last executing test programs: 26.511912769s ago: executing program 2 (id=718): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf6a, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r0, &(0x7f00000003c0), 0x0}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x1, @perf_bp={0x0, 0xc}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b7020000910c0000bfa30000000000000703000000feffff7a0af0ff0d00000079a4f0ff00000000b7060000ffffffff2d64050000000000650404000100010104040000c0000000b7030000010000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa00000000690e000000000000008b798b4f7458d1863cc67c4c6a06fa28e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc7a65d073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f838f7eb12f63be72a3d817b324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b32176066599783568628f0309c3a01716d3706e1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d247714358d8b170c3b5cad11f72cd9d88e56b95fe9f3de5cfcfa5c1da8ba181580d9db035efe38834de171b64f4b4c1b242786dcc5679e3d0613cdf05b02d7ad4f3b8af27a696e9b8809c2d68fddfcbd451e81d37c11f95094b91fff61ab9e69780b133d1dbca5a78695131c34c855dd793f90ca3973a4bd5606151b3600373d2bbfb7b3638e713e7275af06107949ff5dffe24d3c448ae6e4646b346fe0a21eef1e55d0659eac930d00000000000ff52b98317c45417b900a47c1ae1103c09fc173c1cf28bf7ef7a61523c6b2dbb35f5ae29877bb8e1b3e257056c0d205d391ed7b2089a72a93885b9fc8430ff"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f2f, 0xe80, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) 26.49781954s ago: executing program 2 (id=721): prctl$PR_MCE_KILL(0x4e, 0x1, 0x3) syz_emit_ethernet(0x72, &(0x7f00000004c0)={@remote, @local, @val={@val={0x88a8, 0x1, 0x1, 0x4}, {0x8100, 0x0, 0x1, 0x4}}, {@ipv6={0x86dd, @tipc_packet={0x1, 0x6, "b6b2a4", 0x34, 0x6, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@dstopts={0x21}], @payload_named={{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xa, 0x2, 0x2, 0x3, 0x0, 0x0, 0x0, 0x3, 0x2, 0x8773, 0x5, 0x0, 0x4e20, 0x40}, 0x2}, 0x0, 0x4}}, [0x0, 0x0, 0x0, 0x0]}}}}}}, &(0x7f00000005c0)={0x0, 0x2, [0xd35, 0x67c, 0xdd8, 0xe53]}) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002000)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x300, 0x0, 0x80006}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xbf2, 0x4}}]}, {0x4}, {0x1}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x6, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x2008, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x7fffffff, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x1}, {0x8000, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x5, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x49, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x9, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0x80000d}, {0x1, 0xcad, 0xa9, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7e, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x103, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0xfffffffc, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x2000005, 0x853}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x7f, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x5, 0x10000, 0x6, 0x4}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x9, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800002, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff3, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x4ce}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x1d, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x45, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x8}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x49, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x3, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x7, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x81, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x7}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x5, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x2}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x0) 26.369865704s ago: executing program 2 (id=728): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, 0x0, 0x802) 26.173626291s ago: executing program 2 (id=730): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x17, 0x78, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) cachestat(r0, &(0x7f00000001c0)={0x800, 0x100}, &(0x7f0000000240), 0x0) r2 = socket(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000000110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) modify_ldt$write(0x1, &(0x7f0000000080)={0x1000, 0x1000, 0xfffffffffffffffe}, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x930, &(0x7f0000000800)) ptrace$poke(0x20, r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4) recvmsg$can_raw(r5, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/46, 0x2e}, 0x10040) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@getchain={0x74, 0x66, 0x0, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x10, 0x2}, {0x4, 0x4}, {0xd, 0xf}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xfffffff9}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0xac}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xc82}, {0x8}, {0x8, 0xb, 0xbe5}]}, 0x74}, 0x1, 0x0, 0x0, 0x2}, 0x404c0dd) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r8, &(0x7f0000000bc0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x9c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x10}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc0}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xdd}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40084) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000020700000a4c000000090a3f0400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797a3100000000080003400000011c0800060800ffff00140000001100010000000000000000000700000a"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) 25.970823767s ago: executing program 2 (id=735): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_config_ext={0x4, 0x7832}, 0x4, 0x0, 0x10004, 0x3, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) munlock(&(0x7f0000ff1000/0xf000)=nil, 0xf000) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f00000001c0)={0x10, {{0x29, 0x0, 0x4000000, @loopback}}}, 0x88) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) r2 = epoll_create1(0x80000) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0xfffffffd, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x30000019}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x380, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x300, 0x0, 0x2, 0x1, 'syz0\x00', 0x3}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) 24.347560481s ago: executing program 2 (id=756): r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000040)=0x10, 0x80800) getpeername$llc(r0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) r1 = socket$inet6(0xa, 0x4, 0x5) r2 = accept4(r0, &(0x7f0000000100)=@ethernet, &(0x7f0000000180)=0x80, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) unshare(0x10000400) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sysvipc/shm\x00', 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000240)={0x0, 0x0}) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000280)=r4) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x4a}}}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2b}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4004850) write$UHID_INPUT(r3, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$XFS_IOC_GOINGDOWN(r3, 0x8004587d, &(0x7f0000001400)=0x7) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f0000001440)={@id={0x2, 0x0, @b}}) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f00000014c0)) ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f00000015c0)) timer_create(0x2, &(0x7f0000001600)={0x0, 0x32, 0x1, @tid=r4}, &(0x7f0000001640)=0x0) timer_settime(r5, 0x1, &(0x7f0000001680)={{}, {0x77359400}}, &(0x7f00000016c0)) timer_create(0x0, &(0x7f0000001800)={0x0, 0x37, 0x0, @thr={&(0x7f0000001700)="eb6e24437fa3e7071449c6396435a7bd471ec2589c4e969ad7ba1bcf36ddd50beadde29040f7754de3d5758addcaf6d7b85f850f3f57dad596f80b4908361ad944955f5ac55095e779", &(0x7f0000001780)="6e884fa82175bee45b1bfd6ab39de946e4c4309734c86d8865a1388e663bbb1cb4c87cfd1a0f014d92c3a06733759d9d9fa9e16544846c7105ef789894e51ff6dd"}}, &(0x7f0000001840)=0x0) timer_gettime(r6, &(0x7f0000001880)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000001a80)={'syztnl0\x00', &(0x7f0000001a00)={'syztnl2\x00', 0x0, 0x7, 0x10, 0xf, 0x2, {{0x14, 0x4, 0x1, 0x7, 0x50, 0x64, 0x0, 0x1, 0x4, 0x0, @loopback, @empty, {[@cipso={0x86, 0x1f, 0x3, [{0x6, 0xd, "c070ae749436dffc1908e0"}, {0x7, 0xc, "64e5fd85a9e67a072ed6"}]}, @lsrr={0x83, 0x17, 0xb8, [@remote, @loopback, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @noop, @ra={0x94, 0x4}]}}}}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000019c0)={@ifindex=r7, 0xb, 0x0, 0x9, &(0x7f00000018c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000001900)=[0x0, 0x0, 0x0], &(0x7f0000001940)=[0x0, 0x0], &(0x7f0000001980)=[0x0, 0x0]}, 0x40) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), r3) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x20, r8, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x52}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4010) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f0000001c00)={0x6, 0xbe}) connect$inet6(r1, &(0x7f0000001c40)={0xa, 0x4e20, 0x7fff, @mcast2, 0xf0c}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000001c80), 0x4) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x20, 0x1404, 0x0, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x200000c1) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000001f40)={0x3, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001dc0)=""/34, 0x22}, {&(0x7f0000001e00)=""/89, 0x59}, {&(0x7f0000001e80)=""/9, 0x9}], &(0x7f0000001f00)=[0x9, 0x101, 0x2e112a70, 0x1, 0x1, 0x6]}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000003040)=""/4096, 0x1000}], 0x2, &(0x7f0000004080)=""/130, 0x82}, 0x10}, {{&(0x7f0000004140)=@l2tp, 0x80, &(0x7f00000042c0)=[{&(0x7f00000041c0)=""/206, 0xce}], 0x1}, 0x48000}, {{&(0x7f0000004300)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000004900)=[{&(0x7f0000004380)=""/156, 0x9c}, {&(0x7f0000004440)=""/52, 0x34}, {&(0x7f0000004480)=""/41, 0x29}, {&(0x7f00000044c0)=""/204, 0xcc}, {&(0x7f00000045c0)=""/194, 0xc2}, {&(0x7f00000046c0)}, {&(0x7f0000004700)=""/16, 0x10}, {&(0x7f0000004740)=""/175, 0xaf}, {&(0x7f0000004800)=""/204, 0xcc}], 0x9}, 0x8}], 0x3, 0x2100, &(0x7f0000004a80)={0x77359400}) 24.316990002s ago: executing program 32 (id=756): r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000040)=0x10, 0x80800) getpeername$llc(r0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) r1 = socket$inet6(0xa, 0x4, 0x5) r2 = accept4(r0, &(0x7f0000000100)=@ethernet, &(0x7f0000000180)=0x80, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) unshare(0x10000400) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sysvipc/shm\x00', 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000240)={0x0, 0x0}) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000280)=r4) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x4a}}}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2b}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4004850) write$UHID_INPUT(r3, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$XFS_IOC_GOINGDOWN(r3, 0x8004587d, &(0x7f0000001400)=0x7) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f0000001440)={@id={0x2, 0x0, @b}}) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f00000014c0)) ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f00000015c0)) timer_create(0x2, &(0x7f0000001600)={0x0, 0x32, 0x1, @tid=r4}, &(0x7f0000001640)=0x0) timer_settime(r5, 0x1, &(0x7f0000001680)={{}, {0x77359400}}, &(0x7f00000016c0)) timer_create(0x0, &(0x7f0000001800)={0x0, 0x37, 0x0, @thr={&(0x7f0000001700)="eb6e24437fa3e7071449c6396435a7bd471ec2589c4e969ad7ba1bcf36ddd50beadde29040f7754de3d5758addcaf6d7b85f850f3f57dad596f80b4908361ad944955f5ac55095e779", &(0x7f0000001780)="6e884fa82175bee45b1bfd6ab39de946e4c4309734c86d8865a1388e663bbb1cb4c87cfd1a0f014d92c3a06733759d9d9fa9e16544846c7105ef789894e51ff6dd"}}, &(0x7f0000001840)=0x0) timer_gettime(r6, &(0x7f0000001880)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000001a80)={'syztnl0\x00', &(0x7f0000001a00)={'syztnl2\x00', 0x0, 0x7, 0x10, 0xf, 0x2, {{0x14, 0x4, 0x1, 0x7, 0x50, 0x64, 0x0, 0x1, 0x4, 0x0, @loopback, @empty, {[@cipso={0x86, 0x1f, 0x3, [{0x6, 0xd, "c070ae749436dffc1908e0"}, {0x7, 0xc, "64e5fd85a9e67a072ed6"}]}, @lsrr={0x83, 0x17, 0xb8, [@remote, @loopback, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @noop, @ra={0x94, 0x4}]}}}}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000019c0)={@ifindex=r7, 0xb, 0x0, 0x9, &(0x7f00000018c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000001900)=[0x0, 0x0, 0x0], &(0x7f0000001940)=[0x0, 0x0], &(0x7f0000001980)=[0x0, 0x0]}, 0x40) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), r3) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x20, r8, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x52}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4010) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f0000001c00)={0x6, 0xbe}) connect$inet6(r1, &(0x7f0000001c40)={0xa, 0x4e20, 0x7fff, @mcast2, 0xf0c}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000001c80), 0x4) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x20, 0x1404, 0x0, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x200000c1) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000001f40)={0x3, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001dc0)=""/34, 0x22}, {&(0x7f0000001e00)=""/89, 0x59}, {&(0x7f0000001e80)=""/9, 0x9}], &(0x7f0000001f00)=[0x9, 0x101, 0x2e112a70, 0x1, 0x1, 0x6]}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000003040)=""/4096, 0x1000}], 0x2, &(0x7f0000004080)=""/130, 0x82}, 0x10}, {{&(0x7f0000004140)=@l2tp, 0x80, &(0x7f00000042c0)=[{&(0x7f00000041c0)=""/206, 0xce}], 0x1}, 0x48000}, {{&(0x7f0000004300)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000004900)=[{&(0x7f0000004380)=""/156, 0x9c}, {&(0x7f0000004440)=""/52, 0x34}, {&(0x7f0000004480)=""/41, 0x29}, {&(0x7f00000044c0)=""/204, 0xcc}, {&(0x7f00000045c0)=""/194, 0xc2}, {&(0x7f00000046c0)}, {&(0x7f0000004700)=""/16, 0x10}, {&(0x7f0000004740)=""/175, 0xaf}, {&(0x7f0000004800)=""/204, 0xcc}], 0x9}, 0x8}], 0x3, 0x2100, &(0x7f0000004a80)={0x77359400}) 6.104993557s ago: executing program 1 (id=973): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008850) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210040, &(0x7f00000008c0), 0xfc, 0x5ba, &(0x7f0000000280)="$eJzs3c9rG1ceAPDvyLLXibNrB0LY3cNiyGETspF/bdsUCkmPpQ0NtPdU2IoxlqNgySF2A00OzaW3UCilgdJrofceQ++lf0WgDYQSTHsoBZeRR47jSP4VxZKjzwfGfk8z0ntfvXlPb2YkJoCeNZr+yUX8K2IwTQ5vWpePbOXo+narT25Np0sSa2sf/JpEkj3W2D7J/g9lmX9GxA+fRpzNPV9udXllvlgulxaz/Fht4fpYdXnl3NxCcbY0W7o2OTV1/rWpyTffeL1tsZ65/PuX7z945/xnp1a/+O7R8XtJXIxj2brNcbyA25szo8U/s1R/XNyy4UQbCusmSacrwL70Zf28P9IxYDj6Ih8/drpSwIH4JCLWgB6V6P/QoxrzgMaxfZuOgw+Nx2+vHwDVYx/YHH9+/dxIDNaPjY6uJtn5kHXp8e5IG8pPy/j+l/v30iW2Pw9xZIc8wJ7cvhMR4/n88+N/ko1/f9v3a4/XTx5vb3RLvtc+f6CTHqTzn/81m//lNuY/0WT+M9Sk7+7Hzv0/96gNxbSUzv/eajr/3Ri6Rvqy3N/rc77+5OpQuTQeEf+IiNMRcXWuXJoYXD+H3sz51YdrrcrfPP9Ll7T8xlwwq8ej/JYheKZYK0bEwIvGnnp8J+Lf+WbxJxvtnzRp//T9uLzLMk6W7v+n1bqd428uv8uyd7L2TcR/m7b/0ytayfbXJ8fS9h9f/9u0jN/unvypVfn7jb9d0vY/un38I8nm67XVvZfx9eAfpVbrWsU/uLFF8/1/IPmwnm50gpvFWm1xImIgee/5xyefPreRb2yfxn/61PbjX7P9Pz34+miX8d89cbflpt3Q/jN7av+tifSdaLEqSzx89+OvWpW/u/Hv//XU6eyRbPxrLttXtqnOM4kXff8AAAAAAACgm+Qi4lgkucJGOpcrFNa/33EijubKlWrt7NXK0rWZqP9WdiT6c40r3cON70PMlUsT2fdhG/nJLfmpiDgeEZ/3HannC9OV8kyngwcAAAAAAAAAAAAAAAAAAIAuMdTi9/+pn/s6XTvgpavf2GD/93kCDrEdb6bTjjs9AV2pXTfTAg6fZ/p/0rl6AAfP5z/0Lv0fetdu+n9b7jYOdB2f/9C79H/oXbvp/xcPoB4AAAAAAAAAAAAAAAAAAAAAAAAAAADwirh86VK6rK0+uTWd5mduLC/NV26cmylV5wsLS9OF6cri9cJspTJbLhWmKwsRMbzd65UrlesTk7F0c6xWqtbGqssrVxYqS9dqV+YWirOlK6X+A4sMAAAAAAAAAAAAAAAAAAAADo/q8sp8sVwuLb4SiW/zL+OVL0Sn43rJiQsRt9OdYV9Pz3dLFDslznRHNQ4+cSfr63t7VmfHJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY7K8AAAD//4aNMPc=") chdir(&(0x7f0000000240)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x200) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x200000a0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x801) r2 = io_uring_setup(0x56c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x9f69a7a086f70aee, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) statfs(&(0x7f0000000000)='./file1\x00', 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a0000140008006d6172766c616e310000000000000000050012"], 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 5.387876651s ago: executing program 1 (id=976): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x189d, 0x1a) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x4, 0x4) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}, 0xb393}], 0x1, 0x60, 0x0) r1 = socket(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001f00), 0xffffffffffffffff) sendmsg$AUDIT_GET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x3e8, 0x100, 0x70bd2a, 0x25dfdbfe, "", ["", ""]}, 0x10}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x4) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mmap(&(0x7f000007b000/0x4000)=nil, 0x4000, 0x0, 0x204031, 0xffffffffffffffff, 0xec776000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x4, 0x15, 0x0, 0x1, 0x400}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1902) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x80000000, 0xf, 0x6}, 0x1c) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40015) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.8080345s ago: executing program 1 (id=981): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x1e, 0x4, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000100001000100"/20, @ANYRES32=0x0, @ANYBLOB="0a0003000000000014001680100001800c00040002000000f3c8000008001b0000000000"], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x4020, &(0x7f0000000140)={[{@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x8, 0x509, &(0x7f0000000f40)="$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") r1 = creat(&(0x7f00000007c0)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x1b4) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0xc}, 0x9f50, 0x2, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, r5, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='\x04\x00\x00\x00\xb2 b\x00O\x03\x00') r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0xc0505350, &(0x7f0000000700)={{}, {0x78, 0x27}, 0x3, 0x0, 0x80}) ftruncate(r4, 0x6000000) fallocate(r3, 0x10, 0xbf5, 0x8) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000240)={0xc, r1, 0x100000000, 0x0, 0x2000a697, 