last executing test programs: 1m1.24232924s ago: executing program 1 (id=119): fsmount(0xffffffffffffffff, 0x1, 0x0) mknodat(0xffffffffffffffff, 0x0, 0xd1aa624878774e52, 0x80000004) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x734}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="040000000400000004ff0c000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000002c0)}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x8000040f, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x8}) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000440)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000500)={0x0, 0x0, {0x2, 0x2, 0x0, 0x1, 0x8}, 0x3ff}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0xa8c01) write$sndseq(r6, &(0x7f0000000bc0)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xfe}, {}, @result}], 0x1c) shutdown(r4, 0x0) epoll_wait(r3, &(0x7f0000000080)=[{}], 0x1, 0x57c) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000140)={0x2000200b}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x1ff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000001400)=ANY=[], 0x835, 0x0) 59.95479015s ago: executing program 1 (id=125): socket(0x10, 0x803, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0x3eb, 0x4}, 0x6) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000580)={0x0, 0x6, 0x30}, &(0x7f00000005c0)=0xc) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="5a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f0000000080)={0x81}, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xe0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[], 0x4}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[], 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f0000000040)={0x8}, 0x1) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f0000000100)={0x4}, 0x1) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x1, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}, @TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0xe5e}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x80) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000640)={{0x1, 0x1, 0x18, r1, {0xffffff01}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000500000000000000010100939dd000558fc0fffcffffff18490000fbffffff00000000000000009500000000"], &(0x7f00000004c0)='GPL\x00', 0x1, 0x24, &(0x7f0000000500)=""/36, 0x41000, 0x8, '\x00', r6, 0x0, r2, 0x8, &(0x7f0000000540)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xc, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[r2, r2, r1, r2, r2, r2, r1, r9], &(0x7f00000006c0)=[{0x0, 0x3, 0x5, 0x8}], 0x10, 0x8001}, 0x94) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0xd4, "64facd11fc00e8624890401ab86ed569f97a6f4badb0011aab541e8ed7616dbe7c78f6fb2540ee835cba6d7211f6011064319c7608406e2877517c76fe9b5b7551c85a811d22f5ba4aad2795a30742bb090ba96836cc46e5edeaa9d36f0395bfa4f760c8d61e2356a4264e142d3f0c33433cc7aa3b79ec96f823c990100bb4c49813e15f0b9d7a2f47c4e919d4e6d54297bfe0b2a3e2a46e72296be96c0ff2581461c6236783c62c39f5cd778d891d77fb4286b1dff3ab54f8d56ac046b52a4f724d38cdc20e626507b94d52b6b06d723307d34d"}, &(0x7f0000000280)=0xdc) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYRES16, @ANYBLOB="040029bd7000fddbdf25010000000000446719691f4e13089133a07bf0000009410000004c001800000008657468000000000000000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000000d32fade05327843900"], 0x68}, 0x1, 0x0, 0x0, 0x44001}, 0x20000000) 59.739092604s ago: executing program 1 (id=130): socket$can_bcm(0x1d, 0x2, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x80000000000000, 0x1113a, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000008, 0x1, @perf_config_ext={0x0, 0x200000000000f610}, 0x4808, 0x800000, 0x2, 0x2, 0x7, 0x2, 0x0, 0x0, 0x7, 0x0, 0x84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$uhid(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001040)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001080)={0x6000000d}) epoll_wait(r1, &(0x7f00000010c0)=[{}], 0x1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x1, &(0x7f0000000c00)=[{0x6, 0x2, 0x2, 0x7fff7ffc}]}) close_range(r2, r2, 0x200000000000000) perf_event_open(&(0x7f0000001100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x4, 0x100000e, 0x401d031, 0xffffffffffffffff, 0x0) getresuid(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000011c0)='devices.list\x00', 0x26e1, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000001240)=0x10, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000001280)={0x0, 0x10, &(0x7f00000012c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000001300)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000001340)={0x1, [0x0]}, &(0x7f0000001380)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000013c0)={r6, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}}, &(0x7f0000001480)=0x84) bind$xdp(r4, &(0x7f00000014c0)={0x2c, 0x0, 0x0, 0x23, 0x0}, 0xfffffec0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1100000004000000040000001000000000c5b673853fef8c21af48bc8c34fcde94e2a94dfeb97b7516af9bf5a528a7ff094ba643ba5f39ee000000000000004f8b6468c000551d2d", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001580)={0x0, 0x0}) 59.109799009s ago: executing program 1 (id=132): timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x14d27e, 0x2) fallocate(r1, 0x0, 0x0, 0x1000f4) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) bind$rds(r3, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x5, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/98, 0x62}], 0x1}, 0x4000000) timer_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2aa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3ff, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000200)={0x1, 0x0, 0x98, &(0x7f0000002340)={0x0, 0x24000, 0xd}}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x30002) msync(&(0x7f00007e2000/0x2000)=nil, 0x2000, 0x4) getpid() syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r5, 0x400454c9, 0xffffffffffffffff) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @remote}, 0x10) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) 58.145428521s ago: executing program 1 (id=137): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0xc, r1, 0x1, 0xf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}}], 0x2, 0x20, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000240)={0x0, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) migrate_pages(0x0, 0xb, 0x0, &(0x7f0000000740)=0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x5c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r6, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @loopback, 0xbff}, @ib={0x1b, 0xf, 0x6, {'\x00\a\x00'}, 0x8000000000000001, 0x6, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xfffeffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3246}, {0xa, 0x4e24, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, r6, 0x80}}, 0x48) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000180), 0x3) getsockopt$bt_hci(r4, 0x11a, 0x5, 0x0, &(0x7f0000000200)=0xfffffffffffffdaf) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000600)='7', 0x1) flistxattr(r7, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 57.587176914s ago: executing program 1 (id=139): socket$l2tp(0x2, 0x2, 0x73) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000032c0), 0x200, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffd, 0x3, 0x8, 0x286, 0x0, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c03, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x432740f1adc61e47, 0x1, "", [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x3, 0x1, 0x2, 0xfc, {0x9, 0x21, 0x4, 0x6, 0x1, {0x22, 0x1b4}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0x40, 0x86}}}}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mq_open(&(0x7f00000000c0)='*,-[+[H+]\x00\xb1\xb6\xa3\xf2\xb7\x90\x14\xca\xef\x1fkd\xa6\xf72\xcb\xb86\xc6\xaaw\xe7\xfc\xcd\xa2\xad\x00|\x9bW\x7f\xe4\xd5\xd8\xfe\xb9\xecu6P\x04C\a\xf8l\xe5\r\t%\xbc\x1a\x98\x16\x91\vF\xa6#\xdahP\x87b\xb9B\xda\xa7\xfc\xdc\xe2\x85\xc2\xdc\x10\x89{~&v.\xbc:jNx\xaak\x94\x8b\xe5}^\xb2\xfc\x99\x10\xd7*J\xb9\xe1rM\xde\xc1\xab\xa9I\xe2p\xdfHls\xfek\xfcDs\x05\xe4\x19.\xbd\x0f\xb5\xbb\\\xd7\xa6\xed\x86Fl\xdf\xd6\xb8.\xb8(\xc8)3\xad\x80y(\xb3\xe5\xba\xcb\x02\xc3\x8dK\xc2\x9b\x17\\\x04^\xf2*\x92k\xb5\xc4\x8c\xf8G\xf0\x89%\x91\xbf\x1c\t\v\xc3\x0f]\xfb\xea\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00{\b\x9cX!\x1c4\x83\vF\r\xedht\x14h\xe4\xa1\xd37\xf5\x10\x84t\xc8\x87D\xd7\xe9\xe8', 0x40, 0x48, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x275a, 0x0) socket(0x400000000010, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x442, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x108843, 0x98) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000e00)='GPL\x00'}, 0x48) socket$kcm(0x2, 0x1, 0x0) open(&(0x7f0000000e40)='.\x00', 0x80000, 0x103) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000e80)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r1], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000034c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) close(0x4) 57.438330197s ago: executing program 32 (id=139): socket$l2tp(0x2, 0x2, 0x73) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000032c0), 0x200, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffd, 0x3, 0x8, 0x286, 0x0, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c03, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x432740f1adc61e47, 0x1, "", [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x3, 0x1, 0x2, 0xfc, {0x9, 0x21, 0x4, 0x6, 0x1, {0x22, 0x1b4}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0x40, 0x86}}}}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mq_open(&(0x7f00000000c0)='*,-[+[H+]\x00\xb1\xb6\xa3\xf2\xb7\x90\x14\xca\xef\x1fkd\xa6\xf72\xcb\xb86\xc6\xaaw\xe7\xfc\xcd\xa2\xad\x00|\x9bW\x7f\xe4\xd5\xd8\xfe\xb9\xecu6P\x04C\a\xf8l\xe5\r\t%\xbc\x1a\x98\x16\x91\vF\xa6#\xdahP\x87b\xb9B\xda\xa7\xfc\xdc\xe2\x85\xc2\xdc\x10\x89{~&v.\xbc:jNx\xaak\x94\x8b\xe5}^\xb2\xfc\x99\x10\xd7*J\xb9\xe1rM\xde\xc1\xab\xa9I\xe2p\xdfHls\xfek\xfcDs\x05\xe4\x19.\xbd\x0f\xb5\xbb\\\xd7\xa6\xed\x86Fl\xdf\xd6\xb8.\xb8(\xc8)3\xad\x80y(\xb3\xe5\xba\xcb\x02\xc3\x8dK\xc2\x9b\x17\\\x04^\xf2*\x92k\xb5\xc4\x8c\xf8G\xf0\x89%\x91\xbf\x1c\t\v\xc3\x0f]\xfb\xea\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00{\b\x9cX!\x1c4\x83\vF\r\xedht\x14h\xe4\xa1\xd37\xf5\x10\x84t\xc8\x87D\xd7\xe9\xe8', 0x40, 0x48, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x275a, 0x0) socket(0x400000000010, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x442, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x108843, 0x98) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad0e0e2b45d14ee446b840edaa1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c50ce6a8e9f65de13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87915ed063f608dddb03a95b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000c3d51d9a161446b4373e06a9e07f8a000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b2844869"], &(0x7f0000000e00)='GPL\x00'}, 0x48) socket$kcm(0x2, 0x1, 0x0) open(&(0x7f0000000e40)='.\x00', 0x80000, 0x103) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000e80)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r1], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000034c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) close(0x4) 5.2024187s ago: executing program 0 (id=362): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0xc, r1, 0x1, 0xf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}}], 0x2, 0x20, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000240)={0x0, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) migrate_pages(0x0, 0xb, 0x0, &(0x7f0000000740)=0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x5c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xfffeffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3246}, {0xa, 0x4e24, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, r6, 0x80}}, 0x48) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000180), 0x3) getsockopt$bt_hci(r4, 0x11a, 0x5, 0x0, &(0x7f0000000200)=0xfffffffffffffdaf) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000600)='7', 0x1) flistxattr(r7, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 4.817089049s ago: executing program 3 (id=366): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x54, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x6, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x8810}, 0x20000000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x3, 0x6, 0x8001, 0x8001}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x153a, 0x0, 0x2, 0x17a}) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0224fc600b003540280009000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1}, 0x0) getrandom(&(0x7f00000002c0)=""/4096, 0x1000, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000060000000f00"], 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000280)=0x4, 0x4) sendmsg$nl_route(r4, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002180)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0xfffffffd, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_OPERSTATE={0x5, 0x10, 0x2}]}, 0x28}}, 0x4040014) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) sendmmsg$inet6(r2, &(0x7f00000019c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x8, @empty, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000f9a76ed0d1ea7245290000003700000033000000000000001400000000000000290000000b0000000000146400000000b34400b73addd4b5a0ad961754f99313bcc1e6a1c9d9a5ba35fd1773fbf859e49af36b7d"], 0x30}}], 0x1, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28e9, 0x0, @perf_config_ext={0x1, 0xc7d2d38}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000013c0)={0x3, &(0x7f0000001380)=[{0xcd52}, {0x1b8, 0xff}, {0x8, 0x5}]}) openat$tun(0xffffffffffffff9c, 0x0, 0x440, 0x0) r7 = memfd_secret(0x0) write$selinux_attr(r7, &(0x7f0000000200)='system_u:object_r:syslogd_exec_t:s0\x00', 0x24) 4.417234489s ago: executing program 2 (id=369): io_uring_setup(0x1b7b, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000100060000000000040005000000000010000000000000002000000000000000d5dab6d9a5d9981a4a1fac11936dedd34b7c0776410e9f"], 0x24, 0x1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x5) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803f5, 0x1, 0x800}) r1 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x400008, 0xa0}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e23, 0x9, @remote, 0x3}], 0x2c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x306, 0x80000001, 0xdb}, 0x9c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xac, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xac}}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, &(0x7f0000000380)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000000000000000000000000000000000000000030000000000000000000000000020000000"], 0x5000) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x0, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x10000100}, 0x60c, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4004000000000, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x6001, 0x0) 4.290428691s ago: executing program 0 (id=370): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) socket$kcm(0x2, 0xa, 0x2) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x78, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e21, @rand_addr=0x64010100}, @in6={0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8ab}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}, @in={0x2, 0x4e22, @private=0xa010100}, @in6={0xa, 0x4e20, 0xbed, @mcast2, 0x4}]}, &(0x7f00000003c0)=0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)={0x14, 0x2, 0x9, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x80) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x7, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x777) perf_event_open(0x0, 0x0, 0xc000000000000000, 0xffffffffffffffff, 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x1, 0x1]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x4008, 0x400000, 0x0, 0x7, 0x0, 0x2, 0x400, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(r4, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r4, 0x0) timer_gettime(r4, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r3, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000600)={0x8, 0x41}) 4.223226662s ago: executing program 4 (id=371): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f00000001c0)) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x3) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000001800)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001840)={r2, 0x18000000000002a0, 0xbf, 0x0, &(0x7f00000018c0)="b9ff03316844268cb89e14f0080048e0050000000000002f77fbac141516e0000001440c0510b18000890304000084508864325f003901050b038da1002125181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da45029", 0x0, 0xfe, 0x60000000, 0x2d, 0x0, &(0x7f0000000380)="c00f0400000000000000d4973fd9cd1b1cb9459b2502000001004befac93abe5713f95c55647ed6db6283262ba", &(0x7f0000001a00)}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000004c0)={'netdevsim0\x00', &(0x7f0000000500)=@ethtool_ringparam={0x10, 0x1, 0x9, 0xfff, 0xfffffffc, 0x5, 0x81, 0xffff8001, 0xecd}}) r4 = fcntl$dupfd(r1, 0x406, r0) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f0000000140)={&(0x7f0000000100), 0x0, 0xffff, 0x0, 0x7, 0x6, 0xe7c, 0xd, 0x903}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x4, 0x20110, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1000, 0x7f}, 0x1074cc, 0x3fd, 0xfff7fffc, 0x0, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040044}, 0xc000) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2c, 0x3, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) connect$bt_sco(r4, &(0x7f0000000700)={0x1f, @none}, 0x8) sendmsg$nl_route(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="24000000200005dc2abd70000300000002000000fc0000031b0000000500130001"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$inet(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000780)='./proc\x00', &(0x7f00000007c0)='proc\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/thread-self/fail-nth\x00', 0x2, 0x140) write(r9, &(0x7f0000000840)='3', 0x4e) copy_file_range(r9, 0x0, r9, &(0x7f0000001980)=0x7, 0x168e, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x0, 0xffffffff, 0xffffffff, 0x158, 0xffffffff, 0x228, 0xffffff7a, 0xffffffff, 0x228, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@empty, @multicast1, 0xff000000, 0xffffff00, 'dvmrp1\x00', 'ip6gretap0\x00', {}, {}, 0x4, 0x1, 0x10}, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x6, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000007f00000000ffffff7f00", 0x80, 0x0, {0x4}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x2, 0x7, [0x36, 0x3d, 0x20, 0x22, 0x31, 0x1d, 0x37, 0x2c, 0x14, 0x7, 0x7, 0x34, 0x13, 0x1a, 0x15, 0xa], 0x0, 0x7fff, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) 3.90982993s ago: executing program 3 (id=372): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0xa, 0x400000000008d}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x206, 0x48401) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x100022, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa, 0x11, r2, 0xaedb8000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r5, 0x5452, &(0x7f00000001c0)={'ip6tnl0\x00', 0x2}) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000200)={0x80}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000240)) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@ipv4_getrule={0x1c, 0x22, 0x400, 0x70bd25, 0x25dfdbfc, {0x2, 0x14, 0x14, 0x75, 0x2, 0x0, 0x0, 0x7, 0x10009}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x24000854) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) bind$inet(r3, &(0x7f0000000440)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write(r6, &(0x7f0000000580)='10', 