 0x1, 0x0, 0xfffffffe, 0xdfed, 0xb, 0x77, 0x103, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0x4]}]}}]}, 0x844}}, 0x0) fcntl$notify(r0, 0x402, 0x0) 22.211899995s ago: executing program 0 (id=1671): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x1, 0x10000, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x1e, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x11, 0x200000000000003, 0x300) socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)}], 0x2}, 0x4000000) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x200000000000001, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) 20.757273541s ago: executing program 0 (id=1675): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r4, &(0x7f0000003d40)=[{&(0x7f0000000380)=""/128, 0x80}], 0x1, 0x33, 0xf7) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b00)={0x5, 0x0}, 0x8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xaa, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3}, 0x50) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c40)='/proc/asound/seq/timer\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001040)={{0x1, 0xffffffffffffffff}, &(0x7f0000000c80), &(0x7f0000001000)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x1b, 0x16, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x6, 0x0, 0xe, 0x5, 0xffffffc0}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000009c0)='syzkaller\x00', 0x6fc, 0x7e, &(0x7f0000000a00)=""/126, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0x0, 0x1ff, 0xfffffc01}, 0x10, r5, r0, 0x2, &(0x7f0000001080)=[r6, r7, r8, r9], &(0x7f00000010c0)=[{0x1, 0x5, 0x10, 0x3}, {0x1, 0x2, 0xc, 0x9}], 0x10, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8971, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)=@ethtool_cmd={0x6, 0xfffffeff, 0xde, 0xa2, 0x2, 0xff, 0x58, 0x8, 0x70, 0x40, 0x4, 0x3a, 0x1, 0xff, 0x1, 0xff, [0x5, 0x3]}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) r4 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ff9000/0x4000)=nil) r5 = shmat(r4, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r4, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r5) sendmsg$nl_route_sched(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e00)=@newqdisc={0x844, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x818, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x9, 0xffe0000, 0x8, 0xfff, 0x8, 0xcba, 0x0, 0x400, 0x2, 0x81, 0x4, 0x8, 0xeaf0, 0x8, 0x7ab, 0x2, 0xfffffffc, 0x6, 0xad22, 0x8, 0x6, 0x5, 0x4, 0x30, 0x8, 0x0, 0x5, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x4, 0x1, 0x1, 0x40, 0x7, 0x9, 0x1, 0xa0e3, 0x0, 0x7fffffff, 0x9, 0x7, 0x0, 0x2, 0x2, 0x7, 0x4, 0x0, 0x2, 0x80000001, 0x69, 0x3, 0x400, 0x4, 0x2, 0xf973, 0x5, 0x0, 0x868, 0x8, 0x100, 0x0, 0x367, 0x1, 0x2, 0x9939, 0x1, 0x38, 0x8, 0xffffffff, 0x0, 0x3, 0x7, 0x4, 0x4, 0x8, 0x5, 0x7ff, 0xc2, 0x7bd, 0x6, 0x8, 0x4, 0x9, 0x10000, 0x3, 0xd, 0x100, 0x7, 0x3ff, 0x4, 0x80000001, 0x4, 0x7, 0x3, 0x5, 0x5, 0x10000, 0x6, 0x83fe, 0x2, 0x5, 0x1000, 0x81, 0xf0, 0x6, 0x8, 0x3, 0x1, 0xdd, 0x9, 0x1ff, 0x6, 0xe, 0xfff, 0x717, 0x7, 0x8, 0x5, 0x10001, 0x6, 0x4, 0x2, 0x6f1, 0x7, 0xffff8924, 0x4, 0x0, 0x6, 0x6, 0x7fffffff, 0x1, 0xa, 0x5, 0x10001, 0x2, 0x6, 0x0, 0xe1b, 0x2, 0x8, 0xfffffffb, 0x2, 0x9, 0xa, 0x4, 0x0, 0x7, 0x80, 0x7, 0x7, 0x2, 0x5, 0x0, 0xd, 0x89e7, 0x3, 0x64e, 0x4f42c7f2, 0x69b, 0x3b3, 0xf3b8, 0xf, 0x5, 0x80000001, 0x1, 0x7, 0x1, 0x200, 0x4, 0x7, 0x4, 0xe, 0x0, 0x4, 0x1, 0x10, 0xacc, 0xda, 0x8, 0x6b540000, 0x1ff, 0x6, 0x401, 0xe, 0x6, 0x5, 0x4, 0xb, 0x900, 0x0, 0xe, 0x0, 0x9, 0x1, 0xffff0001, 0x8, 0x2, 0xe00000, 0xb57, 0x5, 0x7, 0x6, 0x2, 0x10001, 0x8, 0x1, 0xe, 0x6, 0x6, 0x7, 0xb91, 0xffff8000, 0x4, 0x3695b842, 0x101, 0x6, 0x3, 0x5, 0x3559, 0x8, 0x9, 0x401, 0xc, 0x2f8, 0x800, 0x5, 0x9, 0x5, 0x6, 0x5, 0x2, 0x5, 0x1, 0xfffffff8, 0x7106, 0x7, 0x0, 0xffff924f, 0x100, 0x3, 0x8c1, 0x9, 0x4, 0xfffffff7, 0x51c4, 0xba2, 0xb, 0x9, 0x100, 0xe, 0x2e, 0x100]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63e4, 0x0, 0x8000, 0x8, 0xff, 0x6, 0x6, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0x2, 0x200, 0x1, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x8, 0x3, 0x3, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0x101, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x955, 0x5, 0x6cdf13a0, 0x9, 0x3, 0x5, 0x10001, 0x80000001, 0x7fffffff, 0xed2, 0x1, 0xfffffffa, 0x2, 0x18d1, 0xfcf9, 0x3, 0x6, 0x80, 0x2, 0x80000000, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x8, 0x9, 0x1, 0x2, 0x8, 0x2, 0x0, 0x2, 0x7e, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0xb, 0x4, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xbffffffa, 0x5, 0x100008, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0x2d1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x800081, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0xfffffeff, 0x8dc3, 0x20000001, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7c, 0x7, 0x1, 0x0, 0xfffffffe, 0xdfed, 0xb, 0x77, 0x103, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0x4]}]}}]}, 0x844}}, 0x0) fcntl$notify(r0, 0x402, 0x0) 19.363344425s ago: executing program 0 (id=1682): socket$inet6(0xa, 0x3, 0x3c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket(0x1e, 0xa, 0xf632) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) r1 = syz_clone(0xe310a311, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x3, 0x5, 0x2e) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socket$inet_icmp(0x2, 0x2, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x4, &(0x7f0000000600)=0x82, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x500, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_ACTIVATE_TARGET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4005}, 0x400c000) getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0x43) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0xfffd, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x2, 0x0, 0x1000, 0x0, 0x9, 0x0, 0x0, 0x10000]}}, 0x5c) syz_clone3(&(0x7f0000003840)={0x100, &(0x7f0000000000), 0x0, 0x0, {0x37}, &(0x7f0000001000)=""/128, 0x80, 0x0, &(0x7f0000003800)=[r1], 0x1}, 0x58) socket$l2tp(0x2, 0x2, 0x73) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x810, 0xffffffffffffffff, 0x2000000) 18.627981067s ago: executing program 0 (id=1684): syz_emit_ethernet(0x60, &(0x7f0000000380)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x2a, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1f}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2, [{0x1}]}}}}}}, 0x0) 18.615890408s ago: executing program 32 (id=1684): syz_emit_ethernet(0x60, &(0x7f0000000380)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x2a, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1f}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2, [{0x1}]}}}}}}, 0x0) 10.967740397s ago: executing program 3 (id=1697): socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x1f00, 0x2, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) poll(0x0, 0x0, 0xb) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000006a0005"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) r6 = syz_pidfd_open(0x0, 0x0) ptrace$cont(0x7, r0, 0x5, 0x7c2) setns(r6, 0x24020000) r7 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r7, 0x0, 0xffffffffffffff9c, 0x0, 0x274) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x2000010, &(0x7f0000000000), 0x3e, 0x534, &(0x7f0000001340)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="a00000001000010427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000008000128009000100626f6e64000000007000028005001100010000000800030004000000080013000e00000014000880640101020a010100ac141435ac1e0001080012"], 0xa0}}, 0x0) 8.879533512s ago: executing program 1 (id=1703): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0xc) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000680)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffdfe, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r4, &(0x7f0000000340), 0x2000011a) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r6, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x2007ff}}}, 0x24}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r4) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) 8.027371729s ago: executing program 3 (id=1704): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'dummy0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r2, @ANYBLOB="14000200fe"], 0x48}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000047, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000040)=@ccm_128={{0x304}, "8f3b1aab3820f5a9", "f1d824b0617acfd35b47b56497f29d57", "810ec0e0", "e9d7b1bf98d7a5af"}, 0x28) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = memfd_create(0x0, 0x6) read(r3, &(0x7f0000000080)=""/221, 0xdd) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x14) eventfd(0xfffffffd) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x50d, &(0x7f0000001280)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x58, 0x0, 0x3}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000180)) 7.66866474s ago: executing program 2 (id=1706): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x1, 0x10000, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x1e, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x11, 0x200000000000003, 0x300) socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)}], 0x2}, 0x4000000) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x200000000000001, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 7.34389106s ago: executing program 3 (id=1707): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) bind$packet(r1, &(0x7f0000000180)={0x11, 0x2, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0xb, 0x1, 0x8, 0x2, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63e4, 0x0, 0x8000, 0x8, 0xff, 0x6, 0x6, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0x2, 0x200, 0x1, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x8, 0x3, 0x3, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0x101, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x955, 0x5, 0x6cdf13a0, 0x9, 0x3, 0x5, 0x10001, 0x80000001, 0x7fffffff, 0xed2, 0x1, 0xfffffffa, 0x2, 0x18d1, 0xfcf9, 0x3, 0x6, 0x80, 0x2, 0x80000000, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x8, 0x9, 0x1, 0x2, 0x8, 0x2, 0x0, 0x2, 0x7e, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0xb, 0x4, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xbffffffa, 0x1, 0x100008, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x800081, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0xfffffeff, 0x8dc3, 0x20000001, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7c, 0x7, 0x1, 0x0, 0xfffffffe, 0xdfed, 0xb, 0x77, 0x103, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0x4]}]}}]}, 0x468}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) keyctl$revoke(0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x30040084) close(r5) keyctl$read(0xb, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x5e, &(0x7f0000000380)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@lazytime}, {@nodioread_nolock}, {@minixdf}]}, 0x3, 0x44a, &(0x7f00000006c0)="$eJzs271vG2UYAPDn7CSlXyRU5aMfQKAgylfSpKV0YAGBxFAkJBjKGJK0CnUb1ASJVhEEhMqIKjGxIEYk/gImWBAwIbHCjipVKEsLk9HZd43t2E6dOnGpfz/p3Pe9O/d9nrt77ffujQPoW6PpSxKxKyL+iIjharV+h9HqPzdWlqb/WVmaTqJcfuvvpLLf9ZWl6XzX/H0788pAROGzJA40aXfh4qWzU6XS7IWsPr547v3xhYuXnp87N3Vm9szs+ckTJ44dnXjx+OQLXckzzev6/o/mD+57/Z0rb0yfuvLuL98lef4NeXTJaLuNT5bLXW6ut3bXlJOBHgZCR4rVbhqDlf4/HMVYPXnD8dqnPQ0O2FTlcrn8QOvNy2XgLpZEryMAeiP/ok/vf/Nli4Yed4RrL1dvgNK8b2RLdctAFLJ9Bhvub7tpNCJOLf/7dbrE5jyHAACo80M6/nmu2fivELXPhe7N5lBGIuK+iNgTEccjYm9E3B9R2ffBiHiow/YbJ0nWjn8KV2tr5aTDBtaRjv9eyua26sd/+egvRopZbXcl/8Hk9Fxp9kh2TA7H4La0PtGmjR9f/f2LVttqx3/pkrafjwWzOK4ObKt/z8zU4tTt5Fzr2icR+wca8j8ZlQm8fCYgPeT7ImL/BtuYe+bbg622rZ9/G12YZyp/E/FU9fwvR935X73Qkvbzk+P3RGn2yHh+Vaz162+X32zV/m3l3wXp+d/R9Pq/mf9IUjtfu9DJ//7V0+nr5T8/b3lPs9Hrfyh5u1IeytZ9OLW4eGEiYig5WQ26dv3k6nvzer5/mv/hQ837/55YPRIHIiK9iB+OiEci4tEs9sci4vGIONTmKPz8yhPvbTz/zZXmP9PR+V8tDEXjmuaF4tmfvq9rdKST/NPzf6xSOpytuZXPv1uJq9OrGQAAAP6vChGxK5LC2M1yoTA2Vv0b/r2xo1CaX1h89vT8B+dnqr8RGInBQv6ka7jmeehEdluf1ycb6kez58ZfFrdX6mPT86WZXicPfW5ni/6f+qvY6+iATef3WtC/9H/oX/o/9C/9H/pXk/6/vRdxAFuv2ff/xz2IA9h6Df3ftB/0Eff/0L820v99ZsDdoW1fHtq6OIAttbA91v+RvILCmkIU7ogwFDap0OtPJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgO74LwAA///lI+j0") 7.233880934s ago: executing program 1 (id=1708): madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x15) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000340)={&(0x7f0000000200)=""/190, 0xbe, 0x0, &(0x7f00000002c0)=""/78, 0x4e}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=r0, 0x4) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000c40)=@filter={'filter\x00', 0x42, 0x4, 0x2e0, 0xffffffff, 0x198, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x248, 0x248, 0x248, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'pim6reg0\x00', 'ip6gre0\x00', {}, {}, 0x73}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x8}}]}, @REJECT={0x28}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00', {0xff}}, 0x0, 0x70, 0xd0, 0x0, {0x60010000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev, 0x0, 0x0, [0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x101}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x4, "02528240bf8633cc2316be070461599202291aa7e0265f769d445c3e3f3a"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x4b44, 0x0) fsopen(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x400, &(0x7f0000000000)=ANY=[@ANYBLOB="6d706f6c3dd5b26e643a4e"]) ioprio_get$pid(0x2, r1) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffd, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xfffd, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_void(r4, 0x1, 0x1b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000006110b800000000006300000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x154, 0x10, 0x713, 0x70bd29, 0x24dfdbfe, {{@in=@rand_addr=0x64010101, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x4e21, 0x2, 0xa, 0x40, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffc, 0x8, 0xfffffffffffffffd, 0x9, 0x0, 0x8}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd28, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x61, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa8, 0x60, "210466d38547aa140db9a200000000c538c7cb7ab6"}}]}, 0x154}, 0x1, 0x0, 0x0, 0x880}, 0x0) 7.188054065s ago: executing program 2 (id=1709): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0xd, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setresuid(0xee01, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) process_madvise(r4, 0x0, 0x0, 0x10, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) sendto$inet(r0, &(0x7f0000000240)="6bb41d", 0x3, 0xc0400c0, 0x0, 0x0) sendto(r0, &(0x7f0000001e00)="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", 0xaa3, 0x2000c010, 0x0, 0x0) 6.978168072s ago: executing program 1 (id=1711): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7tNQzEABdBrvZ9fBRvAGGxAQc0EDMJnHFagoGcEZonk6H2SEZIU5xRX8pWuLYermkuSrn8qw17cT0u29Plcz92aQ37+xvKRPOQ9rU01Sd0Gvy9DTbvralLy/zx/zftN4xKH9nZ6qmzNYzlP8/p9qX8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwC07BgAA//89Dg4r") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x84042, 0x1fb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.dequeue\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x1000) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 6.240304325s ago: executing program 2 (id=1712): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)=@ethtool_cmd={0x6, 0xfffffeff, 0xde, 0xa2, 0x2, 0xff, 0x58, 0x8, 0x70, 0x40, 0x4, 0x3a, 0x1, 0xff, 0x1, 0xff, [0x5, 0x3]}}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51a, &(0x7f0000001200)="$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") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) r4 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ff9000/0x4000)=nil) r5 = shmat(r4, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r4, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r5) sendmsg$nl_route_sched(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e00)=@newqdisc={0x844, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x818, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x9, 0xffe0000, 0x8, 0xfff, 0x8, 0xcba, 0x0, 0x400, 0x2, 0x81, 0x4, 0x8, 0xeaf0, 0x8, 0x7ab, 0x2, 0xfffffffc, 0x6, 0xad22, 0x8, 0x6, 0x5, 0x4, 0x30, 0x8, 0x0, 0x5, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x4, 0x1, 0x1, 0x40, 0x7, 0x9, 0x1, 0xa0e3, 0x0, 0x7fffffff, 0x9, 0x7, 0x0, 0x2, 0x2, 0x7, 0x4, 0x0, 0x2, 0x80000001, 0x69, 0x3, 0x400, 0x4, 0x2, 0xf973, 0x5, 0x0, 0x868, 0x8, 0x100, 0x0, 0x367, 0x1, 0x2, 0x9939, 0x1, 0x38, 0x8, 0xffffffff, 0x0, 0x3, 0x7, 0x4, 0x4, 0x8, 0x5, 0x7ff, 0xc2, 0x7bd, 0x6, 0x8, 0x4, 0x9, 0x10000, 0x3, 0xd, 0x100, 0x7, 0x3ff, 0x4, 0x80000001, 0x4, 0x7, 0x3, 0x5, 0x5, 0x10000, 0x6, 0x83fe, 0x2, 0x5, 0x1000, 0x81, 0xf0, 0x6, 0x8, 0x3, 0x1, 0xdd, 0x9, 0x1ff, 0x6, 0xe, 0xfff, 0x717, 0x7, 0x8, 0x5, 0x10001, 0x6, 0x4, 0x2, 0x6f1, 0x7, 0xffff8924, 0x4, 0x0, 0x6, 0x6, 0x7fffffff, 0x1, 0xa, 0x5, 0x10001, 0x2, 0x6, 0x0, 0xe1b, 0x2, 0x8, 0xfffffffb, 0x2, 0x9, 0xa, 0x4, 0x0, 0x7, 0x80, 0x7, 0x7, 0x2, 0x5, 0x0, 0xd, 0x89e7, 0x3, 0x64e, 0x4f42c7f2, 0x69b, 0x3b3, 0xf3b8, 0xf, 0x5, 0x80000001, 0x1, 0x7, 0x1, 0x200, 0x4, 0x7, 0x4, 0xe, 0x0, 0x4, 0x1, 0x10, 0xacc, 0xda, 0x8, 0x6b540000, 0x1ff, 0x6, 0x401, 0xe, 0x6, 0x5, 0x4, 0xb, 0x900, 0x0, 0xe, 0x0, 0x9, 0x1, 0xffff0001, 0x8, 0x2, 0xe00000, 0xb57, 0x5, 0x7, 0x6, 0x2, 0x10001, 0x8, 0x1, 0xe, 0x6, 0x6, 0x7, 0xb91, 0xffff8000, 0x4, 0x3695b842, 0x101, 0x6, 0x3, 0x5, 0x3559, 0x8, 0x9, 0x401, 0xc, 0x2f8, 0x800, 0x5, 0x9, 0x5, 0x6, 0x5, 0x2, 0x5, 0x1, 0xfffffff8, 0x7106, 0x7, 0x0, 0xffff924f, 0x100, 0x3, 0x8c1, 0x9, 0x4, 0xfffffff7, 0x51c4, 0xba2, 0xb, 0x9, 0x100, 0xe, 0x2e, 0x100]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63e4, 0x0, 0x8000, 0x8, 0xff, 0x6, 0x6, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0x2, 0x200, 0x1, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x8, 0x3, 0x3, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0x101, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x955, 0x5, 0x6cdf13a0, 0x9, 0x3, 0x5, 0x10001, 0x80000001, 0x7fffffff, 0xed2, 0x1, 0xfffffffa, 0x2, 0x18d1, 0xfcf9, 0x3, 0x6, 0x80, 0x2, 0x80000000, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x8, 0x9, 0x1, 0x2, 0x8, 0x2, 0x0, 0x2, 0x7e, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0xb, 0x4, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xbffffffa, 0x5, 0x100008, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0x2d1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x800081, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0xfffffeff, 0x8dc3, 0x20000001, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7c, 0x7, 0x1, 0x0, 0xfffffffe, 0xdfed, 0xb, 0x77, 0x103, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0x4]}]}}]}, 0x844}}, 0x0) fcntl$notify(r0, 0x402, 0x0) 6.196973547s ago: executing program 3 (id=1714): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 6.113141439s ago: executing program 3 (id=1715): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000180)=@ethtool_cmd={0x6, 0xfffffeff, 0xde, 0xa2, 0x2, 0xff, 0x58, 0x8, 0x70, 0x40, 0x4, 0x3a, 0x1, 0xff, 0x1, 0xff, [0x5, 0x3]}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) r4 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ff9000/0x4000)=nil) r5 = shmat(r4, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r4, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r5) sendmsg$nl_route_sched(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e00)=@newqdisc={0x844, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x818, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x9, 0xffe0000, 0x8, 0xfff, 0x8, 0xcba, 0x0, 0x400, 0x2, 0x81, 0x4, 0x8, 0xeaf0, 0x8, 0x7ab, 0x2, 0xfffffffc, 0x6, 0xad22, 0x8, 0x6, 0x5, 0x4, 0x30, 0x8, 0x0, 0x5, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x4, 0x1, 0x1, 0x40, 0x7, 0x9, 0x1, 0xa0e3, 0x0, 0x7fffffff, 0x9, 0x7, 0x0, 0x2, 0x2, 0x7, 0x4, 0x0, 0x2, 0x80000001, 0x69, 0x3, 0x400, 0x4, 0x2, 0xf973, 0x5, 0x0, 0x868, 0x8, 0x100, 0x0, 0x367, 0x1, 0x2, 0x9939, 0x1, 0x38, 0x8, 0xffffffff, 0x0, 0x3, 0x7, 0x4, 0x4, 0x8, 0x5, 0x7ff, 0xc2, 0x7bd, 0x6, 0x8, 0x4, 0x9, 0x10000, 0x3, 0xd, 0x100, 0x7, 0x3ff, 0x4, 0x80000001, 0x4, 0x7, 0x3, 0x5, 0x5, 0x10000, 0x6, 0x83fe, 0x2, 0x5, 0x1000, 0x81, 0xf0, 0x6, 0x8, 0x3, 0x1, 0xdd, 0x9, 0x1ff, 0x6, 0xe, 0xfff, 0x717, 0x7, 0x8, 0x5, 0x10001, 0x6, 0x4, 0x2, 0x6f1, 0x7, 0xffff8924, 0x4, 0x0, 0x6, 0x6, 0x7fffffff, 0x1, 0xa, 0x5, 0x10001, 0x2, 0x6, 0x0, 0xe1b, 0x2, 0x8, 0xfffffffb, 0x2, 0x9, 0xa, 0x4, 0x0, 0x7, 0x80, 0x7, 0x7, 0x2, 0x5, 0x0, 0xd, 0x89e7, 0x3, 0x64e, 0x4f42c7f2, 0x69b, 0x3b3, 0xf3b8, 0xf, 0x5, 0x80000001, 0x1, 0x7, 0x1, 0x200, 0x4, 0x7, 0x4, 0xe, 0x0, 0x4, 0x1, 0x10, 0xacc, 0xda, 0x8, 0x6b540000, 0x1ff, 0x6, 0x401, 0xe, 0x6, 0x5, 0x4, 0xb, 0x900, 0x0, 0xe, 0x0, 0x9, 0x1, 0xffff0001, 0x8, 0x2, 0xe00000, 0xb57, 0x5, 0x7, 0x6, 0x2, 0x10001, 0x8, 0x1, 0xe, 0x6, 0x6, 0x7, 0xb91, 0xffff8000, 0x4, 0x3695b842, 0x101, 0x6, 0x3, 0x5, 0x3559, 0x8, 0x9, 0x401, 0xc, 0x2f8, 0x800, 0x5, 0x9, 0x5, 0x6, 0x5, 0x2, 0x5, 0x1, 0xfffffff8, 0x7106, 0x7, 0x0, 0xffff924f, 0x100, 0x3, 0x8c1, 0x9, 0x4, 0xfffffff7, 0x51c4, 0xba2, 0xb, 0x9, 0x100, 0xe, 0x2e, 0x100]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63e4, 0x0, 0x8000, 0x8, 0xff, 0x6, 0x6, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0x2, 0x200, 0x1, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x8, 0x3, 0x3, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0x101, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x955, 0x5, 0x6cdf13a0, 0x9, 0x3, 0x5, 0x10001, 0x80000001, 0x7fffffff, 0xed2, 0x1, 0xfffffffa, 0x2, 0x18d1, 0xfcf9, 0x3, 0x6, 0x80, 0x2, 0x80000000, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x8, 0x9, 0x1, 0x2, 0x8, 0x2, 0x0, 0x2, 0x7e, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0xb, 0x4, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xbffffffa, 0x5, 0x100008, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0x2d1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x800081, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0xfffffeff, 0x8dc3, 0x20000001, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7c, 0x7, 0x1, 0x0, 0xfffffffe, 0xdfed, 0xb, 0x77, 0x103, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0x4]}]}}]}, 0x844}}, 0x0) fcntl$notify(r0, 0x402, 0x0) 6.096230229s ago: executing program 4 (id=1716): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x189482) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) close(r3) 6.07641134s ago: executing program 1 (id=1717): io_setup(0x239f, &(0x7f0000000380)=0x0) syz_emit_ethernet(0x6e, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x38, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x20, 0x0, 0x0, 0xff6f, {[@md5sig={0x13, 0x12, "7bcf1abbbad1c81b5958e213288e8c5c"}, @md5sig={0x13, 0x12, "699e0cb8d65a34c2eca5ed7eaebd1b18"}]}}}}}}}}, 0x0) io_getevents(r0, 0x8, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6621, &(0x7f0000000000)={0x0, 0x4c1f, 0x10, 0x1, 0x15c}, &(0x7f0000000200), &(0x7f00000000c0), &(0x7f0000000000)) futex_waitv(&(0x7f0000001380)=[{0x8, &(0x7f0000000080)=0x8, 0x82}, {0x80000001, &(0x7f0000000100)=0x3, 0x82}, {0x0, &(0x7f0000000140)=0x5, 0x82}, {0x100000001, &(0x7f0000000180)=0x40, 0x2}, {0x10, &(0x7f00000001c0)=0x261, 0x2}, {0x8, &(0x7f0000000240)=0x1, 0x82}, {0x0, &(0x7f0000000280)=0x7, 0x82}, {0x800, &(0x7f00000002c0)=0xc, 0x82}, {0x7e5a, &(0x7f0000000300)=0x4, 0x2}, {0x5, &(0x7f0000000340)=0x80000000, 0x2}, {0xfffffffffffff9a1, &(0x7f00000003c0)=0x87c4, 0x82}, {0x28d47a2, &(0x7f0000000400)=0x6, 0x82}, {0x100000001, &(0x7f0000000440)=0x5, 0x82}, {0x4, &(0x7f0000000480)=0x6, 0x82}, {0xfffffffffffffffa, &(0x7f00000004c0)=0x6, 0x82}, {0x0, &(0x7f0000000500)=0x7, 0x2}, {0x2, &(0x7f0000000540)=0x1ff, 0x2}, {0x8, &(0x7f0000000580)=0x4, 0x82}, {0x7fffffffffffffff, &(0x7f00000005c0)=0x9, 0x2}, {0xa281, &(0x7f0000000600)=0x2000000000, 0x82}, {0x0, &(0x7f0000000640)=0x4}, {0xfffffffffffffc01, &(0x7f0000000680)=0xff, 0x2}, {0xe173, &(0x7f00000006c0)=0x896, 0x82}, {0xb9e, &(0x7f0000000700)=0x1, 0x2}, {0x0, &(0x7f0000000740)=0x17, 0x82}, {0x10, &(0x7f0000000780), 0x82}, {0x0, &(0x7f00000007c0)=0x5, 0x82}, {0x2, &(0x7f0000000800)=0x5, 0x2}, {0x678, &(0x7f0000000840)=0x4, 0x82}, {0x5, &(0x7f0000000880)=0xa582, 0x2}, {0x800000, &(0x7f00000008c0)=0xd6, 0x82}, {0x70, &(0x7f0000000900)=0x9f, 0x82}, {0xfffffffffffffffb, &(0x7f0000000940)=0x101, 0x2}, {0x2f, &(0x7f0000000980)=0x9, 0x80}, {0x29, &(0x7f00000009c0)=0x3, 0x2}, {0x5, &(0x7f0000000a00)=0x40, 0x2}, {0x9, &(0x7f0000000a40), 0x2}, {0xffffffffffff8001, &(0x7f0000000a80)=0x45, 0x2}, {0x7, &(0x7f0000000ac0)=0x2, 0x82}, {0x6, &(0x7f0000000b00)=0x3, 0x82}, {0x5, &(0x7f0000000b40)=0x6a87, 0x2}, {0x44, &(0x7f0000000b80)=0x7fffffffffffffff, 0x80}, {0x1, &(0x7f0000000bc0)=0x6, 0x2}, {0x6, &(0x7f0000000c00)=0xc68}, {0x7, &(0x7f0000000c40)=0x73, 0x82}, {0x4, &(0x7f0000000c80)=0x5, 0x82}, {0x7, &(0x7f0000000cc0)=0x2, 0x2}, {0x8, &(0x7f0000000d00)=0xa556605, 0x82}, {0x6, &(0x7f0000000d40)=0x1bf, 0x82}, {0x2, &(0x7f0000000d80)=0x80, 0x82}, {0x10000, &(0x7f0000000dc0)=0x5, 0x82}, {0x406, &(0x7f0000000e00)=0x5, 0x2}, {0x4, &(0x7f0000000e40)=0x6, 0x82}, {0x6, &(0x7f0000000e80)=0x9, 0x82}, {0x4, &(0x7f0000000ec0)=0xfd2, 0x82}, {0xc, &(0x7f0000000f00)=0x10000, 0x82}, {0xffffffffffffffb3, &(0x7f0000000f40)=0x3, 0x81}, {0x7, &(0x7f0000000f80), 0x2}, {0xc8, &(0x7f0000000fc0)=0xbdd, 0x82}, {0x4, &(0x7f0000001000)=0xfffffffeffffffff, 0x82}, {0x47f0, &(0x7f0000001040)=0x6, 0x82}, {0xfb, &(0x7f0000001080)=0x9}, {0x7, &(0x7f00000010c0)=0x40, 0x2}, {0x3, &(0x7f0000001100), 0x82}, {0x800000, &(0x7f0000001140)=0x6, 0x2}, {0x6e, &(0x7f0000001180)=0x2, 0x82}, {0x4, &(0x7f00000011c0)=0x10000, 0x2}, {0x10, &(0x7f0000001200)=0x50000, 0x2}, {0x9, &(0x7f0000001240)=0x8, 0x2}, {0x3, &(0x7f0000001280)=0xb, 0x82}, {0x200, &(0x7f00000012c0)=0x7fffffff, 0x82}, {0xffffffffffff7fff, &(0x7f0000001300)=0x8, 0x82}, {0x6, &(0x7f0000001340)=0x2, 0x82}], 0x49, 0x0, &(0x7f0000001a80), 0x0) 5.663896153s ago: executing program 1 (id=1718): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x1, 0x10000, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x1e, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x11, 0x200000000000003, 0x300) socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)}], 0x2}, 0x4000000) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x200000000000001, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 5.349098833s ago: executing program 1 (id=1719): socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x1f00, 0x2, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) poll(0x0, 0x0, 0xb) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000006a0005"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) r6 = syz_pidfd_open(0x0, 0x0) ptrace$cont(0x7, r0, 0x5, 0x7c2) setns(r6, 0x24020000) r7 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r7, 0x0, 0xffffffffffffff9c, 0x0, 0x274) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x2000010, &(0x7f0000000000), 0x3e, 0x534, &(0x7f0000001340)="$eJzs3cFvI1cZAPBvJnE2u5viFBAqlSgVLdqtYO1NQ9sIISgXOFUCyn0JiRNFseModsomqmgqDtwREkicOHGpxB+AhPbAjQuqVIleEAcECIRgCwckoIPGHpPEsZPQTeJu/PtJL35vPDPfvLH9PG/8MhPA2HoyIl6MiImIeCYiysX0tEix1035fO/cf3UpT0lk2ct/TSIppvXWlZcnI+J6sdh0RHztyxHfTI7Gbe3sri/W67WtolxtNzarrZ3dW2uNxdXaam1jfn7u+YUXFp5buJ0VHqies73MT770+Z9/+lu/u/Pnm9/ON+tzH4lS9NXjLHWrXursi558H22dR7ARmCjqUxr1hgAAcGofjIhPdI7/yzHROZrrMzGKrQIAAADOSvaFmfh3EpEBAAAAl1YaETORpJVivO9MpOlUcW7gw3EtrTdb7U+tNLc3lvPnImajlK6s1Wu3i7HCs1FK8vJcMca2V362rzwfEY9GxPfLV/NyDBgSDAAAAJyT6339/3+U007+ZAP+TwAAAAB4/5odWgAAAAAuC11+AAAAuPz6+/+u9w8AAACXyldeeilPWe/+18uv7GyvN1+5tVxrrVca20uVpebWZmW12Vyt1ypLzcZJ66s3m5ufiY3tu9V2rdWutnZ27zSa2xvtO2uHboENAAAAXKBHP37v7TQi9j57tZOiuA4gwCF/GPUGAGfJUD8YX67iDeOrdCQDjJuT7sdp8A4AADz8bnz03ttJ3+//vfv/OyUAl5uxPgAwfvz+D+OrZAQgjK3J4hzAB7rFK8PmG/r7/69OGynLIt4sH5zi/CIAAFysmU5K0krRD5iJNK1UIh6JSGejlKys1Wu3i/7Br8ulK3l5rrNkcuKYYQAAAAAAAAAAAAAAAAAAAAAAAACgK8uSyAAAAIBLLSL9U9K5mn/EjfLTM/3nB6aSf5bjj0XhRy//4O5iu701l0//W+deXlMR0f5hMf3ZobcPAwAAAB7QZP+EZG/ovN1+esQvi348AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJyld+6/utRLFxn3L1+MiNlB8SdjuvM4HaWIuPb3JCYPLJdExMQZxN97PSIeGxQ/iXez7LUotmI//tX/LXv1nOPPdnZNf/yuNCKun0F8GGf38vbnxUGfvzSe7DwO/vxNFulBHW7/3piK2I/fjfxYp50b1P49cmRtjYExHn/rp9VurnQ0/usRj08Obn967W8yJP5TR9b2ryzLjsb/xtd3d4fVP/txxI2B3z/JoVjVdmOz2trZvbXWWFytrdY25ufnnl94YeG5hdvVlbV6rfg7MMb3Pvazd4fFz+t/bUD83/6m2/4eV/+nh620z3/eunv/Q93skRcgj3/zqYHfv9OxH/+7Swfeb2nx3ffJIp9vy41efq+bP+iJN9584rj6Lw/Z/ye9/jdPWf9nvvqd359yVgDgArR2dtcX6/Xa1jGZ6VPM8zBmfjE9ouhXip0/fJ5SDH0qe6278PtjH773TH60uj+lV6ut1vT/8c4870x2IbGudI7nT7vU1AXVfSTNEQAAcI72D/pHvSUAAAAAAAAAAAAAAAAAAAAwvi7iUmr9MfdGU1UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGP9NwAA//+s3NDj") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="a00000001000010427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000008000128009000100626f6e64000000007000028005001100010000000800030004000000080013000e00000014000880640101020a010100ac141435ac1e0001080012"], 0xa0}}, 0x0) 4.944064746s ago: executing program 4 (id=1720): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) bind$packet(r1, &(0x7f0000000180)={0x11, 0x2, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0xb, 0x1, 0x8, 0x2, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63e4, 0x0, 0x8000, 0x8, 0xff, 0x6, 0x6, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0x2, 0x200, 0x1, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x8, 0x3, 0x3, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0x101, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x955, 0x5, 0x6cdf13a0, 0x9, 0x3, 0x5, 0x10001, 0x80000001, 0x7fffffff, 0xed2, 0x1, 0xfffffffa, 0x2, 0x18d1, 0xfcf9, 0x3, 0x6, 0x80, 0x2, 0x80000000, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x8, 0x9, 0x1, 0x2, 0x8, 0x2, 0x0, 0x2, 0x7e, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0xb, 0x4, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xbffffffa, 0x1, 0x100008, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x800081, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0xfffffeff, 0x8dc3, 0x20000001, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7c, 0x7, 0x1, 0x0, 0xfffffffe, 0xdfed, 0xb, 0x77, 0x103, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0x4]}]}}]}, 0x468}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) keyctl$revoke(0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x30040084) close(r5) keyctl$read(0xb, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x5e, &(0x7f0000000380)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@lazytime}, {@nodioread_nolock}, {@minixdf}]}, 0x3, 0x44a, &(0x7f00000006c0)="$eJzs271vG2UYAPDn7CSlXyRU5aMfQKAgylfSpKV0YAGBxFAkJBjKGJK0CnUb1ASJVhEEhMqIKjGxIEYk/gImWBAwIbHCjipVKEsLk9HZd43t2E6dOnGpfz/p3Pe9O/d9nrt77ffujQPoW6PpSxKxKyL+iIjharV+h9HqPzdWlqb/WVmaTqJcfuvvpLLf9ZWl6XzX/H0788pAROGzJA40aXfh4qWzU6XS7IWsPr547v3xhYuXnp87N3Vm9szs+ckTJ44dnXjx+OQLXckzzev6/o/mD+57/Z0rb0yfuvLuL98lef4NeXTJaLuNT5bLXW6ut3bXlJOBHgZCR4rVbhqDlf4/HMVYPXnD8dqnPQ0O2FTlcrn8QOvNy2XgLpZEryMAeiP/ok/vf/Nli4Yed4RrL1dvgNK8b2RLdctAFLJ9Bhvub7tpNCJOLf/7dbrE5jyHAACo80M6/nmu2fivELXPhe7N5lBGIuK+iNgTEccjYm9E3B9R2ffBiHiow/YbJ0nWjn8KV2tr5aTDBtaRjv9eyua26sd/+egvRopZbXcl/8Hk9Fxp9kh2TA7H4La0PtGmjR9f/f2LVttqx3/pkrafjwWzOK4ObKt/z8zU4tTt5Fzr2icR+wca8j8ZlQm8fCYgPeT7ImL/BtuYe+bbg622rZ9/G12YZyp/E/FU9fwvR935X73Qkvbzk+P3RGn2yHh+Vaz162+X32zV/m3l3wXp+d/R9Pq/mf9IUjtfu9DJ//7V0+nr5T8/b3lPs9Hrfyh5u1IeytZ9OLW4eGEiYig5WQ26dv3k6nvzer5/mv/hQ837/55YPRIHIiK9iB+OiEci4tEs9sci4vGIONTmKPz8yhPvbTz/zZXmP9PR+V8tDEXjmuaF4tmfvq9rdKST/NPzf6xSOpytuZXPv1uJq9OrGQAAAP6vChGxK5LC2M1yoTA2Vv0b/r2xo1CaX1h89vT8B+dnqr8RGInBQv6ka7jmeehEdluf1ycb6kez58ZfFrdX6mPT86WZXicPfW5ni/6f+qvY6+iATef3WtC/9H/oX/o/9C/9H/pXk/6/vRdxAFuv2ff/xz2IA9h6Df3ftB/0Eff/0L820v99ZsDdoW1fHtq6OIAttbA91v+RvILCmkIU7ogwFDap0OtPJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgO74LwAA///lI+j0") 3.645345976s ago: executing program 4 (id=1721): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={&(0x7f0000000440), 0x1}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000021) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x863, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_read_part_table(0x593, &(0x7f00000005c0)="$eJzs0r1LK2kUB+A3A5c0e4lcLli4hWCwigqx0CIpRGJIY0RcsbAWLLQQLCwkEq39+AcUv0BsxD6lGEEUYiUpxXpBsUmVZdfZxmplUdnleZrhPefMHF5+E/hPi8Lv7XY7EUJoJ9//9m+nhbFS98TI5FQIiTAbQij8+stfnUQ88fdXz+NzOT6XktnG/vXo82nHTc9dPX0Yxf1aFMJaCGHh4Sj1b+/G/99Z/jK1vrFU3FzJz98XVx8H5/oKXVuFxZ2hg1xlujM3E/9Ytehz9qcbw8e37fLT7vf+b/VGK3sVz2USH7Ofr/U2/72f1Wa1Nd57sjyQ+dG8qGzHub/IHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+GBn+cvU+sZScXMlP39fXH0cnOsrdG0VFneGDnKV6c7cTPQ6V4s+Z3+6MXx82y4/7X7v/1ZvtLJX8Vwm8TH7+Vpv89/7WW1WW+O9J8sDmR/Ni8p2nPuL/AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf6gwVuqeGJmcCiERZkMIo1HH0Z/1dvK1n4jnzuNnOa6XktnG/vXo82nHTc9dPX04EddrUQhrIYSFh6PUp1+Gd/sjAAD///tch0s=") (fail_nth: 7) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) timer_create(0x3, 0x0, &(0x7f0000000000)=0x0) timer_gettime(r0, &(0x7f00000000c0)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x164, 0x10, 0x713, 0x70bd29, 0x24dfdbfe, {{@in=@rand_addr=0x64010101, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x4e21, 0x2, 0xa, 0x40, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffc, 0x8, 0xfffffffffffffffd, 0x9, 0x0, 0x8}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd28, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x71, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x128, 0x60, "210466d38547aa140db9a200000000c538c7cb7ab63ef900e0559fc83f8e2fdbbec1423862"}}]}, 0x164}, 0x1, 0x0, 0x0, 0x880}, 0x0) 2.391704486s ago: executing program 4 (id=1724): bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) r0 = socket$kcm(0x1e, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000080000000000000003000000850000002c000000850000001100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000140)=0x1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000740)={{0x1, 0x1, 0x18, r0, {r0}}, './file0/file0\x00'}) execveat(r3, &(0x7f0000000780)='./file0\x00', &(0x7f0000000a40)={[&(0x7f0000000b00)='##.+,\x00', &(0x7f0000000d40)='syz0\x00OL\xbfr\xd8pz\x7f\x148\v\x8d\xe7\x89\x82\xd1j\xba\x93\xd2s,\xe4\xf4\x84 \xbeM!\xc4?\x1f\xc8X\xb0\x92\xf4\xd4\xc8to\xd6*\xe7B\xe7\xbe!\a\xc5c1\xa8\v\xcdM\xd9\xc0\xeaJ4_q\xdc\xc3\xf3+:u\xb1p\xc1f\x95)\xde\xd2\x8b\xdf?\x03T6*\x14\x8c\xc1\xd4\xb2\xc5\x01\xf2*\x02A[\xf5j|B\xc8\x12p\x0f&\xf2*\x05K\x1a\x0f\xc3\x15>\xd6\xd3\x1f\x11\x18\x18\xd0=\xff\xa6\xa3\xd2\xb2U(\x1eV\x15/~\xaa\x16\xb1\x17$?\xbeR\x87Z\xbe^\xadm\xb4dQ^)\x9f\xe7\xe1\x99\x96\xcaDw\f\xd2\x84\xc7\x144\x92\xae,n]c\x1b\\\xe0\x90IT\xe5?\xa0\n\x8f\xf4\xfb\xab\xfe_\xc3\x1b\xe1\xb2\xda\xf36\xae\xbc\xf4*9g\xef^\x8c\x11G\x14\xf0e{Z\xe9\x91\xd1\x00\x00\x00\x00\x00\x00', &(0x7f0000000880)='!*\b\x93\xa1\x00', &(0x7f00000008c0)='#\x00', &(0x7f0000000900)='*\x00', &(0x7f0000000940)='\x00', &(0x7f0000000980)='cpd\x00', &(0x7f00000009c0)='.&-\x00', &(0x7f0000000a00)='[\x00']}, &(0x7f0000000bc0)={[&(0x7f0000000ac0)='/selinux/relabel\x00', &(0x7f0000000c40)='macvlan0\x00$\xc3*\xd8\x8e\xf9\xc9tS\xd1\n\x9aa\x80)\xd2#\x9c\x90\xd4\xd3\x13\xcamz\xe2\x88\xda8\xfd\xefL\x1eu\xdf\a\\+\xe5\x0304\ts6\x86)?\xd7\x01\rt\x94J]\x84\x82\xa3\xa9E\x03&\xe8\xed \xd7`W\xbb\xb6xZM\x15\f\xac\xc6\x1a7_\xae\xdb\xf1gmV\x03FfFk\xbb\xfd\x8b\xf1/)\xbb \xb7dt\x1d+\x83\xd8\xce\t\xfa\x97\xc3R\x9f\xb4Gu\xd28\xcfA\xb0Z<\xd8\xc1F\xa0\x99=O\\\a+\x81\xac\x06\xb1\x18\xaa\rb\x8f\xc3?\b\xa0\xe7\xad+M\xc9\x7f\xd0\x98b>\x0fY8K\xb0\xf2\xad+\xaa\xe5\xa4\x06#\x12%\x82_3\a\xd7\xb5\xe9\x058\xfeI\xcd\xb3', &(0x7f0000000b40)=')y\x03DD', &(0x7f0000000b80)='batadv_slave_1\x00']}, 0x400) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, './file0/file0\x00'}, 0x6e) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000500)=r4, 0xfed0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c00)=ANY=[@ANYBLOB="7d2c00000102010400000000000000000a00000206000740000300001800028014000180002093e44bc47e523afbac08000100000000000f0002007f000001"], 0x34}, 0x1, 0x0, 0x0, 0x20004880}, 0x4044814) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x200, 0x1000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x4008, 0x400000, 0x800, 0x0, 0x0, 0x40000, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = accept4$inet6(r2, &(0x7f00000005c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f0000000800)=0xffffff48, 0x0) ppoll(&(0x7f0000000580), 0x0, 0x0, 0x0, 0x0) r7 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) readv(r7, &(0x7f0000000680)=[{&(0x7f0000000140)=""/42, 0x2a}, {0x0}], 0x2) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000202000000000000000300000d000000000300000003000000000000000300000004000000010000000000000000000009000000000000005f"], 0x0, 0x5e, 0x0, 0x1}, 0x28) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000580)={0x8, 0x5, 0x0, 0x1, 0x4, 0x9, 0xf982, 0x8, 0x0}, &(0x7f0000000640)=0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000006c0)={0xcd4e, 0x8204, 0x9b, 0x9, r9}, &(0x7f0000000700)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x348, 0x1d0, 0x348, 0x348, 0x0, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@uncond, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0xe}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2ab, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {}, 0xc, 0x2, 0x71}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="5370bd4294c1", 0x200, 0xe, [0x25, 0x1e, 0x18, 0x2f, 0x38, 0x40, 0x11, 0x23, 0x16, 0x1f, 0x30, 0x38, 0x18, 0x27, 0x15, 0x1], 0x2, 0x0, 0x9}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0xffffffff, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x2, 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x2, 0x2}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'ipvlan0\x00', 'batadv_slave_1\x00', {}, {}, 0x11}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc, 0x7a}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) socket$nl_netfilter(0x10, 0x3, 0xc) 1.847628772s ago: executing program 5 (id=1728): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x189482) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) close(r4) 1.692253277s ago: executing program 5 (id=1729): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r3, &(0x7f0000003d40)=[{&(0x7f0000000380)=""/128, 0x80}], 0x1, 0x33, 0xf7) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b00)={0x5}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xaa, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3}, 0x50) openat$procfs(0xffffffffffffff9c, &(0x7f0000000c40)='/proc/asound/seq/timer\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001040)={{0x1}, &(0x7f0000000c80), &(0x7f0000001000)=r0}, 0x20) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x468, 0x0, 0x5002004a, 0x6, 0x0, 0x3, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@dev, @broadcast, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00'}, 