0x3}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000180)=0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401b, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xc}, 0x10c0e8, 0x0, 0x0, 0x4, 0x8, 0xa858, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000000000}, r7, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82c0, 0x8) r8 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) rename(0x0, 0x0) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x80400, 0x0) r10 = syz_open_procfs(r7, &(0x7f0000000500)='status\x00') read$msr(r10, &(0x7f0000000d40)=""/43, 0x2b) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r9, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) dup3(r9, r8, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000000f40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xcbc2}}, {@jqfmt_vfsold}, {@nolazytime}, {@journal_path={'journal_path', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x2e}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}, {@delalloc}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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") 4.672740885s ago: executing program 5 (id=983): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) r1 = perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x10, 0x6, 0x9, 0xf7, 0x0, 0x7, 0x4000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0xe437, 0x101}, 0x2413, 0x8, 0x6, 0x7, 0x8, 0x50, 0x10, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x7, 0x860c, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000100)}, 0x10a208, 0x0, 0x0, 0x1, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, r1, 0x2) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r2, r2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x218004, &(0x7f0000000280), 0x4, 0x56a, &(0x7f00000015c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x1d}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) syz_open_procfs(0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x63, 0xc0, 0xff, 0x8, 0x0, 0x9, 0x39285, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000440), 0x5}, 0x4020, 0x8000000006, 0x10002, 0x0, 0xffffffffffffbbfe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1c0000000000001}, 0x0, 0x6, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) write$selinux_validatetrans(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a626f7e745f743a73300002000074656d5f753a6f626a6563745f723a64656661756c745f743a7330203030303030303030303030303030303635353337202f7573722f7362696e2f637570732d62725b0abadb7546243f6cd11102977d06c482675a5649dd0499858c141f63f396df2a93ddcc46e262c0728a6165f3693699558f35db0ceb3d583937d3e068f88153be7362432cbc1e27f13d524420eb4b366310818ea0ca5ae68c"], 0x67) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0xb, 0x10b}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x29, 0x0, 0x7fff0000}]}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.622761046s ago: executing program 1 (id=985): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) capset(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 4.098700373s ago: executing program 5 (id=989): close(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001c00010400fd00000000000002000000", @ANYRES32=r4, @ANYBLOB="000014000a000100aaaaaaaeaaaa000008000f00010000003e11859a3351e595fc"], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 3.582857771s ago: executing program 0 (id=993): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_config_ext={0x4, 0x7832}, 0x4, 0x0, 0x10004, 0x3, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) munlock(&(0x7f0000ff1000/0xf000)=nil, 0xf000) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@getnexthop={0x54, 0x6a, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NHA_ID={0x8}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f00000001c0)={0x10, {{0x29, 0x0, 0x4000000, @loopback}}}, 0x88) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) r2 = epoll_create1(0x80000) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0xfffffffd, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x30000019}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x380, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x300, 0x0, 0x2, 0x1, 'syz0\x00', 0x3}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) 3.570605421s ago: executing program 4 (id=994): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000000106010100000000000000000a00000005000100070000000500010007000000050001000777dbb40179"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x1) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(r1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000400)={'vcan0\x00', 0x200}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000580)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/91, 0x5b, 0x1, &(0x7f00000004c0)=""/149, 0x95}, &(0x7f0000000680)=0x40) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x78, 0x24, 0x2, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r8, {0xfff2, 0xc}, {0xffff, 0xfff3}, {0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x400, 0x5, 0x4, 0x10000, 0xe57}, 0x9, 0x0, 0x8a40, 0x7fff, 0x169, 0x11, 0x4, 0xb, 0x5, 0x11, {0x10, 0x7fffffff, 0x3, 0x5ed, 0x0, 0xc}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newtfilter={0x34, 0x2c, 0x20, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xd, 0xc}, {0xfffb, 0xd}, {0xa, 0xfff3}}, [@TCA_RATE={0x3, 0x5, {0xb, 0xfb}}, @TCA_RATE={0x6, 0x5, {0x6, 0x7b}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80d0}, 0x40004) connect$unix(0xffffffffffffffff, &(0x7f0000000800)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r10 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xd549b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0}, 0x11a0d, 0x0, 0x43a1bd76, 0x7a5d196834415bf4, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000780)={0x1, &(0x7f00000007c0)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r12, @in6={{0xa, 0x3, 0x4, @mcast1, 0x4}}}, &(0x7f0000000040)=0x84) 3.524470053s ago: executing program 5 (id=995): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x144, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x350759, 0x6eb0}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000100600000004d50200040014000d"], 0x3c}}, 0x0) 3.453857155s ago: executing program 5 (id=996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x2, @perf_bp={0x0, 0x9}, 0x2002, 0x20000032, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) syz_emit_ethernet(0x72, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x1, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000010500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000c00) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000002800)=ANY=[@ANYBLOB="7f454c464a03011301000000000000000200030004000000e301000038000000d600000097700000fe032000010007000c0007000000000003"], 0xa58) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20d6, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) mknodat(0xffffffffffffff9c, &(0x7f0000000880)='./file7\x00', 0x11c0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3.452411115s ago: executing program 0 (id=997): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) r6 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0xd, 0x0, 0x0, 0x4, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0, 0x7}, 0x102020, 0x400000, 0x0, 0x0, 0x24, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) mlockall(0x2) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(0x0, 0xc) unlink(&(0x7f0000000100)='./file0/file1\x00') r8 = io_uring_setup(0xad5, &(0x7f00000003c0)={0x0, 0xc45e, 0x8, 0x0, 0xffc}) close(r8) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) pipe2(0x0, 0x80000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) 1.781591681s ago: executing program 1 (id=999): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000200)="2e9b5b00ace03dd65193dfb6c561963d86dd606706000000060000000000449c34dcf74b5c85cd6d59f50028f5a81543b0c1", 0x32}, {&(0x7f0000000040)="a12600000000", 0x6}, {&(0x7f0000000680)="37bc", 0x2}], 0x3) 1.323877266s ago: executing program 5 (id=1000): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xf0ffffff, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x0, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 1.253686218s ago: executing program 5 (id=1001): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000002c0)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x76, 0x1, &(0x7f0000000000)=0x1) 1.252831488s ago: executing program 0 (id=1002): r0 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.empty_time\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x3, 0xb9, 0x0, 0x0, 0x6, 0x8, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x5, 0x63f6c4cf}, 0x8800, 0x4, 0x3, 0x5, 0x5, 0x7, 0x2, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="180800040006000000000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000018000000003b810000850000006d000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) 1.252252478s ago: executing program 4 (id=1003): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @initr0, @exit, @alu={0x4, 0x0, 0xc, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) 1.20382719s ago: executing program 3 (id=1005): r0 = socket$inet_udp(0x2, 0x2, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000527000/0x2000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 1.20022905s ago: executing program 4 (id=1006): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x2000000, &(0x7f0000000300)='.\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.178738101s ago: executing program 4 (id=1007): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'netdevsim0\x00', 0x20}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x9, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_bpf={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="02", 0x33fe0}], 0x1}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)='\"', 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r4, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = fsopen(&(0x7f0000000080)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='[\x00', 0xfffffffffffffffd, 0x0) bind$can_raw(r2, &(0x7f00000001c0), 0x10) readv(r2, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000007c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0300000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETLINK(r0, 0x400454cd, 0xf) 1.169471261s ago: executing program 1 (id=1008): r0 = syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x40000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0xa3010, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r1) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002200000429bd7000fddbdf250a20f3048000000212000100"], 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x10) ioctl$TUNGETVNETLE(r3, 0x800454dd, &(0x7f00000004c0)) ioctl$SG_BLKTRACESTART(r3, 0x1274, 0x0) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x8000000000000001, 0x288002) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001200010004000000000000000a030000fffc4e2202000003080000000000003800000001000000000000000000000000c129f2fb9d44d3fadbd5b73deb85165100000000", @ANYRES32=0x0, @ANYBLOB="01000000ffffff7f00000000000000000800030011"], 0x54}}, 0x200040c4) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000500)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x47e, &(0x7f0000000640)="$eJzs3MtvG8UfAPDv2kn66+uXUMqjpYXQUlHxSJr0QQ9cikDiABISHIo4hSStSt0GNUGiVQUth3JElbgjuCHxF3ChXBBwQuKEBBJHhFShXlo4Ga29a1zHTpzEsQP+fKRNZjKzmvnu7tjjWW8C6Fuj6Y8kYltE/BwRw9Xs3RVGq7/u3Lo8/eety9NJlMuv/pFU6t2+dXk6r5rvt7WaKZeXaPfaGxFTpdLshSw/vnDu7fH5i5eePnNu6vTs6dnzk8ePHzm8d+jY5NGOxJnGdXv3e3N7dr34+vWXp09ef/O7L9L+bsvK6+PolNHq0W3qQKcb67HtdelkoIcdYUWKEZGersHK+B+OYmyulQ3HCx/0tHPAuiqXC+VNrYuvlIH/sHSiDvSj/I0+/fybb12aemwIN09EbR3jTrZVSwaikNUZzD4jrYfRiDh55a9P0i3WaR0CAKDejRMR8VSz+V8h7q+r9//sHspIRNwTETsi4t6I2BkR90VU6j4QEQ+usP3GOySL5z/l4VUF1qZ0/vdsdm/r7vlfPvuLkWKW216JfzA5daY0eyg7JgdjcFOan1iija+f//GjVmX18790S9vP54JZP34faFigm5lamFpLzPVuXo3YPdAs/qQ2503nx7siYvcq2zjzxOd7WpWNLBv/EjowKS9/GvF49fxfiYb4c0nL+5MTzxybPDr+vyjNHhrPr4rFvv/h2iut2l98/g98FtFm/B1w80Y5tjRc/w2HdSQZylKl0uyF+RU28FPEtV8+bPmZZrXX/1DyWiWdd+3dqYWFCxMRQ8lLi/8++c++eT6vn17/B/fX4k+ibvzvyPZJz/9DEZFexHsj4uGIeCTr+6MRsS8i9i9xCL597rG3Vh7/EqvyHZTGP9P09a92/Y+kqfmLl85W7tevIlE8+82XK48/tSU7/0cquYPZPu28/rXbwbUePwAAAPg3KFS+A58UxmrpQmFsrPod/p2xpVCam1948tTcO+dnqt+VH4nBQr7SNVy3HjqRreXl+cmG/OFs3fjj4uZKfmx6rjTT6+Chz21tMf5TvxWrv3/taQ+BdeV5Lehfxj/0L+Mf+pfxD/3L+If+1Wz8v9+DfgDdt8z7/+Zu9QPoPvN/6F/GP/Sv5cb/vu48iwx0V8tn4wtreuRfokeJr4bW9r8a2k9EYYOEvEETxTbqXM1GYfUvg9G08kDb/8zirkT+pr585U1Ni3r4ogQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBBfwcAAP//7+7Zrg==") fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) 1.119904463s ago: executing program 3 (id=1009): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2022, 0x36, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = accept4$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000300)=0x1c, 0x800) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000340)={@private1}, 0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r3, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup=r3, 0x35, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r4 = mq_open(&(0x7f0000000640)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\x97\xf5\x89~\x03\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xe4\x926\xb5a0\xa0B\xae||\x1e\xe7^\x8f@\x19I;\xd9ZOE\xcd\xb7T\xd8 %\x9c\xdb3\b\xba,z\x03\xe00\xd8\xcb\xd0\t\xb3[Q+\xb9\xbc\x85\x10\xd6\xa8<\xdecGG\xb0\vXc\xfb\xc8:=O\xf8/;2\xe0\xa2+\xaa\"\xfd\xfe\xb1\xcd\v$\xed\xef\x8eS\x89\x1d\xba\x12\xe7+\xc1\x82\x9b|\x9f\x04_V\xfc=rZA-`1\xc3D\xf7\xad\"\xc6\xeb\rzb\x8f\xe1\f\x8f\x1c\xb4\x15\xfd\x01B{\x1c?i1\x9f\xc3tu@\xeb:ml\x8fP\x8f\xd2\xb5\xfd^\xe1\xb6\x9d\xd4\xb7y\x17\x06(', 0x41, 0x2, 0x0) mq_timedreceive(r4, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 1.119256983s ago: executing program 0 (id=1010): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x14, &(0x7f0000000040), 0x3b) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0xa, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x8, 0x4}, {0x4}}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x80, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000000040)) write$binfmt_script(r4, &(0x7f0000000100)={'#! ', './file0'}, 0xb) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r7, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x6f}, @void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_IFTYPE={0x8}]}, 0x2c}}, 0x1) close(r4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x223, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000002440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000550001000000000000f9000007008201", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x9, 0x6}, 0x10c0e8, 0x4, 0x7, 0x4, 0x806, 0x5, 0x7ffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r10, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080"], 0x24}}, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 935.961929ms ago: executing program 4 (id=1011): openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002bbd70611b70a500"/22], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x840) set_mempolicy(0x3, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) writev(r4, &(0x7f0000001580)=[{&(0x7f0000012380)="580000001500add427323b470c47b456000000a8002000eaa57b00097380020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c600"/88, 0x58}, {&(0x7f0000000000)="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", 0xfb}, {&(0x7f0000000580)="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", 0x1000}], 0x10000000000003cc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r5) syz_emit_ethernet(0x46, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x809, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x2, 0x4, 0xfffffffd}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000380)={0x8, 0x3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x298, 0x130, 0x0, 0x0, 0x130, 0x0, 0x200, 0x1f0, 0x1f0, 0x200, 0x1f0, 0x3, 0x0, {[{{@ip={@multicast1, @empty, 0xff, 0xff, 'macvlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}, {0x2000000}}, @common=@inet=@multiport={{0x50}, {0x2, 0x3, [0x4e24, 0x0, 0x4e24, 0x0, 0x0, 0x4e20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x0, 0xfd, 0x20, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x4, 0x7}, {0x3, 0x2, 0x1}, {0x1, 0x5}, 0x10001, 0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x8, 0xd, [0x2b, 0x10, 0x26, 0x19, 0x2c, 0x8, 0xe, 0xd, 0x8, 0xc, 0xa, 0x5, 0xc81f, 0xd, 0x39, 0x18], 0x0, 0x8, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f8) 918.928419ms ago: executing program 3 (id=1012): sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x24000052) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0) writev(0xffffffffffffffff, &(0x7f0000001600)=[{0x0}, {0x0}], 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000140)={0x2000}) mq_notify(r1, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000780)='..SN\xd5\xa8\xe7\x13\x9d\x11\x85\xb2\xda\xda%\x00\xe9\a\xd9\x12s\x03\x00\xd0O\x87\x8fI\xa5\xbbHd\xfd\x19l\xca\x89\x8e)P\x18\x14\'\x81\n\x02\\\xca\f\xc30p{\x94\xd8wn>\btn\xc3\xfd\xca\x0f\xdb\xab\xae\x04\x0e*\xb4\x06@v\xfd\x86\x9d\xb7\x801\x80\x9a\xc0N,\x8d\x13\x11eJ\x10CQ\xb9ab\xf311\xf9\x03\xd5\xec\x9fa7S\x8b\xdan\xd9W#\x06&P)\x1ak~LB\xa4\f@\xff\xb2]\xddk\xa9\xbd}\xefp}\x90\xd0\xdb\xcc\xf9\xe8\":O\f\x98D\xf07\\F\b\xe2\x82\xfa\xe3L\xb5\x8d\xe3\x87\xa6v\x9a\xb6\xf4\x80\x85\";\xe5\xdf\xa2\xbd\xf9}\\\xbe?\x93|\xcbg\x1c~\xb6Y\xaa\xf3\xd6%\x89\xe4\x1b\xb6.f\x12\xe5\xabm \xb6\\\xb9T\fZma\xb9\xd7xzS\xd3\x8b\x02Qj\xf5\xb7X\xc6\b\x19.\xae\xdd\xa9\xd0\xf2\xdc\x1f\xf1z\v\xf9\xc3\xf0V5D&a\xf6^\x94\x19\xe0\b\xf0\xdcD{(\x1b\xf9|\xe9\xa1]\xdc\xe8\xb8\xdb\xd5<2\x96\'s\xe7\x84\x82\xea\xbb\xff\xb7\xb8%-?\x83\x9cwOe|\xb4\xef\xb6\xf4\xdf\xbf\x1e\xc6OSs\xc4_6H\xde\x9eN\x12\x9cH\x86\x824\xaf\x177\t:\xe3_w-\xbf\x1b\x14\xc7\x1d\xb4\x99\x1f\xadf\x9e\xc7X\x040\x9e^ \xc9m\x9ek\x86\t\x9f \xc8\xcf\xf5\x80(\xd9l\x91\xf7x\x7f\xaa\xd9\xd4nO\xa0\xa0M6\v.