0x2) socket(0x10, 0x3, 0x0) 3.401144841s ago: executing program 4 (id=375): perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x2a, 0x1, 0x0, 0x4, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1687, 0x2, @perf_bp={&(0x7f0000000740), 0x4}, 0x100140, 0x800000, 0x2, 0x3, 0x40f, 0x7, 0x0, 0x0, 0x3, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_procfs(0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) dup(r1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f2, &(0x7f00000000c0)={'sit0\x00', @random="5600230d1100"}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) writev(r4, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x12, 0x5, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000000}, 0x50) r9 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) read$hiddev(r9, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r9, 0x40042409, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r8}, &(0x7f0000000400), &(0x7f0000000440)=r7}, 0x20) poll(&(0x7f0000000480), 0x20000000000000b5, 0x9) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000004c0)={0x1, &(0x7f0000000500)=[{0x6, 0x9, 0x8}]}, 0x10) syz_emit_ethernet(0xd2, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6a010000009c110120010000000000000000000000000001ff0200000000000000000000000000014e1e4e20009c90"], 0x0) write(r0, &(0x7f0000000300)="040000000000", 0x6) 3.377445272s ago: executing program 0 (id=376): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x10000, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='cmdline\x00') r2 = perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb905b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x1, @perf_config_ext={0x7ffff, 0x8}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1008003}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x5, 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf400"], &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000000d40)=[{&(0x7f0000000e40)=""/160, 0xa0}], 0x1, 0xc03, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000f00)={{}, {0x77359400}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000f80)=[{0x0}], 0x1, 0x5412, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000fc0)=@bpf_lsm={0x18, 0xd, &(0x7f0000001080)=ANY=[@ANYBLOB="180000008d510000000000000000000079a00000000000007b00e0ff00000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002800000850000004300000095"], &(0x7f0000001100)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdc}, 0x94) write(r0, &(0x7f0000000180)='10000', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) 3.376339153s ago: executing program 2 (id=377): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x10000, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='cmdline\x00') perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb905b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x1, @perf_config_ext={0x7ffff, 0x8}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1008003}, 0x0, 0x1, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x5, 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf400"], &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.213676696s ago: executing program 2 (id=378): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0xc, r1, 0x1, 0xf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}}], 0x2, 0x20, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000240)={0x0, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) migrate_pages(0x0, 0xb, 0x0, &(0x7f0000000740)=0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @loopback, 0xbff}, @ib={0x1b, 0xf, 0x6, {'\x00\a\x00'}, 0x8000000000000001, 0x6, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xfffeffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3246}, {0xa, 0x4e24, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, 0xffffffffffffffff, 0x80}}, 0x48) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000180), 0x3) getsockopt$bt_hci(r4, 0x11a, 0x5, 0x0, &(0x7f0000000200)=0xfffffffffffffdaf) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000600)='7', 0x1) flistxattr(r6, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 3.208289166s ago: executing program 4 (id=379): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x10000, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='cmdline\x00') r1 = perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb905b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x1, @perf_config_ext={0x7ffff, 0x8}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1008003}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x5, 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf400"], &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000d40)=[{&(0x7f0000000e40)=""/160, 0xa0}], 0x1, 0xc03, 0x0) 3.05231295s ago: executing program 4 (id=380): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x10008, &(0x7f00000000c0), 0xff, 0x49e, &(0x7f0000000240)="$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") syz_io_uring_setup(0xdf2, &(0x7f0000000180)={0x0, 0xffffe7fa, 0x10000, 0x2, 0x333}, &(0x7f0000000000), &(0x7f0000001140), &(0x7f0000001580)) syz_open_procfs(0x0, &(0x7f00000015c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000001600)=""/90, 0x5a, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000700)={0xa, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000740)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000007c0), 0x651, 0x0) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000000940), 0x3, 0x577, &(0x7f0000000980)="$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") r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$setownex(r3, 0xf, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000f00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x6, 0x1}, 0x0, 0x0, 0xc40, 0x8, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r5) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000001000)={0x44, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001400)=@newsa={0x170, 0x10, 0x713, 0x70bc2d, 0x25dfdbfc, {{@in=@rand_addr=0x64010100, @in6=@private0, 0x4e20, 0x0, 0x4e21, 0x602, 0x2, 0x20, 0x0, 0x6c}, {@in=@loopback, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0xff}, {0x0, 0x6, 0xc, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff, 0x0, 0x6}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x4d, 0x12, {{'rfc4309(gcm-aes-ce)\x00'}, 0x8, 0x40, 'a'}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x5}}, @iptfs_max_qsize={0x8, 0x28, 0x6}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x170}}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010015"], 0x1c}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000001240), r7) mkdirat(0xffffffffffffff9c, &(0x7f0000001280)='./file1/file3\x00', 0x0) syz_clone(0x20001800, &(0x7f00000012c0)="b4a5971dcd5f23384cdc0c86361466591b5838fe5b1755cffcedc466801fd8adbf066b3751", 0x25, &(0x7f0000001300), &(0x7f0000001340), 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1, 0x8, 0xfffffffc) 2.941737212s ago: executing program 3 (id=381): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x6}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x2000481d) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setns(0xc9, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000b80)=0x5) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4000080}, 0x1) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000e80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) close_range(r1, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0xd3) setuid(0xee00) r7 = syz_io_uring_setup(0x4b6, &(0x7f0000000380)={0x0, 0x0, 0x2, 0x0, 0x1dd}, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000bc0)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000c40)=""/104, 0x68}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)=[{0x0}, {&(0x7f0000000d40), 0xa002a0}], &(0x7f0000000d80), 0x2}, 0x20) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f00000001c0)={[{@resuid}, {@stripe={'stripe', 0x3d, 0x6}}, {@quota}, {@noauto_da_alloc}, {@jqfmt_vfsold}]}, 0x0, 0x528, &(0x7f00000010c0)="$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") syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) ptrace$pokeuser(0x6, 0x0, 0x1, 0xb784) 2.743187647s ago: executing program 0 (id=382): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x2d, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0xa}}, 0x20) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000340)='freezer.parent_freezing\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x21000e, &(0x7f0000000140), 0x1, 0x553, &(0x7f0000000d00)="$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") sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a010400000000000000000200ffff18000480140001800b0001006578746864050000040002800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x6c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) sendmsg$nl_route_sched(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x70) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/events/kmem/kmalloc/filter\x00', 0x2, 0x0) preadv(r3, &(0x7f0000001340)=[{&(0x7f0000000040)=""/122, 0x7a}, {0x0}], 0x2, 0xf7, 0x6662) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0xfff}, 0x94) r4 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)=""/59, 0x3b}], 0x1}, 0x40000180) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@local, @in=@empty, 0x0, 0xfffc, 0xfffe, 0x0, 0xa, 0x20}, {0xffffffffffffff7f, 0x10, 0x100000002, 0x0, 0x6, 0xffffffffffffb475, 0xffffffffffffffff, 0x4}, {0x1000000003, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) futex(0x0, 0x5, 0x800, 0x0, 0x0, 0x93000000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = eventfd2(0x0, 0x1) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000440)={0xb0000009}) writev(r7, 0x0, 0x0) sendmsg$nl_xfrm(r6, 0x0, 0x2c000010) 2.675392529s ago: executing program 5 (id=383): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r1, 0x8914, 0x0) ioctl(r1, 0x8914, &(0x7f0000000080)="64756d6d793000000000000000000000010000000000") close_range(r0, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60fca33f00083c00fe8000000000190000000000000000fe8000000007000000000000000000aa0000fd95a5b467bf5a006600"], 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x6, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x80, 0x3, 0x4, 0x0, 0x0, 0x6, 0x20202, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x4}, 0x5010, 0x102, 0x9, 0x5, 0x8, 0x100, 0x89, 0x0, 0x200, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000040000000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000070000000060a010400000000000000000100000308000b4000000000480004801c0001800b00010065787468647200000c000280080001400000000b2800018008000100636d70001c0002800800038004000100080001400000000208000240000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xe4}, 0x1, 0x0, 0x0, 0x180}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000042000000b700000000000010950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836801ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d09a0a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a504a0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e4a9f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000580), 0x101040, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000600)=@generic={&(0x7f0000000540)='./file0\x00', r8}, 0x18) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000100)={r7, 0x0, 0x20}, 0xc) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={r7, 0x7fffffff}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x44, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xd8, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtclass={0x0, 0x28, 0x100, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xd, 0x9}, {0x2, 0xb}, {0xf, 0xfff1}}, [@tclass_kind_options=@c_clsact, @tclass_kind_options=@c_qfq={{}, {0x0, 0x2, [@TCA_QFQ_LMAX={0x0, 0x2, 0x5a}, @TCA_QFQ_WEIGHT={0x0, 0x1, 0x2}, @TCA_QFQ_LMAX={0x0, 0x2, 0x40}]}}, @TCA_RATE={0x0, 0x5, {0x5, 0x1f}}]}, 0x21}}, 0x44008) 2.18687295s ago: executing program 2 (id=384): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000001380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000013c0)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001400)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000001440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r5, 0x10c, 0x1, &(0x7f0000001540)=0x8, 0x4) syz_open_dev$sg(0x0, 0x2, 0x200000) connect$unix(r3, &(0x7f00000014c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000001540), 0x4000000000001a2, 0x0) recvmmsg(r3, &(0x7f0000001580), 0x10106, 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f00000015c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$unix(0x1, 0x2, 0x0) connect$unix(r7, &(0x7f0000001640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r7, &(0x7f00000016c0)=[{&(0x7f0000001700)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f0000001740)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000001780)=0x4a51, 0x4) recvmmsg(r6, &(0x7f00000017c0), 0x40000000000049e, 0x1000000000fe, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x15, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/4140], &(0x7f00000012c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000001300), 0xffffffffffffff97, 0x10, &(0x7f0000001340), 0xffffffffffffffc2}, 0x48) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x12, 0x600, 0x1d8, 0x202, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x401, 0x2, 'syz1\x00', {0x30}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x100}, 0x0) dup2(0xffffffffffffffff, r1) socket$nl_route(0x10, 0x3, 0x0) 2.14276884s ago: executing program 0 (id=385): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x120, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x19, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x29, 0x1, 0x0, 0x400, {}, [@nested={0x0, 0xf1, 0x0, 0x1, [@typed={0x0, 0xa7, 0x0, 0x0, @u32=0x4}]}, @generic="b6adafbb4ffdef2323e1b25d293508add9c55013601a08b832291b60ca968f5e04c042abf7"]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, r0, 0x8) setns(0xc9, 0x0) socket$nl_route(0x10, 0x3, 0x0) mknod(0x0, 0x8000, 0xd02) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$loop(0x0, 0xf01c, 0x440000) write(0xffffffffffffffff, &(0x7f0000000580)="300000001c00010000000000000000002d0000000200000080000001", 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd80) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000040)=0x10) shutdown(r3, 0x2) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000380)={r4, 0x0, 0x2}, &(0x7f0000000400)=0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='net/rpc\x00') r6 = openat(r5, &(0x7f0000000480)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r6, &(0x7f00000004c0)=' \\ 0 127.0.0.1 2\\000\\000\\0l\\calhost\n', 0x24) 2.14234781s ago: executing program 4 (id=386): r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) mmap(&(0x7f0000ae1000/0x4000)=nil, 0x4000, 0x100000e, 0x20c44fb6edc09a38, r2, 0xebe61000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0xb, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x40000f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={&(0x7f0000000300), 0xd}, 0x8959, 0x4, 0x7, 0x1, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xb) getrusage(0x1, &(0x7f0000000780)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x9e66) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000180)=0x4fe7, 0x4) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002a0001000000000000000000040100800d0018002f21233a254c3a2c00000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = getpid() ioprio_set$pid(0x1, r7, 0x2004) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20008800) 2.005242774s ago: executing program 5 (id=387): mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff8}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='statm\x00') cachestat(r1, &(0x7f0000000200)={0xfffffffffffffff5, 0x600000410000004}, &(0x7f00000002c0), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/207, 0xcf}], 0x1) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x7, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1802eeff030000000000808e88b9806bbadd654e24ce3dc65cffe92800"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180)) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, 0x0, &(0x7f0000000100)) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000f) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8183) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x3fe, 0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000400)={{0x1, 0x1, 0x3fd, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) keyctl$revoke(0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.963810815s ago: executing program 3 (id=388): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x189802, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="f4000900062b3325fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b4003a000000", 0x2c}], 0x1}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) brk(0x200000ffd000) ioctl$SIOCX25GFACILITIES(r3, 0x89e2, &(0x7f0000000500)) read(r2, &(0x7f0000000340)=""/265, 0x109) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000005c0)={0x1, &(0x7f0000000600)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socket(0x1, 0x80802, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) unshare(0x2040400) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, 0x0, 0x0) 1.373749948s ago: executing program 5 (id=389): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0xc, r1, 0x1, 0xf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}}], 0x2, 0x20, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000240)={0x0, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) migrate_pages(0x0, 0xb, 0x0, &(0x7f0000000740)=0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @loopback, 0xbff}, @ib={0x1b, 0xf, 0x6, {'\x00\a\x00'}, 0x8000000000000001, 0x6, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xfffeffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3246}, {0xa, 0x4e24, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, 0xffffffffffffffff, 0x80}}, 0x48) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000180), 0x3) getsockopt$bt_hci(r4, 0x11a, 0x5, 0x0, &(0x7f0000000200)=0xfffffffffffffdaf) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000600)='7', 0x1) flistxattr(r6, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 1.176756232s ago: executing program 2 (id=390): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x10000, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='cmdline\x00') r1 = perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb905b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x1, @perf_config_ext={0x7ffff, 0x8}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1008003}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x5, 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf400"], &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000d40)=[{&(0x7f0000000e40)=""/160, 0xa0}], 0x1, 0xc03, 0x0) 1.135316253s ago: executing program 5 (id=391): r0 = socket(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x20}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xc4}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000600)="00112233445566778899", 0xa, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) r3 = socket(0x2, 0x80805, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$TCXONC(r4, 0x540a, 0x2) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000000080)) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, 0x0}, 0x20000000}], 0x1, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r7 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000380)=@chain={'key_or_keyring:', r7}) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000140001032db570"], 