last executing test programs: 18m24.256974084s ago: executing program 3 (id=111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000f50401090005000f000000000000006799"], 0x7a) 18m23.973529613s ago: executing program 3 (id=117): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000001980)={[{@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@usefree}, {@dots}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@check_strict}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@debug}, {@fat=@debug}, {@nodots}, {@nodots}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}, {@fat=@showexec}, {@fat=@debug}, {@nodots}, {}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x4000) 18m23.095908051s ago: executing program 3 (id=120): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x86e1, 0x40, 0x8, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x0, 0x1}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) getdents64(0xffffffffffffffff, &(0x7f0000000fc0)=""/224, 0xe0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @fwd={0x2, 0x0, 0x0, 0x12}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0xa}, 0x28) 18m19.812878835s ago: executing program 3 (id=127): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xa, 0x7fe}, 0x11, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x57, 0xfd, 0x0, 0x0, 0x0, 0x4db, 0x295, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x5a, 0x6}, 0x2, 0x6, 0x10ffe, 0x2, 0x2, 0x80000011, 0xfffe, 0x0, 0x1000000, 0x0, 0x7}, r0, 0xdffffffffffffffd, r2, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611014000000000062010c20000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r3 = inotify_init1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000de000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000010230000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0xa4000061) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r4, &(0x7f0000000040), 0x0, 0x8, 0xffffffff) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000800)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x9, 0xd, {"36a46cc432358bcc76fba851ec85a57c"}, 0x6, 0x7, 0x24c}}}, 0xa0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYRES8=r4, @ANYRES8=r5, @ANYBLOB="000400000000000000000d00000005001900"], 0x2c}, 0x1, 0x0, 0x0, 0x18000}, 0x4004011) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80080, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x8, 0x7, 0x8009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) sendmmsg$inet(r7, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r7, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f00000003c0)={'veth0_vlan\x00', {0x2, 0x4e22, @broadcast}}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r6) 18m16.76627304s ago: executing program 3 (id=132): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x1, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xdb9}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000ffffffff0000000000000000000000004e2100000000000000000064000000", @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=0xee00, @ANYBLOB="00000000000000120000000000000000000000000000000000000000000000000000eeffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d3"], 0x1ac}}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') pread64(r3, &(0x7f0000000180)=""/109, 0x6d, 0x1f5) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc)) r5 = syz_open_procfs(r4, &(0x7f0000000100)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}}) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)='/', 0x1}], 0x1, 0x0, 0x0, 0x40010}, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/40, 0x28}], 0x1, 0x0, 0x31}, 0x10040) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, 0x0, &(0x7f0000000040)=0x36) sendmsg$tipc(r1, &(0x7f0000001700)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x2, 0x3}}, 0x10, &(0x7f0000001680)=[{&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="f4f639d96391bef60783b4a4de100d8ad8cebf5a24f0986c72e6338718bf87635c208b0924ac29563f375581d28f1f2ce9d113201f0fd4e85d3a684565ff6204155c7c22fe0df95503c04b232a6677a2b6c0fb0660866d8660ed603ed5765047c27e6d6dcb690275534e4dadb9fe48f840cb7dfe873d38d756fb129c38993f3f71e901a37468c98723ec3bc11b4000e5f3a07364f0e63463856966bfc30eaba54d4ea03288c6e7a25dd51cccb3f6a1cffe79", 0xb2}, {&(0x7f00000015c0)="646068313c7404f8e584ccb70e904dcf76810c1e4944e63e8e034214617b78311a6eb1f11ea9e1b6661eadf2716ae2a0c99b35344a66ee3e7050361eac1b3d657a5912d930212640f7d8b06178f6938e711f6a9fdf883738ad1251d84134eaa2f77859941c7a0c554e359e088c1c55108002043d6b1827e5e2a79940b519aa79f0e64f4bb0b65245fce2b9bd39bb058e", 0x90}], 0x3, &(0x7f00000016c0)="9c9c90", 0x3, 0x40041}, 0x4000089) 18m14.765525033s ago: executing program 3 (id=138): socket$netlink(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000380), 0x1}, 0x4008, 0x3, 0x0, 0x0, 0x0, 0xffff8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x7ff, 