\xd8[\xc9\xa4` ') r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000195", @ANYRESDEC=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = inotify_init() openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) pselect6(0x81, &(0x7f0000000000)={0xa, 0x7ff, 0x14b, 0xffffffff, 0x8, 0xba4, 0xffffffffffffffff, 0xfffffffffffffff8}, 0x0, &(0x7f00000000c0)={0x6b40, 0x3, 0x0, 0x8, 0x1, 0x4000006, 0x8, 0x8080}, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) r12 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r12, &(0x7f0000000240)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xfffffcf1, @private1, 0x8001}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x42) shutdown(r12, 0x1) 679.925537ms ago: executing program 0 (id=1013): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8c1) r0 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0, 0x29}, 0x8}, 0x0) unshare(0x6a040000) syz_usb_disconnect(0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f00000005c0)={'nat\x00', 0x0, 0x0, 0x0, [0x800, 0x6, 0x3, 0x70, 0x5, 0x9]}, &(0x7f00000000c0)=0x78) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0xffffffffffffffff, 0x2, 0x4002) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8c1) (async) socket(0x11, 0xa, 0x0) (async) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) (async) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0, 0x29}, 0x8}, 0x0) (async) unshare(0x6a040000) (async) syz_usb_disconnect(0xffffffffffffffff) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f00000005c0)={'nat\x00', 0x0, 0x0, 0x0, [0x800, 0x6, 0x3, 0x70, 0x5, 0x9]}, &(0x7f00000000c0)=0x78) (async) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0xffffffffffffffff, 0x2, 0x4002) (async) 423.323596ms ago: executing program 3 (id=1014): syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x44000) getrlimit(0x7, &(0x7f0000000000)) 236.001802ms ago: executing program 3 (id=1015): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x2c, r2, 0x1, 0x0, 0x30000, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) 123.881486ms ago: executing program 3 (id=1016): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r1) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, 0x0, 0x4005) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r4}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r7, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=@ipv6_newaddrlabel={0x7c, 0x48, 0x800, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x18, 0x0, r7, 0xc0d}, [@IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_LABEL={0x8, 0x2, 0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x881) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0], 0x30}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000700"/20, @ANYRES32=0x0, @ANYBLOB="12090500010a0000140003007866726d300000000000000000000000040000080000c6d22715ba5b5fd1390ed6b059976dab9fb271c67fff516f9ca0bebeb23eb1ec31c9f6c4e96d729781ab7b497ac2fc0e290d41a12c702c4da49eb0fe92bec7644d2b"], 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r2, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 4.42984ms ago: executing program 0 (id=1017): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000001a0001002dbd7000000000008100800700000000080000000944c9ac7240e0c660bb0908d3bb858ac00fcb2a620490b8cc5ce7dd7f1e12dd7fb9d425eb50a3cc7aa5d27bac5ac0d7c7b4427d7f03469982ef18b1d08d399f6784327d17724cf513cadc4aab9a873521d36b11ba602aa7f2b411ad09baba33b397e8f6e2f5aaa8ae2f899a18fc64b1f333985f3981bc65cf6d2e24b2634effd2133a2bbb4bda5ddff8c20e5aaf50c44c69b3bf7c6c4a344144467db007d00143341355528dee214f84063416387f5de8442b5f626b541c4bde57e7336c670f1b5bdef3bff6dc84b894c4e4e35be08d36b358eb0c03a759ee2b5a2e45d5f6529c998d30a263564a14"], 0x1c}, 0x1, 0x0, 0x0, 0x20008014}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000007c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@noacl}, {@nouid32}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xa, 0xfc, 0x0, 0x1, 0x4041, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x3590, 0x0, 0x0, 0x1, 0x9, 0x0, 0x895}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0x4, 0x6c}, {@loopback, 0x4e23, 0x4, 0xcd, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x200000000000000) 0s ago: executing program 4 (id=1018): msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000001d40)=""/115) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r1 = epoll_create1(0x80000) write$binfmt_aout(r0, &(0x7f00000005c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x7, 0x41, 0x0, 0x83, "00000000000000000000ffff00"}) r2 = syz_open_pts(r0, 0x40) r3 = dup3(r2, r0, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000000)={0x80000001}) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000001800)={0x6, 0x4, 0x6, 0x763, 0x11, "3e53300da5b1523053a727c9fffffdfd00"}) kernel console output (not intermixed with test programs): 0916][ T4787] EXT4-fs (loop4): failed to open journal device unknown-block(0,3) -6 [ 69.069899][ T4800] vlan2: entered promiscuous mode [ 69.075179][ T4800] bridge0: entered promiscuous mode [ 69.307213][ T40] Bluetooth: hci0: Frame reassembly failed (-84) [ 69.336369][ T28] audit: type=1400 audit(1780520253.892:562): avc: denied { setopt } for pid=4828 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.949454][ T4873] loop4: detected capacity change from 0 to 512 [ 69.957715][ T4873] EXT4-fs: Ignoring removed bh option [ 69.969717][ T4873] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 69.979674][ T4873] EXT4-fs (loop4): 1 truncate cleaned up [ 69.986488][ T4873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.002456][ T4873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.315'. [ 70.014107][ T4873] netlink: 16 bytes leftover after parsing attributes in process `syz.4.315'. [ 70.073149][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.073501][ T28] audit: type=1400 audit(1780520254.632:563): avc: denied { setopt } for pid=4877 comm="syz.3.316" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.094009][ T4878] xt_hashlimit: size too large, truncated to 1048576 [ 70.304084][ T4899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.320'. [ 70.365355][ T4906] netlink: 76 bytes leftover after parsing attributes in process `syz.2.322'. [ 70.486280][ T4925] loop2: detected capacity change from 0 to 512 [ 70.502932][ T4925] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.323: bg 0: block 5: invalid block bitmap [ 70.513562][ T4927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.328'. [ 70.524672][ T4927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.328'. [ 70.534196][ T4927] netlink: 20 bytes leftover after parsing attributes in process `syz.0.328'. [ 70.540254][ T4925] loop2: lost filesystem error report for type 5 error -117 [ 70.548007][ T4925] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 70.555343][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 70.555362][ C0] EXT4-fs (loop2): initial error at time 1780520255: ext4_validate_block_bitmap:432 [ 70.555386][ C0] EXT4-fs (loop2): last error at time 1780520255: ext4_validate_block_bitmap:432 [ 70.604320][ T4925] loop2: lost filesystem error report for type 5 error -117 [ 70.604525][ T4925] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.323: invalid indirect mapped block 3 (level 2) [ 70.664800][ T4925] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 70.665005][ T4925] EXT4-fs (loop2): 2 truncates cleaned up [ 70.683991][ T4925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.720343][ T4925] FAULT_INJECTION: forcing a failure. [ 70.720343][ T4925] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 70.733898][ T4925] CPU: 1 UID: 0 PID: 4925 Comm: syz.2.323 Not tainted syzkaller #0 PREEMPT(lazy) [ 70.733924][ T4925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 70.733980][ T4925] Call Trace: [ 70.733987][ T4925] [ 70.733995][ T4925] __dump_stack+0x1d/0x30 [ 70.734057][ T4925] dump_stack_lvl+0x95/0xd0 [ 70.734073][ T4925] dump_stack+0x15/0x1b [ 70.734090][ T4925] should_fail_ex+0x263/0x280 [ 70.734111][ T4925] should_fail+0xb/0x20 [ 70.734128][ T4925] should_fail_usercopy+0x1a/0x20 [ 70.734202][ T4925] _copy_to_user+0x20/0xa0 [ 70.734227][ T4925] simple_read_from_buffer+0xb5/0x130 [ 70.734259][ T4925] proc_fail_nth_read+0x10e/0x150 [ 70.734287][ T4925] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 70.734351][ T4925] vfs_read+0x1ab/0x7f0 [ 70.734372][ T4925] ? ktime_get+0x212/0x240 [ 70.734398][ T4925] ? __rcu_read_unlock+0x4e/0x70 [ 70.734419][ T4925] ? __fget_files+0x184/0x1c0 [ 70.734458][ T4925] ? mutex_lock+0x57/0x90 [ 70.734563][ T4925] ksys_read+0xdc/0x1a0 [ 70.734588][ T4925] __x64_sys_read+0x40/0x50 [ 70.734609][ T4925] x64_sys_call+0x2886/0x3020 [ 70.734661][ T4925] do_syscall_64+0x12c/0x3b0 [ 70.734691][ T4925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.734754][ T4925] RIP: 0033:0x7f7c3f09d68e [ 70.734766][ T4925] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 70.734781][ T4925] RSP: 002b:00007f7c3db0dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.734802][ T4925] RAX: ffffffffffffffda RBX: 00007f7c3db0e6c0 RCX: 00007f7c3f09d68e [ 70.734816][ T4925] RDX: 000000000000000f RSI: 00007f7c3db0e0a0 RDI: 000000000000000b [ 70.734830][ T4925] RBP: 00007f7c3db0e090 R08: 0000000000000000 R09: 0000000000000000 [ 70.734867][ T4925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.734880][ T4925] R13: 00007f7c3f356128 R14: 00007f7c3f356090 R15: 00007ffe0ee781b8 [ 70.734899][ T4925] [ 71.003592][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.192056][ T4947] loop2: detected capacity change from 0 to 512 [ 71.199460][ T4947] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.219576][ T4947] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 71.227549][ T4947] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 71.235915][ T4947] System zones: 0-1, 15-15, 18-18, 34-34 [ 71.242251][ T4947] EXT4-fs (loop2): orphan cleanup on readonly fs [ 71.249035][ T4947] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 71.266105][ T4947] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 71.273227][ T4947] EXT4-fs (loop2): 1 truncate cleaned up [ 71.279753][ T4947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.314238][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.380132][ T3539] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 71.386306][ T4838] Bluetooth: hci0: command 0x1003 tx timeout [ 71.428581][ T4973] netlink: 32 bytes leftover after parsing attributes in process `syz.3.337'. [ 71.439908][ T4977] loop4: detected capacity change from 0 to 512 [ 71.446869][ T4977] EXT4-fs: Ignoring removed nobh option [ 71.469659][ T4977] ------------[ cut here ]------------ [ 71.475152][ T4977] EA inode 11 i_nlink=1026 [ 71.475178][ T4977] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.4.338/4977 [ 71.490276][ T4977] Modules linked in: [ 71.494177][ T4977] CPU: 0 UID: 0 PID: 4977 Comm: syz.4.338 Not tainted syzkaller #0 PREEMPT(lazy) [ 71.503424][ T4977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 71.513520][ T4977] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 71.520187][ T4977] Code: 94 52 98 ff 4c 8d 2d ad 5c 5c 05 49 8d 7e 40 e8 74 15 b6 ff 49 8b 6e 40 4c 89 e7 e8 a8 10 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 ef 85 d8 03 66 66 66 66 66 66 2e [ 71.528411][ T4981] tipc: Started in network mode [ 71.539838][ T4977] RSP: 0018:ffffc900123d7778 EFLAGS: 00010246 [ 71.539862][ T4977] RAX: ffff888103726000 RBX: ffff8881005b2698 RCX: ffffffff81c0e158 [ 71.539876][ T4977] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871d3df0 [ 71.539918][ T4977] RBP: 000000000000000b R08: 00018881005b264b R09: 0000000000000000 [ 71.539930][ T4977] R10: ffffc900123d76a8 R11: 0001c900123d76a8 R12: ffff8881005b2648 [ 71.539945][ T4977] R13: ffffffff871d3df0 R14: ffff8881005b2600 R15: 0000000000000001 [ 71.539960][ T4977] FS: 00007fb8d786f6c0(0000) GS:ffff8882ae8f4000(0000) knlGS:0000000000000000 [ 71.540012][ T4977] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.540026][ T4977] CR2: 0000000000000000 CR3: 000000011c3d2000 CR4: 00000000003506f0 [ 71.540044][ T4977] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.540058][ T4977] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 71.540073][ T4977] Call Trace: [ 71.540080][ T4977] [ 71.540115][ T4977] ext4_xattr_inode_dec_ref_all+0x57c/0x8b0 [ 71.540199][ T4977] ? errseq_check+0x2c/0x50 [ 71.620367][ T4981] tipc: Node identity ac1414aa, cluster identity 4711 [ 71.622590][ T4977] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 71.622690][ T4977] ? ext4_truncate+0x89f/0xa10 [ 71.635571][ T4981] tipc: Enabled bearer , priority 10 [ 71.636953][ T4977] ext4_evict_inode+0xb16/0xe30 [ 71.675767][ T4977] ? __pfx_ext4_evict_inode+0x10/0x10 [ 71.681182][ T4977] evict+0x2af/0x510 [ 71.685180][ T4977] ? __dquot_initialize+0x146/0x7c0 [ 71.690459][ T4977] iput+0x41a/0x580 [ 71.694342][ T4977] ext4_process_orphan+0x1a9/0x1c0 [ 71.699602][ T4977] ext4_orphan_cleanup+0x69c/0x9f0 [ 71.704816][ T4977] ext4_fill_super+0x3408/0x37c0 [ 71.709854][ T4977] ? set_blocksize+0x14c/0x270 [ 71.714911][ T4977] ? setup_bdev_super+0x30e/0x370 [ 71.720003][ T4977] ? __pfx_ext4_fill_super+0x10/0x10 [ 71.725390][ T4977] get_tree_bdev_flags+0x291/0x300 [ 71.730514][ T4977] ? __pfx_ext4_fill_super+0x10/0x10 [ 71.735804][ T4977] get_tree_bdev+0x1f/0x30 [ 71.740240][ T4977] ext4_get_tree+0x1c/0x30 [ 71.744695][ T4977] vfs_get_tree+0x57/0x1d0 [ 71.749129][ T4977] do_new_mount+0x288/0x8d0 [ 71.753723][ T4977] path_mount+0x4d0/0xbc0 [ 71.758087][ T4977] __se_sys_mount+0x28c/0x2e0 [ 71.762857][ T4977] __x64_sys_mount+0x67/0x80 [ 71.767457][ T4977] x64_sys_call+0x2d61/0x3020 [ 71.772181][ T4977] do_syscall_64+0x12c/0x3b0 [ 71.776782][ T4977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.782778][ T4977] RIP: 0033:0x7fb8d8e1e0ca [ 71.787219][ T4977] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.806938][ T4977] RSP: 002b:00007fb8d786ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 71.815525][ T4977] RAX: ffffffffffffffda RBX: 00007fb8d786eee0 RCX: 00007fb8d8e1e0ca [ 71.823535][ T4977] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007fb8d786eea0 [ 71.831586][ T4977] RBP: 0000200000000180 R08: 00007fb8d786eee0 R09: 0000000000800718 [ 71.839643][ T4977] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 71.847666][ T4977] R13: 00007fb8d786eea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 71.855686][ T4977] [ 71.858722][ T4977] ---[ end trace 0000000000000000 ]--- [ 71.865510][ T4977] EXT4-fs (loop4): 1 orphan inode deleted [ 71.871698][ T4977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.055723][ T5011] random: crng reseeded on system resumption [ 72.078680][ T5012] random: crng reseeded on system resumption [ 72.113498][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.142716][ T5018] netlink: 20 bytes leftover after parsing attributes in process `syz.4.348'. [ 72.151812][ T5018] netlink: 20 bytes leftover after parsing attributes in process `syz.4.348'. [ 72.624406][ T5035] loop1: detected capacity change from 0 to 512 [ 72.672122][ T5035] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.351: corrupted inode contents [ 72.702864][ T5035] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 72.703938][ T5035] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #16: comm syz.1.351: mark_inode_dirty error [ 72.713277][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 72.713354][ C1] EXT4-fs (loop1): initial error at time 1780520257: ext4_do_update_inode:5690: inode 16 [ 72.713492][ C1] EXT4-fs (loop1): last error at time 1780520257: ext4_do_update_inode:5690: inode 16 [ 72.751049][ T3570] tipc: Node number set to 2886997162 [ 72.757286][ T5035] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 72.757642][ T5035] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.351: corrupted inode contents [ 72.778934][ T5035] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 72.781197][ T5035] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.351: mark_inode_dirty error [ 72.801766][ T5035] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 72.802083][ T5035] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.351: corrupted inode contents [ 72.823276][ T5035] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 72.823657][ T5035] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 72.842180][ T5035] loop1: lost filesystem error report for type 5 error -117 [ 72.842837][ T5035] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.351: corrupted inode contents [ 73.051257][ T5035] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 73.093554][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 73.093568][ T28] audit: type=1400 audit(1780520257.652:571): avc: denied { read } for pid=5062 comm="syz.4.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.808901][ T5035] EXT4-fs error (device loop1): ext4_truncate:4690: inode #16: comm syz.1.351: mark_inode_dirty error [ 73.821646][ T5035] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 73.822451][ T5035] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 74.112896][ T5035] loop1: lost filesystem error report for type 5 error -117 [ 74.113693][ T5035] EXT4-fs (loop1): 1 truncate cleaned up [ 74.144829][ T5035] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.152389][ T2293] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 74.168273][ T2293] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:8: Failed to release dquot type 1 [ 74.213403][ T5035] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.406048][ T5062] uprobe: syz.4.359:5062 failed to unregister, leaking uprobe [ 74.442847][ T5076] netlink: 'syz.0.360': attribute type 1 has an invalid length. [ 74.833442][ T5076] netlink: 'syz.0.360': attribute type 2 has an invalid length. [ 75.308959][ T5077] __nla_validate_parse: 2 callbacks suppressed [ 75.308973][ T5077] netlink: 20 bytes leftover after parsing attributes in process `syz.3.361'. [ 75.359811][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.889746][ T5100] netlink: 'syz.1.362': attribute type 2 has an invalid length. [ 75.973167][ T28] audit: type=1400 audit(1780520260.532:572): avc: denied { execute } for pid=5110 comm="syz.2.372" path="/67/memory.events" dev="tmpfs" ino=366 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.048438][ T5129] tipc: Started in network mode [ 76.056951][ T5129] tipc: Node identity 4, cluster identity 129 [ 76.063263][ T5129] tipc: Node number set to 4 [ 76.146797][ T5137] netlink: 'syz.1.377': attribute type 20 has an invalid length. [ 76.259805][ T5163] loop1: detected capacity change from 0 to 512 [ 76.347073][ T5165] netlink: 20 bytes leftover after parsing attributes in process `syz.0.378'. [ 76.827381][ T28] audit: type=1400 audit(1780520271.384:573): avc: denied { cpu } for pid=5182 comm="syz.4.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 76.866522][ T5183] loop4: detected capacity change from 0 to 128 [ 76.878529][ T5186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=5186 comm=syz.3.381 [ 76.905734][ T5178] tipc: Enabled bearer , priority 10 [ 76.939038][ T5183] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 76.964942][ T5183] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.001139][ T5183] ext2 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.091067][ T5195] netlink: 'syz.2.383': attribute type 11 has an invalid length. [ 77.125676][ T28] audit: type=1400 audit(1780520271.684:574): avc: denied { write } for pid=5182 comm="syz.4.