0x20}}, 0x20008080) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00') 1.042264376s ago: executing program 3 (id=392): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/usb_storage/parameters/delay_use\x00', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000700)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x8) r1 = getpid() syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000a40)={[{@acl}, {@noblock_validity}, {@user_xattr}, {@max_batch_time={'max_batch_time', 0x3d, 0x9fe}}, {@inlinecrypt}, {@dioread_nolock}]}, 0x7, 0x60a, &(0x7f0000000ac0)="$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") ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000008c0)={0x2, {0x2, 0xa00, 0x0, 0xfd, 0x104}}) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f00000007c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000008c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000900), 0x10106, 0x2, 0x0) creat(&(0x7f0000000940)='./file0\x00', 0x22) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000180)="3db06f43e61edc023510a46dd6", 0xd) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x20001) getpid() r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'veth0_to_team\x00', &(0x7f0000000040)=@ethtool_channels={0x4a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@ipv6_delroute={0x30, 0x19, 0x1, 0x101, 0x25dfdbfe, {0xa, 0x10, 0x14, 0x0, 0xfd, 0x4, 0x0, 0x7, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6, 0x6, 0x58}}]}, 0x30}, 0x1, 0x0, 0x0, 0x200000d5}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x3ffffffffffffc}, {0xffffffffffffffff, 0x0, 0x0, 0x17ffffffffffb}, 0x40}, [@tmpl={0xc4, 0x5, [{{@in6=@private1, 0x0, 0x32}, 0x0, @in=@multicast1}, {{@in=@empty, 0x0, 0xff}, 0x0, @in=@local}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@private1, 0x0, 0x5, 0x0, 0x0, 0xfffffffe, 0x2}]}]}, 0x17c}}, 0x0) 695.574024ms ago: executing program 2 (id=393): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x10000, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='cmdline\x00') r2 = perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb905b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x1, @perf_config_ext={0x7ffff, 0x8}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1008003}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x5, 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf400"], &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000000d40)=[{&(0x7f0000000e40)=""/160, 0xa0}], 0x1, 0xc03, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000f00)={{}, {0x77359400}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000f80)=[{0x0}], 0x1, 0x5412, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000fc0)=@bpf_lsm={0x18, 0xd, &(0x7f0000001080)=ANY=[@ANYBLOB="180000008d510000000000000000000079a00000000000007b00e0ff00000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002800000850000004300000095"], &(0x7f0000001100)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdc}, 0x94) write(r0, &(0x7f0000000180)='10000', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) 693.906444ms ago: executing program 0 (id=394): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0xc, r1, 0x1, 0xf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}}], 0x2, 0x20, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000240)={0x0, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) migrate_pages(0x0, 0xb, 0x0, &(0x7f0000000740)=0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x5c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r6, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @loopback, 0xbff}, @ib={0x1b, 0xf, 0x6, {'\x00\a\x00'}, 0x8000000000000001, 0x6, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xfffeffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3246}, {0xa, 0x4e24, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, r6, 0x80}}, 0x48) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000180), 0x3) getsockopt$bt_hci(r4, 0x11a, 0x5, 0x0, &(0x7f0000000200)=0xfffffffffffffdaf) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000600)='7', 0x1) flistxattr(r7, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 691.406984ms ago: executing program 5 (id=404): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x10000, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='cmdline\x00') r1 = perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb905b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x1, @perf_config_ext={0x7ffff, 0x8}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1008003}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x5, 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf400"], &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000d40)=[{&(0x7f0000000e40)=""/160, 0xa0}], 0x1, 0xc03, 0x0) 680.940864ms ago: executing program 4 (id=395): r0 = socket$packet(0x11, 0x3, 0x300) fchdir(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x1d4e, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/printer.usb0\x00') syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12011003070101102505a8a44000010203010902621bfd01018780fc0904000802000000090968579c37050102101220334a39e10f4bdc78a8584dfbae501d521a3cc1052e8c3dc8403429d4d21990221ae6104ad559dfd9a516ef21bb54a9e66e0c918234cac370722f55aace0954a3541c27e102975cdb8c6d"], 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000300)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000000380), 0x800001d, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x28, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) mkdir(&(0x7f0000000480)='proc\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='proc/kallsyms\x00', 0x0, 0x0) lseek(r4, 0x186a0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) getpeername(r5, &(0x7f00000006c0)=@phonet, &(0x7f0000000740)=0x80) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x2002, 0x7bdf, 0x0, 0xb, 0x9, 0x401}, 0xc) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x10c062) lsetxattr(&(0x7f0000000780)='./config/usb_gadget/g1/configs/c.1\x00', &(0x7f0000000640)=@known='system.sockprotoname\x00', &(0x7f0000000680)='configfs\x00', 0x9, 0x2) 38.960369ms ago: executing program 5 (id=396): renameat(0xffffffffffffffff, &(0x7f0000000bc0)='./bus\x00', 0xffffffffffffffff, &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000042) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20080, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x92, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f00000007c0)=0x3, 0x9a, 0x300) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x0, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x408, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) sendmsg$nl_route_sched(r1, 0x0, 0x40000) socket$inet6_udp(0xa, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0) close(r4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r5, &(0x7f00000000c0), 0x10) sendto$l2tp(r5, 0x0, 0x0, 0x400c0c1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}, 0x82004}, 0x10) setsockopt$inet_int(r5, 0x0, 0x12, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xc}, 0x9f50, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x401, 0x3, 0xf, 0x2, 0xa4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000140)) quotactl$Q_QUOTAOFF(0xffffffff80000301, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x62c40, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000880)={{{@in=@multicast2, @in=@loopback}}, {{}, 0x0, @in6=@local}}, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x200a, &(0x7f00000008c0)=ANY=[]) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='\x04\x00\x00\x00\xb2 b\x00O\x03\x00') 0s ago: executing program 3 (id=397): perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x2a, 0x1, 0x0, 0x4, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1687, 0x2, @perf_bp={&(0x7f0000000740), 0x4}, 0x100140, 0x800000, 0x2, 0x3, 0x40f, 0x7, 0x0, 0x0, 0x3, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_procfs(0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) dup(r1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000800)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r4, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x12, 0x5, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000000}, 0x50) r9 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) read$hiddev(r9, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r9, 0x40042409, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r8}, &(0x7f0000000400), &(0x7f0000000440)=r7}, 0x20) poll(&(0x7f0000000480), 0x20000000000000b5, 0x9) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000004c0)={0x1, &(0x7f0000000500)=[{0x6, 0x9, 0x8}]}, 0x10) syz_emit_ethernet(0xd2, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6a010000009c110120010000000000000000000000000001ff0200000000000000000000000000014e1e4e20009c90"], 0x0) write(r0, &(0x7f0000000300)="040000000000", 0x6) kernel console output (not intermixed with test programs): ook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.789119][ T4202] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 73.795998][ T4213] FAULT_INJECTION: forcing a failure. [ 73.795998][ T4213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.796157][ T4213] CPU: 1 UID: 0 PID: 4213 Comm: syz.3.151 Not tainted syzkaller #0 PREEMPT(lazy) [ 73.796182][ T4213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 73.796194][ T4213] Call Trace: [ 73.796200][ T4213] [ 73.796207][ T4213] __dump_stack+0x1d/0x30 [ 73.796280][ T4213] dump_stack_lvl+0x95/0xd0 [ 73.796443][ T4213] dump_stack+0x15/0x1b [ 73.796593][ T4213] should_fail_ex+0x262/0x280 [ 73.796714][ T4213] should_fail+0xb/0x20 [ 73.796811][ T4213] should_fail_usercopy+0x1a/0x20 [ 73.796918][ T4213] _copy_from_iter+0xcc/0xe70 [ 73.797062][ T4213] ? __alloc_skb+0x516/0x6f0 [ 73.797135][ T4213] ? __alloc_skb+0x209/0x6f0 [ 73.797209][ T4213] netlink_sendmsg+0x4d6/0x740 [ 73.797411][ T4213] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.797492][ T4213] ____sys_sendmsg+0x532/0x580 [ 73.797647][ T4213] ___sys_sendmsg+0x195/0x1e0 [ 73.797730][ T4213] ? __send_signal_locked+0xd0/0x7a0 [ 73.797877][ T4213] __x64_sys_sendmsg+0xd4/0x160 [ 73.798000][ T4213] x64_sys_call+0x22ab/0x2550 [ 73.798085][ T4213] do_syscall_64+0x112/0x360 [ 73.798193][ T4213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.798304][ T4213] RIP: 0033:0x7ff7bac5f559 [ 73.798357][ T4213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.798418][ T4213] RSP: 002b:00007ff7b9696028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.798483][ T4213] RAX: ffffffffffffffda RBX: 00007ff7baee6090 RCX: 00007ff7bac5f559 [ 73.798534][ T4213] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 73.798576][ T4213] RBP: 00007ff7bacf6b20 R08: 0000000000000000 R09: 0000000000000000 [ 73.798696][ T4213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.798736][ T4213] R13: 00007ff7baee6128 R14: 00007ff7baee6090 R15: 00007ffc22325df8 [ 73.798807][ T4213] [ 73.881105][ T4202] siw: device registration error -19 [ 74.063580][ T12] hsr_slave_0: left promiscuous mode [ 74.065332][ T12] hsr_slave_1: left promiscuous mode [ 74.065971][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.065990][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.067819][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.067838][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.077570][ T12] veth1_macvtap: left promiscuous mode [ 74.077665][ T12] veth0_macvtap: left promiscuous mode [ 74.077791][ T12] veth1_vlan: left promiscuous mode [ 74.077883][ T12] veth0_vlan: left promiscuous mode [ 74.177626][ T28] audit: type=1400 audit(1792564788.009:1184): avc: denied { write } for pid=4216 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.177660][ T28] audit: type=1400 audit(1792564788.009:1185): avc: denied { add_name } for pid=4216 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.177692][ T28] audit: type=1400 audit(1792564788.009:1186): avc: denied { create } for pid=4216 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.177729][ T28] audit: type=1400 audit(1792564788.009:1187): avc: denied { write } for pid=4216 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=1131 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.178121][ T28] audit: type=1400 audit(1792564788.009:1188): avc: denied { append } for pid=4216 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=1131 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.198106][ T4224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.153'. [ 74.207954][ T28] audit: type=1400 audit(1792564788.049:1189): avc: denied { watch } for pid=4227 comm="syz.2.154" path="/34" dev="tmpfs" ino=202 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.370566][ T12] team0 (unregistering): Port device team_slave_1 removed [ 74.377619][ T12] team0 (unregistering): Port device team_slave_0 removed [ 74.419496][ T4224] FAULT_INJECTION: forcing a failure. [ 74.419496][ T4224] name failslab, interval 1, probability 0, space 0, times 0 [ 74.419568][ T4224] CPU: 1 UID: 0 PID: 4224 Comm: syz.4.153 Not tainted syzkaller #0 PREEMPT(lazy) [ 74.419602][ T4224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 74.419617][ T4224] Call Trace: [ 74.419625][ T4224] [ 74.419642][ T4224] __dump_stack+0x1d/0x30 [ 74.419755][ T4224] dump_stack_lvl+0x95/0xd0 [ 74.419861][ T4224] dump_stack+0x15/0x1b [ 74.419907][ T4224] should_fail_ex+0x262/0x280 [ 74.419949][ T4224] ? netdevice_event+0x2ae/0x610 [ 74.420062][ T4224] should_failslab+0x8c/0xb0 [ 74.420111][ T4224] __kmalloc_cache_noprof+0x5d/0x3e0 [ 74.420139][ T4224] ? __pfx_del_netdev_ips+0x10/0x10 [ 74.420229][ T4224] ? netdevice_event+0x2ae/0x610 [ 74.420285][ T4224] ? __pfx_netdevice_event+0x10/0x10 [ 74.420330][ T4224] netdevice_event+0x2ae/0x610 [ 74.420444][ T4224] ? __pfx_del_netdev_ips+0x10/0x10 [ 74.420492][ T4224] ? __pfx_pass_all_filter+0x10/0x10 [ 74.420537][ T4224] ? __pfx_netdevice_event+0x10/0x10 [ 74.420623][ T4224] raw_notifier_call_chain+0x72/0x1a0 [ 74.420693][ T4224] unregister_netdevice_many_notify+0xe25/0x1560 [ 74.420741][ T4224] ? __pfx_veth_dellink+0x10/0x10 [ 74.420782][ T4224] rtnl_dellink+0x436/0x630 [ 74.420891][ T4224] ? selinux_capable+0x31/0x40 [ 74.420934][ T4224] ? security_capable+0x7b/0x90 [ 74.420970][ T4224] ? ns_capable+0x80/0xb0 [ 74.420999][ T4224] ? __pfx_rtnl_dellink+0x10/0x10 [ 74.421104][ T4224] rtnetlink_rcv_msg+0x64b/0x720 [ 74.421151][ T4224] ? avc_has_perm_noaudit+0xac/0x160 [ 74.421218][ T4224] netlink_rcv_skb+0x11e/0x220 [ 74.421248][ T4224] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 74.421303][ T4224] rtnetlink_rcv+0x1c/0x30 [ 74.421394][ T4224] netlink_unicast+0x665/0x740 [ 74.421425][ T4224] netlink_sendmsg+0x5ef/0x740 [ 74.421462][ T4224] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.421541][ T4224] ____sys_sendmsg+0x532/0x580 [ 74.421579][ T4224] ___sys_sendmsg+0x195/0x1e0 [ 74.421637][ T4224] __x64_sys_sendmsg+0xd4/0x160 [ 74.421731][ T4224] x64_sys_call+0x22ab/0x2550 [ 74.421764][ T4224] do_syscall_64+0x112/0x360 [ 74.421808][ T4224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.421834][ T4224] RIP: 0033:0x7f43b6adf559 [ 74.421931][ T4224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.422035][ T4224] RSP: 002b:00007f43b552f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.422064][ T4224] RAX: ffffffffffffffda RBX: 00007f43b6d65fa0 RCX: 00007f43b6adf559 [ 74.422130][ T4224] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 74.422149][ T4224] RBP: 00007f43b6b76b20 R08: 0000000000000000 R09: 0000000000000000 [ 74.422163][ T4224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.422237][ T4224] R13: 00007f43b6d66038 R14: 00007f43b6d65fa0 R15: 00007ffdea213928 [ 74.422269][ T4224] [ 74.527295][ T4236] loop3: detected capacity change from 0 to 128 [ 74.567232][ T4238] loop0: detected capacity change from 0 to 512 [ 74.570438][ T4236] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.574579][ T4236] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.589560][ T4238] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 74.610903][ T4238] EXT4-fs (loop0): 1 orphan inode deleted [ 74.611965][ T4238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.623345][ T4238] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.632420][ T31] EXT4-fs error (device loop0): ext4_release_dquot:7115: comm kworker/u8:1: Failed to release dquot type 1 [ 74.690561][ T4224] bond0: (slave bond_slave_1): Releasing backup interface [ 74.755710][ T3024] 8021q: adding VLAN 0 to HW filter on device eth1 [ 75.609404][ T4236] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.777975][ T4255] loop4: detected capacity change from 0 to 512 [ 75.778791][ T4255] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.780187][ T4255] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.160: iget: bad i_size value: 38620345925642 [ 75.780243][ T4255] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 75.780510][ T4255] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.160: couldn't read orphan inode 15 (err -117) [ 75.780589][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 75.780625][ C0] EXT4-fs (loop4): initial error at time 1792564789: ext4_orphan_get:1403: inode 15 [ 75.780663][ C0] EXT4-fs (loop4): last error at time 1792564789: ext4_orphan_get:1403: inode 15 [ 75.780913][ T4255] loop4: lost filesystem error report for type 5 error -117 [ 75.846759][ T4255] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.916034][ T4146] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 76.029690][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.041133][ T4146] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.089791][ T4146] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 76.107684][ T4146] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.108522][ T4146] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 76.131462][ T4258] netlink: 'syz.3.161': attribute type 1 has an invalid length. [ 76.233818][ T4278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.161'. [ 76.238938][ T4146] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.306007][ T4264] random: crng reseeded on system resumption [ 76.329334][ T4255] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.160: bg 0: block 5: invalid block bitmap [ 76.335707][ T4255] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 76.335920][ T4255] EXT4-fs (loop4): This should not happen!! Data will be lost [ 76.335920][ T4255] [ 76.336046][ T4255] EXT4-fs (loop4): Total free blocks count 0 [ 76.336085][ T4255] EXT4-fs (loop4): Free/Dirty block details [ 76.336259][ T4255] EXT4-fs (loop4): free_blocks=0 [ 76.336355][ T4255] EXT4-fs (loop4): dirty_blocks=1 [ 76.336479][ T4255] EXT4-fs (loop4): Block reservation details [ 76.336703][ T4255] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 76.380421][ T4255] syz.4.160 (4255) used greatest stack depth: 8072 bytes left [ 76.579816][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.889769][ T4258] bond2: entered promiscuous mode [ 76.889915][ T4258] 8021q: adding VLAN 0 to HW filter on device bond2 [ 76.907042][ T4278] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 76.907522][ T4146] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 76.909578][ T4146] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.923331][ T4297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.164'. [ 76.973216][ T4297] FAULT_INJECTION: forcing a failure. [ 76.973216][ T4297] name fail_futex, interval 1, probability 0, space 0, times 1 [ 76.973330][ T4297] CPU: 1 UID: 0 PID: 4297 Comm: syz.4.164 Not tainted syzkaller #0 PREEMPT(lazy) [ 76.973360][ T4297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 76.973418][ T4297] Call Trace: [ 76.973425][ T4297] [ 76.973432][ T4297] __dump_stack+0x1d/0x30 [ 76.973461][ T4297] dump_stack_lvl+0x95/0xd0 [ 76.973553][ T4297] dump_stack+0x15/0x1b [ 76.973593][ T4297] should_fail_ex+0x262/0x280 [ 76.973682][ T4297] should_fail+0xb/0x20 [ 76.973710][ T4297] get_futex_key+0x12c/0xc40 [ 76.973744][ T4297] futex_wake+0x89/0x400 [ 76.973836][ T4297] do_futex+0x3f8/0x460 [ 76.973872][ T4297] __se_sys_futex+0x2f6/0x370 [ 76.973992][ T4297] __x64_sys_futex+0x78/0x90 [ 76.974025][ T4297] x64_sys_call+0x22e2/0x2550 [ 76.974129][ T4297] do_syscall_64+0x112/0x360 [ 76.974164][ T4297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.974247][ T4297] RIP: 0033:0x7f43b6adf559 [ 76.974265][ T4297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.974285][ T4297] RSP: 002b:00007f43b550e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 76.974307][ T4297] RAX: ffffffffffffffda RBX: 00007f43b6d66098 RCX: 00007f43b6adf559 [ 76.974323][ T4297] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f43b6d6609c [ 76.974337][ T4297] RBP: 00007f43b6d66090 R08: 3fffffffffffffff R09: 0000000000000000 [ 76.974351][ T4297] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000 [ 76.974419][ T4297] R13: 00007f43b6d66128 R14: 00007ffdea213840 R15: 00007ffdea213928 [ 76.974440][ T4297] [ 76.975862][ T3024] 8021q: adding VLAN 0 to HW filter on device eth2 [ 77.115302][ T4146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.138647][ T4146] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.150554][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.150596][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.163707][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.163746][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.200360][ T4309] netlink: 17 bytes leftover after parsing attributes in process `syz.3.165'. [ 77.213903][ T4309] netlink: 17 bytes leftover after parsing attributes in process `syz.3.165'. [ 77.398454][ T4335] netlink: 'syz.0.168': attribute type 12 has an invalid length. [ 77.446267][ T4316] FAULT_INJECTION: forcing a failure. [ 77.446267][ T4316] name failslab, interval 1, probability 0, space 0, times 0 [ 77.446343][ T4316] CPU: 1 UID: 0 PID: 4316 Comm: syz.2.167 Not tainted syzkaller #0 PREEMPT(lazy) [ 77.446377][ T4316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 77.446396][ T4316] Call Trace: [ 77.446405][ T4316] [ 77.446482][ T4316] __dump_stack+0x1d/0x30 [ 77.446517][ T4316] dump_stack_lvl+0x95/0xd0 [ 77.446549][ T4316] dump_stack+0x15/0x1b [ 77.446660][ T4316] should_fail_ex+0x262/0x280 [ 77.446694][ T4316] ? skb_clone+0x151/0x1f0 [ 77.446720][ T4316] should_failslab+0x8c/0xb0 [ 77.446826][ T4316] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 77.446873][ T4316] ? skb_clone+0x151/0x1f0 [ 77.446926][ T4316] skb_clone+0x151/0x1f0 [ 77.446964][ T4316] __netlink_deliver_tap+0x2be/0x510 [ 77.447002][ T4316] netlink_unicast+0x712/0x740 [ 77.447043][ T4316] netlink_sendmsg+0x5ef/0x740 [ 77.447138][ T4316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.447172][ T4316] ____sys_sendmsg+0x532/0x580 [ 77.447214][ T4316] ___sys_sendmsg+0x195/0x1e0 [ 77.447307][ T4316] __x64_sys_sendmsg+0xd4/0x160 [ 77.447356][ T4316] x64_sys_call+0x22ab/0x2550 [ 77.447394][ T4316] do_syscall_64+0x112/0x360 [ 77.447434][ T4316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.447469][ T4316] RIP: 0033:0x7f6d819cf559 [ 77.447492][ T4316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.447518][ T4316] RSP: 002b:00007f6d8041f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.447547][ T4316] RAX: ffffffffffffffda RBX: 00007f6d81c55fa0 RCX: 00007f6d819cf559 [ 77.447567][ T4316] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 77.447585][ T4316] RBP: 00007f6d81a66b20 R08: 0000000000000000 R09: 0000000000000000 [ 77.447604][ T4316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.447671][ T4316] R13: 00007f6d81c56038 R14: 00007f6d81c55fa0 R15: 00007fff1e8657a8 [ 77.447699][ T4316] [ 77.456037][ T4316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.167'. [ 77.475244][ T4341] loop0: detected capacity change from 0 to 512 [ 77.483105][ T4341] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 77.549501][ T4341] EXT4-fs (loop0): 1 orphan inode deleted [ 77.559151][ T4341] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.559637][ T4341] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.583865][ T393] EXT4-fs error (device loop0): ext4_release_dquot:7115: comm kworker/u8:7: Failed to release dquot type 1 [ 77.729923][ T3024] 8021q: adding VLAN 0 to HW filter on device eth3 [ 77.797287][ T4341] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.840578][ T4361] netlink: 'syz.4.171': attribute type 1 has an invalid length. [ 77.840625][ T4361] netlink: 'syz.4.171': attribute type 2 has an invalid length. [ 77.849941][ T4146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.905499][ T4373] netlink: 'syz.0.170': attribute type 21 has an invalid length. [ 77.905547][ T4373] netlink: 156 bytes leftover after parsing attributes in process `syz.0.170'. [ 78.070670][ T4384] FAT-fs (loop7): unable to read boot sector [ 78.570016][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 78.570037][ T28] audit: type=1400 audit(1792564792.399:1231): avc: denied { ioctl } for pid=4359 comm="syz.4.171" path="socket:[8479]" dev="sockfs" ino=8479 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.611384][ T3024] 8021q: adding VLAN 0 to HW filter on device eth4 [ 78.639004][ T28] audit: type=1400 audit(1792564792.469:1232): avc: denied { write } for pid=4395 comm="syz.2.174" name="ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 78.640585][ T28] audit: type=1400 audit(1792564792.469:1233): avc: denied { ioctl } for pid=4395 comm="syz.2.174" path="/dev/ppp" dev="devtmpfs" ino=139 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 78.706237][ T28] audit: type=1326 audit(1792564792.539:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4395 comm="syz.2.174" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d819cf559 code=0x7ffc0000 [ 78.706434][ T28] audit: type=1326 audit(1792564792.539:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4395 comm="syz.2.174" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d819cf559 code=0x7ffc0000 [ 78.706521][ T28] audit: type=1326 audit(1792564792.539:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4395 comm="syz.2.174" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d819cf559 code=0x7ffc0000 [ 78.707459][ T28] audit: type=1326 audit(1792564792.539:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4395 comm="syz.2.174" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6d819cf559 code=0x7ffc0000 [ 78.707754][ T28] audit: type=1326 audit(1792564792.539:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4395 comm="syz.2.174" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d819cf559 code=0x7ffc0000 [ 78.707891][ T28] audit: type=1326 audit(1792564792.539:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4395 comm="syz.2.174" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d819cf559 code=0x7ffc0000 [ 78.708098][ T28] audit: type=1326 audit(1792564792.539:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4395 comm="syz.2.174" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d819cf559 code=0x7ffc0000 [ 78.978103][ T4400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.175'. [ 78.978185][ T4400] FAULT_INJECTION: forcing a failure. [ 78.978185][ T4400] name failslab, interval 1, probability 0, space 0, times 0 [ 78.978307][ T4400] CPU: 1 UID: 0 PID: 4400 Comm: syz.4.175 Not tainted syzkaller #0 PREEMPT(lazy) [ 78.978378][ T4400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 78.978391][ T4400] Call Trace: [ 78.978398][ T4400] [ 78.978405][ T4400] __dump_stack+0x1d/0x30 [ 78.978437][ T4400] dump_stack_lvl+0x95/0xd0 [ 78.978460][ T4400] dump_stack+0x15/0x1b [ 78.978481][ T4400] should_fail_ex+0x262/0x280 [ 78.978563][ T4400] ? __alloc_skb+0x2e0/0x6f0 [ 78.978627][ T4400] should_failslab+0x8c/0xb0 [ 78.978675][ T4400] kmem_cache_alloc_node_noprof+0x60/0x3e0 [ 78.978722][ T4400] ? selinux_capable+0x31/0x40 [ 78.978759][ T4400] ? __alloc_skb+0x2e0/0x6f0 [ 78.978808][ T4400] __alloc_skb+0x2e0/0x6f0 [ 78.978837][ T4400] ? __alloc_skb+0x209/0x6f0 [ 78.978866][ T4400] netlink_ack+0xfd/0x530 [ 78.978908][ T4400] netlink_rcv_skb+0x18d/0x220 [ 78.978930][ T4400] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 78.978978][ T4400] rtnetlink_rcv+0x1c/0x30 [ 78.979021][ T4400] netlink_unicast+0x665/0x740 [ 78.979136][ T4400] netlink_sendmsg+0x5ef/0x740 [ 78.979165][ T4400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.979190][ T4400] ____sys_sendmsg+0x532/0x580 [ 78.979265][ T4400] ___sys_sendmsg+0x195/0x1e0 [ 78.979319][ T4400] __x64_sys_sendmsg+0xd4/0x160 [ 78.979352][ T4400] x64_sys_call+0x22ab/0x2550 [ 78.979441][ T4400] do_syscall_64+0x112/0x360 [ 78.979480][ T4400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.979507][ T4400] RIP: 0033:0x7f43b6adf559 [ 78.979528][ T4400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.979659][ T4400] RSP: 002b:00007f43b552f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.979737][ T4400] RAX: ffffffffffffffda RBX: 00007f43b6d65fa0 RCX: 00007f43b6adf559 [ 78.979821][ T4400] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 78.979913][ T4400] RBP: 00007f43b6b76b20 R08: 0000000000000000 R09: 0000000000000000 [ 78.979931][ T4400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.979948][ T4400] R13: 00007f43b6d66038 R14: 00007f43b6d65fa0 R15: 00007ffdea213928 [ 78.979976][ T4400] [ 79.217872][ T4146] veth0_vlan: entered promiscuous mode [ 79.232990][ T4146] veth1_vlan: entered promiscuous mode [ 79.246370][ T4146] veth0_macvtap: entered promiscuous mode [ 79.260325][ T4146] veth1_macvtap: entered promiscuous mode [ 79.277031][ T4146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.281077][ T4146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.293442][ T4422] random: crng reseeded on system resumption [ 79.345369][ T38] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.345508][ T38] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.345552][ T38] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.345593][ T38] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.568745][ T4430] netlink: 'syz.2.179': attribute type 1 has an invalid length. [ 79.568816][ T4430] netlink: 220 bytes leftover after parsing attributes in process `syz.2.179'. [ 79.626553][ T4434] loop4: detected capacity change from 0 to 128 [ 79.656290][ T4434] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.673050][ T4434] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 79.771076][ T4436] netlink: 20 bytes leftover after parsing attributes in process `syz.2.179'. [ 79.793057][ T4439] FAULT_INJECTION: forcing a failure. [ 79.793057][ T4439] name failslab, interval 1, probability 0, space 0, times 0 [ 79.793157][ T4439] CPU: 1 UID: 0 PID: 4439 Comm: syz.0.182 Not tainted syzkaller #0 PREEMPT(lazy) [ 79.793292][ T4439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 79.793381][ T4439] Call Trace: [ 79.793405][ T4439] [ 79.793438][ T4439] __dump_stack+0x1d/0x30 [ 79.793522][ T4439] dump_stack_lvl+0x95/0xd0 [ 79.793593][ T4439] dump_stack+0x15/0x1b [ 79.793616][ T4439] should_fail_ex+0x262/0x280 [ 79.793645][ T4439] ? skb_clone+0x151/0x1f0 [ 79.793702][ T4439] should_failslab+0x8c/0xb0 [ 79.793906][ T4439] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 79.794110][ T4439] ? skb_clone+0x151/0x1f0 [ 79.794182][ T4439] skb_clone+0x151/0x1f0 [ 79.794275][ T4439] __netlink_deliver_tap+0x2be/0x510 [ 79.794361][ T4439] netlink_unicast+0x712/0x740 [ 79.794455][ T4439] netlink_sendmsg+0x5ef/0x740 [ 79.794547][ T4439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.794697][ T4439] ____sys_sendmsg+0x532/0x580 [ 79.794803][ T4439] ___sys_sendmsg+0x195/0x1e0 [ 79.794940][ T4439] __x64_sys_sendmsg+0xd4/0x160 [ 79.795065][ T4439] x64_sys_call+0x22ab/0x2550 [ 79.795163][ T4439] do_syscall_64+0x112/0x360 [ 79.795267][ T4439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.795347][ T4439] RIP: 0033:0x7f039837f559 [ 79.795400][ T4439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.795482][ T4439] RSP: 002b:00007f0396dae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.795564][ T4439] RAX: ffffffffffffffda RBX: 00007f0398606090 RCX: 00007f039837f559 [ 79.795607][ T4439] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 79.795643][ T4439] RBP: 00007f0398416b20 R08: 0000000000000000 R09: 0000000000000000 [ 79.795742][ T4439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.795767][ T4439] R13: 00007f0398606128 R14: 00007f0398606090 R15: 00007fff5397a958 [ 79.795825][ T4439] [ 79.796567][ T4439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.182'. [ 80.036413][ T4439] bond0: (slave bond_slave_1): Releasing backup interface [ 80.080249][ T4442] loop3: detected capacity change from 0 to 512 [ 80.498046][ T4451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'. [ 80.581871][ T4451] loop0: detected capacity change from 0 to 512 [ 80.920951][ T4458] loop5: detected capacity change from 0 to 1024 [ 80.922037][ T4458] EXT4-fs: Ignoring removed orlov option [ 81.336678][ T4463] netlink: 260 bytes leftover after parsing attributes in process `syz.2.187'. [ 81.340197][ T4463] netlink: 'syz.2.187': attribute type 39 has an invalid length. [ 81.361323][ T4458] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.407135][ T4451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.408726][ T4451] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.484497][ T4442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.486280][ T4442] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.607798][ T4146] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.651389][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.784192][ T4468] loop5: detected capacity change from 0 to 512 [ 81.789779][ T4468] EXT4-fs: Ignoring removed nobh option [ 81.807465][ T4468] EXT4-fs error (device loop5) in ext4_process_orphan:346: Out of memory [ 81.807510][ T4468] loop5: lost filesystem error report for type 5 error -12 [ 81.807918][ T4468] EXT4-fs (loop5): 2 truncates cleaned up [ 81.808462][ T4468] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.859870][ T4468] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.188: bg 0: block 5: invalid block bitmap [ 81.860147][ T4468] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 45 with max blocks 1 with error 28 [ 81.860250][ T4468] EXT4-fs (loop5): This should not happen!! Data will be lost [ 81.860250][ T4468] [ 81.860265][ T4468] EXT4-fs (loop5): Total free blocks count 0 [ 81.860277][ T4468] EXT4-fs (loop5): Free/Dirty block details [ 81.860289][ T4468] EXT4-fs (loop5): free_blocks=0 [ 81.860304][ T4468] EXT4-fs (loop5): dirty_blocks=2 [ 81.860320][ T4468] EXT4-fs (loop5): Block reservation details [ 81.860336][ T4468] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 82.135270][ T4482] FAULT_INJECTION: forcing a failure. [ 82.135270][ T4482] name failslab, interval 1, probability 0, space 0, times 0 [ 82.135321][ T4482] CPU: 0 UID: 0 PID: 4482 Comm: syz.0.191 Not tainted syzkaller #0 PREEMPT(lazy) [ 82.135351][ T4482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 82.135363][ T4482] Call Trace: [ 82.135370][ T4482] [ 82.135377][ T4482] __dump_stack+0x1d/0x30 [ 82.135413][ T4482] dump_stack_lvl+0x95/0xd0 [ 82.135461][ T4482] dump_stack+0x15/0x1b [ 82.135486][ T4482] should_fail_ex+0x262/0x280 [ 82.135588][ T4482] ? skb_clone+0x151/0x1f0 [ 82.135709][ T4482] should_failslab+0x8c/0xb0 [ 82.135757][ T4482] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 82.135865][ T4482] ? skb_clone+0x151/0x1f0 [ 82.135896][ T4482] skb_clone+0x151/0x1f0 [ 82.135923][ T4482] __netlink_deliver_tap+0x2be/0x510 [ 82.135960][ T4482] netlink_unicast+0x712/0x740 [ 82.136050][ T4482] netlink_sendmsg+0x5ef/0x740 [ 82.136077][ T4482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.136181][ T4482] ____sys_sendmsg+0x532/0x580 [ 82.136255][ T4482] ___sys_sendmsg+0x195/0x1e0 [ 82.136290][ T4482] ? __send_signal_locked+0xd0/0x7a0 [ 82.136333][ T4482] __x64_sys_sendmsg+0xd4/0x160 [ 82.136366][ T4482] x64_sys_call+0x22ab/0x2550 [ 82.136469][ T4482] do_syscall_64+0x112/0x360 [ 82.136561][ T4482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.136593][ T4482] RIP: 0033:0x7f039837f559 [ 82.136680][ T4482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.136739][ T4482] RSP: 002b:00007f0396dae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.136763][ T4482] RAX: ffffffffffffffda RBX: 00007f0398606090 RCX: 00007f039837f559 [ 82.136777][ T4482] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 82.136790][ T4482] RBP: 00007f0398416b20 R08: 0000000000000000 R09: 0000000000000000 [ 82.136825][ T4482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.136842][ T4482] R13: 00007f0398606128 R14: 00007f0398606090 R15: 00007fff5397a958 [ 82.136870][ T4482] [ 82.136938][ T4482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.191'. [ 82.625532][ T4487] netlink: 48 bytes leftover after parsing attributes in process `syz.2.192'. [ 83.043271][ T4146] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.124190][ T4489] xt_IDLETIMER: timeout value is too big [ 83.766206][ T4506] loop0: detected capacity change from 0 to 128 [ 83.769092][ T4506] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 83.797059][ T4506] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.798189][ T4506] ext2 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.868290][ T4506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.868840][ T4506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.037273][ T28] kauditd_printk_skb: 237 callbacks suppressed [ 84.037291][ T28] audit: type=1400 audit(1792564797.869:1478): avc: denied { write } for pid=4501 comm="syz.0.197" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.037397][ T28] audit: type=1400 audit(1792564797.869:1479): avc: denied { create } for pid=4501 comm="syz.0.197" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 84.038894][ T28] audit: type=1400 audit(1792564797.869:1480): avc: denied { write } for pid=4501 comm="syz.0.197" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.038939][ T28] audit: type=1400 audit(1792564797.869:1481): avc: denied { unlink } for pid=4501 comm="syz.0.197" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 84.233522][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.705989][ T4525] pim6reg: entered allmulticast mode [ 84.815722][ T4512] netlink: 'syz.5.198': attribute type 1 has an invalid length. [ 84.815905][ T4512] netlink: 220 bytes leftover after parsing attributes in process `syz.5.198'. [ 84.849913][ T28] audit: type=1400 audit(1792564798.679:1482): avc: denied { mount } for pid=4521 comm="syz.3.200" name="/" dev="ramfs" ino=7871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 84.882038][ T4529] loop3: detected capacity change from 0 to 512 [ 84.901178][ T4529] EXT4-fs: Ignoring removed nobh option [ 84.901614][ T4529] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 84.912121][ T4512] netlink: 20 bytes leftover after parsing attributes in process `syz.5.198'. [ 84.998354][ T4529] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #3: comm syz.3.200: corrupted inode contents [ 84.998404][ T4529] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 84.998699][ T4529] EXT4-fs (loop3): Remounting filesystem read-only [ 84.999047][ T4529] Quota error (device loop3): write_blk: dquota write failed [ 84.999077][ T4529] Quota error (device loop3): qtree_write_dquot: Error -30 occurred while creating quota [ 84.999424][ T4529] EXT4-fs (loop3): 1 truncate cleaned up [ 84.999846][ T4529] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.999981][ T4529] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.039639][ T3307] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.202528][ T28] audit: type=1400 audit(1792564799.039:1483): avc: denied { write } for pid=4521 comm="syz.3.200" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.406352][ T4545] netlink: 148 bytes leftover after parsing attributes in process `syz.4.205'. [ 85.494604][ T4545] loop4: detected capacity change from 0 to 128 [ 85.585626][ T28] audit: type=1400 audit(1792564799.229:1484): avc: denied { setopt } for pid=4538 comm="syz.0.