0x0, 0x2a0, 0x300, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0x0, [], 0x0, 0x0, 0x4000000000}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) 1.61526981s ago: executing program 5 (id=1730): openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x42032, r0, 0x80000000) prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x200000000000bf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x7fffffff}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x50}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.479875684s ago: executing program 4 (id=1731): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0xc) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000680)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffdfe, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r4, &(0x7f0000000340), 0x2000011a) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r6, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x2007ff}}}, 0x24}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r4) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) 1.185100804s ago: executing program 4 (id=1732): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x200000000000bf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) socket$inet6(0xa, 0x1, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4804) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000400)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40041}, 0x48850) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xf, &(0x7f00000008c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000000000000b7000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r4}, 0x94) write$UHID_INPUT(r2, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) r5 = socket$rds(0x15, 0x5, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x22000011, &(0x7f0000000000)={[{@commit}, {@noblock_validity}, {@user_xattr}]}, 0x86, 0x48e, &(0x7f0000000400)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r6 = request_key(&(0x7f0000000140)='syzkaller\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='\x00', 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_QUERY(0x18, r6, 0x0, &(0x7f00000002c0)='\xbc\'([\x00', &(0x7f0000000980)) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[@rdma_dest={0x18, 0x114, 0x2, {0x4}}, @fadd={0x58, 0x114, 0x6, {{0x7, 0x6}, &(0x7f0000000940), &(0x7f0000000a80)=0xcb35, 0x94f3, 0x4, 0x6, 0x7, 0x2, 0x3ff}}, @mask_cswp={0x58, 0x114, 0x9, {{0x7b, 0xac}, &(0x7f0000000b40)=0x9, &(0x7f0000000b80)=0x4, 0x1, 0x200, 0x465c, 0x6, 0x0, 0x5}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x1}], 0xe0, 0x40408c5}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)}, 0x0) 568.060903ms ago: executing program 5 (id=1733): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0x80}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) (fail_nth: 7) 419.883197ms ago: executing program 5 (id=1734): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x500, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x4a}]}, &(0x7f0000000380)='GPL\x00', 0x5, 0x77, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x5}, 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) fdatasync(r1) (async) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x6a, 0x1, 0x59, 0x6, 0x0, 0x8, 0x101800, 0x5, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xb, 0x2, @perf_bp={&(0x7f0000000140), 0x5}, 0x58f2693a5910c10f, 0x2, 0x1, 0x7, 0x10001, 0x9, 0x8000, 0x0, 0x3, 0x0, 0x2}, r0, 0x4, r1, 0x8) (async) r2 = semget(0x1, 0x3, 0x6b4) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000ffff3201", @ANYRESDEC], 0x138) (async) semctl$GETZCNT(r2, 0x0, 0xf, 0x0) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x0, @private0}, 0x1c) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) (async) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22, 0x100, @loopback={0xff00000000000002}}, 0x1c) (async) socket$inet6(0xa, 0x2, 0x1000) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000002000)='./bus\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/318], 0x1, 0x26e, &(0x7f0000001300)="$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") (async) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x10003}) r6 = socket$netlink(0x10, 0x3, 0x8000000004) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000800)={0xa, 0x4e24, 0x4bf, @empty, 0x34bbe269}, 0x1c) writev(r6, &(0x7f0000000680)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108ec50000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 387.317348ms ago: executing program 5 (id=1735): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) prctl$PR_GET_SECUREBITS(0x1b) r2 = socket(0x1e, 0x4, 0x0) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f00000010c0)={0x3, 0x1, 0x456e}) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0x20}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r2, &(0x7f00000030c0), 0x0, 0x9200000000000000) syz_usb_disconnect(0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000000080)={0xc, {"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", 0x1000}}, 0x1006) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r5, 0x4b72, &(0x7f0000001d40)={0x2, 0x1, 0x20001b, 0x15, 0x115, 0x0}) syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0xa002) 0s ago: executing program 3 (id=1736): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000814}, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYRESOCT=r0], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001a000100000000000000000081010400000000002900010008000f00fe000000140001"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f00007b4000/0x2000)=nil, &(0x7f0000a7b000/0x3000)=nil, &(0x7f000035f000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000063c000/0x2000)=nil, &(0x7f00004f2000/0x4000)=nil, &(0x7f000004b000/0x2000)=nil, &(0x7f0000910000/0x1000)=nil, &(0x7f00005f8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000002c0)="607da06e8e80c5bff8c02b3254f82d68dae4d2e133e452d56746fff1436961a9e1a1f15876e1a1de65440200dba09149cd4175dae6dcf46d8f683beb540be97974a2fc8a0482d738b244", 0x4a, r4}, 0x68) ftruncate(r6, 0x7fffffffffffffff) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000100)=0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r6, &(0x7f00000001c0), 0x0) unshare(0x22020400) syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c002f9fa33d3a6430270000000000000000ff00000000000000010004c91000000000"], 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0xb1bd, 0x0, 0xfffffffffffffffc, 0x0, 0x1b}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) kernel console output (not intermixed with test programs): ) [ 487.751779][ T8777] Tainted: [W]=WARN [ 487.751808][ T8777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 487.751852][ T8777] Call Trace: [ 487.751873][ T8777] [ 487.751903][ T8777] __dump_stack+0x1d/0x30 [ 487.751993][ T8777] dump_stack_lvl+0x95/0xd0 [ 487.752065][ T8777] dump_stack+0x15/0x1b [ 487.752177][ T8777] should_fail_ex+0x25e/0x270 [ 487.752278][ T8777] should_failslab+0x8c/0xb0 [ 487.752351][ T8777] __kvmalloc_node_noprof+0x15b/0x590 [ 487.752439][ T8777] ? page_pool_create_percpu+0x213/0x680 [ 487.752611][ T8777] ? page_pool_create_percpu+0x213/0x680 [ 487.752718][ T8777] page_pool_create_percpu+0x213/0x680 [ 487.752801][ T8777] page_pool_create+0x1a/0x30 [ 487.752874][ T8777] bpf_test_run_xdp_live+0x1a5/0x1330 [ 487.753015][ T8777] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 487.753121][ T8777] ? __pfx_autoremove_wake_function+0x10/0x10 [ 487.753204][ T8777] ? mutex_unlock+0x4e/0x90 [ 487.753306][ T8777] ? 0xffffffffa0205240 [ 487.753359][ T8777] ? bpf_dispatcher_change_prog+0x7b7/0x800 [ 487.753466][ T8777] ? 0xffffffffa0205240 [ 487.753614][ T8777] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 487.753708][ T8777] bpf_prog_test_run_xdp+0x559/0x9e0 [ 487.753924][ T8777] ? __rcu_read_unlock+0x4e/0x70 [ 487.754048][ T8777] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 487.754175][ T8777] bpf_prog_test_run+0x208/0x340 [ 487.754365][ T8777] __sys_bpf+0x8da/0xc30 [ 487.754467][ T8777] ? vfs_write+0x830/0x990 [ 487.754557][ T8777] __x64_sys_bpf+0x69/0x80 [ 487.754783][ T8777] x64_sys_call+0x10cb/0x3020 [ 487.754879][ T8777] do_syscall_64+0x136/0x3c0 [ 487.755004][ T8777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.755078][ T8777] RIP: 0033:0x7f09e0d8ce59 [ 487.755151][ T8777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.755213][ T8777] RSP: 002b:00007f09df7e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 487.755285][ T8777] RAX: ffffffffffffffda RBX: 00007f09e1005fa0 RCX: 00007f09e0d8ce59 [ 487.755344][ T8777] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 487.755426][ T8777] RBP: 00007f09df7e7090 R08: 0000000000000000 R09: 0000000000000000 [ 487.755483][ T8777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.755527][ T8777] R13: 00007f09e1006038 R14: 00007f09e1005fa0 R15: 00007ffd21727188 [ 487.755620][ T8777] [ 487.755948][ T8777] page_pool_create_percpu() gave up with errno -12 [ 487.763735][ C0] EXT4-fs (loop3): initial error at time 1782227803: ext4_orphan_get:1399 [ 487.795146][ T154] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 487.798422][ C0] : inode 16 [ 487.798440][ C0] EXT4-fs (loop3): last error at time 1782227803: ext4_orphan_get:1399 [ 487.825514][ T8771] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1480: couldn't read orphan inode 16 (err -117) [ 487.829145][ C0] : inode 16 [ 487.834783][ T8771] loop3: lost filesystem error report for type 5 error -117 [ 487.836987][ T8771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 487.840553][ C0] [ 487.979186][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.218533][ T8782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32549 sclass=netlink_route_socket pid=8782 comm=syz.3.1480 [ 488.571953][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.708419][ T8792] lo speed is unknown, defaulting to 1000 [ 489.026982][ T8806] loop0: detected capacity change from 0 to 1024 [ 489.034553][ T8806] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 489.062878][ T8806] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1492: Invalid block bitmap block 0 in block_group 0 [ 489.081194][ T8806] loop0: lost filesystem error report for type 5 error -117 [ 489.081448][ T8806] Quota error (device loop0): write_blk: dquota write failed [ 489.088921][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 489.088947][ C0] EXT4-fs (loop0): initial error at time 1782227804: ext4_read_block_bitmap_nowait:483 [ 489.089087][ C0] EXT4-fs (loop0): last error at time 1782227804: ext4_read_block_bitmap_nowait:483 [ 489.090322][ T8798] lo speed is unknown, defaulting to 1000 [ 489.248164][ T8810] loop2: detected capacity change from 0 to 1024 [ 489.259000][ T8810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.319751][ T8813] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1493'. [ 489.323584][ T8806] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 489.351658][ T8807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1491'. [ 489.352014][ T8806] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.1492: Failed to acquire dquot type 0 [ 489.404116][ T8807] loop4: detected capacity change from 0 to 512 [ 489.408298][ T8806] loop0: lost filesystem error report for type 5 error -117 [ 489.412679][ T8806] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.1492: Freeing blocks not in datazone - block = 0, count = 4096 [ 489.424479][ T8807] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 489.424547][ T8807] EXT4-fs (loop4): group descriptors corrupted! [ 489.496244][ T8806] loop0: lost filesystem error report for type 5 error -117 [ 489.501686][ T8806] EXT4-fs error (device loop0): ext4_read_inode_bitmap:141: comm syz.0.1492: Invalid inode bitmap blk 0 in block_group 0 [ 489.519970][ T28] audit: type=1400 audit(1782227805.127:4389): avc: denied { write } for pid=8809 comm="syz.2.1493" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 489.692691][ T68] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:4: Failed to release dquot type 0 [ 489.697517][ T8806] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 489.704287][ T8807] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1491'. [ 489.761604][ T8819] loop1: detected capacity change from 0 to 8192 [ 489.827362][ T8806] EXT4-fs (loop0): 1 orphan inode deleted [ 489.858537][ T8806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.977124][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.036485][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.052988][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 490.053007][ T28] audit: type=1326 audit(1782227805.657:4391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8832 comm="syz.0.1498" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f731ace59 code=0x7ffc0000 [ 490.162675][ T28] audit: type=1326 audit(1782227805.707:4392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8832 comm="syz.0.1498" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f731ace59 code=0x7ffc0000 [ 490.289017][ T28] audit: type=1326 audit(1782227805.707:4393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8832 comm="syz.0.1498" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f731ace59 code=0x7ffc0000 [ 490.328070][ T28] audit: type=1400 audit(1782227805.707:4394): avc: denied { audit_write } for pid=8835 comm="syz.3.1504" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 490.446210][ T28] audit: type=1326 audit(1782227805.707:4395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8832 comm="syz.0.1498" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f6f731ace59 code=0x7ffc0000 [ 491.234570][ T8854] netlink: 'syz.4.1508': attribute type 4 has an invalid length. [ 491.429048][ T28] audit: type=1326 audit(1782227805.707:4397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8832 comm="syz.0.1498" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f731ace59 code=0x7ffc0000 [ 491.460260][ T28] audit: type=1326 audit(1782227805.707:4398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8832 comm="syz.0.1498" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f731ace59 code=0x7ffc0000 [ 492.195769][ T3489] net_ratelimit: 15 callbacks suppressed [ 492.195790][ T3489] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 492.435868][ T28] audit: type=1326 audit(1782227805.707:4399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8832 comm="syz.0.1498" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f731ace59 code=0x7ffc0000 [ 492.461420][ T28] audit: type=1107 audit(1782227805.707:4396): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='^ñ¸É×èÙB3¶ÊÝ…Ü‘Ø‚bCŒ+fx:£Rê¾h|' [ 492.478068][ T28] audit: type=1326 audit(1782227805.707:4400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8832 comm="syz.0.1498" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f731ace59 code=0x7ffc0000 [ 493.060291][ T8856] loop3: detected capacity change from 0 to 1024 [ 493.069298][ T8833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.077952][ T8833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.092104][ T3489] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 493.101765][ T8856] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 493.114375][ T8856] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1509: Invalid block bitmap block 0 in block_group 0 [ 493.127812][ T8856] fserror_report: 3 callbacks suppressed [ 493.127904][ T8856] loop3: lost filesystem error report for type 5 error -117 [ 493.133736][ T8856] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.1509: Failed to acquire dquot type 0 [ 493.161872][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 493.161900][ C1] EXT4-fs (loop3): initial error at time 1782227808: ext4_read_block_bitmap_nowait:483 [ 493.162042][ C1] EXT4-fs (loop3): last error at time 1782227808: ext4_read_block_bitmap_nowait:483 [ 493.277563][ T49] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 493.301385][ T8856] loop3: lost filesystem error report for type 5 error -117 [ 493.326568][ T8856] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.1509: Freeing blocks not in datazone - block = 0, count = 4096 [ 493.350145][ T8856] loop3: lost filesystem error report for type 5 error -117 [ 493.353003][ T8856] EXT4-fs error (device loop3): ext4_read_inode_bitmap:141: comm syz.3.1509: Invalid inode bitmap blk 0 in block_group 0 [ 493.383389][ T8856] loop3: lost filesystem error report for type 5 error -117 [ 493.405210][ T49] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 493.421170][ T8856] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 493.434268][ T8856] loop3: lost filesystem error report for type 5 error -117 [ 493.436744][ T8856] EXT4-fs (loop3): 1 orphan inode deleted [ 493.487716][ T8856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.532302][ T8109] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:10: Failed to release dquot type 0 [ 493.557016][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.638047][ T49] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 493.743488][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1512'. [ 493.788850][ T8875] lo speed is unknown, defaulting to 1000 [ 493.928533][ T8871] loop1: detected capacity change from 0 to 512 [ 493.941620][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 493.951077][ T8871] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 494.023537][ T8871] EXT4-fs (loop1): group descriptors corrupted! [ 494.072575][ T8871] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1512'. [ 494.184771][ T8109] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 494.323459][ T2287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 494.541830][ T8883] loop1: detected capacity change from 0 to 512 [ 494.649395][ T8883] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 494.661801][ T8887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1516'. [ 494.714524][ T49] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 494.876981][ T8898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.881022][ T8109] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 494.900715][ T8897] loop3: detected capacity change from 0 to 1024 [ 494.908594][ T8898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.918243][ T8897] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 494.976905][ T8897] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1521: Invalid block bitmap block 0 in block_group 0 [ 494.991995][ T8898] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.027267][ T8897] loop3: lost filesystem error report for type 5 error -117 [ 495.028248][ T8897] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.1521: Failed to acquire dquot type 0 [ 495.035803][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 495.035824][ C1] EXT4-fs (loop3): initial error at time 1782227810: ext4_read_block_bitmap_nowait:483 [ 495.035871][ C1] EXT4-fs (loop3): last error at time 1782227810: ext4_read_block_bitmap_nowait:483 [ 495.045576][ T8889] loop2: detected capacity change from 0 to 512 [ 495.052852][ T8897] loop3: lost filesystem error report for type 5 error -117 [ 495.087032][ T8883] rdma_rxe: rxe_newlink: failed to add lo [ 495.102831][ T8897] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.1521: Freeing blocks not in datazone - block = 0, count = 4096 [ 495.144341][ T8897] loop3: lost filesystem error report for type 5 error -117 [ 495.144964][ T8897] EXT4-fs error (device loop3): ext4_read_inode_bitmap:141: comm syz.3.1521: Invalid inode bitmap blk 0 in block_group 0 [ 495.213666][ T8889] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 495.225737][ T8889] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 495.236064][ T8889] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1520: Corrupt directory, running e2fsck is recommended [ 495.255127][ T8889] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 495.263496][ T8889] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1520: corrupted in-inode xattr: e_name out of bounds [ 495.277435][ T8889] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 495.277888][ T8889] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1520: couldn't read orphan inode 15 (err -117) [ 495.298969][ T8889] loop2: lost filesystem error report for type 5 error -117 [ 495.306397][ T8897] loop3: lost filesystem error report for type 5 error -117 [ 495.323125][ T8889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.346754][ T8897] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 495.357575][ T8897] EXT4-fs (loop3): 1 orphan inode deleted [ 495.364833][ T8897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.082904][ T49] __quota_error: 117 callbacks suppressed [ 496.082920][ T49] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-7 [ 496.098917][ T49] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:3: Failed to release dquot type 0 [ 496.115672][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.149611][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.373401][ T28] audit: type=1400 audit(1782227811.927:4513): avc: denied { connect } for pid=8915 comm="syz.3.