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.189162][ T28] audit: type=1400 audit(1780520271.744:575): avc: denied { ioctl } for pid=5182 comm="syz.4.382" path="socket:[8781]" dev="sockfs" ino=8781 ioctlcmd=0x942a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.237252][ T5209] loop1: detected capacity change from 0 to 8192 [ 77.261836][ T5209] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.302116][ T28] audit: type=1400 audit(1780520271.864:576): avc: denied { mount } for pid=5214 comm="syz.0.388" name="/" dev="hugetlbfs" ino=9289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 77.493019][ T5213] loop2: detected capacity change from 0 to 512 [ 77.499875][ T3307] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.515550][ T28] audit: type=1400 audit(1780520271.864:577): avc: denied { watch watch_reads } for pid=5214 comm="syz.0.388" path="/" dev="hugetlbfs" ino=9289 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 77.560022][ T5213] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.567007][ T28] audit: type=1400 audit(1780520272.044:578): avc: denied { read write } for pid=5235 comm="syz.0.391" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 77.586709][ T5236] IPv6: sit1: Disabled Multicast RS [ 77.595759][ T5213] EXT4-fs (loop2): orphan cleanup on readonly fs [ 77.616068][ T28] audit: type=1400 audit(1780520272.044:579): avc: denied { open } for pid=5235 comm="syz.0.391" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 77.623190][ T5236] sit1: entered allmulticast mode [ 77.659237][ T5213] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 77.705662][ T5213] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.387: attempt to clear invalid blocks 2 len 1 [ 77.746588][ T5213] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 77.746920][ T5213] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, [ 77.756183][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 77.756201][ C0] EXT4-fs (loop2): initial error at time 1780520272: ext4_clear_blocks:876: inode 13 [ 77.756233][ C0] EXT4-fs (loop2): last error at time 1780520272: ext4_clear_blocks:876: inode 13 [ 77.790108][ T5213] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 77.839819][ T5213] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.387: invalid indirect mapped block 1819239214 (level 0) [ 77.861964][ T5280] netlink: 'syz.4.398': attribute type 39 has an invalid length. [ 77.877830][ T5213] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 77.899231][ T5213] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.387: invalid indirect mapped block 1819239214 (level 1) [ 77.954933][ T5282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.397'. [ 77.980718][ T5213] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 77.981949][ T5213] EXT4-fs (loop2): 1 truncate cleaned up [ 78.016793][ T5213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.787131][ T5286] loop1: detected capacity change from 0 to 1024 [ 78.865426][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.941476][ T5286] EXT4-fs: Ignoring removed orlov option [ 78.998400][ T5286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.018698][ T5308] kernel profiling enabled (shift: 17) [ 79.035335][ T5295] netlink: 16 bytes leftover after parsing attributes in process `syz.3.401'. [ 79.065103][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 79.065212][ T28] audit: type=1400 audit(1780520273.624:584): avc: denied { setattr } for pid=5284 comm="syz.1.399" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.127143][ T5315] netlink: 36 bytes leftover after parsing attributes in process `syz.4.405'. [ 79.136798][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.510984][ T5334] random: crng reseeded on system resumption [ 79.609350][ T5338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.404'. [ 79.664454][ T5340] FAULT_INJECTION: forcing a failure. [ 79.664454][ T5340] name failslab, interval 1, probability 0, space 0, times 0 [ 79.677671][ T5340] CPU: 1 UID: 0 PID: 5340 Comm: syz.0.410 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 79.677704][ T5340] Tainted: [W]=WARN [ 79.677711][ T5340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 79.677722][ T5340] Call Trace: [ 79.677727][ T5340] [ 79.677760][ T5340] __dump_stack+0x1d/0x30 [ 79.677784][ T5340] dump_stack_lvl+0x95/0xd0 [ 79.677828][ T5340] dump_stack+0x15/0x1b [ 79.677844][ T5340] should_fail_ex+0x263/0x280 [ 79.677861][ T5340] should_failslab+0x8c/0xb0 [ 79.677940][ T5340] __kvmalloc_node_noprof+0x155/0x640 [ 79.677963][ T5340] ? alloc_netdev_mqs+0x718/0xa70 [ 79.677991][ T5340] alloc_netdev_mqs+0x718/0xa70 [ 79.678012][ T5340] rtnl_create_link+0x239/0x720 [ 79.678076][ T5340] rtnl_newlink_create+0x174/0x650 [ 79.678093][ T5340] ? security_capable+0x7b/0x90 [ 79.678115][ T5340] ? netlink_ns_capable+0x86/0xa0 [ 79.678205][ T5340] rtnl_newlink+0x1185/0x1400 [ 79.678274][ T5340] ? __perf_event_task_sched_in+0xa65/0xad0 [ 79.678299][ T5340] ? __siphash_unaligned+0x197/0x2e0 [ 79.678397][ T5340] ? __memcg_slab_free_hook+0x10f/0x2c0 [ 79.678446][ T5340] ? __rcu_read_unlock+0x4e/0x70 [ 79.678464][ T5340] ? avc_has_perm_noaudit+0xab/0x130 [ 79.678531][ T5340] ? cred_has_capability+0x224/0x2a0 [ 79.678560][ T5340] ? selinux_capable+0x31/0x40 [ 79.678587][ T5340] ? security_capable+0x7b/0x90 [ 79.678611][ T5340] ? ns_capable+0x7c/0xb0 [ 79.678694][ T5340] ? __pfx_rtnl_newlink+0x10/0x10 [ 79.678796][ T5340] rtnetlink_rcv_msg+0x64b/0x720 [ 79.678875][ T5340] netlink_rcv_skb+0x123/0x220 [ 79.678899][ T5340] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 79.678927][ T5340] rtnetlink_rcv+0x1c/0x30 [ 79.679000][ T5340] netlink_unicast+0x5a8/0x680 [ 79.679037][ T5340] netlink_sendmsg+0x5c8/0x6f0 [ 79.679066][ T5340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.679095][ T5340] ____sys_sendmsg+0x563/0x5b0 [ 79.679164][ T5340] ___sys_sendmsg+0x195/0x1e0 [ 79.679204][ T5340] __sys_sendmmsg+0x185/0x320 [ 79.679311][ T5340] __x64_sys_sendmmsg+0x57/0x70 [ 79.679333][ T5340] x64_sys_call+0x27aa/0x3020 [ 79.679352][ T5340] do_syscall_64+0x12c/0x3b0 [ 79.679402][ T5340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.679474][ T5340] RIP: 0033:0x7f72ea29ce59 [ 79.679487][ T5340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.679500][ T5340] RSP: 002b:00007f72e8cf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 79.679573][ T5340] RAX: ffffffffffffffda RBX: 00007f72ea515fa0 RCX: 00007f72ea29ce59 [ 79.679605][ T5340] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000017 [ 79.679617][ T5340] RBP: 00007f72e8cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 79.679630][ T5340] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000002 [ 79.679644][ T5340] R13: 00007f72ea516038 R14: 00007f72ea515fa0 R15: 00007ffc377d6bd8 [ 79.679668][ T5340] [ 80.526144][ T5348] netlink: 192 bytes leftover after parsing attributes in process `syz.2.413'. [ 80.785421][ T5368] netlink: 20 bytes leftover after parsing attributes in process `syz.4.419'. [ 80.790373][ T28] audit: type=1400 audit(1780520275.344:585): avc: denied { listen } for pid=5355 comm="syz.0.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 80.846777][ T5370] loop3: detected capacity change from 0 to 512 [ 80.860171][ T28] audit: type=1400 audit(1780520275.384:586): avc: denied { write } for pid=5364 comm="syz.3.428" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 80.871853][ T5370] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 80.950515][ T28] audit: type=1400 audit(1780520275.504:587): avc: denied { map } for pid=5373 comm="syz.2.420" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 80.980963][ T5376] loop2: detected capacity change from 0 to 512 [ 80.996205][ T5376] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 81.010374][ T5370] EXT4-fs (loop3): 1 truncate cleaned up [ 81.031697][ T5370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.063847][ T5376] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 81.072727][ T5376] System zones: 1-12 [ 81.078410][ T5376] EXT4-fs (loop2): 1 truncate cleaned up [ 81.085805][ T5376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.086585][ T28] audit: type=1400 audit(1780520275.614:588): avc: denied { write } for pid=5364 comm="syz.3.428" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.121414][ T28] audit: type=1400 audit(1780520275.664:589): avc: denied { write } for pid=5373 comm="syz.2.420" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.164107][ T5392] random: crng reseeded on system resumption [ 81.198881][ T5396] ipt_ECN: cannot use operation on non-tcp rule [ 81.228975][ T5396] bond1 (unregistering): Released all slaves [ 81.324223][ T5432] loop1: detected capacity change from 0 to 512 [ 81.350555][ T5432] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 81.387534][ T5432] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 81.421759][ T5432] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.426: bg 0: block 248: padding at end of block bitmap is not set [ 81.445309][ T5432] loop1: lost filesystem error report for type 5 error -117 [ 81.447712][ T5432] Quota error (device loop1): write_blk: dquota write failed [ 81.455159][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 81.455189][ C1] EXT4-fs (loop1): last error at time 1780520276: ext4_validate_block_bitmap:441 [ 81.482004][ T5432] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 81.493234][ T5432] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.426: Failed to acquire dquot type 1 [ 81.505916][ T5432] loop1: lost filesystem error report for type 5 error -28 [ 81.560460][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.564049][ T28] audit: type=1400 audit(1780520276.124:590): avc: denied { connect } for pid=5479 comm="syz.4.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 81.610362][ T5480] x_tables: duplicate underflow at hook 1 [ 81.611276][ T5432] EXT4-fs (loop1): 1 truncate cleaned up [ 81.641694][ T5432] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 81.700769][ T28] audit: type=1400 audit(1780520276.264:591): avc: denied { setattr } for pid=5496 comm="syz.0.435" name="RAWv6" dev="sockfs" ino=8975 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.706005][ T5494] random: crng reseeded on system resumption [ 81.725333][ T5498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.426'. [ 82.200151][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 82.270961][ T5511] netlink: 16 bytes leftover after parsing attributes in process `syz.3.441'. [ 82.625011][ T5539] loop1: detected capacity change from 0 to 512 [ 82.692492][ T5539] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.444: bg 0: block 248: padding at end of block bitmap is not set [ 82.749475][ T5539] loop1: lost filesystem error report for type 5 error -117 [ 82.751140][ T5539] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.444: Failed to acquire dquot type 1 [ 82.769592][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 82.769613][ C0] EXT4-fs (loop1): last error at time 1780520277: ext4_validate_block_bitmap:441 [ 82.893544][ T5539] loop1: lost filesystem error report for type 5 error -117 [ 82.894100][ T5539] EXT4-fs (loop1): 1 truncate cleaned up [ 82.949737][ T5539] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.001798][ T5539] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.045243][ T5539] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.298124][ T5565] random: crng reseeded on system resumption [ 83.494958][ T5580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.456'. [ 83.518876][ T5580] netlink: 24 bytes leftover after parsing attributes in process `syz.0.456'. [ 83.527868][ T5580] netlink: 16 bytes leftover after parsing attributes in process `syz.0.456'. [ 83.540546][ T5580] netlink: 24 bytes leftover after parsing attributes in process `syz.0.456'. [ 83.550590][ T5580] netlink: 16 bytes leftover after parsing attributes in process `syz.0.456'. [ 83.593331][ T5588] netlink: 52 bytes leftover after parsing attributes in process `syz.1.458'. [ 83.605364][ T5586] netlink: 'syz.0.459': attribute type 2 has an invalid length. [ 83.634073][ T5588] loop1: detected capacity change from 0 to 512 [ 83.664000][ T5588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.695575][ T5588] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.739016][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.757062][ T5601] netlink: 'syz.2.462': attribute type 21 has an invalid length. [ 83.825022][ T5613] random: crng reseeded on system resumption [ 83.901130][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.135497][ T5662] ipip0: entered promiscuous mode [ 84.530400][ T5688] random: crng reseeded on system resumption [ 84.781268][ T5697] loop2: detected capacity change from 0 to 512 [ 84.984463][ T5716] loop4: detected capacity change from 0 to 512 [ 85.011708][ T5716] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.482: Parent and EA inode have the same ino 15 [ 85.028610][ T5716] loop4: lost filesystem error report for type 5 error -117 [ 85.028725][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 85.042466][ C0] EXT4-fs (loop4): initial error at time 1780520279: ext4_xattr_inode_iget:437 [ 85.051424][ C0] EXT4-fs (loop4): last error at time 1780520279: ext4_xattr_inode_iget:437 [ 85.060668][ T5716] EXT4-fs (loop4): Remounting filesystem read-only [ 85.067258][ T5716] EXT4-fs (loop4): 1 orphan inode deleted [ 85.079280][ T5716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.095198][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 85.095209][ T28] audit: type=1326 audit(1780520279.654:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.4.482" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d8e1ce59 code=0x7ffc0000 [ 85.129233][ T28] audit: type=1326 audit(1780520279.684:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.4.482" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d8e1ce59 code=0x7ffc0000 [ 85.154661][ T28] audit: type=1326 audit(1780520279.684:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.4.482" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d8e1ce59 code=0x7ffc0000 [ 85.180006][ T28] audit: type=1326 audit(1780520279.684:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.4.482" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d8e1ce59 code=0x7ffc0000 [ 85.205889][ T28] audit: type=1326 audit(1780520279.694:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.4.482" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fb8d8e1ce59 code=0x7ffc0000 [ 85.232324][ T28] audit: type=1326 audit(1780520279.694:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.4.482" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d8e1ce59 code=0x7ffc0000 [ 85.258325][ T28] audit: type=1326 audit(1780520279.694:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.4.482" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d8e1ce59 code=0x7ffc0000 [ 85.283788][ T28] audit: type=1326 audit(1780520279.694:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.4.482" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d8e1ce59 code=0x7ffc0000 [ 85.319968][ T28] audit: type=1326 audit(1780520279.694:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.4.482" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d8e1ce59 code=0x7ffc0000 [ 85.346675][ T28] audit: type=1326 audit(1780520279.694:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.4.482" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb8d8ddd68e code=0x7ffc0000 [ 85.389512][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.426687][ T5739] netlink: 'syz.1.486': attribute type 46 has an invalid length. [ 85.446126][ T5739] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.455236][ T5739] bond1: entered allmulticast mode [ 85.461418][ T5739] team0: Port device bond1 added [ 85.540635][ T5777] random: crng reseeded on system resumption [ 85.793696][ T5788] loop4: detected capacity change from 0 to 2048 [ 86.599949][ T5794] __nla_validate_parse: 16 callbacks suppressed [ 86.600073][ T5794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.489'. [ 86.616034][ T5794] netlink: 48 bytes leftover after parsing attributes in process `syz.4.489'. [ 86.738558][ T5788] loop4: p1 p4 [ 86.749306][ T5788] loop4: p4 size 589824 extends beyond EOD, truncated [ 86.903991][ T5801] netlink: 52 bytes leftover after parsing attributes in process `syz.3.493'. [ 86.932868][ T5808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.504'. [ 86.973936][ T5808] netlink: 'syz.1.504': attribute type 20 has an invalid length. [ 87.006532][ T5808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.504'. [ 87.054452][ T5811] netlink: 16 bytes leftover after parsing attributes in process `syz.2.494'. [ 87.156012][ T5834] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 87.162558][ T5834] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 87.191488][ T5842] capability: warning: `syz.2.500' uses deprecated v2 capabilities in a way that may be insecure [ 87.227537][ T5834] vhci_hcd vhci_hcd.0: Device attached [ 87.236810][ T5830] netlink: 16 bytes leftover after parsing attributes in process `syz.1.497'. [ 87.258235][ T5843] vhci_hcd vhci_hcd.0: port 0 already used [ 87.300645][ T5835] vhci_hcd: connection closed [ 87.300881][ T40] vhci_hcd vhci_hcd.0: stop threads [ 87.326035][ T40] vhci_hcd vhci_hcd.0: release socket [ 87.342758][ T40] vhci_hcd vhci_hcd.0: disconnect device [ 87.853639][ T5891] netlink: 52 bytes leftover after parsing attributes in process `syz.4.507'. [ 88.099090][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.512'. [ 88.110735][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.512'. [ 88.191278][ T5939] loop2: detected capacity change from 0 to 512 [ 88.206510][ T5939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.401670][ T5961] loop1: detected capacity change from 0 to 512 [ 88.434684][ T5961] EXT4-fs: Ignoring removed bh option [ 88.492650][ T5961] EXT4-fs: inline encryption not supported [ 88.549262][ T5961] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 88.621445][ T5961] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 88.683336][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.818312][ T5961] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.521: bg 0: block 248: padding at end of block bitmap is not set [ 88.886508][ T5961] loop1: lost filesystem error report for type 5 error -117 [ 88.886789][ T5961] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.521: Failed to acquire dquot type 1 [ 88.894214][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 88.894249][ C0] EXT4-fs (loop1): last error at time 1780520283: ext4_validate_block_bitmap:441 [ 88.990306][ T5961] loop1: lost filesystem error report for type 5 error -28 [ 89.001570][ T30] kworker/u8:1 invoked oom-killer: gfp_mask=0x100c0a(GFP_NOIO|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_HARDWALL), order=0, oom_score_adj=0 [ 89.061980][ T30] CPU: 0 UID: 0 PID: 30 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 89.062011][ T30] Tainted: [W]=WARN [ 89.062017][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 89.062031][ T30] Workqueue: loop1 loop_rootcg_workfn [ 89.062104][ T30] Call Trace: [ 89.062110][ T30] [ 89.062119][ T30] __dump_stack+0x1d/0x30 [ 89.062138][ T30] dump_stack_lvl+0x95/0xd0 [ 89.062202][ T30] dump_stack+0x15/0x1b [ 89.062219][ T30] dump_header+0x80/0x240 [ 89.062290][ T30] oom_kill_process+0x295/0x350 [ 89.062317][ T30] out_of_memory+0x97d/0xb80 [ 89.062419][ T30] try_charge_memcg+0x62f/0xa10 [ 89.062448][ T30] charge_memcg+0x6d/0x120 [ 89.062505][ T30] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 89.062535][ T30] __swap_cache_prepare_and_add+0x69/0x4a0 [ 89.062558][ T30] ? alloc_pages_mpol+0x217/0x260 [ 89.062581][ T30] swap_cache_alloc_folio+0xa2/0x120 [ 89.062640][ T30] swap_cluster_readahead+0x25f/0x3c0 [ 89.062666][ T30] shmem_swapin_folio+0x933/0x1370 [ 89.062719][ T30] ? __rcu_read_unlock+0x4e/0x70 [ 89.062737][ T30] ? filemap_get_entry+0x292/0x2d0 [ 89.062765][ T30] shmem_get_folio_gfp+0x278/0xd60 [ 89.062781][ T30] ? __rb_insert_augmented+0x76/0x2c0 [ 89.062829][ T30] shmem_write_begin+0xfc/0x1f0 [ 89.062848][ T30] generic_perform_write+0x183/0x490 [ 89.062939][ T30] ? current_time+0x188/0x240 [ 89.062962][ T30] shmem_file_write_iter+0xc5/0xf0 [ 89.063049][ T30] lo_rw_aio+0x67d/0x730 [ 89.063070][ T30] loop_process_work+0x56c/0xac0 [ 89.063099][ T30] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 89.063118][ T30] ? hrtimer_start_range_ns+0x58c/0x10a0 [ 89.063203][ T30] ? pwq_dec_nr_in_flight+0x65c/0x760 [ 89.063229][ T30] loop_rootcg_workfn+0x22/0x30 [ 89.063255][ T30] process_scheduled_works+0x4f0/0x9c0 [ 89.063282][ T30] worker_thread+0x58a/0x780 [ 89.063308][ T30] ? __pfx_worker_thread+0x10/0x10 [ 89.063338][ T30] kthread+0x22a/0x280 [ 89.063353][ T30] ? __pfx_kthread+0x10/0x10 [ 89.063446][ T30] ret_from_fork+0x146/0x330 [ 89.063594][ T30] ? __pfx_kthread+0x10/0x10 [ 89.063609][ T30] ret_from_fork_asm+0x1a/0x30 [ 89.063635][ T30] [ 89.065138][ T30] memory: usage 289488kB, limit 307200kB, failcnt 365 [ 89.262420][ T6038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.271958][ T30] memory+swap: usage 307664kB, limit 9007199254740988kB, failcnt 0 [ 89.298784][ T6038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.316303][ T30] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 89.333036][ T6041] Cannot find add_set index 0 as target [ 89.710436][ T6041] loop4: detected capacity change from 0 to 256 [ 90.277332][ T30] Memory cgroup stats for /syz1: [ 90.277516][ T30] cache 40960 [ 90.285971][ T30] rss 0 [ 90.290343][ T30] shmem 0 [ 90.294715][ T30] mapped_file 0 [ 90.301926][ T28] kauditd_printk_skb: 739 callbacks suppressed [ 90.301945][ T28] audit: type=1400 audit(1780520283.884:1344): avc: denied { accept } for pid=6027 comm="syz.4.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 91.282453][ T30] dirty 4096 [ 91.289176][ T30] writeback 12288 [ 91.306350][ T30] workingset_refault_anon 56 [ 91.327892][ T30] workingset_refault_file 250 [ 92.291602][ T30] swap 475136 [ 92.297808][ T30] swapcached 704512 [ 92.318743][ T30] pgpgin 49610 [ 92.322229][ T30] pgpgout 49600 [ 92.325683][ T30] pgfault 58018 [ 92.329150][ T30] pgmajfault 30 [ 92.332667][ T30] inactive_anon 0 [ 92.336278][ T30] active_anon 0 [ 92.549205][ T30] inactive_file 40960 [ 92.553254][ T30] active_file 0 [ 92.556750][ T30] unevictable 0 [ 92.560497][ T30] hierarchical_memory_limit 314572800 [ 92.566350][ T30] hierarchical_memsw_limit 9223372036854771712 [ 92.572789][ T30] total_cache 40960 [ 92.576697][ T30] total_rss 0 [ 92.584956][ T30] total_shmem 0 [ 92.588608][ T30] total_mapped_file 0 [ 92.592860][ T30] total_dirty 4096 [ 92.602049][ T30] total_writeback 12288 [ 92.606431][ T30] total_workingset_refault_anon 56 [ 92.644338][ T30] total_workingset_refault_file 250 [ 92.676436][ T6047] pim6reg: entered allmulticast mode [ 92.694137][ T30] total_swap 475136 [ 92.709808][ T30] total_swapcached 704512 [ 92.717170][ T6047] pim6reg: left allmulticast mode [ 92.722982][ T6041] FAT-fs (loop4): Directory bread(block 64) failed [ 92.729532][ T6041] FAT-fs (loop4): Directory bread(block 65) failed [ 92.736244][ T6041] FAT-fs (loop4): Directory bread(block 66) failed [ 92.742780][ T6041] FAT-fs (loop4): Directory bread(block 67) failed [ 92.749345][ T6041] FAT-fs (loop4): Directory bread(block 68) failed [ 92.755848][ T6041] FAT-fs (loop4): Directory bread(block 69) failed [ 92.762410][ T6041] FAT-fs (loop4): Directory bread(block 70) failed [ 92.768972][ T6041] FAT-fs (loop4): Directory bread(block 71) failed [ 92.775479][ T6041] FAT-fs (loop4): Directory bread(block 72) failed [ 92.782017][ T6041] FAT-fs (loop4): Directory bread(block 73) failed [ 92.800532][ T30] total_pgpgin 49610 [ 92.817560][ T30] total_pgpgout 49600 [ 92.844127][ T30] total_pgfault 58018 [ 92.856917][ T6061] __nla_validate_parse: 39 callbacks suppressed [ 92.856982][ T6061] netlink: 36 bytes leftover after parsing attributes in process `syz.0.538'. [ 92.873451][ T30] total_pgmajfault 30 [ 92.883104][ T30] total_inactive_anon 0 [ 92.892780][ T30] total_active_anon 0 [ 92.901443][ T30] total_inactive_file 40960 [ 92.911164][ T30] total_active_file 0 [ 92.924174][ T30] total_unevictable 0 [ 92.935299][ T30] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.521,pid=5953,uid=0 [ 92.967959][ T30] Memory cgroup out of memory: Killed process 5961 (syz.1.521) total-vm:94300kB, anon-rss:1256kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 92.998889][ T6065] netlink: 16 bytes leftover after parsing attributes in process `syz.3.540'. [ 93.012816][ T5961] EXT4-fs (loop1): 1 truncate cleaned up [ 93.019248][ T5961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 93.062092][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 93.103857][ T28] audit: type=1400 audit(1780520287.664:1345): avc: denied { read } for pid=6073 comm="syz.3.542" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 93.409390][ T23] kernel read not supported for file /newroot/98 (pid: 23 comm: kworker/1:0) [ 93.418329][ T28] audit: type=1400 audit(1780520287.964:1346): avc: denied { mounton } for pid=6098 comm="syz.2.548" path="/98/file0" dev="tmpfs" ino=530 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 93.631772][ T6105] loop2: detected capacity change from 0 to 4096 [ 93.644821][ T6105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.658086][ T6105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.037610][ T28] audit: type=1400 audit(1780520288.594:1347): avc: denied { mount } for pid=6134 comm="syz.3.550" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 94.389337][ T6139] netlink: 16 bytes leftover after parsing attributes in process `syz.3.552'. [ 94.455831][ T6159] netlink: 36 bytes leftover after parsing attributes in process `syz.2.556'. [ 94.551534][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.559'. [ 94.633031][ T28] audit: type=1326 audit(1780520289.194:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6174 comm="syz.2.561" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c3f0dce59 code=0x0 [ 94.634411][ T6179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.562'. [ 94.706994][ T28] audit: type=1400 audit(1780520289.264:1349): avc: denied { read } for pid=6181 comm="syz.0.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 94.766405][ T6189] netlink: 104 bytes leftover after parsing attributes in process `syz.0.565'. [ 94.808948][ T6193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.566'. [ 94.835189][ T6193] netlink: 59 bytes leftover after parsing attributes in process `syz.1.566'. [ 94.906264][ T6199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.568'. [ 94.937640][ T6199] SET target dimension over the limit! [ 95.038055][ T6209] program syz.0.571 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.070876][ T6209] FAULT_INJECTION: forcing a failure. [ 95.070876][ T6209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.107713][ T6209] CPU: 1 UID: 0 PID: 6209 Comm: syz.0.571 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 95.107744][ T6209] Tainted: [W]=WARN [ 95.107751][ T6209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 95.107762][ T6209] Call Trace: [ 95.107767][ T6209] [ 95.107773][ T6209] __dump_stack+0x1d/0x30 [ 95.107857][ T6209] dump_stack_lvl+0x95/0xd0 [ 95.107873][ T6209] dump_stack+0x15/0x1b [ 95.107888][ T6209] should_fail_ex+0x263/0x280 [ 95.107906][ T6209] should_fail+0xb/0x20 [ 95.107924][ T6209] should_fail_usercopy+0x1a/0x20 [ 95.108024][ T6209] _copy_to_user+0x20/0xa0 [ 95.108092][ T6209] scsi_ioctl+0x161c/0x1750 [ 95.108119][ T6209] ? avc_has_perm_noaudit+0xab/0x130 [ 95.108149][ T6209] ? avc_has_perm+0x101/0x190 [ 95.108198][ T6209] ? __file_has_perm+0x3d9/0x430 [ 95.108222][ T6209] ? do_vfs_ioctl+0x84f/0xe70 [ 95.108246][ T6209] sg_ioctl+0xeb3/0x1340 [ 95.108265][ T6209] ? mutex_lock+0x57/0x90 [ 95.108330][ T6209] ? __pfx_sg_ioctl+0x10/0x10 [ 95.108347][ T6209] __se_sys_ioctl+0xce/0x140 [ 95.108375][ T6209] __x64_sys_ioctl+0x43/0x50 [ 95.108453][ T6209] x64_sys_call+0x1563/0x3020 [ 95.108525][ T6209] do_syscall_64+0x12c/0x3b0 [ 95.108554][ T6209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.108577][ T6209] RIP: 0033:0x7f72ea29ce59 [ 95.108595][ T6209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.108609][ T6209] RSP: 002b:00007f72e8cf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.108629][ T6209] RAX: ffffffffffffffda RBX: 00007f72ea515fa0 RCX: 00007f72ea29ce59 [ 95.108641][ T6209] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000004 [ 95.108651][ T6209] RBP: 00007f72e8cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 95.108661][ T6209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.108813][ T6209] R13: 00007f72ea516038 R14: 00007f72ea515fa0 R15: 00007ffc377d6bd8 [ 95.108833][ T6209] [ 95.494505][ T6219] loop1: detected capacity change from 0 to 512 [ 95.555878][ T6252] net_ratelimit: 1526 callbacks suppressed [ 95.555937][ T6252] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 95.637471][ T6259] FAULT_INJECTION: forcing a failure. [ 95.637471][ T6259] name failslab, interval 1, probability 0, space 0, times 0 [ 95.668782][ T6259] CPU: 1 UID: 0 PID: 6259 Comm: syz.2.578 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 95.668814][ T6259] Tainted: [W]=WARN [ 95.668844][ T6259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 95.668856][ T6259] Call Trace: [ 95.668907][ T6259] [ 95.668915][ T6259] __dump_stack+0x1d/0x30 [ 95.668942][ T6259] dump_stack_lvl+0x95/0xd0 [ 95.668962][ T6259] dump_stack+0x15/0x1b [ 95.669041][ T6259] should_fail_ex+0x263/0x280 [ 95.669062][ T6259] should_failslab+0x8c/0xb0 [ 95.669127][ T6259] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 95.669159][ T6259] ? __alloc_skb+0x2d6/0x690 [ 95.669245][ T6259] ? __rtnl_unlock+0x95/0xb0 [ 95.669266][ T6259] __alloc_skb+0x2d6/0x690 [ 95.669287][ T6259] ? __alloc_skb+0x200/0x690 [ 95.669307][ T6259] netlink_ack+0xfd/0x500 [ 95.669365][ T6259] netlink_rcv_skb+0x192/0x220 [ 95.669395][ T6259] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 95.669441][ T6259] rtnetlink_rcv+0x1c/0x30 [ 95.669468][ T6259] netlink_unicast+0x5a8/0x680 [ 95.669565][ T6259] netlink_sendmsg+0x5c8/0x6f0 [ 95.669594][ T6259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.669698][ T6259] ____sys_sendmsg+0x563/0x5b0 [ 95.669720][ T6259] ___sys_sendmsg+0x195/0x1e0 [ 95.669738][ T6259] ? path_openat+0x1b01/0x2050 [ 95.669772][ T6259] __sys_sendmmsg+0x185/0x320 [ 95.669841][ T6259] __x64_sys_sendmmsg+0x57/0x70 [ 95.669923][ T6259] x64_sys_call+0x27aa/0x3020 [ 95.669946][ T6259] do_syscall_64+0x12c/0x3b0 [ 95.670039][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.670061][ T6259] RIP: 0033:0x7f7c3f0dce59 [ 95.670132][ T6259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.670149][ T6259] RSP: 002b:00007f7c3db2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 95.670277][ T6259] RAX: ffffffffffffffda RBX: 00007f7c3f355fa0 RCX: 00007f7c3f0dce59 [ 95.670292][ T6259] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 95.670306][ T6259] RBP: 00007f7c3db2f090 R08: 0000000000000000 R09: 0000000000000000 [ 95.670343][ T6259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.670354][ T6259] R13: 00007f7c3f356038 R14: 00007f7c3f355fa0 R15: 00007ffe0ee781b8 [ 95.670373][ T6259] [ 97.864206][ T6302] __nla_validate_parse: 4 callbacks suppressed [ 97.864218][ T6302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.590'. [ 97.963923][ T6344] openvswitch: netlink: Missing key (keys=40, expected=80) [ 97.996041][ T6347] bridge0: port 1(syz_tun) entered blocking state [ 98.016277][ T6347] bridge0: port 1(syz_tun) entered disabled state [ 98.048205][ T6347] syz_tun: entered allmulticast mode [ 98.067341][ T6347] syz_tun: entered promiscuous mode [ 98.096801][ T6349] bridge1: entered promiscuous mode [ 98.178138][ T6352] netlink: 16 bytes leftover after parsing attributes in process `syz.3.596'. [ 98.320876][ T6370] netlink: 36 bytes leftover after parsing attributes in process `syz.3.600'. [ 98.361000][ T28] audit: type=1400 audit(1780520292.924:1350): avc: denied { write } for pid=6367 comm="syz.1.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 98.389182][ T6368] xfrm0 speed is unknown, defaulting to 1000 [ 98.397566][ T6368] xfrm0 speed is unknown, defaulting to 1000 [ 98.406002][ T6374] random: crng reseeded on system resumption [ 98.416306][ T6368] xfrm0 speed is unknown, defaulting to 1000 [ 98.529180][ T6384] netlink: 16 bytes leftover after parsing attributes in process `syz.0.604'. [ 98.535752][ T6368] infiniband syz0: set active [ 98.543063][ T4473] xfrm0 speed is unknown, defaulting to 1000 [ 98.549464][ T6368] infiniband syz0: added xfrm0 [ 98.555083][ T6390] loop2: detected capacity change from 0 to 512 [ 98.581317][ T6368] RDS/IB: syz0: added [ 98.588630][ T6368] smc: adding ib device syz0 with port count 1 [ 98.600916][ T6390] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.605: corrupted inode contents [ 98.604722][ T6368] smc: ib device syz0 port 1 has no pnetid [ 98.613673][ T6390] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 98.619291][ T6390] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #16: comm syz.2.605: mark_inode_dirty error [ 98.639826][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 98.639859][ C0] EXT4-fs (loop2): initial error at time 1780520293: ext4_do_update_inode:5690: inode 16 [ 98.639939][ C0] EXT4-fs (loop2): last error at time 1780520293: ext4_do_update_inode:5690: inode 16 [ 98.668821][ T6390] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 98.669132][ T6390] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.605: corrupted inode contents [ 98.696444][ T6368] xfrm0 speed is unknown, defaulting to 1000 [ 98.704337][ T4473] xfrm0 speed is unknown, defaulting to 1000 [ 98.717814][ T6390] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 98.718121][ T6390] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.605: mark_inode_dirty error [ 98.753139][ T6390] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 98.753490][ T6390] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.605: corrupted inode contents [ 98.778844][ T6390] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 98.779835][ T6390] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 98.797980][ T6390] loop2: lost filesystem error report for type 5 error -117 [ 98.799555][ T6390] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.605: corrupted inode contents [ 98.822879][ T6390] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 98.823138][ T6390] EXT4-fs error (device loop2): ext4_truncate:4690: inode #16: comm syz.2.605: mark_inode_dirty error [ 98.839664][ T6368] xfrm0 speed is unknown, defaulting to 1000 [ 98.846241][ T6390] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 98.849985][ T6390] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 98.890527][ T6390] loop2: lost filesystem error report for type 5 error -117 [ 98.891360][ T6390] EXT4-fs (loop2): 1 truncate cleaned up [ 98.920385][ T12] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 98.932982][ T6390] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.959224][ T12] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:0: Failed to release dquot type 1 [ 98.970800][ T6390] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.992292][ T6368] xfrm0 speed is unknown, defaulting to 1000 [ 99.009162][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.101649][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.615'. [ 99.206174][ T6418] xfrm0 speed is unknown, defaulting to 1000 [ 99.226924][ T6449] loop2: detected capacity change from 0 to 512 [ 99.235594][ T6449] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 99.257337][ T6449] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 99.367939][ T6451] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.434991][ T6368] xfrm0 speed is unknown, defaulting to 1000 [ 99.558779][ T6449] EXT4-fs (loop2): failed to open journal device unknown-block(0,3) -6 [ 100.080164][ T6497] batadv_slave_0: entered promiscuous mode [ 100.101664][ T6500] netlink: 'syz.4.624': attribute type 10 has an invalid length. [ 100.118625][ T6368] xfrm0 speed is unknown, defaulting to 1000 [ 100.125802][ T6500] team0: Device vxcan0 is up. Set it down before adding it as a team port [ 100.307337][ T6496] batadv_slave_0: left promiscuous mode [ 100.559724][ T6509] loop1: detected capacity change from 0 to 512 [ 101.170902][ T6509] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 101.213874][ T6509] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.625: invalid indirect mapped block 32768 (level 2) [ 101.230642][ T6509] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 101.237301][ T6509] EXT4-fs (loop1): 1 orphan inode deleted [ 101.246972][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 101.247099][ C0] EXT4-fs (loop1): initial error at time 1780520295: ext4_free_branches:1023: inode 16 [ 101.247339][ C0] EXT4-fs (loop1): last error at time 1780520295: ext4_free_branches:1023: inode 16 [ 101.280628][ T6509] EXT4-fs (loop1): 1 truncate cleaned up [ 101.287658][ T6509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.462230][ T6530] loop4: detected capacity change from 0 to 2048 [ 101.474469][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.502860][ T6530] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.538632][ T6546] loop1: detected capacity change from 0 to 512 [ 101.656884][ T6546] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 101.676114][ T6546] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349) [ 101.692768][ T6546] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec029, mo2=0002] [ 102.666103][ T6546] System zones: 1-12 [ 102.673903][ T6546] EXT4-fs (loop1): orphan cleanup on readonly fs [ 102.684316][ T28] audit: type=1400 audit(1780520296.324:1351): avc: denied { write } for pid=6529 comm="syz.4.630" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.712926][ T6546] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.634: Block bitmap for bg 0 marked uninitialized [ 102.753806][ T6546] loop1: lost filesystem error report for type 5 error -117 [ 102.754201][ T6546] EXT4-fs (loop1): Remounting filesystem read-only [ 102.761579][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 102.761593][ C1] EXT4-fs (loop1): initial error at time 1780520297: ext4_read_block_bitmap_nowait:517 [ 102.761611][ C1] EXT4-fs (loop1): last error at time 1780520297: ext4_read_block_bitmap_nowait:517 [ 102.855839][ T6559] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz1' [ 102.868336][ T28] audit: type=1400 audit(1780520297.414:1352): avc: denied { nlmsg_read } for pid=6556 comm="syz.3.