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.585811][ T28] audit: type=1400 audit(1792564799.229:1485): avc: denied { connect } for pid=4538 comm="syz.0.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 85.866365][ T4527] netlink: 76 bytes leftover after parsing attributes in process `syz.3.200'. [ 86.074370][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.588934][ T4561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.208'. [ 86.588958][ T4561] FAULT_INJECTION: forcing a failure. [ 86.588958][ T4561] name failslab, interval 1, probability 0, space 0, times 0 [ 86.589018][ T4561] CPU: 0 UID: 0 PID: 4561 Comm: syz.4.208 Not tainted syzkaller #0 PREEMPT(lazy) [ 86.589050][ T4561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 86.589098][ T4561] Call Trace: [ 86.589106][ T4561] [ 86.589114][ T4561] __dump_stack+0x1d/0x30 [ 86.589141][ T4561] dump_stack_lvl+0x95/0xd0 [ 86.589165][ T4561] dump_stack+0x15/0x1b [ 86.589187][ T4561] should_fail_ex+0x262/0x280 [ 86.589273][ T4561] ? __alloc_skb+0x2e0/0x6f0 [ 86.589297][ T4561] should_failslab+0x8c/0xb0 [ 86.589336][ T4561] kmem_cache_alloc_node_noprof+0x60/0x3e0 [ 86.589434][ T4561] ? selinux_capable+0x31/0x40 [ 86.589504][ T4561] ? __alloc_skb+0x2e0/0x6f0 [ 86.589530][ T4561] __alloc_skb+0x2e0/0x6f0 [ 86.589554][ T4561] ? __alloc_skb+0x209/0x6f0 [ 86.589601][ T4561] netlink_ack+0xfd/0x530 [ 86.589631][ T4561] netlink_rcv_skb+0x18d/0x220 [ 86.589654][ T4561] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 86.589698][ T4561] rtnetlink_rcv+0x1c/0x30 [ 86.589793][ T4561] netlink_unicast+0x665/0x740 [ 86.589817][ T4561] netlink_sendmsg+0x5ef/0x740 [ 86.589847][ T4561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.589934][ T4561] ____sys_sendmsg+0x532/0x580 [ 86.589967][ T4561] ___sys_sendmsg+0x195/0x1e0 [ 86.590023][ T4561] __x64_sys_sendmsg+0xd4/0x160 [ 86.590105][ T4561] x64_sys_call+0x22ab/0x2550 [ 86.590134][ T4561] do_syscall_64+0x112/0x360 [ 86.590214][ T4561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.590239][ T4561] RIP: 0033:0x7f43b6adf559 [ 86.590257][ T4561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.590276][ T4561] RSP: 002b:00007f43b54ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.590298][ T4561] RAX: ffffffffffffffda RBX: 00007f43b6d66180 RCX: 00007f43b6adf559 [ 86.590313][ T4561] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 86.590366][ T4561] RBP: 00007f43b6b76b20 R08: 0000000000000000 R09: 0000000000000000 [ 86.590387][ T4561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.590400][ T4561] R13: 00007f43b6d66218 R14: 00007f43b6d66180 R15: 00007ffdea213928 [ 86.590422][ T4561] [ 86.891948][ T4564] ip6tnl2: entered allmulticast mode [ 87.497098][ T4570] loop4: detected capacity change from 0 to 512 [ 87.529917][ T4566] netlink: 4 bytes leftover after parsing attributes in process `syz.5.209'. [ 87.554683][ T4570] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.554780][ T4570] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.579591][ T4565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.588548][ T4565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.628712][ T4565] netlink: 'syz.5.209': attribute type 2 has an invalid length. [ 88.128183][ T4576] loop3: detected capacity change from 0 to 512 [ 88.180719][ T4576] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.212: iget: bad extended attribute block 134217728 [ 88.180774][ T4576] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 88.183460][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 88.183530][ C0] EXT4-fs (loop3): initial error at time 1792564802: ext4_orphan_get:1403: inode 15 [ 88.183791][ C0] EXT4-fs (loop3): last error at time 1792564802: ext4_orphan_get:1403: inode 15 [ 88.235316][ T4576] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.212: couldn't read orphan inode 15 (err -117) [ 88.235499][ T4576] loop3: lost filesystem error report for type 5 error -117 [ 88.282872][ T4576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.285894][ T4580] loop5: detected capacity change from 0 to 512 [ 88.334367][ T4576] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.435353][ T4580] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.435431][ T4580] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.650799][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.431743][ T4595] loop0: detected capacity change from 0 to 8192 [ 89.435066][ T4591] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz.5.213: iget: bad i_size value: 2533274857506816 [ 89.489682][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 89.489702][ T28] audit: type=1400 audit(1792564803.319:1514): avc: denied { cpu } for pid=4581 comm="syz.0.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 89.521133][ T4593] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz.5.213: iget: bad i_size value: 2533274857506816 [ 89.691941][ T4600] loop4: detected capacity change from 0 to 256 [ 89.692744][ T4600] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 89.709223][ T4600] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 89.822528][ T28] audit: type=1400 audit(1792564803.559:1515): avc: denied { write } for pid=4579 comm="syz.5.213" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.027692][ T4146] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.125137][ T28] audit: type=1400 audit(1792564803.939:1516): avc: denied { write } for pid=4599 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.159269][ T4616] loop5: detected capacity change from 0 to 512 [ 90.195179][ T4616] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.195287][ T4616] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.238677][ T28] audit: type=1400 audit(1792564804.069:1517): avc: denied { write } for pid=4619 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.242414][ T4576] ./dev/sda1: Can't lookup blockdev [ 90.245864][ T28] audit: type=1400 audit(1792564804.079:1518): avc: denied { connect } for pid=4575 comm="syz.3.212" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.395766][ T393] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.419289][ T4628] loop3: detected capacity change from 0 to 512 [ 90.504582][ T28] audit: type=1400 audit(1792564804.299:1519): avc: denied { connect } for pid=4606 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 90.518011][ T4625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.217'. [ 90.524609][ T28] audit: type=1400 audit(1792564804.359:1520): avc: denied { write } for pid=4613 comm="syz.5.219" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.598881][ T4645] loop3: detected capacity change from 0 to 512 [ 90.636125][ T4643] netlink: 16 bytes leftover after parsing attributes in process `syz.3.221'. [ 90.650450][ T4643] loop3: detected capacity change from 0 to 512 [ 90.760750][ T28] audit: type=1400 audit(1792564804.519:1521): avc: denied { write } for pid=4632 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.760819][ T28] audit: type=1400 audit(1792564804.539:1522): avc: denied { write } for pid=4652 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.790244][ T4643] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 90.790322][ T4643] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 90.814055][ T4616] netlink: 4 bytes leftover after parsing attributes in process `syz.5.219'. [ 90.814320][ T4643] EXT4-fs (loop3): 1 truncate cleaned up [ 90.922150][ T4666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.223'. [ 91.064345][ T4643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.290567][ T28] audit: type=1400 audit(1792564805.049:1523): avc: denied { write } for pid=4655 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.204075][ T4698] loop0: detected capacity change from 0 to 1024 [ 92.204804][ T4698] EXT4-fs: Ignoring removed orlov option [ 92.239678][ T4698] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.900283][ T4146] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.960366][ T4705] loop4: detected capacity change from 0 to 512 [ 92.967961][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.009175][ T4705] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.020951][ T4705] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.229: iget: bad i_size value: 38620345925642 [ 93.021005][ T4705] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 93.025237][ T4705] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.229: couldn't read orphan inode 15 (err -117) [ 93.025263][ T4705] loop4: lost filesystem error report for type 5 error -117 [ 93.026964][ T4705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.094804][ T4703] smpboot: CPU 1 is now offline [ 93.119927][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.177025][ T4706] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 93.214982][ T4714] FAULT_INJECTION: forcing a failure. [ 93.214982][ T4714] name failslab, interval 1, probability 0, space 0, times 0 [ 93.215037][ T4714] CPU: 1 UID: 0 PID: 4714 Comm: syz.5.227 Not tainted syzkaller #0 PREEMPT(lazy) [ 93.215075][ T4714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 93.215093][ T4714] Call Trace: [ 93.215102][ T4714] [ 93.215112][ T4714] __dump_stack+0x1d/0x30 [ 93.215147][ T4714] dump_stack_lvl+0x95/0xd0 [ 93.215177][ T4714] dump_stack+0x15/0x1b [ 93.215280][ T4714] should_fail_ex+0x262/0x280 [ 93.215320][ T4714] ? skb_clone+0x151/0x1f0 [ 93.215437][ T4714] should_failslab+0x8c/0xb0 [ 93.215486][ T4714] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 93.215529][ T4714] ? skb_clone+0x151/0x1f0 [ 93.215606][ T4714] skb_clone+0x151/0x1f0 [ 93.215644][ T4714] __netlink_deliver_tap+0x2be/0x510 [ 93.215682][ T4714] netlink_unicast+0x712/0x740 [ 93.215713][ T4714] netlink_sendmsg+0x5ef/0x740 [ 93.215760][ T4714] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.215793][ T4714] ____sys_sendmsg+0x532/0x580 [ 93.215833][ T4714] ___sys_sendmsg+0x195/0x1e0 [ 93.215927][ T4714] ? __send_signal_locked+0xd0/0x7a0 [ 93.216046][ T4714] __x64_sys_sendmsg+0xd4/0x160 [ 93.216088][ T4714] x64_sys_call+0x22ab/0x2550 [ 93.216118][ T4714] do_syscall_64+0x112/0x360 [ 93.216184][ T4714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.216215][ T4714] RIP: 0033:0x7fb46a6cf559 [ 93.216238][ T4714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.216334][ T4714] RSP: 002b:00007fb4690fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.216355][ T4714] RAX: ffffffffffffffda RBX: 00007fb46a956090 RCX: 00007fb46a6cf559 [ 93.216374][ T4714] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 93.216416][ T4714] RBP: 00007fb46a766b20 R08: 0000000000000000 R09: 0000000000000000 [ 93.216430][ T4714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.216442][ T4714] R13: 00007fb46a956128 R14: 00007fb46a956090 R15: 00007fffad052458 [ 93.216462][ T4714] [ 93.216557][ T4714] netlink: 4 bytes leftover after parsing attributes in process `syz.5.227'. [ 93.299318][ T4712] loop0: detected capacity change from 0 to 256 [ 93.302680][ T4712] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 93.306774][ T4712] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.328469][ T4714] bond0: (slave bond_slave_1): Releasing backup interface [ 93.404042][ T4705] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.229: bg 0: block 5: invalid block bitmap [ 93.418652][ T4705] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 93.418822][ T4705] EXT4-fs (loop4): This should not happen!! Data will be lost [ 93.418822][ T4705] [ 93.419282][ T4705] EXT4-fs (loop4): Total free blocks count 0 [ 93.419639][ T4705] EXT4-fs (loop4): Free/Dirty block details [ 93.419901][ T4705] EXT4-fs (loop4): free_blocks=0 [ 93.420281][ T4705] EXT4-fs (loop4): dirty_blocks=1 [ 93.420315][ T4705] EXT4-fs (loop4): Block reservation details [ 93.420442][ T4705] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 93.471611][ T4718] loop3: detected capacity change from 0 to 512 [ 93.495982][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.500277][ T4718] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.241: bg 0: block 385: padding at end of block bitmap is not set [ 93.500393][ T4718] loop3: lost filesystem error report for type 5 error -117 [ 93.501321][ T4718] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 93.501375][ T4718] loop3: lost filesystem error report for type 5 error -117 [ 93.502584][ T4718] EXT4-fs (loop3): 2 truncates cleaned up [ 93.503462][ T4718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.586442][ T4716] loop0: detected capacity change from 0 to 512 [ 93.649437][ T4716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.649642][ T4716] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.880610][ T4730] ieee802154 phy1 wpan1: encryption failed: -22 [ 93.882874][ T4729] loop4: detected capacity change from 0 to 512 [ 93.887026][ T4729] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.232: iget: bad extended attribute block 134217728 [ 93.887063][ T4729] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 93.887240][ T4729] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.232: couldn't read orphan inode 15 (err -117) [ 93.887273][ T4729] loop4: lost filesystem error report for type 5 error -117 [ 93.887792][ T4729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.888652][ T4729] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.020298][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.308180][ T4732] netlink: 72 bytes leftover after parsing attributes in process `syz.2.234'. [ 94.638777][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 94.638797][ T28] audit: type=1400 audit(1792564808.469:1548): avc: denied { create } for pid=4748 comm="syz.3.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 94.721552][ T4755] rxe_eth0 speed is unknown, defaulting to 1000 [ 94.775195][ T4751] Cannot find del_set index 4 as target [ 94.786861][ T28] audit: type=1400 audit(1792564808.619:1549): avc: denied { setopt } for pid=4748 comm="syz.3.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.806973][ T28] audit: type=1400 audit(1792564808.629:1550): avc: denied { write } for pid=4748 comm="syz.3.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.899040][ T28] audit: type=1400 audit(1792564808.729:1551): avc: denied { bind } for pid=4748 comm="syz.3.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 95.878468][ T28] audit: type=1400 audit(1792564809.709:1552): avc: denied { map } for pid=4775 comm="syz.4.245" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 95.879564][ T4787] loop3: detected capacity change from 0 to 512 [ 95.910912][ T4787] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.913473][ T4787] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.244: iget: bad i_size value: 38620345925642 [ 95.913520][ T4787] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 95.913698][ T4787] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.244: couldn't read orphan inode 15 (err -117) [ 95.913723][ T4787] loop3: lost filesystem error report for type 5 error -117 [ 95.914122][ T4784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=4784 comm=syz.4.245 [ 95.914314][ T4787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.916905][ T28] audit: type=1400 audit(1792564809.749:1553): avc: denied { write } for pid=4771 comm="syz.3.244" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.917596][ T28] audit: type=1400 audit(1792564809.749:1554): avc: denied { write } for pid=4771 comm="syz.3.244" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.972812][ T4784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.245'. [ 96.264021][ T4794] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.244: bg 0: block 5: invalid block bitmap [ 96.264253][ T4794] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 96.264282][ T4794] EXT4-fs (loop3): This should not happen!! Data will be lost [ 96.264282][ T4794] [ 96.264378][ T4794] EXT4-fs (loop3): Total free blocks count 0 [ 96.264395][ T4794] EXT4-fs (loop3): Free/Dirty block details [ 96.264410][ T4794] EXT4-fs (loop3): free_blocks=0 [ 96.264426][ T4794] EXT4-fs (loop3): dirty_blocks=1 [ 96.264442][ T4794] EXT4-fs (loop3): Block reservation details [ 96.264456][ T4794] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 96.405555][ T4780] rxe_eth0 speed is unknown, defaulting to 1000 [ 96.557252][ T4803] netlink: 'syz.4.248': attribute type 1 has an invalid length. [ 96.578720][ T4803] bond1: entered promiscuous mode [ 96.580398][ T4803] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.638820][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.639682][ T4803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.248'. [ 96.695536][ T4803] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.696168][ T4803] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 96.696193][ T4803] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 96.731105][ T4803] bond1: (slave wireguard0): making interface the new active one [ 96.731132][ T4803] wireguard0: entered promiscuous mode [ 96.733109][ T4803] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 97.061488][ T4820] FAULT_INJECTION: forcing a failure. [ 97.061488][ T4820] name failslab, interval 1, probability 0, space 0, times 0 [ 97.061540][ T4820] CPU: 0 UID: 0 PID: 4820 Comm: syz.3.252 Not tainted syzkaller #0 PREEMPT(lazy) [ 97.061627][ T4820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 97.061679][ T4820] Call Trace: [ 97.061688][ T4820] [ 97.061698][ T4820] __dump_stack+0x1d/0x30 [ 97.061731][ T4820] dump_stack_lvl+0x95/0xd0 [ 97.061762][ T4820] dump_stack+0x15/0x1b [ 97.061791][ T4820] should_fail_ex+0x262/0x280 [ 97.061862][ T4820] ? skb_clone+0x151/0x1f0 [ 97.061896][ T4820] should_failslab+0x8c/0xb0 [ 97.062017][ T4820] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 97.062062][ T4820] ? skb_clone+0x151/0x1f0 [ 97.062101][ T4820] skb_clone+0x151/0x1f0 [ 97.062129][ T4820] __netlink_deliver_tap+0x2be/0x510 [ 97.062169][ T4820] netlink_unicast+0x712/0x740 [ 97.062236][ T4820] netlink_sendmsg+0x5ef/0x740 [ 97.062272][ T4820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.062306][ T4820] ____sys_sendmsg+0x532/0x580 [ 97.062365][ T4820] ___sys_sendmsg+0x195/0x1e0 [ 97.062408][ T4820] ? __send_signal_locked+0xd0/0x7a0 [ 97.062499][ T4820] __x64_sys_sendmsg+0xd4/0x160 [ 97.062531][ T4820] x64_sys_call+0x22ab/0x2550 [ 97.062559][ T4820] do_syscall_64+0x112/0x360 [ 97.062598][ T4820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.062693][ T4820] RIP: 0033:0x7ff7bac5f559 [ 97.062709][ T4820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.062732][ T4820] RSP: 002b:00007ff7b9696028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.062759][ T4820] RAX: ffffffffffffffda RBX: 00007ff7baee6090 RCX: 00007ff7bac5f559 [ 97.062842][ T4820] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 97.062855][ T4820] RBP: 00007ff7bacf6b20 R08: 0000000000000000 R09: 0000000000000000 [ 97.062868][ T4820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.062883][ T4820] R13: 00007ff7baee6128 R14: 00007ff7baee6090 R15: 00007ffc22325df8 [ 97.062935][ T4820] [ 97.064642][ T4820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.252'. [ 97.269682][ T28] audit: type=1400 audit(1792564811.109:1555): avc: denied { ioctl } for pid=4821 comm="syz.2.253" path="/58/tracing/dynamic_events" dev="tracefs" ino=32 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 97.339439][ T4830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.256'. [ 97.393742][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.647418][ T4839] netlink: 'syz.2.258': attribute type 4 has an invalid length. [ 97.647472][ T4839] netlink: 17 bytes leftover after parsing attributes in process `syz.2.258'. [ 98.517211][ T28] audit: type=1400 audit(1792564812.319:1556): avc: denied { getopt } for pid=4844 comm="syz.2.