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 496.410154][ T28] audit: type=1400 audit(1782227811.977:4514): avc: denied { read } for pid=8915 comm="syz.3.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 496.778508][ T8925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1529'. [ 496.797884][ T8925] loop2: detected capacity change from 0 to 512 [ 496.805293][ T8925] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 496.815059][ T8925] EXT4-fs (loop2): group descriptors corrupted! [ 496.893050][ T8925] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1529'. [ 497.112664][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1531'. [ 497.121949][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1531'. [ 497.144425][ T28] audit: type=1400 audit(1782227812.757:4515): avc: denied { write } for pid=3295 comm="syz-executor" name="319" dev="tmpfs" ino=1733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 497.170630][ T28] audit: type=1400 audit(1782227812.757:4516): avc: denied { write } for pid=3295 comm="syz-executor" name="319" dev="tmpfs" ino=1733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 497.196623][ T28] audit: type=1400 audit(1782227812.757:4517): avc: denied { write } for pid=3295 comm="syz-executor" name="319" dev="tmpfs" ino=1733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 497.245832][ T8935] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1532'. [ 497.247269][ T68] net_ratelimit: 10 callbacks suppressed [ 497.247311][ T68] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 497.278069][ T28] audit: type=1400 audit(1782227812.757:4518): avc: denied { write } for pid=3295 comm="syz-executor" name="319" dev="tmpfs" ino=1733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 497.281926][ T8935] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1532'. [ 497.330998][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1532'. [ 497.348214][ T8935] FAULT_INJECTION: forcing a failure. [ 497.348214][ T8935] name failslab, interval 1, probability 0, space 0, times 0 [ 497.384040][ T8935] CPU: 0 UID: 0 PID: 8935 Comm: syz.0.1532 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 497.384075][ T8935] Tainted: [W]=WARN [ 497.384119][ T8935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 497.384133][ T8935] Call Trace: [ 497.384141][ T8935] [ 497.384149][ T8935] __dump_stack+0x1d/0x30 [ 497.384175][ T8935] dump_stack_lvl+0x95/0xd0 [ 497.384200][ T8935] dump_stack+0x15/0x1b [ 497.384225][ T8935] should_fail_ex+0x25e/0x270 [ 497.384298][ T8935] should_failslab+0x8c/0xb0 [ 497.384320][ T8935] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 497.384398][ T8935] ? __alloc_skb+0x2db/0x6f0 [ 497.384424][ T8935] ? __alloc_skb+0x2db/0x6f0 [ 497.384451][ T8935] __alloc_skb+0x2db/0x6f0 [ 497.384471][ T8935] ? __alloc_skb+0x205/0x6f0 [ 497.384492][ T8935] netlink_ack+0xfd/0x530 [ 497.384590][ T8935] netlink_rcv_skb+0x18d/0x220 [ 497.384625][ T8935] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 497.384727][ T8935] nfnetlink_rcv+0x15f/0x1740 [ 497.384762][ T8935] ? __kfree_skb+0x109/0x150 [ 497.384850][ T8935] ? kmem_cache_free+0xca/0x380 [ 497.384883][ T8935] ? __kfree_skb+0x109/0x150 [ 497.384905][ T8935] ? nlmon_xmit+0x4f/0x60 [ 497.384947][ T8935] ? consume_skb+0x4b/0x130 [ 497.384970][ T8935] ? nlmon_xmit+0x4f/0x60 [ 497.384991][ T8935] ? dev_hard_start_xmit+0x34e/0x380 [ 497.385074][ T8935] ? __dev_queue_xmit+0x135e/0x1e60 [ 497.385099][ T8935] ? __dev_queue_xmit+0x151/0x1e60 [ 497.385170][ T8935] ? ref_tracker_free+0x380/0x3f0 [ 497.385207][ T8935] ? __netlink_deliver_tap+0x4e6/0x510 [ 497.385365][ T8935] netlink_unicast+0x5a7/0x680 [ 497.385407][ T8935] netlink_sendmsg+0x5be/0x6f0 [ 497.385449][ T8935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.385563][ T8935] ____sys_sendmsg+0x532/0x580 [ 497.385596][ T8935] ___sys_sendmsg+0x195/0x1e0 [ 497.385649][ T8935] __x64_sys_sendmsg+0xd4/0x160 [ 497.385707][ T8935] x64_sys_call+0x194c/0x3020 [ 497.385732][ T8935] do_syscall_64+0x136/0x3c0 [ 497.385778][ T8935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.385818][ T8935] RIP: 0033:0x7f6f731ace59 [ 497.385839][ T8935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.385857][ T8935] RSP: 002b:00007f6f71bff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.385945][ T8935] RAX: ffffffffffffffda RBX: 00007f6f73425fa0 RCX: 00007f6f731ace59 [ 497.385964][ T8935] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004 [ 497.385977][ T8935] RBP: 00007f6f71bff090 R08: 0000000000000000 R09: 0000000000000000 [ 497.385995][ T8935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.386013][ T8935] R13: 00007f6f73426038 R14: 00007f6f73425fa0 R15: 00007ffe575a7f38 [ 497.386038][ T8935] [ 497.442558][ T2287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 497.696722][ T8937] loop3: detected capacity change from 0 to 1024 [ 497.707186][ T8937] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 497.770838][ T8937] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1533: Invalid block bitmap block 0 in block_group 0 [ 497.793699][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 497.800264][ C1] EXT4-fs (loop3): initial error at time 1782227813: ext4_read_block_bitmap_nowait:483 [ 497.810111][ C1] EXT4-fs (loop3): last error at time 1782227813: ext4_read_block_bitmap_nowait:483 [ 497.844503][ T8937] Quota error (device loop3): write_blk: dquota write failed [ 497.852644][ T8937] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 497.961438][ T8937] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.1533: Failed to acquire dquot type 0 [ 497.994348][ T49] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 498.018975][ T8937] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.1533: Freeing blocks not in datazone - block = 0, count = 4096 [ 498.075840][ T8950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1537'. [ 498.090321][ T8937] EXT4-fs error (device loop3): ext4_read_inode_bitmap:141: comm syz.3.1533: Invalid inode bitmap blk 0 in block_group 0 [ 498.105003][ T8937] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 498.114373][ T8937] EXT4-fs (loop3): 1 orphan inode deleted [ 498.120746][ T8937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.145243][ T8109] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 498.152762][ T2287] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-7 [ 498.162330][ T2287] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:7: Failed to release dquot type 0 [ 498.216836][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.418776][ T2287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 498.569517][ T68] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 498.649110][ T8960] loop2: detected capacity change from 0 to 1024 [ 498.665638][ T8960] EXT4-fs: Ignoring removed nobh option [ 498.672880][ T8960] EXT4-fs: Ignoring removed i_version option [ 498.865535][ T8109] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 498.969233][ T8960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.070770][ T154] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 499.245345][ T154] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 499.301588][ T8973] FAULT_INJECTION: forcing a failure. [ 499.301588][ T8973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.329782][ T8973] CPU: 1 UID: 0 PID: 8973 Comm: syz.1.1544 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 499.329816][ T8973] Tainted: [W]=WARN [ 499.329823][ T8973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 499.329836][ T8973] Call Trace: [ 499.329843][ T8973] [ 499.329852][ T8973] __dump_stack+0x1d/0x30 [ 499.329937][ T8973] dump_stack_lvl+0x95/0xd0 [ 499.329964][ T8973] dump_stack+0x15/0x1b [ 499.329989][ T8973] should_fail_ex+0x25e/0x270 [ 499.330022][ T8973] should_fail+0xb/0x20 [ 499.330107][ T8973] should_fail_usercopy+0x1a/0x20 [ 499.330140][ T8973] _copy_to_user+0x20/0xa0 [ 499.330251][ T8973] bpf_log_attr_finalize+0xa7/0x100 [ 499.330278][ T8973] btf_new_fd+0x34a/0x670 [ 499.330320][ T8973] bpf_btf_load+0x116/0x130 [ 499.330420][ T8973] ? vfs_write+0x830/0x990 [ 499.330450][ T8973] __sys_bpf+0xbce/0xc30 [ 499.330565][ T8973] ? vfs_write+0x830/0x990 [ 499.330587][ T8973] ? vfs_write+0x830/0x990 [ 499.330619][ T8973] __x64_sys_bpf+0x69/0x80 [ 499.330698][ T8973] x64_sys_call+0x10cb/0x3020 [ 499.330801][ T8973] do_syscall_64+0x136/0x3c0 [ 499.330838][ T8973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.330868][ T8973] RIP: 0033:0x7fd61cecce59 [ 499.330890][ T8973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.330984][ T8973] RSP: 002b:00007fd61b91f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 499.331049][ T8973] RAX: ffffffffffffffda RBX: 00007fd61d145fa0 RCX: 00007fd61cecce59 [ 499.331068][ T8973] RDX: 0000000000000028 RSI: 0000200000001a80 RDI: 0000000000000012 [ 499.331087][ T8973] RBP: 00007fd61b91f090 R08: 0000000000000000 R09: 0000000000000000 [ 499.331105][ T8973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.331123][ T8973] R13: 00007fd61d146038 R14: 00007fd61d145fa0 R15: 00007ffcc6837858 [ 499.331150][ T8973] [ 499.525363][ T68] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 499.859032][ T8975] loop3: detected capacity change from 0 to 512 [ 500.031379][ T8975] EXT4-fs: Ignoring removed mblk_io_submit option [ 500.084959][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1546'. [ 500.342710][ T8978] loop1: detected capacity change from 0 to 512 [ 500.371369][ T8978] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 500.382850][ T8978] EXT4-fs (loop1): group descriptors corrupted! [ 500.396081][ T8975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.446818][ T8975] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 500.524635][ T8975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1545'. [ 500.559532][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.561395][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.616837][ T8983] loop0: detected capacity change from 0 to 512 [ 500.658550][ T8983] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 500.667014][ T8983] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 500.704691][ T8983] EXT4-fs (loop0): orphan cleanup on readonly fs [ 500.712565][ T8983] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #13: comm syz.0.1547: iget: bad i_size value: 12154761577498 [ 500.741171][ T8983] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 500.743236][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 500.759103][ C0] EXT4-fs (loop0): initial error at time 1782227816: ext4_orphan_get:1399: inode 13 [ 500.768564][ C0] EXT4-fs (loop0): last error at time 1782227816: ext4_orphan_get:1399: inode 13 [ 500.784657][ T8983] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1547: couldn't read orphan inode 13 (err -117) [ 500.807171][ T8983] fserror_report: 6 callbacks suppressed [ 500.807190][ T8983] loop0: lost filesystem error report for type 5 error -117 [ 500.807925][ T8983] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 500.838952][ T8982] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.1547: dx entry: limit 65535 != root limit 120 [ 500.838992][ T8982] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1547: Corrupt directory, running e2fsck is recommended [ 500.891598][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.918789][ T8995] loop2: detected capacity change from 0 to 512 [ 500.958590][ T9000] loop0: detected capacity change from 0 to 512 [ 500.962403][ T9004] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43536 sclass=netlink_route_socket pid=9004 comm=syz.1.1552 [ 500.964126][ T8995] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 500.964148][ T8995] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 500.964330][ T8995] EXT4-fs (loop2): orphan cleanup on readonly fs [ 500.964368][ T8995] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #13: comm syz.2.1549: iget: bad i_size value: 12154761577498 [ 500.964400][ T8995] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 500.965860][ T8995] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1549: couldn't read orphan inode 13 (err -117) [ 500.965903][ T8995] loop2: lost filesystem error report for type 5 error -117 [ 500.970431][ T8995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 501.272082][ T8995] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.1549: dx entry: limit 65535 != root limit 120 [ 501.272119][ T8995] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1549: Corrupt directory, running e2fsck is recommended [ 501.434585][ T9007] loop3: detected capacity change from 0 to 512 [ 501.448010][ T9000] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1553: iget: bad i_size value: 38620345925642 [ 501.448048][ T9000] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 501.461214][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 501.461241][ C1] EXT4-fs (loop0): initial error at time 1782227817: ext4_orphan_get:1399: inode 15 [ 501.461279][ C1] EXT4-fs (loop0): last error at time 1782227817: ext4_orphan_get:1399: inode 15 [ 501.461377][ T9000] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1553: couldn't read orphan inode 15 (err -117) [ 501.461412][ T9000] loop0: lost filesystem error report for type 5 error -117 [ 501.514442][ T9000] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.538500][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 501.538515][ T28] audit: type=1400 audit(1782227817.127:4521): avc: denied { write } for pid=8998 comm="syz.0.1553" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 501.543177][ T9007] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.1554: corrupted inode contents [ 501.543210][ T9007] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 501.545858][ T9007] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #16: comm syz.3.1554: mark_inode_dirty error [ 501.545959][ T9007] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 501.547959][ T9007] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.1554: corrupted inode contents [ 501.548096][ T9007] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 501.548920][ T9007] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.1554: mark_inode_dirty error [ 501.548999][ T9007] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 501.549916][ T9007] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.1554: corrupted inode contents [ 501.550296][ T9007] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 501.551462][ T9007] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 501.551499][ T9007] loop3: lost filesystem error report for type 5 error -117 [ 501.553270][ C0] EXT4-fs (loop3): error count since last fsck: 6 [ 501.553347][ C0] EXT4-fs (loop3): initial error at time 1782227817: ext4_do_update_inode:5742: inode 16 [ 501.553600][ C0] EXT4-fs (loop3): last error at time 1782227817: ext4_orphan_del:303 [ 501.573050][ T9018] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1553: bg 0: block 5: invalid block bitmap [ 501.587366][ T9007] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.1554: corrupted inode contents [ 501.587401][ T9007] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 501.588335][ T9018] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 8 with error 28 [ 501.588372][ T9018] EXT4-fs (loop0): This should not happen!! Data will be lost [ 501.588372][ T9018] [ 501.588427][ T9007] EXT4-fs error (device loop3): ext4_truncate:4691: inode #16: comm syz.3.1554: mark_inode_dirty error [ 501.588449][ T9018] EXT4-fs (loop0): Total free blocks count 0 [ 501.588467][ T9018] EXT4-fs (loop0): Free/Dirty block details [ 501.588483][ T9018] EXT4-fs (loop0): free_blocks=0 [ 501.588499][ T9018] EXT4-fs (loop0): dirty_blocks=380 [ 501.588516][ T9018] EXT4-fs (loop0): Block reservation details [ 501.588587][ T9007] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 501.588532][ T9018] EXT4-fs (loop0): i_reserved_data_blocks=380 [ 501.589844][ T9007] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 501.590136][ T9007] loop3: lost filesystem error report for type 5 error -117 [ 501.647287][ T9007] EXT4-fs (loop3): 1 truncate cleaned up [ 501.656069][ T49] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 372 with error 28 [ 502.284545][ T2287] net_ratelimit: 17 callbacks suppressed [ 502.284567][ T2287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 502.403944][ T8109] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 502.514457][ T8109] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 502.623868][ T8109] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 502.680293][ T49] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 502.681635][ T9007] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.704465][ T49] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:3: Failed to release dquot type 1 [ 502.704500][ T49] loop3: lost filesystem error report for type 5 error -117 [ 502.735954][ T2287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 502.853957][ T49] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 502.916020][ T9007] ext4 filesystem being mounted at /336/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 502.978958][ T8109] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 503.019891][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.104079][ T8109] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 503.174756][ T9029] netlink: 'syz.1.1561': attribute type 4 has an invalid length. [ 503.186368][ T9029] netlink: 'syz.1.1561': attribute type 4 has an invalid length. [ 503.279006][ T9029] __nla_validate_parse: 1 callbacks suppressed [ 503.279027][ T9029] netlink: 620 bytes leftover after parsing attributes in process `syz.1.1561'. [ 503.301275][ T8109] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 503.321099][ T28] audit: type=1400 audit(1782227818.907:4522): avc: denied { mount } for pid=9031 comm="syz.0.1560" name="/" dev="gadgetfs" ino=4596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 503.377264][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1559'. [ 503.399915][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1559'. [ 503.421878][ T28] audit: type=1400 audit(1782227819.027:4523): avc: denied { write } for pid=3299 comm="syz-executor" name="312" dev="tmpfs" ino=1708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 503.453449][ T8109] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 503.467615][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1562'. [ 503.636756][ T28] audit: type=1400 audit(1782227819.067:4524): avc: denied { write } for pid=3299 comm="syz-executor" name="312" dev="tmpfs" ino=1708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 503.751463][ T9035] loop4: detected capacity change from 0 to 512 [ 503.792473][ T28] audit: type=1400 audit(1782227819.067:4525): avc: denied { write } for pid=3299 comm="syz-executor" name="312" dev="tmpfs" ino=1708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 503.820130][ T28] audit: type=1400 audit(1782227819.067:4526): avc: denied { write } for pid=3299 comm="syz-executor" name="312" dev="tmpfs" ino=1708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 503.866274][ T28] audit: type=1400 audit(1782227819.127:4527): avc: denied { shutdown } for pid=9036 comm="syz.1.