0x0, 0x0, 0x9}) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ac", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000840)='[', 0x1}], 0x1}}], 0x3, 0x400c404) r6 = io_uring_setup(0x18e5, 0x0) syz_io_uring_setup(0x1972, &(0x7f0000000080)={0x0, 0x1000, 0x1000, 0x0, 0xfffffffc, 0x0, r6}, &(0x7f0000000140), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f00000001c0)={[{@jqfmt_vfsv0}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@nolazytime}]}, 0x3, 0x45f, &(0x7f0000000ec0)="$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") mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x1011084, &(0x7f0000001400)={[{@nofavordynmods}, {@none}, {}, {@xattr}, {@xattr}, {@favordynmods}], [{@fsmagic={'fsmagic', 0x3d, 0x2}}, {@flag='posixacl'}, {@permit_directio}, {@euid_eq}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}) syz_open_procfs(0xffffffffffffffff, 0x0) socket(0x15, 0x5, 0x0) 17m59.114870577s ago: executing program 32 (id=138): socket$netlink(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000380), 0x1}, 0x4008, 0x3, 0x0, 0x0, 0x0, 0xffff8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x7ff, 0x0, 0x0, 0x9}) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ac", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000840)='[', 0x1}], 0x1}}], 0x3, 0x400c404) r6 = io_uring_setup(0x18e5, 0x0) syz_io_uring_setup(0x1972, &(0x7f0000000080)={0x0, 0x1000, 0x1000, 0x0, 0xfffffffc, 0x0, r6}, &(0x7f0000000140), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f00000001c0)={[{@jqfmt_vfsv0}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@nolazytime}]}, 0x3, 0x45f, &(0x7f0000000ec0)="$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") mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x1011084, &(0x7f0000001400)={[{@nofavordynmods}, {@none}, {}, {@xattr}, {@xattr}, {@favordynmods}], [{@fsmagic={'fsmagic', 0x3d, 0x2}}, {@flag='posixacl'}, {@permit_directio}, {@euid_eq}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}) syz_open_procfs(0xffffffffffffffff, 0x0) socket(0x15, 0x5, 0x0) 1m40.355257864s ago: executing program 0 (id=6500): ioprio_set$uid(0x3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="00f7ffffffffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000019000000000000000002000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0df7) fchown(r4, 0x0, 0xee01) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0x1000, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, r5, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@deltaction={0x17c, 0x31, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1013, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0x5b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6bd}}]}, @TCA_ACT_TAB={0x70, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0xc, 0x2011, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0x17c}}, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1m39.436451242s ago: executing program 0 (id=6514): socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c02c, 0x200, 0x2000000, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) msgget$private(0x0, 0x1c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000980)=r1, 0x4) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x5, 0x10001, 0x1000a, 0x1, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r3, 0x58, &(0x7f0000004140)}, 0x5) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x0, 0x41, &(0x7f0000000000)="1aa4", 0x2, 0x0, 0xfffffffe, 0xffffffff, 0x1, 0x71a8, 0x0}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x280801f, &(0x7f00000002c0), 0xfe, 0x506, &(0x7f0000000400)="$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") socket$netlink(0x10, 0x3, 0x10) syz_open_dev$usbfs(0x0, 0x7f, 0x480402) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) open(0x0, 0x8000, 0xa0) 1m39.024642125s ago: executing program 0 (id=6515): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x8, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x3a, 0x2001) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@errors_continue}, {@data_err_ignore}, {@nodiscard}]}, 0xff, 0x460, &(0x7f0000001300)="$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") quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000200)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000002780)={0x203, 0x1c, 0x0, 0x4}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000003c0)=0x4) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r3 = msgget$private(0x0, 0x482) msgsnd(r3, &(0x7f0000000580)={0x2, "f5bad8a71434b55fd6c70e758d3338c3fe1976ae61ba5d58fa91165391eaa5fbd0080c7f7c46a4401e7eabbba2f610a15785c811436807b067762872f5"}, 0x45, 0x800) capset(&(0x7f0000002ffa)={0x20080522, 0xffffffffffffffff}, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000540)=0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r4) socket$packet(0x11, 