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 98.581081][ T4849] netlink: 68 bytes leftover after parsing attributes in process `syz.3.261'. [ 98.715543][ T4855] netlink: 148 bytes leftover after parsing attributes in process `syz.0.262'. [ 98.802732][ T4855] loop0: detected capacity change from 0 to 128 [ 99.127718][ T28] audit: type=1400 audit(1792564812.959:1557): avc: denied { ioctl } for pid=4844 comm="syz.2.260" path="socket:[9361]" dev="sockfs" ino=9361 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 99.254449][ T4857] netlink: 40 bytes leftover after parsing attributes in process `syz.3.261'. [ 99.368755][ T4847] Cannot find set identified by id 0 to match [ 99.930599][ T4865] loop4: detected capacity change from 0 to 512 [ 99.978886][ T4865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.978993][ T4865] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.234268][ T4861] rxe_eth0 speed is unknown, defaulting to 1000 [ 100.250630][ T4885] loop3: detected capacity change from 0 to 512 [ 100.306674][ T4885] EXT4-fs error (device loop3): ext4_xattr_inode_iget:473: comm syz.3.270: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 100.306801][ T4885] loop3: lost filesystem error report for type 5 error -117 [ 100.328320][ T4885] EXT4-fs (loop3): 1 orphan inode deleted [ 100.332427][ T4885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.656619][ T4898] netlink: 4 bytes leftover after parsing attributes in process `syz.5.273'. [ 100.942551][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.954676][ T4900] team0 (unregistering): Port device team_slave_0 removed [ 101.024471][ T4900] team0 (unregistering): Port device team_slave_1 removed [ 101.311875][ T4908] pim6reg: entered allmulticast mode [ 101.429140][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 101.429159][ T28] audit: type=1400 audit(1792564815.259:1560): avc: denied { append } for pid=4914 comm="syz.5.279" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 101.686254][ T28] audit: type=1400 audit(1792564815.519:1561): avc: denied { read } for pid=4914 comm="syz.5.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 102.019232][ T4927] loop3: detected capacity change from 0 to 1024 [ 102.028747][ T4927] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 102.031022][ T4927] JBD2: no valid journal superblock found [ 102.031032][ T4927] EXT4-fs (loop3): Could not load journal inode [ 102.729983][ T4938] FAULT_INJECTION: forcing a failure. [ 102.729983][ T4938] name failslab, interval 1, probability 0, space 0, times 0 [ 102.730945][ T4938] CPU: 1 UID: 0 PID: 4938 Comm: syz.5.282 Not tainted syzkaller #0 PREEMPT(lazy) [ 102.730981][ T4938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 102.731000][ T4938] Call Trace: [ 102.731009][ T4938] [ 102.731018][ T4938] __dump_stack+0x1d/0x30 [ 102.731161][ T4938] dump_stack_lvl+0x95/0xd0 [ 102.731184][ T4938] dump_stack+0x15/0x1b [ 102.731207][ T4938] should_fail_ex+0x262/0x280 [ 102.731246][ T4938] ? skb_clone+0x151/0x1f0 [ 102.731281][ T4938] should_failslab+0x8c/0xb0 [ 102.731408][ T4938] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 102.731453][ T4938] ? skb_clone+0x151/0x1f0 [ 102.731490][ T4938] skb_clone+0x151/0x1f0 [ 102.731517][ T4938] __netlink_deliver_tap+0x2be/0x510 [ 102.731666][ T4938] netlink_unicast+0x712/0x740 [ 102.731766][ T4938] netlink_sendmsg+0x5ef/0x740 [ 102.731796][ T4938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.731917][ T4938] ____sys_sendmsg+0x532/0x580 [ 102.731954][ T4938] ___sys_sendmsg+0x195/0x1e0 [ 102.732084][ T4938] __x64_sys_sendmsg+0xd4/0x160 [ 102.732127][ T4938] x64_sys_call+0x22ab/0x2550 [ 102.732155][ T4938] do_syscall_64+0x112/0x360 [ 102.732259][ T4938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.732290][ T4938] RIP: 0033:0x7fb46a6cf559 [ 102.732348][ T4938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.732373][ T4938] RSP: 002b:00007fb468cba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.732394][ T4938] RAX: ffffffffffffffda RBX: 00007fb46a956270 RCX: 00007fb46a6cf559 [ 102.732415][ T4938] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 102.732434][ T4938] RBP: 00007fb46a766b20 R08: 0000000000000000 R09: 0000000000000000 [ 102.732452][ T4938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.732465][ T4938] R13: 00007fb46a956308 R14: 00007fb46a956270 R15: 00007fffad052458 [ 102.732533][ T4938] [ 102.956583][ T4938] netlink: 4 bytes leftover after parsing attributes in process `syz.5.282'. [ 103.004025][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.033677][ T4942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.284'. [ 103.063557][ T4945] loop3: detected capacity change from 0 to 512 [ 103.087858][ T4945] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 103.087990][ T4945] EXT4-fs error (device loop3) in ext4_process_orphan:346: Out of memory [ 103.088007][ T4945] loop3: lost filesystem error report for type 5 error -12 [ 103.088220][ T4945] EXT4-fs (loop3): 1 truncate cleaned up [ 103.088865][ T4945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.856861][ T28] audit: type=1400 audit(1792564817.659:1562): avc: denied { write } for pid=4951 comm="syz.5.288" name="configs" dev="configfs" ino=6299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.856991][ T28] audit: type=1400 audit(1792564817.669:1563): avc: denied { write } for pid=4951 comm="syz.5.288" name="functions" dev="configfs" ino=6298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.857026][ T28] audit: type=1400 audit(1792564817.669:1564): avc: denied { write } for pid=4951 comm="syz.5.288" name="c.1" dev="configfs" ino=9492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.857059][ T28] audit: type=1400 audit(1792564817.669:1565): avc: denied { create } for pid=4951 comm="syz.5.288" name="printer.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 103.857092][ T28] audit: type=1400 audit(1792564817.669:1566): avc: denied { write } for pid=4951 comm="syz.5.288" name="c.1" dev="configfs" ino=9492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.041639][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.107572][ T28] audit: type=1400 audit(1792564817.939:1567): avc: denied { setopt } for pid=4951 comm="syz.5.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.202392][ T4947] rxe_eth0 speed is unknown, defaulting to 1000 [ 104.267699][ T4957] FAULT_INJECTION: forcing a failure. [ 104.267699][ T4957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.267768][ T4957] CPU: 0 UID: 0 PID: 4957 Comm: syz.0.283 Not tainted syzkaller #0 PREEMPT(lazy) [ 104.267799][ T4957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.267813][ T4957] Call Trace: [ 104.267822][ T4957] [ 104.267831][ T4957] __dump_stack+0x1d/0x30 [ 104.267861][ T4957] dump_stack_lvl+0x95/0xd0 [ 104.268032][ T4957] dump_stack+0x15/0x1b [ 104.268056][ T4957] should_fail_ex+0x262/0x280 [ 104.268089][ T4957] should_fail+0xb/0x20 [ 104.268199][ T4957] should_fail_usercopy+0x1a/0x20 [ 104.268248][ T4957] _copy_from_iter+0xcc/0xe70 [ 104.268282][ T4957] ? __alloc_skb+0x516/0x6f0 [ 104.268328][ T4957] ? __alloc_skb+0x209/0x6f0 [ 104.268354][ T4957] netlink_sendmsg+0x4d6/0x740 [ 104.268383][ T4957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.268485][ T4957] ____sys_sendmsg+0x532/0x580 [ 104.268584][ T4957] ___sys_sendmsg+0x195/0x1e0 [ 104.268614][ T4957] ? _raw_spin_unlock+0x9/0x30 [ 104.268670][ T4957] __x64_sys_sendmsg+0xd4/0x160 [ 104.268704][ T4957] x64_sys_call+0x22ab/0x2550 [ 104.268794][ T4957] do_syscall_64+0x112/0x360 [ 104.268826][ T4957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.269015][ T4957] RIP: 0033:0x7f039837f559 [ 104.269071][ T4957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.269152][ T4957] RSP: 002b:00007f0396dcf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.269209][ T4957] RAX: ffffffffffffffda RBX: 00007f0398605fa0 RCX: 00007f039837f559 [ 104.269225][ T4957] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 104.269240][ T4957] RBP: 00007f0398416b20 R08: 0000000000000000 R09: 0000000000000000 [ 104.269254][ T4957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.269268][ T4957] R13: 00007f0398606038 R14: 00007f0398605fa0 R15: 00007fff5397a958 [ 104.269291][ T4957] [ 104.777678][ T28] audit: type=1400 audit(1792564818.609:1568): avc: denied { wake_alarm } for pid=4971 comm="syz.2.293" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 105.100005][ T4975] netlink: 16 bytes leftover after parsing attributes in process `syz.0.294'. [ 105.100494][ T4975] sch_fq: defrate 0 ignored. [ 105.345699][ T4975] loop0: detected capacity change from 0 to 128 [ 105.359642][ T4975] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 105.384364][ T4975] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.385027][ T4975] ext2 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.390864][ T28] audit: type=1400 audit(1792564819.219:1569): avc: denied { write } for pid=4974 comm="syz.0.294" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.417392][ T4975] netlink: 24 bytes leftover after parsing attributes in process `syz.0.294'. [ 105.678086][ T3307] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.851715][ T4986] xt_CT: You must specify a L4 protocol and not use inversions on it [ 106.303562][ T4990] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 106.334778][ T4993] random: crng reseeded on system resumption [ 106.754933][ T5005] netlink: 'syz.3.301': attribute type 4 has an invalid length. [ 106.754982][ T5005] netlink: 17 bytes leftover after parsing attributes in process `syz.3.301'. [ 106.757265][ T5005] FAULT_INJECTION: forcing a failure. [ 106.757265][ T5005] name failslab, interval 1, probability 0, space 0, times 0 [ 106.757341][ T5005] CPU: 0 UID: 0 PID: 5005 Comm: syz.3.301 Not tainted syzkaller #0 PREEMPT(lazy) [ 106.757511][ T5005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 106.757525][ T5005] Call Trace: [ 106.757534][ T5005] [ 106.757544][ T5005] __dump_stack+0x1d/0x30 [ 106.757580][ T5005] dump_stack_lvl+0x95/0xd0 [ 106.757686][ T5005] dump_stack+0x15/0x1b [ 106.757716][ T5005] should_fail_ex+0x262/0x280 [ 106.757756][ T5005] ? resize+0x55b/0x1420 [ 106.757795][ T5005] should_failslab+0x8c/0xb0 [ 106.757830][ T5005] __kmalloc_noprof+0xb6/0x4b0 [ 106.757876][ T5005] ? resize+0x55b/0x1420 [ 106.757944][ T5005] ? put_child+0x2af/0x2d0 [ 106.757977][ T5005] resize+0x55b/0x1420 [ 106.758015][ T5005] fib_insert_alias+0x720/0x7b0 [ 106.758074][ T5005] fib_trie_unmerge+0x456/0xa80 [ 106.758101][ T5005] fib_unmerge+0x7d/0x200 [ 106.758129][ T5005] fib4_rule_configure+0x21f/0x520 [ 106.758234][ T5005] fib_newrule+0x4b8/0xa00 [ 106.758258][ T5005] ? avc_has_perm_noaudit+0xac/0x160 [ 106.758310][ T5005] fib_nl_newrule+0x46/0x60 [ 106.758337][ T5005] ? __pfx_fib_nl_newrule+0x10/0x10 [ 106.758361][ T5005] rtnetlink_rcv_msg+0x64b/0x720 [ 106.758435][ T5005] netlink_rcv_skb+0x11e/0x220 [ 106.758465][ T5005] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 106.758610][ T5005] rtnetlink_rcv+0x1c/0x30 [ 106.758651][ T5005] netlink_unicast+0x665/0x740 [ 106.758682][ T5005] netlink_sendmsg+0x5ef/0x740 [ 106.758716][ T5005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.758786][ T5005] ____sys_sendmsg+0x532/0x580 [ 106.758830][ T5005] ___sys_sendmsg+0x195/0x1e0 [ 106.758883][ T5005] __x64_sys_sendmsg+0xd4/0x160 [ 106.758915][ T5005] x64_sys_call+0x22ab/0x2550 [ 106.758953][ T5005] do_syscall_64+0x112/0x360 [ 106.758993][ T5005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.759024][ T5005] RIP: 0033:0x7ff7bac5f559 [ 106.759102][ T5005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.759121][ T5005] RSP: 002b:00007ff7b9675028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.759164][ T5005] RAX: ffffffffffffffda RBX: 00007ff7baee6180 RCX: 00007ff7bac5f559 [ 106.759181][ T5005] RDX: 0000000000004000 RSI: 0000200000000340 RDI: 000000000000000b [ 106.759198][ T5005] RBP: 00007ff7bacf6b20 R08: 0000000000000000 R09: 0000000000000000 [ 106.759217][ T5005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.759234][ T5005] R13: 00007ff7baee6218 R14: 00007ff7baee6180 R15: 00007ffc22325df8 [ 106.759266][ T5005] [ 107.080756][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 107.080785][ T28] audit: type=1400 audit(1792564820.909:1571): avc: denied { write } for pid=4995 comm="syz.4.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 107.561309][ T5020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.304'. [ 107.787292][ T5016] loop0: detected capacity change from 0 to 512 [ 107.874555][ T5016] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.877209][ T5016] ext4 filesystem being mounted at /54/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.941312][ T28] audit: type=1400 audit(1792564821.769:1572): avc: denied { write } for pid=5015 comm="syz.0.305" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.946805][ T5021] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 107.985814][ T28] audit: type=1400 audit(1792564821.809:1573): avc: denied { write } for pid=5015 comm="syz.0.305" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.274956][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.427537][ T5036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.433529][ T5036] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.443226][ T5036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.527989][ T5036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.531613][ T5036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.541327][ T5036] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 108.541369][ T5036] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.547616][ T5036] veth1_vlan: left promiscuous mode [ 108.550223][ T5036] veth0_vlan: left promiscuous mode [ 108.555428][ T5036] veth0_vlan: entered promiscuous mode [ 108.559267][ T5036] veth1_vlan: entered promiscuous mode [ 108.567733][ T5036] veth1_macvtap: left promiscuous mode [ 108.569874][ T5036] veth0_macvtap: left promiscuous mode [ 108.571753][ T5036] veth0_macvtap: entered promiscuous mode [ 108.573999][ T5036] veth1_macvtap: entered promiscuous mode [ 108.581707][ T5036] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.587085][ T5036] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.593156][ T5036] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.598808][ T5036] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.602847][ T5036] gre1: left allmulticast mode [ 108.608481][ T5036] bond1: left promiscuous mode [ 108.608535][ T5036] wireguard0: left promiscuous mode [ 108.701624][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.701985][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.702121][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.702446][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.712834][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.712876][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.715838][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.715886][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.700559][ T28] audit: type=1400 audit(1792564823.489:1574): avc: denied { ioctl } for pid=5054 comm="syz.4.314" path="socket:[9682]" dev="sockfs" ino=9682 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 109.975859][ T5064] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 110.143307][ T5066] netlink: 'syz.4.315': attribute type 4 has an invalid length. [ 110.143325][ T5066] netlink: 17 bytes leftover after parsing attributes in process `syz.4.315'. [ 110.424711][ T5071] loop0: detected capacity change from 0 to 512 [ 110.525271][ T5073] netlink: 24 bytes leftover after parsing attributes in process `syz.2.316'. [ 110.663503][ T5071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.663580][ T5071] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.709358][ T5069] netlink: 16 bytes leftover after parsing attributes in process `syz.2.316'. [ 110.709421][ T5069] sch_fq: defrate 0 ignored. [ 110.811960][ T3399] infiniband s`z1: ib_query_port failed (-19) [ 110.850282][ T5079] loop4: detected capacity change from 0 to 1024 [ 110.864840][ T5079] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 110.866296][ T5079] JBD2: no valid journal superblock found [ 110.866308][ T5079] EXT4-fs (loop4): Could not load journal inode [ 111.054985][ T5084] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 111.055048][ T5084] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 111.055080][ T5084] vhci_hcd vhci_hcd.0: Device attached [ 111.123523][ T5084] loop5: detected capacity change from 0 to 512 [ 111.521870][ T3973] usb 11-1: new high-speed USB device number 2 using vhci_hcd [ 111.638527][ T5084] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 111.648002][ T5084] EXT4-fs (loop5): mount failed [ 111.725043][ T28] audit: type=1400 audit(1792564825.559:1575): avc: denied { write } for pid=5068 comm="syz.0.326" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.914044][ T5099] netlink: 36 bytes leftover after parsing attributes in process `syz.0.326'. [ 111.963537][ T5101] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(11) [ 111.963571][ T5101] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 111.963705][ T5101] vhci_hcd vhci_hcd.0: Device attached [ 111.990203][ T5084] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(13) [ 111.990281][ T5084] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 111.990397][ T5084] vhci_hcd vhci_hcd.0: Device attached [ 112.024924][ T5084] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(15) [ 112.024957][ T5084] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 112.037285][ T5084] vhci_hcd vhci_hcd.0: Device attached [ 112.161194][ T5102] vhci_hcd: connection closed [ 112.161591][ T51] vhci_hcd vhci_hcd.5: stop threads [ 112.161609][ T51] vhci_hcd vhci_hcd.5: release socket [ 112.161629][ T51] vhci_hcd vhci_hcd.5: disconnect device [ 112.161650][ T5085] vhci_hcd: connection reset by peer [ 112.161841][ T5106] vhci_hcd: connection closed [ 112.162104][ T5104] vhci_hcd: connection closed [ 112.163196][ T51] vhci_hcd vhci_hcd.5: stop threads [ 112.163216][ T51] vhci_hcd vhci_hcd.5: release socket [ 112.163237][ T51] vhci_hcd vhci_hcd.5: disconnect device [ 112.163498][ T51] vhci_hcd vhci_hcd.5: stop threads [ 112.163548][ T51] vhci_hcd vhci_hcd.5: release socket [ 112.163621][ T51] vhci_hcd vhci_hcd.5: disconnect device [ 112.163888][ T51] vhci_hcd vhci_hcd.5: stop threads [ 112.163924][ T51] vhci_hcd vhci_hcd.5: release socket [ 112.164065][ T51] vhci_hcd vhci_hcd.5: disconnect device [ 112.238711][ T5109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.238978][ T5109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.270393][ T5109] loop4: detected capacity change from 0 to 128 [ 112.411274][ T5109] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.418067][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.427000][ T5109] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.473126][ T5113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'. [ 112.548417][ T5114] netlink: 36 bytes leftover after parsing attributes in process `syz.0.322'. [ 112.953968][ T5128] FAULT_INJECTION: forcing a failure. [ 112.953968][ T5128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.954026][ T5128] CPU: 1 UID: 0 PID: 5128 Comm: syz.5.325 Not tainted syzkaller #0 PREEMPT(lazy) [ 112.954061][ T5128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 112.954130][ T5128] Call Trace: [ 112.954189][ T5128] [ 112.954200][ T5128] __dump_stack+0x1d/0x30 [ 