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 503.945728][ T9035] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 503.960926][ T9035] EXT4-fs (loop4): group descriptors corrupted! [ 504.158694][ T9051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43536 sclass=netlink_route_socket pid=9051 comm=syz.2.1567 [ 504.208861][ T9056] lo: left allmulticast mode [ 504.575595][ T9060] loop0: detected capacity change from 0 to 4096 [ 504.596866][ T9060] EXT4-fs: inline encryption not supported [ 504.637465][ T9060] EXT4-fs: test_dummy_encryption option not supported [ 504.713294][ T9035] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1562'. [ 505.475562][ T9076] loop0: detected capacity change from 0 to 512 [ 505.604548][ T9076] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 505.612823][ T9076] EXT4-fs (loop0): orphan cleanup on readonly fs [ 505.624841][ T9076] Quota error (device loop0): dq_insert_tree: Quota tree root isn't allocated! [ 505.633925][ T9076] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 505.645037][ T9076] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.1572: Failed to acquire dquot type 1 [ 505.656993][ T9076] loop0: lost filesystem error report for type 5 error -5 [ 505.660083][ T9076] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1572: bg 0: block 40: padding at end of block bitmap is not set [ 505.667386][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 505.667402][ C0] EXT4-fs (loop0): initial error at time 1782227821: ext4_acquire_dquot:7041 [ 505.667422][ C0] EXT4-fs (loop0): last error at time 1782227821: ext4_acquire_dquot:7041 [ 505.708966][ T9076] loop0: lost filesystem error report for type 5 error -117 [ 505.712063][ T9076] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 505.728834][ T9076] loop0: lost filesystem error report for type 5 error -117 [ 505.731175][ T9076] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #16: comm syz.0.1572: data will be lost [ 505.751736][ T9076] EXT4-fs (loop0): 1 truncate cleaned up [ 505.758454][ T9076] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 506.480541][ T9083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1575'. [ 506.521179][ T9083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1575'. [ 506.858337][ T28] audit: type=1400 audit(1782227822.467:4528): avc: denied { bind } for pid=9085 comm="syz.1.1576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 506.860056][ T9086] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 507.004181][ T28] audit: type=1400 audit(1782227822.597:4529): avc: denied { write } for pid=3299 comm="syz-executor" name="317" dev="tmpfs" ino=1733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 507.129323][ T9093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43536 sclass=netlink_route_socket pid=9093 comm=syz.2.1578 [ 507.155257][ T28] audit: type=1400 audit(1782227822.597:4530): avc: denied { write } for pid=3299 comm="syz-executor" name="317" dev="tmpfs" ino=1733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 507.235256][ T9095] netlink: 'syz.4.1579': attribute type 1 has an invalid length. [ 507.258045][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.282166][ T9095] netlink: 'syz.4.1579': attribute type 2 has an invalid length. [ 507.311448][ T154] net_ratelimit: 26 callbacks suppressed [ 507.311469][ T154] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 507.324801][ T28] audit: type=1400 audit(1782227822.597:4531): avc: denied { write } for pid=3299 comm="syz-executor" name="317" dev="tmpfs" ino=1733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 507.324843][ T28] audit: type=1400 audit(1782227822.597:4532): avc: denied { write } for pid=3299 comm="syz-executor" name="317" dev="tmpfs" ino=1733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 507.393617][ T9097] loop2: detected capacity change from 0 to 1024 [ 507.395732][ T9086] loop1: detected capacity change from 0 to 512 [ 507.409967][ T28] audit: type=1326 audit(1782227823.028:4533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9098 comm="syz.0.1580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f731ace59 code=0x7ffc0000 [ 507.410010][ T28] audit: type=1326 audit(1782227823.028:4534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9098 comm="syz.0.1580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f731ace59 code=0x7ffc0000 [ 507.410164][ T28] audit: type=1326 audit(1782227823.028:4535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9098 comm="syz.0.1580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f731ace59 code=0x7ffc0000 [ 507.410437][ T28] audit: type=1326 audit(1782227823.028:4536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9098 comm="syz.0.1580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f731ace59 code=0x7ffc0000 [ 507.410660][ T28] audit: type=1326 audit(1782227823.028:4537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9098 comm="syz.0.1580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f6f731ace59 code=0x7ffc0000 [ 507.574548][ T9097] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 507.581603][ T9099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.581741][ T9099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.705233][ T154] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 507.823559][ T154] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 507.889069][ T9086] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 507.920550][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.934494][ T68] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 508.000244][ T9097] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1581: Invalid block bitmap block 0 in block_group 0 [ 508.112008][ T49] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 508.126534][ T9097] loop2: lost filesystem error report for type 5 error -117 [ 508.126869][ T9097] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1581: Failed to acquire dquot type 0 [ 508.134290][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 508.134324][ C0] EXT4-fs (loop2): initial error at time 1782227823: ext4_read_block_bitmap_nowait:483 [ 508.134516][ C0] EXT4-fs (loop2): last error at time 1782227823: ext4_read_block_bitmap_nowait:483 [ 508.281779][ T8109] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 508.291946][ T9102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1582'. [ 508.320215][ T9102] loop4: detected capacity change from 0 to 512 [ 508.362800][ T9102] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 508.375916][ T9102] EXT4-fs (loop4): group descriptors corrupted! [ 508.386201][ T9086] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.1576: corrupted xattr entries [ 508.398250][ T68] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 508.419322][ T9086] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 508.420489][ T9086] EXT4-fs (loop1): Remounting filesystem read-only [ 508.431008][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 508.431139][ C0] EXT4-fs (loop1): initial error at time 1782227824: xattr_find_entry:337: inode 15 [ 508.431410][ C0] EXT4-fs (loop1): last error at time 1782227824: xattr_find_entry:337: inode 15 [ 508.590582][ T49] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 508.599348][ T9097] loop2: lost filesystem error report for type 5 error -117 [ 508.601919][ T9097] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.1581: Freeing blocks not in datazone - block = 0, count = 4096 [ 508.705450][ T68] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 508.944280][ T9086] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 508.957835][ T9097] loop2: lost filesystem error report for type 5 error -117 [ 508.959379][ T9086] EXT4-fs (loop1): 1 truncate cleaned up [ 509.515759][ T8109] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 509.527502][ T9097] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.1581: Invalid inode bitmap blk 0 in block_group 0 [ 509.564915][ T154] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:5: Failed to release dquot type 0 [ 509.576343][ T154] loop2: lost filesystem error report for type 5 error -117 [ 509.585891][ T9102] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1582'. [ 509.606261][ T9086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.634311][ T9097] loop2: lost filesystem error report for type 5 error -117 [ 509.634439][ T9097] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 509.650355][ T9097] loop2: lost filesystem error report for type 5 error -117 [ 509.661686][ T9097] EXT4-fs (loop2): 1 orphan inode deleted [ 509.757235][ T9115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1585'. [ 509.768409][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.778144][ T9115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1585'. [ 509.787755][ T9097] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.074299][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1588'. [ 510.083575][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1588'. [ 510.502417][ T9123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1586'. [ 510.555053][ T9123] loop1: detected capacity change from 0 to 512 [ 510.576882][ T9123] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 510.586787][ T9123] EXT4-fs (loop1): group descriptors corrupted! [ 510.650769][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.206452][ T9132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43536 sclass=netlink_route_socket pid=9132 comm=syz.4.1591 [ 512.536687][ T68] net_ratelimit: 10 callbacks suppressed [ 512.536709][ T68] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 512.587935][ T9143] loop4: detected capacity change from 0 to 512 [ 512.815502][ T9143] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.1593: corrupted inode contents [ 512.827563][ T9143] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 512.828563][ T9143] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #16: comm syz.4.1593: mark_inode_dirty error [ 512.849111][ T9143] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 512.849639][ T9143] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.1593: corrupted inode contents [ 512.870663][ T9143] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 512.871187][ T9143] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.1593: mark_inode_dirty error [ 512.891688][ T9143] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 512.892297][ T9143] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.1593: corrupted inode contents [ 512.917766][ C1] EXT4-fs (loop4): error count since last fsck: 4 [ 512.917869][ C1] EXT4-fs (loop4): initial error at time 1782227828: ext4_do_update_inode:5742: inode 16 [ 512.917990][ C1] EXT4-fs (loop4): last error at time 1782227828: __ext4_ext_dirty:207: inode 16 [ 512.944084][ T9143] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 512.946066][ T68] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 512.963184][ T9143] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 512.971840][ T9143] loop4: lost filesystem error report for type 5 error -117 [ 512.972791][ T9143] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.1593: corrupted inode contents [ 512.992053][ T9143] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 512.992817][ T9143] EXT4-fs error (device loop4): ext4_truncate:4691: inode #16: comm syz.4.1593: mark_inode_dirty error [ 513.013028][ T9143] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 513.013405][ T9143] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 513.034504][ T9143] loop4: lost filesystem error report for type 5 error -117 [ 513.036785][ T9143] EXT4-fs (loop4): 1 truncate cleaned up [ 513.052202][ T9143] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.065062][ T9143] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 513.109440][ T28] kauditd_printk_skb: 128 callbacks suppressed [ 513.109469][ T28] audit: type=1326 audit(1782227828.718:4663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9147 comm="syz.1.1595" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd61cecce59 code=0x7ffc0000 [ 513.173344][ T68] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 513.358935][ T8109] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 513.384081][ T8109] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:10: Failed to release dquot type 1 [ 513.396542][ T28] audit: type=1326 audit(1782227828.748:4664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9147 comm="syz.1.1595" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd61cecce59 code=0x7ffc0000 [ 513.422437][ T28] audit: type=1326 audit(1782227828.758:4665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9147 comm="syz.1.1595" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd61cecce59 code=0x7ffc0000 [ 513.599687][ T28] audit: type=1326 audit(1782227828.768:4666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9147 comm="syz.1.1595" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fd61cecce59 code=0x7ffc0000 [ 513.628181][ T49] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 514.453121][ T28] audit: type=1326 audit(1782227828.768:4667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9147 comm="syz.1.1595" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd61cecce59 code=0x7ffc0000 [ 514.482167][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1598'. [ 514.523203][ T9163] loop1: detected capacity change from 0 to 512 [ 514.603997][ T49] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 514.619083][ T9163] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 514.633436][ T9163] EXT4-fs (loop1): group descriptors corrupted! [ 514.642718][ T9163] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1598'. [ 514.660386][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.821613][ T28] audit: type=1326 audit(1782227828.768:4668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9147 comm="syz.1.1595" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd61cecce59 code=0x7ffc0000 [ 514.884634][ T68] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 514.893364][ T28] audit: type=1326 audit(1782227828.768:4670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9147 comm="syz.1.1595" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd61cecce59 code=0x7ffc0000 [ 514.927466][ T28] audit: type=1326 audit(1782227828.768:4671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9147 comm="syz.1.1595" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd61cecce59 code=0x7ffc0000 [ 514.964836][ T28] audit: type=1326 audit(1782227828.768:4669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9147 comm="syz.1.1595" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd61cecce59 code=0x7ffc0000 [ 514.996182][ T8109] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 515.143296][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 515.986072][ T68] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 516.006089][ T9164] loop0: detected capacity change from 0 to 1024 [ 516.013326][ T9164] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 516.097620][ T9164] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1599: Invalid block bitmap block 0 in block_group 0 [ 516.638855][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1601'. [ 516.662739][ T9174] loop3: detected capacity change from 0 to 512 [ 516.714883][ T8109] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 516.731685][ T9174] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 516.763519][ T9174] EXT4-fs (loop3): group descriptors corrupted! [ 516.901326][ T9164] loop0: lost filesystem error report for type 5 error -117 [ 516.912733][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 516.926558][ C0] EXT4-fs (loop0): initial error at time 1782227832: ext4_read_block_bitmap_nowait:483 [ 516.936268][ C0] EXT4-fs (loop0): last error at time 1782227832: ext4_read_block_bitmap_nowait:483 [ 517.064712][ T9164] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.1599: Failed to acquire dquot type 0 [ 517.076128][ T9164] loop0: lost filesystem error report for type 5 error -117 [ 517.129283][ T9164] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.1599: Freeing blocks not in datazone - block = 0, count = 4096 [ 517.150029][ T9164] loop0: lost filesystem error report for type 5 error -117 [ 517.150685][ T9164] EXT4-fs error (device loop0): ext4_read_inode_bitmap:141: comm syz.0.1599: Invalid inode bitmap blk 0 in block_group 0 [ 517.331067][ T36] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 0 [ 517.383504][ T36] loop0: lost filesystem error report for type 5 error -117 [ 517.423730][ T9178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43536 sclass=netlink_route_socket pid=9178 comm=syz.2.1603 [ 517.453172][ T9164] loop0: lost filesystem error report for type 5 error -117 [ 517.458437][ T9164] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 517.538320][ T9184] loop4: detected capacity change from 0 to 1024 [ 517.563403][ T8109] net_ratelimit: 4 callbacks suppressed [ 517.563421][ T8109] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 517.605519][ T9184] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 517.658030][ T9184] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 517.724412][ T9164] loop0: lost filesystem error report for type 5 error -117 [ 517.725528][ T9164] EXT4-fs (loop0): 1 orphan inode deleted [ 517.749465][ T8109] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 517.774094][ T9164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.806959][ T9189] loop2: detected capacity change from 0 to 1764 [ 517.813842][ T9184] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 517.825231][ T9184] EXT4-fs (loop4): orphan cleanup on readonly fs [ 517.836214][ T9189] iso9660: Unknown parameter 'nojolFet' [ 517.859218][ T9184] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.1605: Freeing blocks not in datazone - block = 0, count = 4096 [ 517.874242][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 517.974464][ T9184] loop4: lost filesystem