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.932929][ T6546] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 102.988585][ T28] audit: type=1400 audit(1780520297.474:1353): avc: denied { ioctl } for pid=6557 comm="syz.0.636" path="socket:[11701]" dev="sockfs" ino=11701 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 103.032390][ T6546] EXT4-fs (loop1): 1 truncate cleaned up [ 103.064039][ T6546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.114738][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.456010][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.492447][ T28] audit: type=1400 audit(1780520298.054:1354): avc: denied { bind } for pid=6589 comm="syz.4.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.512675][ T6591] loop4: detected capacity change from 0 to 128 [ 103.519374][ T28] audit: type=1400 audit(1780520298.054:1355): avc: denied { name_bind } for pid=6589 comm="syz.4.644" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 103.549831][ T6586] xfrm0 speed is unknown, defaulting to 1000 [ 103.551111][ T6591] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.625814][ T6591] ext4 filesystem being mounted at /136/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.676976][ T6596] xfrm0 speed is unknown, defaulting to 1000 [ 103.687080][ T28] audit: type=1400 audit(1780520298.244:1356): avc: denied { write } for pid=6589 comm="syz.4.644" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 103.717680][ T6591] netlink: 44 bytes leftover after parsing attributes in process `syz.4.644'. [ 103.775099][ T6625] SET target dimension over the limit! [ 103.833221][ T6634] netlink: 14 bytes leftover after parsing attributes in process `syz.2.649'. [ 103.845383][ T6625] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 103.853459][ T6625] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 103.907979][ T3307] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.927098][ T6634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.957589][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.650'. [ 103.975481][ T6634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.989451][ T6634] bond0 (unregistering): Released all slaves [ 104.018797][ T3570] syz1: Port: 1 Link DOWN [ 104.032610][ T6654] netlink: 24 bytes leftover after parsing attributes in process `syz.4.650'. [ 104.046606][ T6647] loop2: detected capacity change from 0 to 8192 [ 104.121503][ T6625] netlink: 'syz.2.649': attribute type 5 has an invalid length. [ 104.179537][ T6670] random: crng reseeded on system resumption [ 104.266585][ T28] audit: type=1400 audit(1780520298.824:1357): avc: denied { setopt } for pid=6671 comm="syz.0.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 104.482275][ T28] audit: type=1400 audit(1780520299.044:1358): avc: denied { connect } for pid=6686 comm="syz.3.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.501864][ T28] audit: type=1400 audit(1780520299.044:1359): avc: denied { read } for pid=6686 comm="syz.3.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.535486][ T12] tipc: Subscription rejected, illegal request [ 104.576724][ T28] audit: type=1400 audit(1780520299.134:1360): avc: denied { listen } for pid=6686 comm="syz.3.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 104.599003][ T28] audit: type=1400 audit(1780520299.154:1361): avc: denied { create } for pid=6691 comm="syz.1.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 104.656362][ T6703] syzkaller0: entered promiscuous mode [ 104.663618][ T6703] syzkaller0: entered allmulticast mode [ 104.705052][ T6708] xfrm0 speed is unknown, defaulting to 1000 [ 104.929468][ T6754] macvtap0: entered promiscuous mode [ 104.935141][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.666'. [ 104.944792][ T6754] veth0_macvtap: left promiscuous mode [ 105.090318][ T6757] loop1: detected capacity change from 0 to 512 [ 105.132531][ T6757] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 105.249700][ T6757] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 105.260880][ T6757] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.663: bad orphan inode 4 [ 105.271761][ T6757] loop1: lost filesystem error report for type 5 error -117 [ 105.273184][ T6757] EXT4-fs (loop1): 1 orphan inode deleted [ 105.280874][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 105.280909][ C0] EXT4-fs (loop1): initial error at time 1780520299: ext4_orphan_get:1423 [ 105.281231][ C0] EXT4-fs (loop1): last error at time 1780520299: ext4_orphan_get:1423 [ 105.323265][ T6757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.953436][ T28] audit: type=1400 audit(1780520300.504:1362): avc: denied { mount } for pid=6774 comm="syz.4.669" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 106.183147][ T6791] ipvlan2: entered allmulticast mode [ 106.207587][ T6791] batadv0: entered allmulticast mode [ 106.232897][ T6791] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 106.343981][ T6760] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 106.476407][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.487972][ T6807] random: crng reseeded on system resumption [ 106.630250][ T6823] xfrm0 speed is unknown, defaulting to 1000 [ 106.792489][ T3362] IPVS: starting estimator thread 0... [ 106.898847][ T6851] IPVS: using max 2352 ests per chain, 117600 per kthread [ 107.421694][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.687'. [ 107.829875][ T6876] netlink: 16 bytes leftover after parsing attributes in process `syz.4.692'. [ 107.876163][ T6889] netlink: 'syz.3.695': attribute type 1 has an invalid length. [ 107.884091][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.695'. [ 108.117128][ T6899] FAULT_INJECTION: forcing a failure. [ 108.117128][ T6899] name failslab, interval 1, probability 0, space 0, times 0 [ 108.138964][ T6900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.696'. [ 108.154380][ T6899] CPU: 0 UID: 0 PID: 6899 Comm: syz.3.697 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 108.154410][ T6899] Tainted: [W]=WARN [ 108.154415][ T6899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 108.154427][ T6899] Call Trace: [ 108.154434][ T6899] [ 108.154509][ T6899] __dump_stack+0x1d/0x30 [ 108.154529][ T6899] dump_stack_lvl+0x95/0xd0 [ 108.154549][ T6899] dump_stack+0x15/0x1b [ 108.154564][ T6899] should_fail_ex+0x263/0x280 [ 108.154581][ T6899] should_failslab+0x8c/0xb0 [ 108.154631][ T6899] __kvmalloc_node_noprof+0x155/0x640 [ 108.154726][ T6899] ? snd_seq_pool_init+0x5b/0x200 [ 108.154751][ T6899] snd_seq_pool_init+0x5b/0x200 [ 108.154793][ T6899] snd_seq_fifo_resize+0x71/0x1a0 [ 108.154810][ T6899] snd_seq_ioctl_set_client_pool+0x24c/0x310 [ 108.154840][ T6899] snd_seq_ioctl+0x169/0x2d0 [ 108.154890][ T6899] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 108.154911][ T6899] __se_sys_ioctl+0xce/0x140 [ 108.154984][ T6899] __x64_sys_ioctl+0x43/0x50 [ 108.155008][ T6899] x64_sys_call+0x1563/0x3020 [ 108.155079][ T6899] do_syscall_64+0x12c/0x3b0 [ 108.155104][ T6899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.155230][ T6899] RIP: 0033:0x7f2985abce59 [ 108.155245][ T6899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.155262][ T6899] RSP: 002b:00007f2984517028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.155282][ T6899] RAX: ffffffffffffffda RBX: 00007f2985d35fa0 RCX: 00007f2985abce59 [ 108.155302][ T6899] RDX: 0000200000000180 RSI: 000000004058534c RDI: 0000000000000004 [ 108.155313][ T6899] RBP: 00007f2984517090 R08: 0000000000000000 R09: 0000000000000000 [ 108.155324][ T6899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.155334][ T6899] R13: 00007f2985d36038 R14: 00007f2985d35fa0 R15: 00007ffc123bc738 [ 108.155350][ T6899] [ 108.376892][ T6904] random: crng reseeded on system resumption [ 108.393095][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.699'. [ 108.536146][ T6923] loop1: detected capacity change from 0 to 4096 [ 108.548489][ T6926] xfrm0 speed is unknown, defaulting to 1000 [ 108.554846][ T6923] EXT4-fs: inline encryption not supported [ 108.579447][ T6923] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0003] [ 108.604929][ T6923] System zones: 0-5 [ 108.628295][ T6923] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.741499][ T28] audit: type=1400 audit(1780520303.304:1363): avc: denied { write } for pid=6922 comm="syz.1.704" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.820455][ T6923] xfrm0 speed is unknown, defaulting to 1000 [ 109.725537][ T6979] netlink: 16 bytes leftover after parsing attributes in process `syz.4.707'. [ 109.942429][ T28] audit: type=1400 audit(1780520304.504:1364): avc: denied { getopt } for pid=6982 comm="syz.0.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 110.011870][ T28] audit: type=1326 audit(1780520304.574:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.0.710" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72ea29ce59 code=0x7ffc0000 [ 110.038446][ T28] audit: type=1326 audit(1780520304.604:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.0.710" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72ea29ce59 code=0x7ffc0000 [ 110.064187][ T28] audit: type=1326 audit(1780520304.604:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.0.710" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72ea29ce59 code=0x7ffc0000 [ 110.090398][ T28] audit: type=1326 audit(1780520304.604:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.0.710" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f72ea29ce59 code=0x7ffc0000 [ 110.121167][ T28] audit: type=1326 audit(1780520304.604:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.0.710" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72ea29ce59 code=0x7ffc0000 [ 110.146917][ T28] audit: type=1326 audit(1780520304.604:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.0.710" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72ea29ce59 code=0x7ffc0000 [ 110.172584][ T28] audit: type=1326 audit(1780520304.604:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.0.710" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72ea29ce59 code=0x7ffc0000 [ 110.198090][ T28] audit: type=1326 audit(1780520304.604:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.0.710" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f72ea29ce59 code=0x7ffc0000 [ 110.399063][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.475853][ T7004] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 110.501924][ T7009] sch_fq: defrate 0 ignored. [ 110.594855][ T7030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.721'. [ 110.614290][ T7030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.721'. [ 110.644812][ T7047] loop1: detected capacity change from 0 to 512 [ 110.696189][ T7047] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 110.717324][ T7047] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 110.728454][ T7053] loop4: detected capacity change from 0 to 128 [ 110.756667][ T7047] EXT4-fs (loop1): failed to open journal device unknown-block(0,3) -6 [ 110.847788][ T7049] netlink: 16 bytes leftover after parsing attributes in process `syz.0.727'. [ 110.913607][ T7086] loop2: detected capacity change from 0 to 512 [ 110.944986][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.731'. [ 110.954295][ T7090] netlink: 'syz.3.731': attribute type 5 has an invalid length. [ 110.962349][ T7090] netlink: 48 bytes leftover after parsing attributes in process `syz.3.731'. [ 110.988383][ T7086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.002726][ T7090] geneve2: entered promiscuous mode [ 111.024744][ T7090] geneve2: entered allmulticast mode [ 111.032419][ T7086] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.087067][ T3308] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 111.104820][ T3308] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 111.265518][ T7135] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 111.342519][ T7136] Cannot find add_set index 0 as target [ 111.353929][ T7136] loop4: detected capacity change from 0 to 256 [ 111.421413][ T7136] FAT-fs (loop4): Directory bread(block 64) failed [ 111.428080][ T7136] FAT-fs (loop4): Directory bread(block 65) failed [ 111.434816][ T7136] FAT-fs (loop4): Directory bread(block 66) failed [ 111.441454][ T7136] FAT-fs (loop4): Directory bread(block 67) failed [ 111.448158][ T7136] FAT-fs (loop4): Directory bread(block 68) failed [ 111.454796][ T7136] FAT-fs (loop4): Directory bread(block 69) failed [ 111.461417][ T7136] FAT-fs (loop4): Directory bread(block 70) failed [ 111.467928][ T7136] FAT-fs (loop4): Directory bread(block 71) failed [ 111.474625][ T7136] FAT-fs (loop4): Directory bread(block 72) failed [ 111.481201][ T7136] FAT-fs (loop4): Directory bread(block 73) failed [ 111.588308][ T7140] netlink: 32 bytes leftover after parsing attributes in process `syz.1.743'. [ 111.637704][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.744'. [ 112.125475][ T7166] xfrm0 speed is unknown, defaulting to 1000 [ 112.259948][ T9] page_pool_release_retry() stalled pool shutdown: id 27, 1 inflight 60 sec [ 112.336645][ T7189] netlink: 36 bytes leftover after parsing attributes in process `syz.0.753'. [ 112.565928][ T7198] loop1: detected capacity change from 0 to 512 [ 112.589302][ T7198] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 112.615946][ T7198] EXT4-fs (loop1): orphan cleanup on readonly fs [ 112.633718][ T7107] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.643308][ T7198] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 112.686048][ T7198] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 112.709645][ T7198] EXT4-fs (loop1): 1 truncate cleaned up [ 112.715709][ T7198] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.745540][ T55] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.811132][ T7207] netlink: 'syz.0.758': attribute type 2 has an invalid length. [ 112.822328][ T7207] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.758'. [ 112.839591][ T55] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.893439][ T55] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.931588][ T7226] loop4: detected capacity change from 0 to 1024 [ 112.945248][ T7226] EXT4-fs (loop4): filesystem is read-only [ 112.950691][ T7210] xfrm0 speed is unknown, defaulting to 1000 [ 112.953186][ T7226] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 112.968185][ T7226] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 112.980580][ T55] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.988800][ T7226] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 112.999676][ T7226] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 113.116700][ T7210] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.123878][ T7210] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.131105][ T7210] bridge_slave_0: entered allmulticast mode [ 113.137522][ T7210] bridge_slave_0: entered promiscuous mode [ 113.144428][ T7210] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.151598][ T7210] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.158995][ T7210] bridge_slave_1: entered allmulticast mode [ 113.165641][ T7210] bridge_slave_1: entered promiscuous mode [ 113.184635][ T7210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.195477][ T7210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.215032][ T7210] team0: Port device team_slave_0 added [ 113.221652][ T7210] team0: Port device team_slave_1 added [ 113.247972][ T7210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.255058][ T7210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.281104][ T7210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.292334][ T7210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.300828][ T7210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.326925][ T7210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.375303][ T7210] hsr_slave_0: entered promiscuous mode [ 113.381820][ T7210] hsr_slave_1: entered promiscuous mode [ 113.387644][ T7210] debugfs: 'hsr0' already exists in 'hsr' [ 113.393919][ T7210] Cannot create hsr debugfs directory [ 113.414858][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.427442][ T55] bridge_slave_1: left allmulticast mode [ 113.436244][ T55] bridge_slave_1: left promiscuous mode [ 113.446419][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.454560][ T55] bridge_slave_0: left allmulticast mode [ 113.467269][ T55] bridge_slave_0: left promiscuous mode [ 113.473481][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.482016][ T7425] netlink: 'syz.4.763': attribute type 21 has an invalid length. [ 113.499439][ T7447] loop1: detected capacity change from 0 to 8192 [ 113.661522][ T55] tipc: Disabling bearer [ 113.669674][ T55] tipc: Left network mode [ 113.692307][ T7210] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 113.796515][ T7541] loop4: detected capacity change from 0 to 256 [ 114.011527][ T28] kauditd_printk_skb: 191 callbacks suppressed [ 114.011548][ T28] audit: type=1400 audit(1780520308.574:1563): avc: denied { read } for pid=7550 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.056608][ T7210] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 114.114968][ T7210] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 114.126014][ T28] audit: type=1400 audit(1780520308.574:1564): avc: denied { read open } for pid=7550 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.166946][ T28] audit: type=1400 audit(1780520308.604:1565): avc: denied { getattr } for pid=7550 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.314314][ T7210] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 114.346338][ T7210] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 114.425687][ T7210] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 114.448762][ T7210] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 114.501174][ T7210] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 114.642148][ T7210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.688082][ T7210] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.717090][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.724170][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.307530][ T55] hsr_slave_0: left promiscuous mode [ 115.335925][ T55] hsr_slave_1: left promiscuous mode [ 115.346642][ T28] audit: type=1400 audit(1780520309.904:1566): avc: denied { write } for pid=7537 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.384331][ T55] veth1_macvtap: left promiscuous mode [ 115.391870][ T55] veth0_macvtap: left promiscuous mode [ 115.405211][ T55] veth1_vlan: left promiscuous mode [ 115.410864][ T28] audit: type=1400 audit(1780520309.904:1567): avc: denied { add_name } for pid=7537 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.435716][ T55] veth0_vlan: left promiscuous mode [ 115.441532][ T28] audit: type=1400 audit(1780520309.904:1568): avc: denied { create } for pid=7537 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 115.469558][ T7582] loop1: detected capacity change from 0 to 128 [ 115.508463][ T28] audit: type=1400 audit(1780520309.904:1569): avc: denied { write } for pid=7537 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=4444 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 115.509050][ T7582] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 115.583760][ T28] audit: type=1400 audit(1780520309.904:1570): avc: denied { append } for pid=7537 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=4444 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 115.612496][ T55] team0 (unregistering): Port device team_slave_1 removed [ 115.633761][ T7582] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.646238][ T55] team0 (unregistering): Port device team_slave_0 removed [ 115.661191][ T7582] ext2 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.675816][ T28] audit: type=1400 audit(1780520309.944:1571): avc: denied { write } for pid=7589 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.721942][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.729017][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.760578][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 115.781333][ T28] audit: type=1400 audit(1780520309.944:1572): avc: denied { remove_name } for pid=7589 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=4444 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.870305][ T3299] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.003957][ T7601] FAULT_INJECTION: forcing a failure. [ 116.003957][ T7601] name failslab, interval 1, probability 0, space 0, times 0 [ 116.049635][ T7626] xfrm0 speed is unknown, defaulting to 1000 [ 116.059414][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 116.062582][ T7601] CPU: 0 UID: 0 PID: 7601 Comm: syz.3.776 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 116.062612][ T7601] Tainted: [W]=WARN [ 116.062619][ T7601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 116.062630][ T7601] Call Trace: [ 116.062659][ T7601] [ 116.062678][ T7601] __dump_stack+0x1d/0x30 [ 116.062700][ T7601] dump_stack_lvl+0x95/0xd0 [ 116.062720][ T7601] dump_stack+0x15/0x1b [ 116.062737][ T7601] should_fail_ex+0x263/0x280 [ 116.062756][ T7601] should_failslab+0x8c/0xb0 [ 116.062836][ T7601] __kmalloc_noprof+0xb8/0x4d0 [ 116.062864][ T7601] ? copy_splice_read+0xc2/0x6c0 [ 116.062928][ T7601] copy_splice_read+0xc2/0x6c0 [ 116.063061][ T7601] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 116.063151][ T7601] ? __pfx_copy_splice_read+0x10/0x10 [ 116.063178][ T7601] splice_direct_to_actor+0x26e/0x670 [ 116.063226][ T7601] ? __pfx_direct_splice_actor+0x10/0x10 [ 116.063328][ T7601] do_splice_direct+0x119/0x1a0 [ 116.063387][ T7601] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 116.063456][ T7601] do_sendfile+0x382/0x650 [ 116.063477][ T7601] __x64_sys_sendfile64+0x105/0x150 [ 116.063567][ T7601] x64_sys_call+0x2dc4/0x3020 [ 116.063589][ T7601] do_syscall_64+0x12c/0x3b0 [ 116.063616][ T7601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.063637][ T7601] RIP: 0033:0x7f2985abce59 [ 116.063659][ T7601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.063746][ T7601] RSP: 002b:00007f2984517028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 116.063766][ T7601] RAX: ffffffffffffffda RBX: 00007f2985d35fa0 RCX: 00007f2985abce59 [ 116.063816][ T7601] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 116.063827][ T7601] RBP: 00007f2984517090 R08: 0000000000000000 R09: 0000000000000000 [ 116.063840][ T7601] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 116.063852][ T7601] R13: 00007f2985d36038 R14: 00007f2985d35fa0 R15: 00007ffc123bc738 [ 116.063869][ T7601] [ 116.182569][ T7601] program syz.3.776 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.349293][ T7210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.366932][ T7654] __nla_validate_parse: 4 callbacks suppressed [ 116.366949][ T7654] netlink: 64 bytes leftover after parsing attributes in process `syz.3.780'. [ 116.391360][ T7654] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 116.434264][ T7665] netlink: 'syz.4.781': attribute type 1 has an invalid length. [ 116.465903][ T7665] ipt_REJECT: ECHOREPLY no longer supported. [ 116.492302][ T7665] netlink: 68 bytes leftover after parsing attributes in process `syz.4.781'. [ 116.520638][ T7665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.781'. [ 116.568114][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 116.598326][ T7665] xfrm0 speed is unknown, defaulting to 1000 [ 116.649366][ T7210] veth0_vlan: entered promiscuous mode [ 116.676859][ T7210] veth1_vlan: entered promiscuous mode [ 116.730108][ T7210] veth0_macvtap: entered promiscuous mode [ 116.759681][ T7210] veth1_macvtap: entered promiscuous mode [ 116.829147][ T7210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.887078][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 117.060071][ T7210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.075697][ T310] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.106226][ T310] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.149128][ T310] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.252288][ T7766] loop1: detected capacity change from 0 to 512 [ 117.277381][ T7766] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 117.366909][ T7766] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 117.394313][ T7766] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.785: bad orphan inode 4 [ 117.404533][ T7766] loop1: lost filesystem error report for type 5 error -117 [ 117.408787][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 117.422541][ C0] EXT4-fs (loop1): initial error at time 1780520311: ext4_orphan_get:1423 [ 117.431099][ C0] EXT4-fs (loop1): last error at time 1780520311: ext4_orphan_get:1423 [ 117.439803][ T7766] EXT4-fs (loop1): 1 orphan inode deleted [ 117.452787][ T7766] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.642149][ T310] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.632523][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.669413][ T7783] netlink: 192 bytes leftover after parsing attributes in process `syz.1.787'. [ 119.087097][ T28] kauditd_printk_skb: 95 callbacks suppressed [ 119.087119][ T28] audit: type=1326 audit(1780520313.644:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7699 comm="syz.3.783" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2985abce59 code=0x7ffc0000 [ 119.150269][ T7793] loop4: detected capacity change from 0 to 128 [ 119.273203][ T7700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7700 comm=syz.3.783 [ 119.295503][ T7801] netlink: 36 bytes leftover after parsing attributes in process `syz.1.792'. [ 119.313011][ T7793] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.325158][ T28] audit: type=1326 audit(1780520313.684:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7699 comm="syz.3.783" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2985abce59 code=0x7ffc0000 [ 119.383182][ T7793] ext4 filesystem being mounted at /174/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 119.449741][ T28] audit: type=1326 audit(1780520313.694:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7699 comm="syz.3.783" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2985abce59 code=0x7ffc0000 [ 119.505321][ T28] audit: type=1326 audit(1780520313.724:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7699 comm="syz.3.783" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2985abce59 code=0x7ffc0000 [ 119.506930][ T3307] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.546044][ T28] audit: type=1326 audit(1780520313.734:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7699 comm="syz.3.783" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2985abce59 code=0x7ffc0000 [ 119.587323][ T28] audit: type=1326 audit(1780520313.734:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7699 comm="syz.3.783" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2985abce59 code=0x7ffc0000 [ 119.613041][ T28] audit: type=1326 audit(1780520313.734:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7699 comm="syz.3.783" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2985abce59 code=0x7ffc0000 [ 119.788943][ T28] audit: type=1326 audit(1780520313.744:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7699 comm="syz.3.783" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2985abce59 code=0x7ffc0000 [ 119.819384][ T7825] sctp: [Deprecated]: syz.4.797 (pid 7825) Use of struct sctp_assoc_value in delayed_ack socket option. [ 119.819384][ T7825] Use struct sctp_sack_info instead [ 119.863854][ T3570] page_pool_release_retry() stalled pool shutdown: id 28, 1 inflight 60 sec [ 119.888251][ T7835] xfrm0 speed is unknown, defaulting to 1000 [ 119.904379][ T7842] sctp: [Deprecated]: syz.4.797 (pid 7842) Use of struct sctp_assoc_value in delayed_ack socket option. [ 119.904379][ T7842] Use struct sctp_sack_info instead [ 119.917393][ T28] audit: type=1326 audit(1780520313.744:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7699 comm="syz.3.783" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2985abce59 code=0x7ffc0000 [ 120.044434][ T28] audit: type=1326 audit(1780520313.744:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7699 comm="syz.3.783" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2985abce59 code=0x7ffc0000 [ 120.094161][ T7858] usb usb5: usbfs: interface 0 claimed by hub while 'syz.3.803' sets config #-1 [ 120.120283][ T7859] netlink: 56 bytes leftover after parsing attributes in process `syz.1.801'. [ 120.168038][ T7864] netlink: 36 bytes leftover after parsing attributes in process `syz.4.806'. [ 120.232337][ T7869] netlink: 52 bytes leftover after parsing attributes in process `syz.0.808'. [ 120.258007][ T7869] netlink: 44 bytes leftover after parsing attributes in process `syz.0.808'. [ 120.274026][ T7858] batadv0: entered promiscuous mode [ 120.311907][ T7858] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 120.315209][ T7869] netlink: 72 bytes leftover after parsing attributes in process `syz.0.808'. [ 120.366635][ T7870] tipc: Enabling of bearer rejected, failed to enable media [ 120.387506][ T7895] random: crng reseeded on system resumption [ 120.618615][ T7922] x_tables: duplicate underflow at hook 1 [ 120.766040][ T7915] ipip1: entered promiscuous mode [ 121.323824][ T7939] syzkaller0: entered promiscuous mode [ 121.510294][ T7939] syzkaller0: entered allmulticast mode [ 121.563225][ T7947] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 121.569766][ T7947] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 121.625775][ T7946] xfrm0 speed is unknown, defaulting to 1000 [ 121.632992][ T7947] vhci_hcd vhci_hcd.0: Device attached [ 121.662775][ T7953] vhci_hcd: connection closed [ 121.663047][ T40] vhci_hcd vhci_hcd.0: stop threads [ 121.686188][ T40] vhci_hcd vhci_hcd.0: release socket [ 121.711452][ T40] vhci_hcd vhci_hcd.0: disconnect device [ 121.894018][ T7971] loop4: detected capacity change from 0 to 512 [ 121.913971][ T7971] EXT4-fs: Ignoring removed i_version option [ 121.950434][ T7971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.975339][ T7971] ext4 filesystem being mounted at /186/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.020771][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.075463][ T8000] __nla_validate_parse: 1 callbacks suppressed [ 122.075486][ T8000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.832'. [ 122.321922][ T8015] FAULT_INJECTION: forcing a failure. [ 122.321922][ T8015] name fail_futex, interval 1, probability 0, space 0, times 1 [ 122.335992][ T8013] netlink: 108 bytes leftover after parsing attributes in process `syz.5.836'. [ 122.346105][ T8017] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 122.352626][ T8017] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 122.364221][ T8017] vhci_hcd vhci_hcd.0: Device attached [ 122.395976][ T8017] vhci_hcd vhci_hcd.0: port 0 already used [ 122.413746][ T8015] CPU: 0 UID: 0 PID: 8015 Comm: syz.0.835 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 122.413773][ T8015] Tainted: [W]=WARN [ 122.413778][ T8015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 122.413788][ T8015] Call Trace: [ 122.413794][ T8015] [ 122.413800][ T8015] __dump_stack+0x1d/0x30 [ 122.413853][ T8015] dump_stack_lvl+0x95/0xd0 [ 122.413873][ T8015] dump_stack+0x15/0x1b [ 122.413892][ T8015] should_fail_ex+0x263/0x280 [ 122.413924][ T8015] should_fail+0xb/0x20 [ 122.413942][ T8015] get_futex_key+0x5cd/0xb50 [ 122.414031][ T8015] futex_wait_multiple_setup+0xca/0x4f0 [ 122.414054][ T8015] ? kstrtouint_from_user+0xa8/0xf0 [ 122.414086][ T8015] ? should_fail_ex+0xd9/0x280 [ 122.414135][ T8015] futex_wait_multiple+0xb2/0x2c0 [ 122.414177][ T8015] __se_sys_futex_waitv+0x169/0x1c0 [ 122.414209][ T8015] __x64_sys_futex_waitv+0x67/0x80 [ 122.414273][ T8015] x64_sys_call+0x2f5b/0x3020 [ 122.414361][ T8015] do_syscall_64+0x12c/0x3b0 [ 122.414469][ T8015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.414490][ T8015] RIP: 0033:0x7f72ea29ce59 [ 122.414506][ T8015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.414524][ T8015] RSP: 002b:00007f72e8cd6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 122.414543][ T8015] RAX: ffffffffffffffda RBX: 00007f72ea516090 RCX: 00007f72ea29ce59 [ 122.414585][ T8015] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000001480 [ 122.414597][ T8015] RBP: 00007f72e8cd6090 R08: 0000000000000000 R09: 0000000000000000 [ 122.414607][ T8015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.414618][ T8015] R13: 00007f72ea516128 R14: 00007f72ea516090 R15: 00007ffc377d6bd8 [ 122.414633][ T8015] [ 122.633751][ T8038] netlink: 8 bytes leftover after parsing attributes in process `syz.5.842'. [ 122.642980][ T8038] netlink: 12 bytes leftover after parsing attributes in process `syz.5.842'. [ 122.652654][ T8017] netlink: 'syz.1.838': attribute type 3 has an invalid length. [ 122.660733][ T8017] netlink: 132 bytes leftover after parsing attributes in process `syz.1.838'. [ 122.718032][ T8018] vhci_hcd: connection closed [ 122.718255][ T49] vhci_hcd vhci_hcd.1: stop threads [ 122.718607][ T8043] netlink: 36 bytes leftover after parsing attributes in process `syz.4.843'. [ 122.723051][ T49] vhci_hcd vhci_hcd.1: release socket [ 122.723073][ T49] vhci_hcd vhci_hcd.1: disconnect device [ 122.751271][ T1039] usb 4-1: enqueue for inactive port 0 [ 122.943310][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.5.844'. [ 122.952245][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.5.844'. [ 122.992450][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.847'. [ 123.037273][ T1039] usb 4-1: enqueue for inactive port 0 [ 123.763978][ T8087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.856'. [ 123.849576][ T8099] random: crng reseeded on system resumption [ 124.199269][ T1039] usb usb4-port1: attempt power cycle [ 124.366348][ T8123] netlink: 'syz.4.865': attribute type 1 has an invalid length. [ 124.460959][ T8127] bond1 (unregistering): Released all slaves [ 124.546872][ T8163] loop5: detected capacity change from 0 to 1024 [ 124.588365][ T8163] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 124.605109][ T8163] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.617167][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 124.617179][ T28] audit: type=1400 audit(1780520319.174:1733): avc: denied { read write } for pid=8162 comm="syz.5.867" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 124.645997][ T28] audit: type=1400 audit(1780520319.174:1734): avc: denied { open } for pid=8162 comm="syz.5.867" path="/20/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 124.652944][ T8163] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 3: comm syz.5.867: lblock 3 mapped to illegal pblock 3 (length 3) [ 124.682858][ T8161] bond1: (slave gretap1): making interface the new active one [ 124.690803][ T8161] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 124.705629][ T8193] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.714255][ T8242] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 8: comm syz.5.867: lblock 8 mapped to illegal pblock 8 (length 8) [ 124.732155][ T8163] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 124.755030][ T8242] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 124.775439][ T8163] EXT4-fs (loop5): This should not happen!! Data will be lost [ 124.775439][ T8163] [ 124.785387][ T8242] EXT4-fs (loop5): This should not happen!! Data will be lost [ 124.785387][ T8242] [ 124.825986][ T8242] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.867: bg 0: block 112: padding at end of block bitmap is not set [ 124.845593][ T28] audit: type=1400 audit(1780520319.404:1735): avc: denied { write } for pid=8244 comm="syz.4.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 124.867058][ T28] audit: type=1400 audit(1780520319.404:1736): avc: denied { accept } for pid=8244 comm="syz.4.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 124.908993][ T8242] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28 [ 124.923204][ T8242] EXT4-fs (loop5): This should not happen!! Data will be lost [ 124.923204][ T8242] [ 124.941698][ T8242] EXT4-fs (loop5): Total free blocks count 0 [ 124.947748][ T28] audit: type=1400 audit(1780520319.404:1737): avc: denied { read } for pid=8244 comm="syz.4.