112.954234][ T5128] dump_stack_lvl+0x95/0xd0 [ 112.954256][ T5128] dump_stack+0x15/0x1b [ 112.954281][ T5128] should_fail_ex+0x262/0x280 [ 112.954338][ T5128] should_fail+0xb/0x20 [ 112.954433][ T5128] should_fail_usercopy+0x1a/0x20 [ 112.954476][ T5128] _copy_from_iter+0xcc/0xe70 [ 112.954588][ T5128] ? __alloc_skb+0x516/0x6f0 [ 112.954616][ T5128] ? __alloc_skb+0x209/0x6f0 [ 112.954649][ T5128] netlink_sendmsg+0x4d6/0x740 [ 112.954728][ T5128] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.954796][ T5128] ____sys_sendmsg+0x532/0x580 [ 112.954838][ T5128] ___sys_sendmsg+0x195/0x1e0 [ 112.954875][ T5128] ? __send_signal_locked+0xd0/0x7a0 [ 112.955029][ T5128] __x64_sys_sendmsg+0xd4/0x160 [ 112.955073][ T5128] x64_sys_call+0x22ab/0x2550 [ 112.955121][ T5128] do_syscall_64+0x112/0x360 [ 112.955155][ T5128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.955186][ T5128] RIP: 0033:0x7fb46a6cf559 [ 112.955209][ T5128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.955311][ T5128] RSP: 002b:00007fb4690fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.955332][ T5128] RAX: ffffffffffffffda RBX: 00007fb46a956090 RCX: 00007fb46a6cf559 [ 112.955346][ T5128] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 112.955361][ T5128] RBP: 00007fb46a766b20 R08: 0000000000000000 R09: 0000000000000000 [ 112.955374][ T5128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.955431][ T5128] R13: 00007fb46a956128 R14: 00007fb46a956090 R15: 00007fffad052458 [ 112.955459][ T5128] [ 113.024898][ T3305] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.242244][ T5130] FAULT_INJECTION: forcing a failure. [ 113.242244][ T5130] name failslab, interval 1, probability 0, space 0, times 0 [ 113.242299][ T5130] CPU: 1 UID: 0 PID: 5130 Comm: syz.4.328 Not tainted syzkaller #0 PREEMPT(lazy) [ 113.242330][ T5130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 113.242343][ T5130] Call Trace: [ 113.242350][ T5130] [ 113.242358][ T5130] __dump_stack+0x1d/0x30 [ 113.242466][ T5130] dump_stack_lvl+0x95/0xd0 [ 113.242491][ T5130] dump_stack+0x15/0x1b [ 113.242585][ T5130] should_fail_ex+0x262/0x280 [ 113.242615][ T5130] ? skb_clone+0x151/0x1f0 [ 113.242644][ T5130] should_failslab+0x8c/0xb0 [ 113.242700][ T5130] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 113.242745][ T5130] ? skb_clone+0x151/0x1f0 [ 113.242796][ T5130] skb_clone+0x151/0x1f0 [ 113.242833][ T5130] __netlink_deliver_tap+0x2be/0x510 [ 113.242862][ T5130] netlink_unicast+0x712/0x740 [ 113.242883][ T5130] netlink_sendmsg+0x5ef/0x740 [ 113.242926][ T5130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.243018][ T5130] ____sys_sendmsg+0x532/0x580 [ 113.243106][ T5130] ___sys_sendmsg+0x195/0x1e0 [ 113.243142][ T5130] ? __send_signal_locked+0xd0/0x7a0 [ 113.243232][ T5130] __x64_sys_sendmsg+0xd4/0x160 [ 113.243314][ T5130] x64_sys_call+0x22ab/0x2550 [ 113.243347][ T5130] do_syscall_64+0x112/0x360 [ 113.243455][ T5130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.243485][ T5130] RIP: 0033:0x7f43b6adf559 [ 113.243506][ T5130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.243533][ T5130] RSP: 002b:00007f43b552f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.243562][ T5130] RAX: ffffffffffffffda RBX: 00007f43b6d65fa0 RCX: 00007f43b6adf559 [ 113.243583][ T5130] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 113.243633][ T5130] RBP: 00007f43b6b76b20 R08: 0000000000000000 R09: 0000000000000000 [ 113.243720][ T5130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.243738][ T5130] R13: 00007f43b6d66038 R14: 00007f43b6d65fa0 R15: 00007ffdea213928 [ 113.243765][ T5130] [ 113.245467][ T5130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.328'. [ 113.775235][ T5137] loop0: detected capacity change from 0 to 128 [ 113.845246][ T5137] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 113.884117][ T5139] loop5: detected capacity change from 0 to 512 [ 113.903379][ T5139] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.077268][ T28] audit: type=1400 audit(1792564827.909:1576): avc: denied { write } for pid=5142 comm="syz.4.332" name="file0" dev="tmpfs" ino=427 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 114.077369][ T28] audit: type=1400 audit(1792564827.909:1577): avc: denied { open } for pid=5142 comm="syz.4.332" path="/70/file0" dev="tmpfs" ino=427 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 114.128700][ T28] audit: type=1400 audit(1792564827.969:1578): avc: denied { ioctl } for pid=5142 comm="syz.4.332" path="/70/file0" dev="tmpfs" ino=427 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 114.162355][ T5139] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.167185][ T5137] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.197438][ T5139] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.214789][ T5137] ext2 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.520928][ T28] audit: type=1400 audit(1792564828.359:1579): avc: denied { read } for pid=5138 comm="syz.5.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 114.552536][ T28] audit: type=1400 audit(1792564828.369:1580): avc: denied { write } for pid=5136 comm="syz.0.329" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.552584][ T28] audit: type=1400 audit(1792564828.369:1581): avc: denied { bind } for pid=5136 comm="syz.0.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.552698][ T28] audit: type=1400 audit(1792564828.369:1582): avc: denied { node_bind } for pid=5136 comm="syz.0.329" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 114.620598][ T28] audit: type=1400 audit(1792564828.459:1583): avc: denied { write } for pid=5136 comm="syz.0.329" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.725036][ T28] audit: type=1400 audit(1792564828.559:1584): avc: denied { ioctl } for pid=5160 comm="syz.2.335" path="socket:[10898]" dev="sockfs" ino=10898 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 114.730113][ T3307] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.755668][ T28] audit: type=1400 audit(1792564828.569:1585): avc: denied { bind } for pid=5160 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 114.781124][ T5161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.335'. [ 114.825984][ T4146] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.159259][ T5175] loop5: detected capacity change from 0 to 512 [ 115.186819][ T5175] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 115.187279][ T5175] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 115.201481][ T5175] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 115.202155][ T5175] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 115.202242][ T5175] System zones: 0-2, 18-18, 34-34 [ 115.203337][ T5175] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.338: bad orphan inode 15 [ 115.203408][ T5175] loop5: lost filesystem error report for type 5 error -117 [ 115.203811][ T5175] ext4_test_bit(bit=14, block=18) = 1 [ 115.203861][ T5175] is_bad_inode(inode)=0 [ 115.204103][ T5175] NEXT_ORPHAN(inode)=2264924160 [ 115.204260][ T5175] max_ino=32 [ 115.204304][ T5175] i_nlink=0 [ 115.204706][ T5175] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #15: comm syz.5.338: corrupted inode contents [ 115.204836][ T5175] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 115.205344][ T5175] EXT4-fs error (device loop5): ext4_dirty_inode:6736: inode #15: comm syz.5.338: mark_inode_dirty error [ 115.205403][ T5175] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 115.206037][ T5175] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #15: comm syz.5.338: corrupted inode contents [ 115.206111][ T5175] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 115.206484][ T5175] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2962: inode #15: comm syz.5.338: mark_inode_dirty error [ 115.206569][ T5175] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 115.207062][ T5175] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2965: inode #15: comm syz.5.338: mark inode dirty (error -117) [ 115.207133][ T5175] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 115.207609][ T5175] EXT4-fs warning (device loop5): ext4_evict_inode:288: xattr delete (err -117) [ 115.215214][ T5175] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.309615][ T5175] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.338: bg 0: block 80: padding at end of block bitmap is not set [ 115.424512][ T4146] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.787571][ T5188] FAULT_INJECTION: forcing a failure. [ 115.787571][ T5188] name failslab, interval 1, probability 0, space 0, times 0 [ 115.787691][ T5188] CPU: 0 UID: 0 PID: 5188 Comm: syz.0.341 Not tainted syzkaller #0 PREEMPT(lazy) [ 115.787751][ T5188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 115.787821][ T5188] Call Trace: [ 115.787836][ T5188] [ 115.787845][ T5188] __dump_stack+0x1d/0x30 [ 115.787875][ T5188] dump_stack_lvl+0x95/0xd0 [ 115.787901][ T5188] dump_stack+0x15/0x1b [ 115.787935][ T5188] should_fail_ex+0x262/0x280 [ 115.788027][ T5188] ? skb_clone+0x151/0x1f0 [ 115.788068][ T5188] should_failslab+0x8c/0xb0 [ 115.788176][ T5188] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 115.788253][ T5188] ? skb_clone+0x151/0x1f0 [ 115.788356][ T5188] skb_clone+0x151/0x1f0 [ 115.788477][ T5188] __netlink_deliver_tap+0x2be/0x510 [ 115.788563][ T5188] netlink_unicast+0x712/0x740 [ 115.788590][ T5188] netlink_sendmsg+0x5ef/0x740 [ 115.788631][ T5188] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.788665][ T5188] ____sys_sendmsg+0x532/0x580 [ 115.788770][ T5188] ___sys_sendmsg+0x195/0x1e0 [ 115.788831][ T5188] __x64_sys_sendmsg+0xd4/0x160 [ 115.788925][ T5188] x64_sys_call+0x22ab/0x2550 [ 115.788954][ T5188] do_syscall_64+0x112/0x360 [ 115.789073][ T5188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.789104][ T5188] RIP: 0033:0x7f039837f559 [ 115.789148][ T5188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.789175][ T5188] RSP: 002b:00007f0396dae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.789197][ T5188] RAX: ffffffffffffffda RBX: 00007f0398606090 RCX: 00007f039837f559 [ 115.789219][ T5188] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 115.789235][ T5188] RBP: 00007f0398416b20 R08: 0000000000000000 R09: 0000000000000000 [ 115.789326][ T5188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.789340][ T5188] R13: 00007f0398606128 R14: 00007f0398606090 R15: 00007fff5397a958 [ 115.789368][ T5188] [ 115.921744][ T5188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.341'. [ 116.089315][ T5190] batadv_slave_0: entered allmulticast mode [ 116.190133][ T5189] batadv_slave_0: left allmulticast mode [ 116.446124][ T5194] loop3: detected capacity change from 0 to 8192 [ 116.700472][ T3973] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 117.345407][ T5197] SELinux: policydb magic number 0x1000000 does not match expected magic number 0xf97cff8c [ 117.345439][ T5197] SELinux: failed to load policy [ 117.357350][ T5197] ip_tables: iptables: counters copy to user failed while replacing table [ 117.505629][ T5198] raw_sendmsg: syz.3.342 forgot to set AF_INET. Fix it! [ 117.731548][ T5219] FAULT_INJECTION: forcing a failure. [ 117.731548][ T5219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.731604][ T5219] CPU: 1 UID: 0 PID: 5219 Comm: syz.4.350 Not tainted syzkaller #0 PREEMPT(lazy) [ 117.731681][ T5219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 117.731712][ T5219] Call Trace: [ 117.731721][ T5219] [ 117.731732][ T5219] __dump_stack+0x1d/0x30 [ 117.731766][ T5219] dump_stack_lvl+0x95/0xd0 [ 117.731797][ T5219] dump_stack+0x15/0x1b [ 117.731924][ T5219] should_fail_ex+0x262/0x280 [ 117.731965][ T5219] should_fail+0xb/0x20 [ 117.732002][ T5219] should_fail_usercopy+0x1a/0x20 [ 117.732071][ T5219] _copy_from_iter+0xcc/0xe70 [ 117.732143][ T5219] ? __alloc_skb+0x516/0x6f0 [ 117.732174][ T5219] ? __alloc_skb+0x209/0x6f0 [ 117.732206][ T5219] netlink_sendmsg+0x4d6/0x740 [ 117.732245][ T5219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.732300][ T5219] ____sys_sendmsg+0x532/0x580 [ 117.732342][ T5219] ___sys_sendmsg+0x195/0x1e0 [ 117.732416][ T5219] __x64_sys_sendmsg+0xd4/0x160 [ 117.732459][ T5219] x64_sys_call+0x22ab/0x2550 [ 117.732540][ T5219] do_syscall_64+0x112/0x360 [ 117.732568][ T5219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.732625][ T5219] RIP: 0033:0x7f43b6adf559 [ 117.732641][ T5219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.732658][ T5219] RSP: 002b:00007f43b550e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.732676][ T5219] RAX: ffffffffffffffda RBX: 00007f43b6d66090 RCX: 00007f43b6adf559 [ 117.732689][ T5219] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 117.732769][ T5219] RBP: 00007f43b6b76b20 R08: 0000000000000000 R09: 0000000000000000 [ 117.732854][ T5219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.732868][ T5219] R13: 00007f43b6d66128 R14: 00007f43b6d66090 R15: 00007ffdea213928 [ 117.732889][ T5219] [ 118.160451][ T5233] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 118.218532][ T5234] loop5: detected capacity change from 0 to 128 [ 118.603246][ T5237] FAULT_INJECTION: forcing a failure. [ 118.603246][ T5237] name failslab, interval 1, probability 0, space 0, times 0 [ 118.603278][ T5237] CPU: 1 UID: 0 PID: 5237 Comm: syz.0.351 Not tainted syzkaller #0 PREEMPT(lazy) [ 118.603370][ T5237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 118.603388][ T5237] Call Trace: [ 118.603398][ T5237] [ 118.603408][ T5237] __dump_stack+0x1d/0x30 [ 118.603444][ T5237] dump_stack_lvl+0x95/0xd0 [ 118.603475][ T5237] dump_stack+0x15/0x1b [ 118.603499][ T5237] should_fail_ex+0x262/0x280 [ 118.603575][ T5237] ? skb_clone+0x151/0x1f0 [ 118.603611][ T5237] should_failslab+0x8c/0xb0 [ 118.603717][ T5237] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 118.603770][ T5237] ? skb_clone+0x151/0x1f0 [ 118.603835][ T5237] skb_clone+0x151/0x1f0 [ 118.603863][ T5237] __netlink_deliver_tap+0x2be/0x510 [ 118.603901][ T5237] netlink_unicast+0x712/0x740 [ 118.603957][ T5237] netlink_sendmsg+0x5ef/0x740 [ 118.604031][ T5237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.604056][ T5237] ____sys_sendmsg+0x532/0x580 [ 118.604088][ T5237] ___sys_sendmsg+0x195/0x1e0 [ 118.604184][ T5237] __x64_sys_sendmsg+0xd4/0x160 [ 118.604228][ T5237] x64_sys_call+0x22ab/0x2550 [ 118.604257][ T5237] do_syscall_64+0x112/0x360 [ 118.604287][ T5237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.604320][ T5237] RIP: 0033:0x7f039837f559 [ 118.604375][ T5237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.604399][ T5237] RSP: 002b:00007f0396d8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.604487][ T5237] RAX: ffffffffffffffda RBX: 00007f0398606180 RCX: 00007f039837f559 [ 118.604508][ T5237] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 118.604526][ T5237] RBP: 00007f0398416b20 R08: 0000000000000000 R09: 0000000000000000 [ 118.604617][ T5237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.604630][ T5237] R13: 00007f0398606218 R14: 00007f0398606180 R15: 00007fff5397a958 [ 118.604656][ T5237] [ 118.605535][ T5237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.351'. [ 118.993811][ T5234] FAT-fs (loop5): bogus number of FAT structure [ 118.993832][ T5234] FAT-fs (loop5): Can't find a valid FAT filesystem [ 119.157490][ T28] kauditd_printk_skb: 89 callbacks suppressed [ 119.157551][ T28] audit: type=1400 audit(1792564832.909:1675): avc: denied { name_connect } for pid=5224 comm="syz.5.347" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 119.355177][ T5240] loop4: detected capacity change from 0 to 512 [ 119.435065][ T5240] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 119.435287][ T5240] EXT4-fs error (device loop4) in ext4_process_orphan:346: Out of memory [ 119.435311][ T5240] loop4: lost filesystem error report for type 5 error -12 [ 119.435555][ T5240] EXT4-fs (loop4): 1 truncate cleaned up [ 119.436048][ T5240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.751726][ T28] audit: type=1400 audit(1792564833.579:1676): avc: denied { read } for pid=5247 comm="syz.5.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.121641][ T5252] rxe_eth0 speed is unknown, defaulting to 1000 [ 120.257403][ T28] audit: type=1400 audit(1792564834.089:1677): avc: denied { getopt } for pid=5249 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 120.280750][ T5248] loop5: detected capacity change from 0 to 512 [ 120.287831][ T5248] ext4: Unknown parameter 'n' [ 120.290181][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.429501][ T415] tipc: Subscription rejected, illegal request [ 120.492196][ T5256] loop4: detected capacity change from 0 to 128 [ 120.502722][ T5256] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 120.572498][ T5256] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.629158][ T5258] loop0: detected capacity change from 0 to 1024 [ 120.639491][ T5258] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 120.652490][ T5258] JBD2: no valid journal superblock found [ 120.652970][ T5258] EXT4-fs (loop0): Could not load journal inode [ 120.660895][ T5256] ext2 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.762353][ T28] audit: type=1400 audit(1792564834.599:1678): avc: denied { write } for pid=5255 comm="syz.4.358" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.979523][ T3305] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 121.109721][ T5282] FAULT_INJECTION: forcing a failure. [ 121.109721][ T5282] name failslab, interval 1, probability 0, space 0, times 0 [ 121.109777][ T5282] CPU: 0 UID: 0 PID: 5282 Comm: syz.0.362 Not tainted syzkaller #0 PREEMPT(lazy) [ 121.109893][ T5282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 121.109911][ T5282] Call Trace: [ 121.109918][ T5282] [ 121.109926][ T5282] __dump_stack+0x1d/0x30 [ 121.109992][ T5282] dump_stack_lvl+0x95/0xd0 [ 121.110037][ T5282] dump_stack+0x15/0x1b [ 121.110066][ T5282] should_fail_ex+0x262/0x280 [ 121.110107][ T5282] ? skb_clone+0x151/0x1f0 [ 121.110168][ T5282] should_failslab+0x8c/0xb0 [ 121.110215][ T5282] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 121.110262][ T5282] ? skb_clone+0x151/0x1f0 [ 121.110310][ T5282] skb_clone+0x151/0x1f0 [ 121.110347][ T5282] __netlink_deliver_tap+0x2be/0x510 [ 121.110385][ T5282] netlink_unicast+0x712/0x740 [ 121.110474][ T5282] netlink_sendmsg+0x5ef/0x740 [ 121.110511][ T5282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.110545][ T5282] ____sys_sendmsg+0x532/0x580 [ 121.110583][ T5282] ___sys_sendmsg+0x195/0x1e0 [ 121.110642][ T5282] __x64_sys_sendmsg+0xd4/0x160 [ 121.110686][ T5282] x64_sys_call+0x22ab/0x2550 [ 121.110723][ T5282] do_syscall_64+0x112/0x360 [ 121.110759][ T5282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.110858][ T5282] RIP: 0033:0x7f039837f559 [ 121.110878][ T5282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.110903][ T5282] RSP: 002b:00007f0396dae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.110931][ T5282] RAX: ffffffffffffffda RBX: 00007f0398606090 RCX: 00007f039837f559 [ 121.110968][ T5282] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 121.110987][ T5282] RBP: 00007f0398416b20 R08: 0000000000000000 R09: 0000000000000000 [ 121.111006][ T5282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.111021][ T5282] R13: 00007f0398606128 R14: 00007f0398606090 R15: 00007fff5397a958 [ 121.111049][ T5282] [ 121.122215][ T5282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.362'. [ 121.268604][ T28] audit: type=1400 audit(1792564835.099:1679): avc: denied { ioctl } for pid=5281 comm="syz.4.364" path="socket:[11110]" dev="sockfs" ino=11110 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 121.315611][ T5291] FAULT_INJECTION: forcing a failure. [ 121.315611][ T5291] name failslab, interval 1, probability 0, space 0, times 0 [ 121.315911][ T5291] CPU: 0 UID: 0 PID: 5291 Comm: syz.5.365 Not tainted syzkaller #0 PREEMPT(lazy) [ 121.316002][ T5291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 121.316095][ T5291] Call Trace: [ 121.316116][ T5291] [ 121.316152][ T5291] __dump_stack+0x1d/0x30 [ 121.316248][ T5291] dump_stack_lvl+0x95/0xd0 [ 121.316327][ T5291] dump_stack+0x15/0x1b [ 121.316477][ T5291] should_fail_ex+0x262/0x280 [ 121.316578][ T5291] ? skb_clone+0x151/0x1f0 [ 121.316663][ T5291] should_failslab+0x8c/0xb0 [ 121.316803][ T5291] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 121.316938][ T5291] ? skb_clone+0x151/0x1f0 [ 121.317033][ T5291] skb_clone+0x151/0x1f0 [ 121.317195][ T5291] __netlink_deliver_tap+0x2be/0x510 [ 121.317230][ T5291] netlink_unicast+0x712/0x740 [ 121.317252][ T5291] netlink_sendmsg+0x5ef/0x740 [ 121.317294][ T5291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.317371][ T5291] ____sys_sendmsg+0x532/0x580 [ 121.317506][ T5291] ___sys_sendmsg+0x195/0x1e0 [ 121.317668][ T5291] __x64_sys_sendmsg+0xd4/0x160 [ 121.317773][ T5291] x64_sys_call+0x22ab/0x2550 [ 121.317885][ T5291] do_syscall_64+0x112/0x360 [ 121.317974][ T5291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.318050][ T5291] RIP: 0033:0x7fb46a6cf559 [ 121.318172][ T5291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.318228][ T5291] RSP: 002b:00007fb4690dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.318330][ T5291] RAX: ffffffffffffffda RBX: 00007fb46a956180 RCX: 00007fb46a6cf559 [ 121.318374][ T5291] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 121.318434][ T5291] RBP: 00007fb46a766b20 R08: 0000000000000000 R09: 0000000000000000 [ 121.318476][ T5291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.318519][ T5291] R13: 00007fb46a956218 R14: 00007fb46a956180 R15: 00007fffad052458 [ 121.318590][ T5291] [ 121.341329][ T5291] netlink: 4 bytes leftover after parsing attributes in process `syz.5.365'. [ 121.372761][ T28] audit: type=1400 audit(1792564835.199:1680): avc: denied { sqpoll } for pid=5281 comm="syz.4.