error report for type 5 error -117 [ 517.980037][ T9184] EXT4-fs (loop4): 1 orphan inode deleted [ 517.987573][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 517.987605][ C0] EXT4-fs (loop4): initial error at time 1782227833: ext4_free_blocks:6718 [ 517.987630][ C0] EXT4-fs (loop4): last error at time 1782227833: ext4_free_blocks:6718 [ 518.020363][ T2287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 518.080980][ T9184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 518.142792][ T68] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 518.158484][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.181610][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.233587][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 518.233606][ T28] audit: type=1400 audit(1782227833.848:4706): avc: denied { create } for pid=9193 comm="syz.1.1610" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=smc_socket permissive=1 [ 518.254621][ T68] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 518.424974][ T28] audit: type=1400 audit(1782227834.028:4707): avc: denied { create } for pid=9193 comm="syz.1.1610" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tipc_socket permissive=1 [ 518.463488][ T28] audit: type=1400 audit(1782227834.028:4708): avc: denied { setopt } for pid=9193 comm="syz.1.1610" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tipc_socket permissive=1 [ 518.513225][ T28] audit: type=1400 audit(1782227834.028:4709): avc: denied { create } for pid=9193 comm="syz.1.1610" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 518.533417][ T28] audit: type=1400 audit(1782227834.028:4710): avc: denied { create } for pid=9193 comm="syz.1.1610" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=phonet_socket permissive=1 [ 518.553693][ T28] audit: type=1400 audit(1782227834.028:4711): avc: denied { connect } for pid=9193 comm="syz.1.1610" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=phonet_socket permissive=1 [ 518.574160][ T28] audit: type=1400 audit(1782227834.058:4712): avc: denied { setopt } for pid=9193 comm="syz.1.1610" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=phonet_socket permissive=1 [ 518.619678][ T28] audit: type=1400 audit(1782227834.218:4713): avc: denied { write } for pid=9193 comm="syz.1.1610" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 518.641171][ T28] audit: type=1400 audit(1782227834.218:4714): avc: denied { connect } for pid=9193 comm="syz.1.1610" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 518.661974][ T28] audit: type=1400 audit(1782227834.218:4715): avc: denied { name_connect } for pid=9193 comm="syz.1.1610" dest=20001 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 518.714759][ T2287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 518.941210][ T68] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 519.052765][ T49] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 519.188988][ T2287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 519.724509][ T9232] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1621'. [ 519.782057][ T9235] random: crng reseeded on system resumption [ 519.811158][ T9237] loop2: detected capacity change from 0 to 512 [ 519.852438][ T9237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.873519][ T9237] ext4 filesystem being mounted at /329/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 519.949562][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.003147][ T9250] FAULT_INJECTION: forcing a failure. [ 520.003147][ T9250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.036225][ T9250] CPU: 0 UID: 0 PID: 9250 Comm: syz.2.1627 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 520.036328][ T9250] Tainted: [W]=WARN [ 520.036338][ T9250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 520.036357][ T9250] Call Trace: [ 520.036367][ T9250] [ 520.036416][ T9250] __dump_stack+0x1d/0x30 [ 520.036447][ T9250] dump_stack_lvl+0x95/0xd0 [ 520.036511][ T9250] dump_stack+0x15/0x1b [ 520.036537][ T9250] should_fail_ex+0x25e/0x270 [ 520.036643][ T9250] should_fail+0xb/0x20 [ 520.036677][ T9250] should_fail_usercopy+0x1a/0x20 [ 520.036711][ T9250] _copy_from_user+0x1c/0xb0 [ 520.036806][ T9250] ___sys_sendmsg+0xc1/0x1e0 [ 520.036851][ T9250] __x64_sys_sendmsg+0xd4/0x160 [ 520.036918][ T9250] x64_sys_call+0x194c/0x3020 [ 520.036953][ T9250] do_syscall_64+0x136/0x3c0 [ 520.036987][ T9250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.037076][ T9250] RIP: 0033:0x7fd750b7ce59 [ 520.037093][ T9250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.037113][ T9250] RSP: 002b:00007fd74f5d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 520.037137][ T9250] RAX: ffffffffffffffda RBX: 00007fd750df5fa0 RCX: 00007fd750b7ce59 [ 520.037157][ T9250] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 520.037176][ T9250] RBP: 00007fd74f5d7090 R08: 0000000000000000 R09: 0000000000000000 [ 520.037201][ T9250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.037214][ T9250] R13: 00007fd750df6038 R14: 00007fd750df5fa0 R15: 00007ffd946e9288 [ 520.037234][ T9250] [ 520.380107][ T9256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1629'. [ 520.450957][ T9256] loop4: detected capacity change from 0 to 512 [ 520.460242][ T9256] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 520.470087][ T9256] EXT4-fs (loop4): group descriptors corrupted! [ 520.940094][ T9261] loop2: detected capacity change from 0 to 512 [ 521.037900][ T9261] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 521.037962][ T9261] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 521.038106][ T9261] EXT4-fs (loop2): orphan cleanup on readonly fs [ 521.038298][ T9261] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #13: comm syz.2.1631: iget: bad i_size value: 12154761577498 [ 521.038326][ T9261] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 521.039935][ T9261] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1631: couldn't read orphan inode 13 (err -117) [ 521.039973][ T9261] loop2: lost filesystem error report for type 5 error -117 [ 521.040607][ T9261] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 521.050233][ T9261] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.1631: dx entry: limit 65535 != root limit 120 [ 521.050273][ T9261] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1631: Corrupt directory, running e2fsck is recommended [ 521.171350][ T9269] netlink: 'syz.0.1635': attribute type 1 has an invalid length. [ 521.171391][ T9269] netlink: 'syz.0.1635': attribute type 2 has an invalid length. [ 521.742045][ T9281] loop3: detected capacity change from 0 to 1024 [ 521.761586][ T9281] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 521.789213][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.801468][ T9281] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1640: Invalid block bitmap block 0 in block_group 0 [ 521.828592][ T9281] loop3: lost filesystem error report for type 5 error -117 [ 521.829122][ T9281] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.1640: Failed to acquire dquot type 0 [ 521.836535][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 521.836553][ C1] EXT4-fs (loop3): initial error at time 1782227837: ext4_read_block_bitmap_nowait:483 [ 521.836575][ C1] EXT4-fs (loop3): last error at time 1782227837: ext4_read_block_bitmap_nowait:483 [ 521.889020][ T9287] loop2: detected capacity change from 0 to 256 [ 521.914513][ T9287] vfat: Unknown parameter './file2' [ 522.286428][ T9281] loop3: lost filesystem error report for type 5 error -117 [ 522.286804][ T9281] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.1640: Freeing blocks not in datazone - block = 0, count = 4096 [ 522.328584][ T9293] random: crng reseeded on system resumption [ 522.406256][ T9281] loop3: lost filesystem error report for type 5 error -117 [ 522.406865][ T9281] EXT4-fs error (device loop3): ext4_read_inode_bitmap:141: comm syz.3.1640: Invalid inode bitmap blk 0 in block_group 0 [ 522.465431][ T9281] loop3: lost filesystem error report for type 5 error -117 [ 522.466029][ T9281] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 522.520874][ T9281] loop3: lost filesystem error report for type 5 error -117 [ 522.521314][ T9281] EXT4-fs (loop3): 1 orphan inode deleted [ 522.556032][ T9281] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.604985][ T154] net_ratelimit: 25 callbacks suppressed [ 522.605050][ T154] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 522.758224][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 522.778218][ T2287] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:7: Failed to release dquot type 0 [ 522.800571][ T9300] loop0: detected capacity change from 0 to 164 [ 522.873875][ T154] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 522.929294][ T9303] netlink: 'syz.2.1647': attribute type 1 has an invalid length. [ 522.955280][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.976190][ T9303] netlink: 'syz.2.1647': attribute type 2 has an invalid length. [ 522.984416][ T68] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 523.010506][ T9305] loop4: detected capacity change from 0 to 1024 [ 523.113818][ T2287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 523.191486][ T9316] loop4: detected capacity change from 0 to 512 [ 523.218238][ T9316] EXT4-fs (loop4): bad s_min_extra_isize: 65535 [ 523.264782][ T68] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 523.280355][ T28] kauditd_printk_skb: 100 callbacks suppressed [ 523.280373][ T28] audit: type=1400 audit(1782227838.888:4813): avc: denied { ioctl } for pid=9315 comm="syz.4.1654" path="socket:[23229]" dev="sockfs" ino=23229 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 523.353582][ T28] audit: type=1400 audit(1782227838.898:4814): avc: denied { module_request } for pid=9315 comm="syz.4.1654" kmod="netdev-wlan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 523.388358][ T28] audit: type=1400 audit(1782227838.948:4815): avc: denied { map_create } for pid=9315 comm="syz.4.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 523.419331][ T2287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 523.460247][ T28] audit: type=1400 audit(1782227838.948:4816): avc: denied { bpf } for pid=9315 comm="syz.4.1654" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 523.532085][ T28] audit: type=1400 audit(1782227838.948:4817): avc: denied { map_read map_write } for pid=9315 comm="syz.4.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 523.553199][ T154] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 523.611693][ T9328] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1652'. [ 523.633338][ T28] audit: type=1400 audit(1782227838.958:4818): avc: denied { prog_load } for pid=9315 comm="syz.4.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 523.662626][ T2287] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 523.713318][ T28] audit: type=1400 audit(1782227838.988:4819): avc: denied { sys_module } for pid=9315 comm="syz.4.1654" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 523.749432][ T28] audit: type=1400 audit(1782227838.998:4820): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 523.769760][ T28] audit: type=1326 audit(1782227839.038:4821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.0.1656" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f731ace59 code=0x7ffc0000 [ 523.797482][ T28] audit: type=1326 audit(1782227839.038:4822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.0.1656" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f6f731ace59 code=0x7ffc0000 [ 523.805038][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 523.926879][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1657'. [ 524.301563][ T9335] loop3: detected capacity change from 0 to 512 [ 524.453297][ T9335] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 524.464188][ T9335] EXT4-fs (loop3): group descriptors corrupted! [ 525.448834][ T9349] loop2: detected capacity change from 0 to 4096 [ 525.464843][ T9353] netlink: 'syz.0.1662': attribute type 1 has an invalid length. [ 525.490940][ T9353] netlink: 'syz.0.1662': attribute type 2 has an invalid length. [ 525.598218][ T9349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.938976][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.953420][ T9362] loop0: detected capacity change from 0 to 4096 [ 526.040644][ T9362] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.060889][ T9337] loop4: detected capacity change from 0 to 1024 [ 526.169092][ T9337] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 526.526050][ T9337] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1658: Invalid block bitmap block 0 in block_group 0 [ 526.550031][ T9337] loop4: lost filesystem error report for type 5 error -117 [ 526.550709][ T9337] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.1658: Failed to acquire dquot type 0 [ 526.570057][ T9337] loop4: lost filesystem error report for type 5 error -117 [ 526.570514][ T9337] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.1658: Freeing blocks not in datazone - block = 0, count = 4096 [ 526.591224][ T9337] loop4: lost filesystem error report for type 5 error -117 [ 526.649387][ C1] EXT4-fs (loop4): error count since last fsck: 3 [ 526.663323][ C1] EXT4-fs (loop4): initial error at time 1782227842: ext4_read_block_bitmap_nowait:483 [ 526.673078][ C1] EXT4-fs (loop4): last error at time 1782227842: ext4_free_blocks:6718 [ 526.741955][ T9337] EXT4-fs error (device loop4): ext4_read_inode_bitmap:141: comm syz.4.1658: Invalid inode bitmap blk 0 in block_group 0 [ 526.822030][ T36] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 0 [ 526.822930][ T9337] loop4: lost filesystem error report for type 5 error -117 [ 526.853193][ T36] loop4: lost filesystem error report for type 5 error -117 [ 526.980649][ T9383] loop1: detected capacity change from 0 to 512 [ 527.048494][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.128931][ T9385] loop2: detected capacity change from 0 to 512 [ 527.272007][ T9337] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 527.333484][ T9385] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.1670: corrupted inode contents [ 527.345383][ T9385] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 527.345913][ T9385] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #16: comm syz.2.1670: mark_inode_dirty error [ 527.366550][ T9385] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 527.367054][ T9385] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.1670: corrupted inode contents [ 527.388139][ T9385] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 527.388866][ T9385] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.1670: mark_inode_dirty error [ 527.409225][ T9385] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 527.413758][ T9385] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.1670: corrupted inode contents [ 527.448070][ C1] EXT4-fs (loop2): error count since last fsck: 4 [ 527.448200][ C1] EXT4-fs (loop2): initial error at time 1782227842: ext4_do_update_inode:5742: inode 16 [ 527.448470][ C1] EXT4-fs (loop2): last error at time 1782227843: __ext4_ext_dirty:207: inode 16 [ 527.490315][ T9385] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 527.495024][ T9385] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 527.527336][ T9385] loop2: lost filesystem error report for type 5 error -117 [ 527.529946][ T9385] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.1670: corrupted inode contents [ 527.551351][ T9385] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 527.553751][ T9385] EXT4-fs error (device loop2): ext4_truncate:4691: inode #16: comm syz.2.1670: mark_inode_dirty error [ 527.588570][ T9385] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 527.590993][ T9385] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 527.622917][ T9385] loop2: lost filesystem error report for type 5 error -117 [ 527.624546][ T30] net_ratelimit: 21 callbacks suppressed [ 527.624584][ T30] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 527.652214][ T9385] EXT4-fs (loop2): 1 truncate cleaned up [ 527.658707][ T9385] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.671262][ T9385] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.725747][ T9337] loop4: lost filesystem error report for type 5 error -117 [ 527.726239][ T9337] EXT4-fs (loop4): 1 orphan inode deleted [ 527.747936][ T9383] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.1669: corrupted inode contents [ 527.788510][ T9337] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.826453][ T9383] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 527.826979][ T9383] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #16: comm syz.1.1669: mark_inode_dirty error [ 527.836337][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 527.836371][ C1] EXT4-fs (loop1): initial error at time 1782227843: ext4_do_update_inode:5742: inode 16 [ 527.836431][ C1] EXT4-fs (loop1): last error at time 1782227843: ext4_do_update_inode:5742: inode 16 [ 527.933813][ T49] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 527.994313][ T68] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:4: Failed to release dquot type 1 [ 528.042530][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 528.053054][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.161029][ T9395] netlink: 'syz.3.1673': attribute type 1 has an invalid length. [ 528.191010][ T9383] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 528.193894][ T9383] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.1669: corrupted inode contents [ 528.219280][ T9395] netlink: 'syz.3.1673': attribute type 2 has an invalid length. [ 528.227667][ T154] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 528.318031][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 528.318052][ T28] audit: type=1400 audit(1782227843.928:4861): avc: denied { write } for pid=9399 comm="syz.0.1675" name="ptype" dev="proc" ino=4026532590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 528.430344][ T9383] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 528.430574][ T68] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 528.448873][ T9383] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.1669: mark_inode_dirty error [ 528.518725][ T9404] loop0: detected capacity change from 0 to 256 [ 528.531134][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1674'. [ 528.555370][ T9383] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.1669: corrupted inode contents [ 528.585178][ T9404] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 528.623620][ T49] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 528.699669][ T9383] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 528.723489][ T9408] loop4: detected capacity change from 0 to 512 [ 528.753348][ T49] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 528.763642][ T9408] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.794946][ T9383] loop1: lost filesystem error report for type 5 error -117 [ 528.796945][ T9383] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.1669: corrupted inode contents [ 528.829057][ T9408] ext4 filesystem being mounted at /308/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 528.859867][ T9402] FAULT_INJECTION: forcing a failure. [ 528.859867][ T9402] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 528.912826][ T9402] CPU: 1 UID: 0 PID: 9402 Comm: syz.3.1676 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 