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 124.973468][ T8242] EXT4-fs (loop5): Free/Dirty block details [ 124.987482][ T8242] EXT4-fs (loop5): free_blocks=0 [ 125.004652][ T28] audit: type=1400 audit(1780520319.504:1738): avc: denied { unmount } for pid=8255 comm="syz.0.872" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 125.066286][ T7210] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 125.091391][ T28] audit: type=1400 audit(1780520319.584:1739): avc: denied { bind } for pid=8259 comm="syz.4.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 125.129065][ T28] audit: type=1400 audit(1780520319.594:1740): avc: denied { ioctl } for pid=8259 comm="syz.4.875" path="socket:[15543]" dev="sockfs" ino=15543 ioctlcmd=0xf502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 125.221485][ T28] audit: type=1400 audit(1780520319.604:1741): avc: denied { connect } for pid=8259 comm="syz.4.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 125.305932][ T8274] loop4: detected capacity change from 0 to 512 [ 125.333819][ T8274] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 125.361885][ T8274] EXT4-fs (loop4): 1 truncate cleaned up [ 125.385243][ T8274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.453239][ T28] audit: type=1400 audit(1780520320.004:1742): avc: denied { write } for pid=8273 comm="syz.4.878" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.515363][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.672517][ T8317] syz_tun: entered allmulticast mode [ 125.812249][ T8330] xt_policy: output policy not valid in PREROUTING and INPUT [ 126.109259][ T1039] usb usb4-port1: unable to enumerate USB device [ 126.401958][ T8379] xfrm0 speed is unknown, defaulting to 1000 [ 126.582393][ T8420] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 126.737933][ T8433] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 126.744470][ T8433] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 126.771348][ T8433] vhci_hcd vhci_hcd.0: Device attached [ 126.875434][ T8433] GUP no longer grows the stack in syz.5.918 (8433): 200000004000-200000006000 (200000002000) [ 126.897283][ T8433] CPU: 0 UID: 0 PID: 8433 Comm: syz.5.918 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 126.897316][ T8433] Tainted: [W]=WARN [ 126.897325][ T8433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 126.897428][ T8433] Call Trace: [ 126.897435][ T8433] [ 126.897444][ T8433] __dump_stack+0x1d/0x30 [ 126.897466][ T8433] dump_stack_lvl+0x95/0xd0 [ 126.897484][ T8433] dump_stack+0x15/0x1b [ 126.897505][ T8433] __get_user_pages+0x1b26/0x1f10 [ 126.897604][ T8433] ? __rcu_read_unlock+0x4e/0x70 [ 126.897653][ T8433] get_user_pages_remote+0x1d5/0x6b0 [ 126.897686][ T8433] __access_remote_vm+0x154/0x4c0 [ 126.897714][ T8433] access_remote_vm+0x32/0x40 [ 126.897737][ T8433] proc_pid_cmdline_read+0x32b/0x6b0 [ 126.897795][ T8433] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 126.897824][ T8433] vfs_readv+0x432/0x6e0 [ 126.897857][ T8433] __x64_sys_preadv+0xfd/0x1c0 [ 126.897886][ T8433] x64_sys_call+0x2915/0x3020 [ 126.897937][ T8433] do_syscall_64+0x12c/0x3b0 [ 126.897992][ T8433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.898013][ T8433] RIP: 0033:0x7fe1bc5ece59 [ 126.898070][ T8433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.898172][ T8433] RSP: 002b:00007fe1bb03f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 126.898205][ T8433] RAX: ffffffffffffffda RBX: 00007fe1bc865fa0 RCX: 00007fe1bc5ece59 [ 126.898221][ T8433] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000006 [ 126.898284][ T8433] RBP: 00007fe1bc682d6f R08: 00000000000006cd R09: 0000000000000000 [ 126.898304][ T8433] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 126.898319][ T8433] R13: 00007fe1bc866038 R14: 00007fe1bc865fa0 R15: 00007ffe09649c18 [ 126.898340][ T8433] [ 127.199574][ T8434] vhci_hcd: connection closed [ 127.200762][ T310] vhci_hcd vhci_hcd.5: stop threads [ 127.217978][ T310] vhci_hcd vhci_hcd.5: release socket [ 127.230097][ T310] vhci_hcd vhci_hcd.5: disconnect device [ 127.239135][ T3570] usb 12-1: SetAddress Request (2) to port 0 [ 127.245207][ T3570] usb 12-1: new SuperSpeed USB device number 2 using vhci_hcd [ 127.343986][ T8452] __nla_validate_parse: 26 callbacks suppressed [ 127.343999][ T8452] netlink: 56 bytes leftover after parsing attributes in process `syz.3.922'. [ 127.373304][ T8457] netlink: 104 bytes leftover after parsing attributes in process `syz.1.925'. [ 127.380125][ T8455] Cannot find add_set index 0 as target [ 127.442524][ T8466] netlink: 16 bytes leftover after parsing attributes in process `syz.4.928'. [ 127.452278][ T8461] netlink: 16 bytes leftover after parsing attributes in process `syz.1.927'. [ 127.461564][ T8466] netlink: 69 bytes leftover after parsing attributes in process `syz.4.928'. [ 127.519954][ T8476] netlink: 36 bytes leftover after parsing attributes in process `syz.4.930'. [ 127.697378][ T8488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.933'. [ 127.719647][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.933'. [ 128.223379][ T8504] random: crng reseeded on system resumption [ 128.340011][ T8497] bridge_slave_0: left allmulticast mode [ 128.353341][ T8497] bridge_slave_0: left promiscuous mode [ 128.362514][ T8497] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.432434][ T8497] bridge_slave_1: left allmulticast mode [ 128.438290][ T8497] bridge_slave_1: left promiscuous mode [ 128.444335][ T8497] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.456378][ T8497] bond0: (slave bond_slave_0): Releasing backup interface [ 128.468697][ T8497] bond0: (slave bond_slave_1): Releasing backup interface [ 128.483815][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.5.936'. [ 128.496602][ T8497] team0: Port device team_slave_0 removed [ 128.508507][ T8497] team0: Port device team_slave_1 removed [ 128.516652][ T8497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.524267][ T8497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.537940][ T8497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.546130][ T8497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.557905][ T8497] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 128.705569][ T8515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.939'. [ 129.139410][ T8553] veth0_to_team: entered promiscuous mode [ 129.165573][ T3395] kernel write not supported for file [eventfd] (pid: 3395 comm: kworker/0:3) [ 129.217022][ T8553] bridge0: entered promiscuous mode [ 129.270860][ T8553] debugfs: 'hsr1' already exists in 'hsr' [ 129.275698][ T8576] netlink: 'syz.1.950': attribute type 5 has an invalid length. [ 129.284722][ T8553] Cannot create hsr debugfs directory [ 129.299869][ T8576] geneve2: entered promiscuous mode [ 129.305167][ T8576] geneve2: entered allmulticast mode [ 129.316865][ T49] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 129.332398][ T8589] loop5: detected capacity change from 0 to 128 [ 129.343032][ T49] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 129.409873][ T49] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 129.419549][ T8577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8577 comm=syz.1.950 [ 129.436443][ T49] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 129.456685][ T8578] xfrm0 speed is unknown, defaulting to 1000 [ 129.586155][ T8635] program syz.4.954 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.624787][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 129.624799][ T28] audit: type=1400 audit(1780520324.184:1781): avc: denied { write } for pid=8636 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.699011][ T8569] xfrm0 speed is unknown, defaulting to 1000 [ 130.062375][ T8698] bond1: option mode: unable to set because the bond device is up [ 130.292435][ T28] audit: type=1400 audit(1780520324.854:1782): avc: denied { getopt } for pid=8720 comm="syz.0.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 130.524399][ T8736] random: crng reseeded on system resumption [ 130.530799][ T28] audit: type=1400 audit(1780520325.084:1783): avc: denied { tracepoint } for pid=8731 comm="syz.5.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 130.817195][ T8730] xfrm0 speed is unknown, defaulting to 1000 [ 131.495549][ T8768] batadv_slave_0: entered promiscuous mode [ 131.503697][ T28] audit: type=1400 audit(1780520325.174:1784): avc: denied { write } for pid=8722 comm="syz.0.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 131.522950][ T28] audit: type=1400 audit(1780520326.034:1785): avc: denied { write } for pid=8726 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.527708][ T8766] batadv_slave_0: left promiscuous mode [ 131.584525][ T28] audit: type=1400 audit(1780520326.134:1786): avc: denied { write } for pid=8769 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.714292][ T28] audit: type=1400 audit(1780520326.274:1787): avc: denied { create } for pid=8800 comm="syz.3.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 131.778068][ T8806] FAULT_INJECTION: forcing a failure. [ 131.778068][ T8806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.793122][ T28] audit: type=1400 audit(1780520326.294:1788): avc: denied { connect } for pid=8800 comm="syz.3.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 131.813294][ T8806] CPU: 1 UID: 0 PID: 8806 Comm: syz.4.978 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 131.813320][ T8806] Tainted: [W]=WARN [ 131.813326][ T8806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 131.813339][ T8806] Call Trace: [ 131.813345][ T8806] [ 131.813353][ T8806] __dump_stack+0x1d/0x30 [ 131.813469][ T8806] dump_stack_lvl+0x95/0xd0 [ 131.813558][ T8806] dump_stack+0x15/0x1b [ 131.813573][ T8806] should_fail_ex+0x263/0x280 [ 131.813590][ T8806] should_fail+0xb/0x20 [ 131.813605][ T8806] should_fail_usercopy+0x1a/0x20 [ 131.813700][ T8806] _copy_from_user+0x1c/0xb0 [ 131.813719][ T8806] __sys_bpf+0x183/0x7e0 [ 131.813743][ T8806] __x64_sys_bpf+0x41/0x50 [ 131.813796][ T8806] x64_sys_call+0x10cb/0x3020 [ 131.813815][ T8806] do_syscall_64+0x12c/0x3b0 [ 131.813842][ T8806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.813864][ T8806] RIP: 0033:0x7fb8d8e1ce59 [ 131.813879][ T8806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.813937][ T8806] RSP: 002b:00007fb8d786f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 131.813957][ T8806] RAX: ffffffffffffffda RBX: 00007fb8d9095fa0 RCX: 00007fb8d8e1ce59 [ 131.813984][ T8806] RDX: 0000000000000048 RSI: 00002000000009c0 RDI: 0000000000000000 [ 131.813995][ T8806] RBP: 00007fb8d786f090 R08: 0000000000000000 R09: 0000000000000000 [ 131.814010][ T8806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.814023][ T8806] R13: 00007fb8d9096038 R14: 00007fb8d9095fa0 R15: 00007fffe0b93b18 [ 131.814043][ T8806] [ 131.987477][ T8806] loop4: detected capacity change from 0 to 512 [ 132.047808][ T8806] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.978: corrupted inode contents [ 132.059970][ T8806] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 132.060213][ T8806] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #16: comm syz.4.978: mark_inode_dirty error [ 132.069388][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 132.069417][ C1] EXT4-fs (loop4): initial error at time 1780520326: ext4_do_update_inode:5690: inode 16 [ 132.069485][ C1] EXT4-fs (loop4): last error at time 1780520326: ext4_do_update_inode:5690: inode 16 [ 132.107954][ T8806] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 132.120898][ T8806] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.978: corrupted inode contents [ 132.142362][ T8806] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 132.142866][ T8806] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.978: mark_inode_dirty error [ 132.163535][ T8806] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 132.164012][ T8806] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.978: corrupted inode contents [ 132.188654][ T8806] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 132.189069][ T8806] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 132.207099][ T8806] loop4: lost filesystem error report for type 5 error -117 [ 132.207381][ T8806] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.978: corrupted inode contents [ 132.229950][ T8806] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 132.230192][ T8806] EXT4-fs error (device loop4): ext4_truncate:4690: inode #16: comm syz.4.978: mark_inode_dirty error [ 132.266297][ T8806] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 132.266639][ T8806] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 132.284607][ T8827] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 132.285155][ T8806] loop4: lost filesystem error report for type 5 error -117 [ 132.305869][ T8806] EXT4-fs (loop4): 1 truncate cleaned up [ 132.320289][ T8806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.332857][ T49] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 132.333175][ T8806] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.344497][ T49] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 1 [ 132.353870][ T3570] usb 12-1: device descriptor read/8, error -110 [ 132.372492][ T28] audit: type=1400 audit(1780520326.934:1789): avc: denied { read } for pid=8826 comm="syz.1.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 132.406641][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.546980][ T3570] usb 12-1: new SuperSpeed USB device number 2 using vhci_hcd [ 132.630996][ T8846] bond1: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 132.646443][ T8846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.828363][ T8843] xfrm0 speed is unknown, defaulting to 1000 [ 132.989964][ T8896] netlink: 'syz.5.989': attribute type 1 has an invalid length. [ 133.065977][ T8896] bond1: (slave geneve2): making interface the new active one [ 133.088066][ T8896] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 133.109583][ T8934] 9p: Bad value for 'wfdno' [ 133.120969][ T40] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 133.152599][ T8896] __nla_validate_parse: 4 callbacks suppressed [ 133.152629][ T8896] netlink: 28 bytes leftover after parsing attributes in process `syz.5.989'. [ 133.171192][ T40] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 133.220746][ T40] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 133.241033][ T40] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 133.261898][ T8896] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.605834][ T8983] netlink: 28 bytes leftover after parsing attributes in process `syz.5.996'. [ 134.814445][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 134.814457][ T28] audit: type=1326 audit(1780520329.364:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8968 comm="syz.4.994" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7fb8d8e1ce59 code=0x7ffc0000 [ 134.893882][ T28] audit: type=1326 audit(1780520329.414:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8968 comm="syz.4.994" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d8e1ce59 code=0x7ffc0000 [ 135.027488][ T28] audit: type=1326 audit(1780520329.414:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8968 comm="syz.4.994" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d8e1ce59 code=0x7ffc0000 [ 135.941155][ T9031] SELinux: Context : is not valid (left unmapped). [ 135.947807][ T28] audit: type=1400 audit(1780520330.504:1797): avc: denied { mac_admin } for pid=9029 comm="syz.3.1009" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 135.987309][ T9036] process 'syz.0.1010' launched './file0' with NULL argv: empty string added [ 136.008048][ T28] audit: type=1400 audit(1780520330.534:1798): avc: denied { relabelto } for pid=9029 comm="syz.3.1009" name="rdma.current" dev="tmpfs" ino=1173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 136.063181][ T28] audit: type=1400 audit(1780520330.534:1799): avc: denied { associate } for pid=9029 comm="syz.3.1009" name="rdma.current" dev="tmpfs" ino=1173 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 136.089052][ T28] audit: type=1400 audit(1780520330.564:1800): avc: denied { execute_no_trans } for pid=9032 comm="syz.0.1010" path="/196/file0" dev="tmpfs" ino=1055 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 136.157559][ T28] audit: type=1400 audit(1780520330.714:1801): avc: denied { unlink } for pid=3300 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=1173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 136.602623][ T9052] xfrm0 speed is unknown, defaulting to 1000 [ 137.018188][ T28] audit: type=1400 audit(1780520331.574:1802): avc: denied { create } for pid=9065 comm="syz.3.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 137.042029][ T9068] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1016'. [ 137.132061][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1016'. [ 137.145553][ T28] audit: type=1400 audit(1780520331.604:1803): avc: denied { write } for pid=9065 comm="syz.3.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 137.186937][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1016'. [ 137.234801][ T12] ================================================================== [ 137.242992][ T12] BUG: KCSAN: data-race in n_tty_lookahead_flow_ctrl / tty_set_termios [ 137.251257][ T12] [ 137.253572][ T12] write to 0xffff88811b7cd4e0 of 44 bytes by task 9102 on cpu 1: [ 137.261290][ T12] tty_set_termios+0xc0/0x910 [ 137.265964][ T12] set_termios+0x4a7/0x4f0 [ 137.270378][ T12] tty_mode_ioctl+0x37f/0x5b0 [ 137.275049][ T12] n_tty_ioctl_helper+0x87/0x370 [ 137.279990][ T12] n_tty_ioctl+0x101/0x220 [ 137.284401][ T12] tty_ioctl+0x83e/0xb80 [ 137.288643][ T12] __se_sys_ioctl+0xce/0x140 [ 137.293232][ T12] __x64_sys_ioctl+0x43/0x50 [ 137.297819][ T12] x64_sys_call+0x1563/0x3020 [ 137.302500][ T12] do_syscall_64+0x12c/0x3b0 [ 137.307088][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.312977][ T12] [ 137.315376][ T12] read to 0xffff88811b7cd4f9 of 1 bytes by task 12 on cpu 0: [ 137.322735][ T12] n_tty_lookahead_flow_ctrl+0x137/0x300 [ 137.328362][ T12] tty_port_default_lookahead_buf+0x91/0xc0 [ 137.334253][ T12] flush_to_ldisc+0x288/0x340 [ 137.338929][ T12] process_scheduled_works+0x4f0/0x9c0 [ 137.344385][ T12] worker_thread+0x58a/0x780 [ 137.348971][ T12] kthread+0x22a/0x280 [ 137.353031][ T12] ret_from_fork+0x146/0x330 [ 137.357624][ T12] ret_from_fork_asm+0x1a/0x30 [ 137.362383][ T12] [ 137.364695][ T12] value changed: 0x11 -> 0x53 [ 137.369354][ T12] [ 137.371665][ T12] Reported by Kernel Concurrency Sanitizer on: [ 137.377808][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 137.388657][ T12] Tainted: [W]=WARN [ 137.392445][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 137.402492][ T12] Workqueue: events_unbound flush_to_ldisc [ 137.408307][ T12] ==================================================================