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 121.610653][ T5301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.368'. [ 121.677893][ T28] audit: type=1326 audit(1792564835.509:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.4.368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b6adf559 code=0x7ffc0000 [ 121.677927][ T28] audit: type=1326 audit(1792564835.509:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.4.368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b6adf559 code=0x7ffc0000 [ 121.677955][ T28] audit: type=1326 audit(1792564835.509:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.4.368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b6adf559 code=0x7ffc0000 [ 121.678037][ T28] audit: type=1326 audit(1792564835.509:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.4.368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f43b6adf559 code=0x7ffc0000 [ 121.835619][ T5308] netlink: 'syz.3.366': attribute type 9 has an invalid length. [ 121.835726][ T5308] netlink: 'syz.3.366': attribute type 8 has an invalid length. [ 121.835806][ T5308] netlink: 335 bytes leftover after parsing attributes in process `syz.3.366'. [ 121.886642][ T5310] FAULT_INJECTION: forcing a failure. [ 121.886642][ T5310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.886696][ T5310] CPU: 1 UID: 0 PID: 5310 Comm: syz.4.371 Not tainted syzkaller #0 PREEMPT(lazy) [ 121.886807][ T5310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 121.886826][ T5310] Call Trace: [ 121.886910][ T5310] [ 121.886918][ T5310] __dump_stack+0x1d/0x30 [ 121.886952][ T5310] dump_stack_lvl+0x95/0xd0 [ 121.886984][ T5310] dump_stack+0x15/0x1b [ 121.887035][ T5310] should_fail_ex+0x262/0x280 [ 121.887072][ T5310] should_fail+0xb/0x20 [ 121.887107][ T5310] should_fail_usercopy+0x1a/0x20 [ 121.887149][ T5310] _copy_from_user+0x1c/0xb0 [ 121.887259][ T5310] __se_sys_copy_file_range+0x146/0x3b0 [ 121.887288][ T5310] ? __hrtimer_rearm_deferred+0x571/0x650 [ 121.887325][ T5310] __x64_sys_copy_file_range+0x78/0x90 [ 121.887363][ T5310] x64_sys_call+0x1115/0x2550 [ 121.887395][ T5310] do_syscall_64+0x112/0x360 [ 121.887453][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.887521][ T5310] RIP: 0033:0x7f43b6adf559 [ 121.887540][ T5310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.887624][ T5310] RSP: 002b:00007f43b552f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 121.887725][ T5310] RAX: ffffffffffffffda RBX: 00007f43b6d65fa0 RCX: 00007f43b6adf559 [ 121.887742][ T5310] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000010 [ 121.887756][ T5310] RBP: 00007f43b6b76b20 R08: 000000000000168e R09: 0000000000000000 [ 121.887815][ T5310] R10: 0000200000001980 R11: 0000000000000246 R12: 0000000000000000 [ 121.887831][ T5310] R13: 00007f43b6d66038 R14: 00007f43b6d65fa0 R15: 00007ffdea213928 [ 121.887858][ T5310] [ 122.471318][ T5324] loop5: detected capacity change from 0 to 512 [ 122.479170][ T5324] /dev/loop5: Can't open blockdev [ 123.006283][ T5344] loop4: detected capacity change from 0 to 512 [ 123.011924][ T5344] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #12: comm syz.4.380: missing EA_INODE flag [ 123.012061][ T5344] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 123.012456][ T5344] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.380: error while reading EA inode 12 err=-117 [ 123.012541][ T5344] loop4: lost filesystem error report for type 5 error -117 [ 123.013030][ T5344] EXT4-fs (loop4): 1 orphan inode deleted [ 123.013995][ T5344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.048479][ T5342] FAULT_INJECTION: forcing a failure. [ 123.048479][ T5342] name failslab, interval 1, probability 0, space 0, times 0 [ 123.048622][ T5342] CPU: 0 UID: 0 PID: 5342 Comm: syz.2.378 Not tainted syzkaller #0 PREEMPT(lazy) [ 123.048752][ T5342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 123.048795][ T5342] Call Trace: [ 123.048817][ T5342] [ 123.048846][ T5342] __dump_stack+0x1d/0x30 [ 123.048931][ T5342] dump_stack_lvl+0x95/0xd0 [ 123.049036][ T5342] dump_stack+0x15/0x1b [ 123.049108][ T5342] should_fail_ex+0x262/0x280 [ 123.049204][ T5342] ? skb_clone+0x151/0x1f0 [ 123.049241][ T5342] should_failslab+0x8c/0xb0 [ 123.049306][ T5342] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 123.049466][ T5342] ? skb_clone+0x151/0x1f0 [ 123.049554][ T5342] skb_clone+0x151/0x1f0 [ 123.049679][ T5342] __netlink_deliver_tap+0x2be/0x510 [ 123.049869][ T5342] netlink_unicast+0x712/0x740 [ 123.049943][ T5342] netlink_sendmsg+0x5ef/0x740 [ 123.050035][ T5342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.050117][ T5342] ____sys_sendmsg+0x532/0x580 [ 123.050220][ T5342] ___sys_sendmsg+0x195/0x1e0 [ 123.050353][ T5342] __x64_sys_sendmsg+0xd4/0x160 [ 123.050462][ T5342] x64_sys_call+0x22ab/0x2550 [ 123.050547][ T5342] do_syscall_64+0x112/0x360 [ 123.050697][ T5342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.050791][ T5342] RIP: 0033:0x7f6d819cf559 [ 123.050909][ T5342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.050973][ T5342] RSP: 002b:00007f6d803fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.051047][ T5342] RAX: ffffffffffffffda RBX: 00007f6d81c56090 RCX: 00007f6d819cf559 [ 123.051099][ T5342] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 123.051144][ T5342] RBP: 00007f6d81a66b20 R08: 0000000000000000 R09: 0000000000000000 [ 123.051254][ T5342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.051290][ T5342] R13: 00007f6d81c56128 R14: 00007f6d81c56090 R15: 00007fff1e8657a8 [ 123.051365][ T5342] [ 123.063061][ T5342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'. [ 123.560831][ T5350] loop0: detected capacity change from 0 to 512 [ 123.599026][ T5350] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 123.599219][ T5350] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 123.605330][ T5350] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 123.606009][ T5350] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 123.606289][ T5350] System zones: 0-2, 18-18, 34-34 [ 123.607561][ T5350] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.382: bad orphan inode 15 [ 123.607635][ T5350] loop0: lost filesystem error report for type 5 error -117 [ 123.608124][ T5350] ext4_test_bit(bit=14, block=18) = 1 [ 123.608166][ T5350] is_bad_inode(inode)=0 [ 123.608188][ T5350] NEXT_ORPHAN(inode)=2264924160 [ 123.608218][ T5350] max_ino=32 [ 123.608266][ T5350] i_nlink=0 [ 123.608930][ T5350] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #15: comm syz.0.382: corrupted inode contents [ 123.609005][ T5350] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 123.609835][ T5350] EXT4-fs error (device loop0): ext4_dirty_inode:6736: inode #15: comm syz.0.382: mark_inode_dirty error [ 123.609970][ T5350] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 123.611168][ C0] EXT4-fs (loop0): error count since last fsck: 3 [ 123.611221][ C0] EXT4-fs (loop0): initial error at time 1792564837: ext4_orphan_get:1429 [ 123.611331][ C0] EXT4-fs (loop0): last error at time 1792564837: ext4_dirty_inode:6736: inode 15 [ 123.611481][ T5350] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #15: comm syz.0.382: corrupted inode contents [ 123.611556][ T5350] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 123.614931][ T5350] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #15: comm syz.0.382: mark_inode_dirty error [ 123.616129][ T5350] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 123.618590][ T5350] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2965: inode #15: comm syz.0.382: mark inode dirty (error -117) [ 123.618719][ T5350] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 123.619304][ T5350] EXT4-fs warning (device loop0): ext4_evict_inode:288: xattr delete (err -117) [ 123.623424][ T5350] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.735303][ T5359] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.382: bg 0: block 80: padding at end of block bitmap is not set [ 123.909435][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.048230][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.063490][ T5363] netlink: 'syz.4.386': attribute type 1 has an invalid length. [ 124.063706][ T5363] netlink: 220 bytes leftover after parsing attributes in process `syz.4.386'. [ 124.069417][ T5363] netlink: 10 bytes leftover after parsing attributes in process `syz.4.386'. [ 124.332120][ T5371] xt_CT: You must specify a L4 protocol and not use inversions on it [ 124.332892][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 124.332920][ T28] audit: type=1400 audit(1792564837.989:1722): avc: denied { getopt } for pid=5365 comm="syz.5.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 124.460791][ T28] audit: type=1326 audit(1792564838.299:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.3.388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bac5f559 code=0x7ffc0000 [ 124.461606][ T28] audit: type=1326 audit(1792564838.299:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.3.388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bac5f559 code=0x7ffc0000 [ 124.461881][ T28] audit: type=1326 audit(1792564838.299:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.3.388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bac5f559 code=0x7ffc0000 [ 124.463159][ T28] audit: type=1326 audit(1792564838.299:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.3.388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff7bac5f559 code=0x7ffc0000 [ 124.467366][ T28] audit: type=1326 audit(1792564838.299:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.3.388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bac5f559 code=0x7ffc0000 [ 124.467662][ T28] audit: type=1326 audit(1792564838.299:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.3.388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bac5f559 code=0x7ffc0000 [ 124.467934][ T28] audit: type=1326 audit(1792564838.299:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.3.388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bac5f559 code=0x7ffc0000 [ 124.468702][ T28] audit: type=1326 audit(1792564838.299:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.3.388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7bac5f559 code=0x7ffc0000 [ 124.474684][ T28] audit: type=1326 audit(1792564838.309:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.3.388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bac5f559 code=0x7ffc0000 [ 124.925830][ T5378] FAULT_INJECTION: forcing a failure. [ 124.925830][ T5378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.925887][ T5378] CPU: 1 UID: 0 PID: 5378 Comm: syz.5.389 Not tainted syzkaller #0 PREEMPT(lazy) [ 124.925993][ T5378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 124.926012][ T5378] Call Trace: [ 124.926020][ T5378] [ 124.926030][ T5378] __dump_stack+0x1d/0x30 [ 124.926065][ T5378] dump_stack_lvl+0x95/0xd0 [ 124.926141][ T5378] dump_stack+0x15/0x1b [ 124.926169][ T5378] should_fail_ex+0x262/0x280 [ 124.926222][ T5378] should_fail+0xb/0x20 [ 124.926257][ T5378] should_fail_usercopy+0x1a/0x20 [ 124.926324][ T5378] _copy_from_iter+0xcc/0xe70 [ 124.926389][ T5378] ? __alloc_skb+0x516/0x6f0 [ 124.926472][ T5378] ? __alloc_skb+0x209/0x6f0 [ 124.926505][ T5378] netlink_sendmsg+0x4d6/0x740 [ 124.926561][ T5378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.926594][ T5378] ____sys_sendmsg+0x532/0x580 [ 124.926644][ T5378] ___sys_sendmsg+0x195/0x1e0 [ 124.926700][ T5378] __x64_sys_sendmsg+0xd4/0x160 [ 124.926775][ T5378] x64_sys_call+0x22ab/0x2550 [ 124.926812][ T5378] do_syscall_64+0x112/0x360 [ 124.926914][ T5378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.926943][ T5378] RIP: 0033:0x7fb46a6cf559 [ 124.926961][ T5378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.926980][ T5378] RSP: 002b:00007fb46911f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.927001][ T5378] RAX: ffffffffffffffda RBX: 00007fb46a955fa0 RCX: 00007fb46a6cf559 [ 124.927097][ T5378] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 124.927115][ T5378] RBP: 00007fb46a766b20 R08: 0000000000000000 R09: 0000000000000000 [ 124.927158][ T5378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.927175][ T5378] R13: 00007fb46a956038 R14: 00007fb46a955fa0 R15: 00007fffad052458 [ 124.927204][ T5378] [ 125.133841][ T5392] loop3: detected capacity change from 0 to 1024 [ 125.134509][ T5392] EXT4-fs: inline encryption not supported [ 125.141212][ T5392] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 125.165193][ T5392] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 2: comm syz.3.392: lblock 2 mapped to illegal pblock 2 (length 1) [ 125.165258][ T5392] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 125.165437][ T5392] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz.3.392: Invalid inode table block 1 in block_group 0 [ 125.165531][ T5392] loop3: lost filesystem error report for type 5 error -117 [ 125.165827][ T5392] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 125.165852][ T5392] loop3: lost filesystem error report for type 5 error -117 [ 125.165947][ T5392] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #3: comm syz.3.392: mark_inode_dirty error [ 125.166038][ T5392] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 125.166169][ T5392] EXT4-fs error (device loop3): ext4_acquire_dquot:7079: comm syz.3.392: Failed to acquire dquot type 0 [ 125.166214][ T5392] loop3: lost filesystem error report for type 5 error -117 [ 125.166310][ T5392] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 125.166364][ T5392] loop3: lost filesystem error report for type 5 error -117 [ 125.166776][ T5392] EXT4-fs error (device loop3): ext4_evict_inode:269: inode #11: comm syz.3.392: mark_inode_dirty error [ 125.166835][ T5392] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 125.166923][ T5392] EXT4-fs warning (device loop3): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 125.167005][ T5392] EXT4-fs (loop3): 1 orphan inode deleted [ 125.167421][ T5392] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.401870][ T51] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 125.402061][ T51] EXT4-fs error (device loop3): ext4_release_dquot:7115: comm kworker/u8:3: Failed to release dquot type 0 [ 125.497559][ T5408] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #2: block 16: comm syz.3.392: lblock 0 mapped to illegal pblock 16 (length 1) [ 126.068154][ T5415] loop5: detected capacity change from 0 to 128 [ 126.087882][ T5415] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 126.101510][ T3308] ================================================================== [ 126.101556][ T3308] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 126.101602][ T3308] [ 126.101608][ T3308] read-write to 0xffff88811b8b8fe0 of 8 bytes by interrupt on cpu 0: [ 126.101631][ T3308] __xa_clear_mark+0xf5/0x1e0 [ 126.101670][ T3308] __folio_end_writeback+0xe7/0x530 [ 126.101694][ T3308] folio_end_writeback_no_dropbehind+0x6d/0x200 [ 126.101726][ T3308] folio_end_writeback+0x1c/0x70 [ 126.101761][ T3308] bh_end_async_write+0x18b/0x230 [ 126.101799][ T3308] bio_endio+0x390/0x570 [ 126.101836][ T3308] blk_update_request+0x33a/0x710 [ 126.101868][ T3308] blk_mq_end_request+0x26/0x50 [ 126.101897][ T3308] lo_complete_rq+0x98/0x130 [ 126.101928][ T3308] blk_done_softirq+0x77/0xb0 [ 126.101961][ T3308] handle_softirqs+0xcc/0x2a0 [ 126.101990][ T3308] run_ksoftirqd+0x1c/0x30 [ 126.102023][ T3308] smpboot_thread_fn+0x372/0x560 [ 126.102058][ T3308] kthread+0x223/0x270 [ 126.102082][ T3308] ret_from_fork+0x146/0x330 [ 126.102122][ T3308] ret_from_fork_asm+0x1a/0x30 [ 126.102151][ T3308] [ 126.102159][ T3308] read to 0xffff88811b8b8fe0 of 8 bytes by task 3308 on cpu 1: [ 126.102181][ T3308] xas_find_marked+0x211/0x650 [ 126.102216][ T3308] filemap_get_folios_tag+0xf7/0x400 [ 126.102251][ T3308] filemap_write_and_wait_range+0x1f5/0x370 [ 126.102284][ T3308] sync_blockdev+0x35/0x50 [ 126.102306][ T3308] sync_filesystem+0x168/0x190 [ 126.102337][ T3308] generic_shutdown_super+0x4c/0x220 [ 126.102374][ T3308] kill_block_super+0x2d/0xb0 [ 126.102418][ T3308] ext4_kill_sb+0x42/0x80 [ 126.102475][ T3308] deactivate_locked_super+0x73/0x180 [ 126.102513][ T3308] deactivate_super+0x9a/0xb0 [ 126.102547][ T3308] cleanup_mnt+0x143/0x1c0 [ 126.102579][ T3308] __cleanup_mnt+0x19/0x20 [ 126.102615][ T3308] task_work_run+0x133/0x190 [ 126.102647][ T3308] exit_to_user_mode_loop+0x1e4/0x8c0 [ 126.102670][ T3308] do_syscall_64+0x212/0x360 [ 126.102703][ T3308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.102731][ T3308] [ 126.102737][ T3308] value changed: 0x0000000000030003 -> 0x0000000000000000 [ 126.102752][ T3308] [ 126.102758][ T3308] Reported by Kernel Concurrency Sanitizer on: [ 126.102773][ T3308] CPU: 1 UID: 0 PID: 3308 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 126.102804][ T3308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 126.102821][ T3308] ================================================================== [ 126.103330][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.105142][ T3308] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 126.105179][ T3308] loop3: lost filesystem error report for type 5 error -117 [ 126.106547][ T3308] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 126.106572][ T3308] loop3: lost filesystem error report for type 5 error -117 [ 126.107973][ T3308] EXT4-fs error (device loop3): ext4_quota_off:7363: inode #3: comm syz-executor: mark_inode_dirty error [ 126.108006][ T3308] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 126.118838][ T3308] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 126.118935][ T3308] loop3: lost filesystem error report for type 5 error -117 [ 126.128548][ T5415] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 126.131088][ T5415] ext2 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.428024][ T4146] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.