528.912872][ T9402] Tainted: [W]=WARN [ 528.912882][ T9402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 528.912900][ T9402] Call Trace: [ 528.912908][ T9402] [ 528.912917][ T9402] __dump_stack+0x1d/0x30 [ 528.912966][ T9402] dump_stack_lvl+0x95/0xd0 [ 528.912993][ T9402] dump_stack+0x15/0x1b [ 528.913019][ T9402] should_fail_ex+0x25e/0x270 [ 528.913055][ T9402] should_fail_alloc_page+0xf2/0x100 [ 528.913162][ T9402] __alloc_frozen_pages_noprof+0x108/0x350 [ 528.913246][ T9402] alloc_pages_mpol+0xa9/0x1d0 [ 528.913285][ T9402] folio_alloc_mpol_noprof+0x39/0x80 [ 528.913325][ T9402] swap_cache_alloc_folio+0x180/0x5e0 [ 528.913441][ T9402] ? __rcu_read_unlock+0x4e/0x70 [ 528.913471][ T9402] ? swap_cache_get_folio+0x1f7/0x200 [ 528.913533][ T9402] swap_cluster_readahead+0x2b1/0x460 [ 528.913577][ T9402] swapin_readahead+0xd8/0x8a0 [ 528.913611][ T9402] ? mod_lruvec_state+0x10c/0x120 [ 528.913711][ T9402] ? __rcu_read_unlock+0x33/0x70 [ 528.913744][ T9402] ? lruvec_stat_mod_folio+0xbb/0x100 [ 528.913773][ T9402] ? _raw_spin_unlock+0x9/0x30 [ 528.913863][ T9402] ? __rcu_read_unlock+0x4e/0x70 [ 528.913896][ T9402] ? swap_cache_get_folio+0x1f7/0x200 [ 528.913935][ T9402] do_swap_page+0x2a2/0x1ec0 [ 528.913993][ T9402] ? __css_rstat_updated+0xbb/0x280 [ 528.914030][ T9402] ? __rcu_read_lock+0x36/0x50 [ 528.914092][ T9402] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 528.914126][ T9402] handle_mm_fault+0xb3c/0x2da0 [ 528.914212][ T9402] ? _raw_spin_lock+0x52/0xa0 [ 528.914256][ T9402] __get_user_pages+0x129c/0x1f10 [ 528.914297][ T9402] __mm_populate+0x242/0x390 [ 528.914335][ T9402] do_mlock+0x44d/0x510 [ 528.914408][ T9402] ? mutex_unlock+0x4e/0x90 [ 528.914432][ T9402] ? fput+0x8f/0xc0 [ 528.914463][ T9402] ? ksys_write+0x194/0x1a0 [ 528.914484][ T9402] __x64_sys_mlock+0x36/0x50 [ 528.914536][ T9402] x64_sys_call+0x1ab3/0x3020 [ 528.914562][ T9402] do_syscall_64+0x136/0x3c0 [ 528.914597][ T9402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.914628][ T9402] RIP: 0033:0x7f495cf1ce59 [ 528.914722][ T9402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.914745][ T9402] RSP: 002b:00007f495b977028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 528.914766][ T9402] RAX: ffffffffffffffda RBX: 00007f495d195fa0 RCX: 00007f495cf1ce59 [ 528.914804][ T9402] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 528.914827][ T9402] RBP: 00007f495b977090 R08: 0000000000000000 R09: 0000000000000000 [ 528.914840][ T9402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.914853][ T9402] R13: 00007f495d196038 R14: 00007f495d195fa0 R15: 00007fffeae85a28 [ 528.914878][ T9402] [ 529.240332][ T28] audit: type=1400 audit(1782227843.938:4862): avc: denied { relabelto } for pid=9397 comm="syz.4.1674" name="307" dev="tmpfs" ino=1669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 529.268864][ T30] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 529.296258][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.306044][ T9383] EXT4-fs error (device loop1): ext4_truncate:4691: inode #16: comm syz.1.1669: mark_inode_dirty error [ 529.311880][ T28] audit: type=1400 audit(1782227843.938:4863): avc: denied { associate } for pid=9397 comm="syz.4.1674" name="307" dev="tmpfs" ino=1669 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="u:r:untrusted_app:s0:c512,c768" [ 529.394517][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 529.402183][ T28] audit: type=1400 audit(1782227844.018:4864): avc: denied { ioctl } for pid=9397 comm="syz.4.1674" path="socket:[23788]" dev="sockfs" ino=23788 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 529.433872][ T9404] loop0: detected capacity change from 256 to 64 [ 529.452391][ T9383] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 529.461324][ T9383] loop1: lost filesystem error report for type 5 error -117 [ 529.461429][ T28] audit: type=1400 audit(1782227844.098:4865): avc: denied { getopt } for pid=9403 comm="syz.0.1677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 529.488184][ T28] audit: type=1400 audit(1782227844.098:4866): avc: denied { allowed } for pid=9403 comm="syz.0.1677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 529.502808][ T154] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 529.535249][ T28] audit: type=1400 audit(1782227844.108:4867): avc: denied { create } for pid=9403 comm="syz.0.1677" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 529.559867][ T28] audit: type=1400 audit(1782227844.108:4868): avc: denied { name_bind } for pid=9403 comm="syz.0.1677" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 529.581776][ T28] audit: type=1400 audit(1782227844.248:4869): avc: denied { mount } for pid=9403 comm="syz.0.1677" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 529.606158][ T28] audit: type=1400 audit(1782227844.258:4870): avc: denied { mounton } for pid=9403 comm="syz.0.1677" path="/361/bus/bus" dev="loop0" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 529.646760][ T9383] EXT4-fs (loop1): 1 truncate cleaned up [ 529.664719][ T154] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:5: Failed to release dquot type 1 [ 529.685254][ T3295] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 529.704418][ T9383] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.710423][ T154] loop1: lost filesystem error report for type 5 error -117 [ 529.717858][ T9383] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 529.737297][ T3295] FAT-fs (loop0): Filesystem has been set read-only [ 529.744103][ T3295] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 529.781110][ T8614] syz.0.1432: attempt to access beyond end of device [ 529.781110][ T8614] loop0: rw=2049, sector=208, nr_sectors = 4 limit=64 [ 529.795350][ T8614] Buffer I/O error on dev loop0, logical block 52, lost sync page write [ 529.804404][ T8614] syz.0.1432: attempt to access beyond end of device [ 529.804404][ T8614] loop0: rw=2049, sector=212, nr_sectors = 4 limit=64 [ 529.837065][ T8614] Buffer I/O error on dev loop0, logical block 53, lost sync page write [ 529.864297][ T8614] syz.0.1432: attempt to access beyond end of device [ 529.864297][ T8614] loop0: rw=2049, sector=216, nr_sectors = 4 limit=64 [ 529.895912][ T8614] Buffer I/O error on dev loop0, logical block 54, lost sync page write [ 529.916729][ T8614] syz.0.1432: attempt to access beyond end of device [ 529.916729][ T8614] loop0: rw=2049, sector=220, nr_sectors = 4 limit=64 [ 529.946262][ T8614] Buffer I/O error on dev loop0, logical block 55, lost sync page write [ 529.964100][ T8614] syz.0.1432: attempt to access beyond end of device [ 529.964100][ T8614] loop0: rw=2049, sector=224, nr_sectors = 4 limit=64 [ 529.989320][ T8614] Buffer I/O error on dev loop0, logical block 56, lost sync page write [ 530.007377][ T8614] syz.0.1432: attempt to access beyond end of device [ 530.007377][ T8614] loop0: rw=2049, sector=228, nr_sectors = 4 limit=64 [ 530.033264][ T8614] Buffer I/O error on dev loop0, logical block 57, lost sync page write [ 530.053097][ T8614] syz.0.1432: attempt to access beyond end of device [ 530.053097][ T8614] loop0: rw=2049, sector=232, nr_sectors = 4 limit=64 [ 530.087218][ T8614] Buffer I/O error on dev loop0, logical block 58, lost sync page write [ 530.127339][ T8614] syz.0.1432: attempt to access beyond end of device [ 530.127339][ T8614] loop0: rw=2049, sector=236, nr_sectors = 4 limit=64 [ 530.154628][ T8614] Buffer I/O error on dev loop0, logical block 59, lost sync page write [ 530.239151][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.426488][ T30] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.685643][ T9426] loop4: detected capacity change from 0 to 1024 [ 530.692508][ T9426] EXT4-fs: Ignoring removed nobh option [ 530.698282][ T9426] EXT4-fs: Ignoring removed i_version option [ 530.890577][ T9426] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.066166][ T30] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.207892][ T30] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.300996][ T30] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.555640][ T30] bridge_slave_1: left allmulticast mode [ 531.574582][ T30] bridge_slave_1: left promiscuous mode [ 531.753541][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.787118][ T30] bridge_slave_0: left allmulticast mode [ 532.264610][ T9448] loop3: detected capacity change from 0 to 1024 [ 532.271673][ T9448] EXT4-fs: Ignoring removed nobh option [ 532.277494][ T9448] EXT4-fs: Ignoring removed i_version option [ 532.288288][ T30] bridge_slave_0: left promiscuous mode [ 532.379921][ T9448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.458546][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.485244][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.958968][ T30] bond2 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 533.001838][ T30] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 533.152015][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.185178][ T30] bond0 (unregistering): Released all slaves [ 533.214012][ T30] bond1 (unregistering): Released all slaves [ 533.243117][ T30] bond2 (unregistering): Released all slaves [ 533.275295][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 533.310717][ T9427] lo speed is unknown, defaulting to 1000 [ 533.317832][ T30] tipc: Left network mode [ 533.586731][ T30] hsr_slave_0: left promiscuous mode [ 533.601203][ T30] hsr_slave_1: left promiscuous mode [ 533.619141][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.649200][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.699027][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.719531][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 533.719553][ T28] audit: type=1400 audit(1782227849.328:4900): avc: denied { connect } for pid=9468 comm="syz.4.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 533.756162][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.818431][ T30] veth1_macvtap: left promiscuous mode [ 533.840135][ T30] veth0_macvtap: left promiscuous mode [ 533.856227][ T28] audit: type=1400 audit(1782227849.368:4901): avc: denied { write } for pid=9468 comm="syz.4.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 533.883708][ T30] veth1_vlan: left promiscuous mode [ 533.910775][ T30] veth0_vlan: left promiscuous mode [ 534.059395][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.343079][ T9481] loop4: detected capacity change from 0 to 512 [ 534.353751][ T9481] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 534.363646][ T9481] EXT4-fs (loop4): group descriptors corrupted! [ 535.058308][ T28] audit: type=1400 audit(1782227849.938:4902): avc: denied { mount } for pid=9472 comm="syz.4.1692" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 535.422496][ T9481] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1692'. [ 537.059883][ T9479] loop3: detected capacity change from 0 to 512 [ 537.430491][ T30] team0 (unregistering): Port device team_slave_1 removed [ 537.460106][ T30] team0 (unregistering): Port device team_slave_0 removed [ 537.528680][ T9479] EXT4-fs warning (device loop3): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop3. [ 537.594948][ T28] audit: type=1400 audit(1782227853.198:4903): avc: denied { write } for pid=9466 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 537.665313][ T9480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1692'. [ 537.675098][ T9481] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 537.684700][ T28] audit: type=1400 audit(1782227853.298:4904): avc: denied { write } for pid=9493 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 537.811331][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 537.900821][ T9504] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1695'. [ 537.943612][ T9504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1695'. [ 537.954064][ T28] audit: type=1400 audit(1782227853.558:4905): avc: denied { read write } for pid=9501 comm="syz.4.1695" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 537.991068][ T28] audit: type=1400 audit(1782227853.558:4906): avc: denied { open } for pid=9501 comm="syz.4.1695" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 538.023800][ T9509] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1695'. [ 538.089322][ T9427] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.110755][ T28] audit: type=1400 audit(1782227853.638:4907): avc: denied { setattr } for pid=9501 comm="syz.4.1695" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 538.152712][ T9427] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.274845][ T9427] bridge_slave_0: entered allmulticast mode [ 538.281613][ T9427] bridge_slave_0: entered promiscuous mode [ 538.290275][ T9427] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.297641][ T9427] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.304960][ T9427] bridge_slave_1: entered allmulticast mode [ 538.311498][ T9427] bridge_slave_1: entered promiscuous mode [ 538.371919][ T28] audit: type=1400 audit(1782227853.978:4908): avc: denied { write } for pid=9502 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 538.426866][ T9427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.556544][ T9529] loop3: detected capacity change from 0 to 512 [ 538.575583][ T9527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1697'. [ 538.598712][ T9427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.672685][ T28] audit: type=1400 audit(1782227854.278:4909): avc: denied { create } for pid=9525 comm="syz.4.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 538.917345][ T28] audit: type=1400 audit(1782227854.278:4910): avc: denied { connect } for pid=9525 comm="syz.4.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 538.950863][ T30] IPVS: stop unused estimator thread 0... [ 538.973551][ T9427] team0: Port device team_slave_0 added [ 539.062834][ T9427] team0: Port device team_slave_1 added [ 539.148443][ T28] audit: type=1400 audit(1782227854.398:4911): avc: denied { write } for pid=9531 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 539.196712][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 539.262222][ T9427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.313882][ T9427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.351695][ T9529] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 539.361660][ T9529] EXT4-fs (loop3): group descriptors corrupted! [ 539.677350][ T9427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.190605][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.628474][ T9427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.635531][ T9427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.664069][ T9427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.678710][ T28] audit: type=1400 audit(1782227856.288:4912): avc: denied { setopt } for pid=9539 comm="syz.1.1703" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 540.700404][ T9540] loop1: detected capacity change from 0 to 2048 [ 540.709209][ T9540] ext4: Unknown parameter 'fsmagic' [ 540.714767][ T9538] FAULT_INJECTION: forcing a failure. [ 540.714767][ T9538] name failslab, interval 1, probability 0, space 0, times 0 [ 540.750680][ T9538] CPU: 0 UID: 0 PID: 9538 Comm: syz.4.1702 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 540.750753][ T9538] Tainted: [W]=WARN [ 540.750763][ T9538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 540.750781][ T9538] Call Trace: [ 540.750791][ T9538] [ 540.750802][ T9538] __dump_stack+0x1d/0x30 [ 540.750903][ T9538] dump_stack_lvl+0x95/0xd0 [ 540.750931][ T9538] dump_stack+0x15/0x1b [ 540.750981][ T9538] should_fail_ex+0x25e/0x270 [ 540.751017][ T9538] should_failslab+0x8c/0xb0 [ 540.751063][ T9538] kmem_cache_alloc_lru_noprof+0x81/0x3d0 [ 540.751088][ T9538] ? __d_alloc+0x34/0x320 [ 540.751151][ T9538] ? __d_alloc+0x34/0x320 [ 540.751249][ T9538] __d_alloc+0x34/0x320 [ 540.751364][ T9538] d_alloc+0x2e/0x100 [ 540.751439][ T9538] lookup_one_qstr_excl+0x95/0x240 [ 540.751517][ T9538] start_dirop+0x3e/0x70 [ 540.751553][ T9538] simple_start_creating+0xa2/0xd0 [ 540.751658][ T9538] debugfs_start_creating+0xda/0x150 [ 540.751686][ T9538] __debugfs_create_file+0x70/0x2b0 [ 540.751715][ T9538] debugfs_create_file_full+0x3f/0x60 [ 540.751762][ T9538] ? __pfx_ip6gre_tunnel_setup+0x10/0x10 [ 540.751798][ T9538] ref_tracker_dir_debugfs+0x10e/0x220 [ 540.751840][ T9538] alloc_netdev_mqs+0x1a9/0xa60 [ 540.751942][ T9538] ip6gre_tunnel_locate+0x454/0x7b0 [ 540.751986][ T9538] ? gre_flags_to_tnl_flags+0x1c1/0x1f0 [ 540.752089][ T9538] ip6gre_tunnel_siocdevprivate+0x6da/0x900 [ 540.752137][ T9538] dev_ifsioc+0x8f5/0xfc0 [ 540.752238][ T9538] dev_ioctl+0x78c/0x960 [ 540.752282][ T9538] sock_ioctl+0x58f/0x610 [ 540.752343][ T9538] ? __pfx_sock_ioctl+0x10/0x10 [ 540.752381][ T9538] __se_sys_ioctl+0xce/0x140 [ 540.752422][ T9538] __x64_sys_ioctl+0x43/0x50 [ 540.752461][ T9538] x64_sys_call+0x1563/0x3020 [ 540.752500][ T9538] do_syscall_64+0x136/0x3c0 [ 540.752538][ T9538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.752567][ T9538] RIP: 0033:0x7f09e0d8ce59 [ 540.752584][ T9538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.752677][ T9538] RSP: 002b:00007f09df7e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 540.752699][ T9538] RAX: ffffffffffffffda RBX: 00007f09e1005fa0 RCX: 00007f09e0d8ce59 [ 540.752717][ T9538] RDX: 00002000000007c0 RSI: 00000000000089f1 RDI: 0000000000000003 [ 540.752730][ T9538] RBP: 00007f09df7e7090 R08: 0000000000000000 R09: 0000000000000000 [ 540.752824][ T9538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.752840][ T9538] R13: 00007f09e1006038 R14: 00007f09e1005fa0 R15: 00007ffd21727188 [ 540.752868][ T9538] [ 541.016960][ T28] audit: type=1400 audit(1782227856.628:4913): avc: denied { connect } for pid=9539 comm="syz.1.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 541.083789][ T9544] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1704'. [ 541.105548][ T28] audit: type=1400 audit(1782227856.648:4914): avc: denied { write } for pid=9539 comm="syz.1.1703" path="socket:[23927]" dev="sockfs" ino=23927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 541.174369][ T28] audit: type=1400 audit(1782227856.678:4915): avc: denied { ioctl } for pid=9543 comm="syz.3.1704" path="socket:[23931]" dev="sockfs" ino=23931 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 541.214256][ T9427] hsr_slave_0: entered promiscuous mode [ 541.221877][ T9546] loop3: detected capacity change from 0 to 512 [ 541.235154][ T9427] hsr_slave_1: entered promiscuous mode [ 541.242577][ T9427] debugfs: 'hsr0' already exists in 'hsr' [ 541.259946][ T9427] Cannot create hsr debugfs directory [ 541.273925][ T9546] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 541.299356][ T9554] random: crng reseeded on system resumption [ 541.300465][ T28] audit: type=1400 audit(1782227856.908:4916): avc: denied { write } for pid=9549 comm="syz.4.1705" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 541.329607][ T9546] EXT4-fs (loop3): orphan cleanup on readonly fs [ 541.338721][ T9550] netlink: 'syz.4.1705': attribute type 6 has an invalid length. [ 541.387211][ T9546] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 541.420780][ T28] audit: type=1400 audit(1782227856.908:4917): avc: denied { open } for pid=9549 comm="syz.4.1705" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 541.446175][ T9546] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 541.456533][ T9546] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.1704: Failed to acquire dquot type 1 [ 541.469575][ T9546] loop3: lost filesystem error report for type 5 error -5 [ 541.470117][ T9546] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1704: bg 0: block 40: padding at end of block bitmap is not set [ 541.477435][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 541.477459][ C0] EXT4-fs (loop3): initial error at time 1782227857: ext4_acquire_dquot:7041 [ 541.477499][ C0] EXT4-fs (loop3): last error at time 1782227857: ext4_acquire_dquot:7041 [ 541.518683][ T9546] loop3: lost filesystem error report for type 5 error -117 [ 541.518851][ T9546] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 541.538527][ T9546] loop3: lost filesystem error report for type 5 error -117 [ 541.539991][ T9546] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #16: comm syz.3.1704: data will be lost [ 541.563129][ T9546] EXT4-fs (loop3): 1 truncate cleaned up [ 541.571128][ T9546] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 541.609434][ T30] tipc: Subscription rejected, illegal request [ 541.666102][ T9427] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 541.701610][ T9427] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 541.711488][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 541.722302][ T9427] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 541.730752][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.741931][ T9427] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 541.753671][ T9427] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 541.779951][ T9427] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 541.799823][ T9573] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 541.812097][ T9427] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 541.821988][ T9427] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 541.847299][ T9579] xt_l2tp: v2 doesn't support IP mode [ 541.860766][ T9579] tmpfs: Bad value for 'mpol' [ 541.898781][ T9579] xt_CT: No such helper "snmp_trap" [ 541.907024][ T9427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.920168][ T9427] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.931611][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.938844][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.991926][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.999134][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.070762][ T9427] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 542.182513][ T9573] loop3: detected capacity change from 0 to 512 [ 542.213704][ T9598] loop1: detected capacity change from 0 to 8192 [ 542.254338][ T9573] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 542.481164][ T9427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.536579][ T9573] EXT4-fs error (device loop3): xattr_find_entry:337: inode #15: comm syz.3.1707: corrupted xattr entries [ 542.563522][ T9573] fserror_report: 4 callbacks suppressed [ 542.563549][ T9573] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 542.592247][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 542.607911][ C0] EXT4-fs (loop3): initial error at time 1782227858: xattr_find_entry:337: inode 15 [ 542.617388][ C0] EXT4-fs (loop3): last error at time 1782227858: xattr_find_entry:337: inode 15 [ 542.629340][ T9573] EXT4-fs (loop3): Remounting filesystem read-only [ 542.637982][ T9573] EXT4-fs (loop3): 1 truncate cleaned up [ 542.719464][ T9573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 542.838118][ T9598] loop1: p1 p2 p3 [ 542.842010][ T9598] loop1: p1 start 51379968 is beyond EOD, truncated [ 542.852456][ T9598] loop1: p3 size 100663552 extends beyond EOD, truncated [ 542.872493][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.131181][ T9427] veth0_vlan: entered promiscuous mode [ 543.144275][ T9427] veth1_vlan: entered promiscuous mode [ 543.175342][ T9427] veth0_macvtap: entered promiscuous mode [ 543.192673][ T9427] veth1_macvtap: entered promiscuous mode [ 543.197629][ T7803] udevd[7803]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 543.199821][ T7809] udevd[7809]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 543.254900][ T9427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.296446][ T9427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.368866][ T68] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.377939][ T9675] loop2: detected capacity change from 0 to 512 [ 543.437284][ T68] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.469612][ T68] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.483759][ T9675] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.1712: corrupted inode contents [ 543.495660][ T9675] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 543.496182][ T9675] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #16: comm syz.2.1712: mark_inode_dirty error [ 543.516919][ T9675] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 543.518452][ T9675] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.1712: corrupted inode contents [ 543.540033][ T9675] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 543.540365][ T9675] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.1712: mark_inode_dirty error [ 543.560856][ T9675] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 543.567354][ T9675] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.1712: corrupted inode contents [ 543.574913][ C1] EXT4-fs (loop2): error count since last fsck: 4 [ 543.579112][ T68] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.589124][ C1] EXT4-fs (loop2): initial error at time 1782227859: ext4_do_update_inode:5742: inode 16 [ 543.589162][ C1] EXT4-fs (loop2): last error at time 1782227859: __ext4_ext_dirty:207: inode 16 [ 543.711033][ T9675] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 543.734225][ T9675] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 543.803741][ T9675] loop2: lost filesystem error report for type 5 error -117 [ 543.819865][ T9675] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.1712: corrupted inode contents [ 543.839150][ T9675] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 543.912721][ T9675] EXT4-fs error (device loop2): ext4_truncate:4691: inode #16: comm syz.2.1712: mark_inode_dirty error [ 543.992639][ T9675] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 543.997520][ T9675] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 544.135532][ T9711] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 544.147928][ T9675] loop2: lost filesystem error report for type 5 error -117 [ 544.150424][ T9675] EXT4-fs (loop2): 1 truncate cleaned up [ 544.164658][ T9675] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.227449][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 544.227465][ T28] audit: type=1400 audit(1782227859.838:4947): avc: denied { write } for pid=9694 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 544.425587][ T9713] loop5: detected capacity change from 0 to 1024 [ 544.451605][ T9713] EXT4-fs: Ignoring removed nobh option [ 544.458500][ T9713] EXT4-fs: Ignoring removed i_version option [ 544.689803][ T9713] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.971592][ T9675] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 545.077516][ T28] audit: type=1400 audit(1782227860.598:4948): avc: denied { write } for pid=9718 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 545.127387][ T68] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 545.174917][ T68] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:4: Failed to release dquot type 1 [ 545.200985][ T9715] loop4: detected capacity change from 0 to 512 [ 545.231747][ T9715] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 545.280872][ T9715] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.1720: corrupted xattr entries [ 545.292283][ T9715] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 545.292521][ T9715] EXT4-fs (loop4): Remounting filesystem read-only [ 545.302853][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 545.302871][ C1] EXT4-fs (loop4): initial error at time 1782227860: xattr_find_entry:337: inode 15 [ 545.302920][ C1] EXT4-fs (loop4): last error at time 1782227860: xattr_find_entry:337: inode 15 [ 545.338306][ T9715] EXT4-fs (loop4): 1 truncate cleaned up [ 545.344498][ T9715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 545.421350][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.509536][ T28] audit: type=1400 audit(1782227861.118:4949): avc: denied { write } for pid=9721 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 545.688604][ T28] audit: type=1400 audit(1782227861.278:4950): avc: denied { write } for pid=9734 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 545.872760][ T9622] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 545.932967][ T9731] loop1: detected capacity change from 0 to 512 [ 546.244616][ T9731] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 546.255249][ T9731] EXT4-fs (loop1): group descriptors corrupted! [ 546.355674][ T9742] FAULT_INJECTION: forcing a failure. [ 546.355674][ T9742] name failslab, interval 1, probability 0, space 0, times 0 [ 546.372082][ T9427] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.383317][ T9742] CPU: 0 UID: 0 PID: 9742 Comm: syz.4.1721 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 546.383401][ T9742] Tainted: [W]=WARN [ 546.383411][ T9742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 546.383429][ T9742] Call Trace: [ 546.383435][ T9742] [ 546.383443][ T9742] __dump_stack+0x1d/0x30 [ 546.383474][ T9742] dump_stack_lvl+0x95/0xd0 [ 546.383559][ T9742] dump_stack+0x15/0x1b [ 546.383583][ T9742] should_fail_ex+0x25e/0x270 [ 546.383621][ T9742] should_failslab+0x8c/0xb0 [ 546.383651][ T9742] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 546.383716][ T9742] ? security_file_alloc+0x32/0xf0 [ 546.383844][ T9742] ? security_file_alloc+0x32/0xf0 [ 546.383883][ T9742] security_file_alloc+0x32/0xf0 [ 546.383913][ T9742] init_file+0x5b/0x1b0 [ 546.383941][ T9742] alloc_empty_file+0x85/0x1e0 [ 546.384050][ T9742] alloc_file_pseudo+0x92/0x120 [ 546.384132][ T9742] __shmem_file_setup+0x226/0x260 [ 546.384164][ T9742] shmem_file_setup+0x3b/0x50 [ 546.384187][ T9742] memfd_alloc_file+0x4e/0x300 [ 546.384298][ T9742] __se_sys_memfd_create+0x2e1/0x3b0 [ 546.384367][ T9742] __x64_sys_memfd_create+0x31/0x40 [ 546.384411][ T9742] x64_sys_call+0x1f22/0x3020 [ 546.384438][ T9742] do_syscall_64+0x136/0x3c0 [ 546.384472][ T9742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.384581][ T9742] RIP: 0033:0x7f09e0d8ce59 [ 546.384599][ T9742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.384620][ T9742] RSP: 002b:00007f09df7e6d58 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 546.384647][ T9742] RAX: ffffffffffffffda RBX: 0000000000000593 RCX: 00007f09e0d8ce59 [ 546.384666][ T9742] RDX: 00007f09df7e6ddc RSI: 0000000000000000 RDI: 00007f09e0e2304f [ 546.384689][ T9742] RBP: 00002000000005c0 R08: 00000000ffffffff R09: 0000000000000000 [ 546.384769][ T9742] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000001 [ 546.384786][ T9742] R13: 00007f09df7e6ddc R14: 00007f09df7e6de0 R15: 00007ffd21727188 [ 546.384814][ T9742] [ 546.635488][ T9748] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1723'. [ 546.707406][ T28] audit: type=1400 audit(1782227862.318:4951): avc: denied { getopt } for pid=9749 comm="syz.5.1725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 546.786761][ T28] audit: type=1400 audit(1782227862.398:4952): avc: denied { setopt } for pid=9750 comm="syz.4.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 546.920626][ T9764] xt_TPROXY: Can be used only with -p tcp or -p udp [ 547.588921][ T9774] loop4: detected capacity change from 0 to 2048 [ 547.618724][ T9774] ext4: Unknown parameter 'fsmagic' [ 547.818363][ T36] tipc: Subscription rejected, illegal request [ 547.997511][ T9778] loop4: detected capacity change from 0 to 512 [ 548.015721][ T9778] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 548.015794][ T9778] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 548.015934][ T9778] EXT4-fs (loop4): orphan cleanup on readonly fs [ 548.017134][ T9778] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #13: comm syz.4.1732: iget: bad i_size value: 12154761577498 [ 548.017163][ T9778] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 548.025274][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 548.025300][ C1] EXT4-fs (loop4): initial error at time 1782227863: ext4_orphan_get:1399: inode 13 [ 548.025353][ C1] EXT4-fs (loop4): last error at time 1782227863: ext4_orphan_get:1399: inode 13 [ 548.042522][ T9778] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1732: couldn't read orphan inode 13 (err -117) [ 548.042561][ T9778] loop4: lost filesystem error report for type 5 error -117 [ 548.074212][ T9778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 548.096728][ T9778] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.1732: dx entry: limit 65535 != root limit 120 [ 548.096767][ T9778] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1732: Corrupt directory, running e2fsck is recommended [ 548.098092][ T28] audit: type=1400 audit(1782227863.708:4953): avc: denied { write } for pid=9776 comm="syz.4.1732" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 548.105171][ T28] audit: type=1400 audit(1782227863.718:4954): avc: denied { bind } for pid=9776 comm="syz.4.1732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 548.105228][ T28] audit: type=1400 audit(1782227863.718:4955): avc: denied { write } for pid=9776 comm="syz.4.1732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 548.534905][ T9781] FAULT_INJECTION: forcing a failure. [ 548.534905][ T9781] name failslab, interval 1, probability 0, space 0, times 0 [ 548.535011][ T9781] CPU: 0 UID: 0 PID: 9781 Comm: syz.5.1733 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 548.535085][ T9781] Tainted: [W]=WARN [ 548.535093][ T9781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 548.535152][ T9781] Call Trace: [ 548.535162][ T9781] [ 548.535172][ T9781] __dump_stack+0x1d/0x30 [ 548.535209][ T9781] dump_stack_lvl+0x95/0xd0 [ 548.535231][ T9781] dump_stack+0x15/0x1b [ 548.535255][ T9781] should_fail_ex+0x25e/0x270 [ 548.535296][ T9781] should_failslab+0x8c/0xb0 [ 548.535327][ T9781] __kvmalloc_node_noprof+0x15b/0x590 [ 548.535359][ T9781] ? alloc_netdev_mqs+0xa7/0xa60 [ 548.535394][ T9781] ? alloc_netdev_mqs+0xa7/0xa60 [ 548.535453][ T9781] ? __pfx_ipip_tunnel_setup+0x10/0x10 [ 548.535487][ T9781] alloc_netdev_mqs+0xa7/0xa60 [ 548.535521][ T9781] rtnl_create_link+0x239/0x720 [ 548.535551][ T9781] rtnl_newlink_create+0x175/0x650 [ 548.535624][ T9781] ? security_capable+0x7b/0x90 [ 548.535652][ T9781] ? netlink_ns_capable+0x86/0xa0 [ 548.535688][ T9781] rtnl_newlink+0x1181/0x1400 [ 548.535766][ T9781] ? __siphash_unaligned+0x185/0x2d0 [ 548.535805][ T9781] ? __memcg_slab_free_hook+0x10f/0x2c0 [ 548.535844][ T9781] ? __rcu_read_unlock+0x4e/0x70 [ 548.535881][ T9781] ? avc_has_perm_noaudit+0xa3/0x120 [ 548.535914][ T9781] ? cred_has_capability+0x224/0x2a0 [ 548.536036][ T9781] ? selinux_capable+0x31/0x40 [ 548.536070][ T9781] ? security_capable+0x7b/0x90 [ 548.536148][ T9781] ? ns_capable+0x80/0xb0 [ 548.536225][ T9781] ? __pfx_rtnl_newlink+0x10/0x10 [ 548.536286][ T9781] rtnetlink_rcv_msg+0x64b/0x720 [ 548.536335][ T9781] netlink_rcv_skb+0x11e/0x220 [ 548.536393][ T9781] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 548.536445][ T9781] rtnetlink_rcv+0x1c/0x30 [ 548.536478][ T9781] netlink_unicast+0x5a7/0x680 [ 548.536597][ T9781] netlink_sendmsg+0x5be/0x6f0 [ 548.536646][ T9781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.536702][ T9781] ____sys_sendmsg+0x532/0x580 [ 548.536795][ T9781] ___sys_sendmsg+0x195/0x1e0 [ 548.536898][ T9781] __x64_sys_sendmsg+0xd4/0x160 [ 548.536972][ T9781] x64_sys_call+0x194c/0x3020 [ 548.536997][ T9781] do_syscall_64+0x136/0x3c0 [ 548.537031][ T9781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.537119][ T9781] RIP: 0033:0x7fac96e3ce59 [ 548.537206][ T9781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.537228][ T9781] RSP: 002b:00007fac95897028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 548.537312][ T9781] RAX: ffffffffffffffda RBX: 00007fac970b5fa0 RCX: 00007fac96e3ce59 [ 548.537332][ T9781] RDX: 0000000000040000 RSI: 0000200000000080 RDI: 0000000000000003 [ 548.537348][ T9781] RBP: 00007fac95897090 R08: 0000000000000000 R09: 0000000000000000 [ 548.537440][ T9781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.537458][ T9781] R13: 00007fac970b6038 R14: 00007fac970b5fa0 R15: 00007fff82861138 [ 548.537484][ T9781] [ 548.635798][ T9783] ================================================================== [ 548.635838][ T9783] BUG: KCSAN: data-race in copy_creds / prepare_creds [ 548.635868][ T9783] [ 548.635875][ T9783] write to 0xffff888103fc6b28 of 4 bytes by task 9782 on cpu 0: [ 548.635891][ T9783] copy_creds+0x78/0x340 [ 548.635914][ T9783] copy_process+0x8b8/0x2350 [ 548.635940][ T9783] kernel_clone+0x1c0/0x5f0 [ 548.635969][ T9783] __se_sys_clone3+0x1f5/0x230 [ 548.636000][ T9783] __x64_sys_clone3+0x31/0x40 [ 548.636028][ T9783] x64_sys_call+0x580/0x3020 [ 548.636060][ T9783] do_syscall_64+0x136/0x3c0 [ 548.636092][ T9783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.636114][ T9783] [ 548.636120][ T9783] read to 0xffff888103fc6a80 of 184 bytes by task 9783 on cpu 1: [ 548.636137][ T9783] prepare_creds+0x71/0x550 [ 548.636163][ T9783] __se_sys_capset+0x2da/0x480 [ 548.636204][ T9783] __x64_sys_capset+0x31/0x40 [ 548.636237][ T9783] x64_sys_call+0x2aac/0x3020 [ 548.636268][ T9783] do_syscall_64+0x136/0x3c0 [ 548.636301][ T9783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.636329][ T9783] [ 548.636335][ T9783] Reported by Kernel Concurrency Sanitizer on: [ 548.636351][ T9783] CPU: 1 UID: 0 PID: 9783 Comm: syz.5.1734 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 548.636381][ T9783] Tainted: [W]=WARN [ 548.636389][ T9783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 548.636403][ T9783] ================================================================== [ 549.527873][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.779325][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.845621][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 555.845642][ T28] audit: type=1400 audit(1782227871.458:4957): avc: denied { write } for pid=9800 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 555.885440][ T28] audit: type=1400 audit(1782227871.498:4958): avc: denied { write } for pid=9811 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 556.915253][ T28] audit: type=1400 audit(1782227872.528:4959): avc: denied { write } for pid=9814 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 556.949217][ T28] audit: type=1400 audit(1782227872.558:4960): avc: denied { write } for pid=9825 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 557.045663][ T28] audit: type=1400 audit(1782227872.658:4961): avc: denied { write } for pid=9828 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 557.081383][ T28] audit: type=1400 audit(1782227872.688:4962): avc: denied { write } for pid=9839 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 557.180755][ T28] audit: type=1400 audit(1782227872.788:4963): avc: denied { write } for pid=9842 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 557.215562][ T28] audit: type=1400 audit(1782227872.828:4964): avc: denied { write } for pid=9853 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1