0x3, 0x300) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000600), 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') pread64(r6, &(0x7f0000019140)=""/102380, 0x18fec, 0x10000002f9) pread64(r6, &(0x7f0000019040)=""/78, 0x4e, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r5, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x1000000, 0x800, 0x7, 0x1}, 0x20) 1m38.601544739s ago: executing program 0 (id=6522): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000140)={[{@resuid}, {@noauto_da_alloc}, {@auto_da_alloc_val}, {@stripe={'stripe', 0x3d, 0x4}}, {@bsdgroups}, {@noblock_validity}, {@minixdf}, {@nouid32}, {@dioread_lock}, {@nolazytime}, {@oldalloc}, {@usrquota}]}, 0x0, 0x515, &(0x7f0000000c40)="$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") r0 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregs(0x2, r0, 0xffff000000200005, 0x0) (async) ptrace$getregs(0x2, r0, 0xffff000000200005, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x2, 0x5003) 1m37.908750841s ago: executing program 0 (id=6531): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x110) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES8=r1, @ANYRES16=r3, @ANYRES32=0x0, @ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="726e8b0bab926a81e12f069d10505e6bc40a52a7856223b9e3936bd4e6a4094df8f77c4a494b97624fe71eb7453029a18a8e139946b377ee5db86a8d9b06475fec60e04950c688461d4736da4309e7727112a14de959ad0d25fab88d6c9ef1ad40b00553e44f9c570b252faa0228ac8f31d75d05"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r3}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r4) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) umount2(&(0x7f0000000000)='./bus\x00', 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x40, 0x0, 0x9, 0x101, 0x0, 0x0, {0x6, 0x0, 0x8}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xc}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfffffff7}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xfffffff8}}, @NFCTH_TUPLE={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$tipc(r3, &(0x7f0000000700)={&(0x7f0000000240)=@id={0x1e, 0x3, 0x1, {0x4e23}}, 0x10, &(0x7f0000000680)=[{&(0x7f00000002c0)="63749fc66eed666c30fa9cf04c217f0d2610e405016daa01d3fbbb99ad06e68c45f3f4eeeae17c0d795b09ee2441c6be8db8c0aec7a81fe16f4dfcef8d33810944b2bd405c8e8b883536661909721bcd046d00fcab422f64fd2b4d36ed7e30ab5544dd4b3fccdb2aece24e7495e89e3a45cdb75778e65f6836a54b08d4fc16f4f4c298fd87f2fc689c1162d7ff79c3d8fefb3e34b43ae8c739ae7316c2ad59bb41909c06c45495da1ef91ea23f420f84a34cf27ce8e2c3c1e86aebcb4ef6a4ce7f1e4d95b01a44873ed6a44e2deb59bbb1be189d0929fe8ea7a1", 0xda}, {&(0x7f0000000480)="fd9603625ca49f774316caabf13da968b6b1d41e55b4e83ff39fd3", 0x1b}, {&(0x7f0000000580)="b8536301955f1ca8143345c34e0a8909abade309c1e94e928e951909ee0b81ccc0992b94cc1a29b2bcdff4e3cce6c315af8d94fe2947076fde421f1a282998946567b6d00d5009a74825c41714e9a9561223d0f4710f2901f28b4586d005da9472f564477a27a590fdd7e05b0ae277a3578538c45eb39777423dd51a0fcbf780c7863a6ac3899a83ef436d78d1bb56a2f520814a61db0656e963d583332782fcd4431f5b7348541b4616b8490a8d0d1b6841c6bd5c6f9e1ae031fb0dd63ff809090f056b379b8cd6b5f7a3ee8a5ff953b0783de29a6cf7675d08100f489932cf", 0xe0}], 0x3, &(0x7f00000006c0)="b300f786e72b6c08ba523e334036a2d3b5d86f6d15082aef267c72a0b902779628bac1bdc6221af4fd99b8", 0x2b, 0x1000}, 0x40000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) 1m37.690295368s ago: executing program 0 (id=6533): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080), 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8, 0xfc2bd, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b33000000000000000005000000080003"], 0x38}}, 0x0) 1m37.624523979s ago: executing program 33 (id=6533): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080), 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8, 0xfc2bd, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b33000000000000000005000000080003"], 0x38}}, 0x0) 24.964861203s ago: executing program 4 (id=7036): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1000000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x51, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x15}, 0x2c000014) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 22.603937967s ago: executing program 4 (id=7047): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x12000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x81, 0x0, 0x4000, 0x1}, 0x10) ioctl$TIOCMGET(r0, 0x80045440, &(0x7f0000000280)) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0xd8, 0x30, 0x51b, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_skbmod={0x3c, 0x1, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_skbmod={0x84, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x58, 0x6, "3c12670f2ecaed506013ab892168fca329b8e1d71ff42a5fd75c2c0bde12ae246d7552d87cef8e67a5248ef4a08b74c76b995c12744aef6a37c8e79f4421a3955047ab6396fa1fbb8a7937f69dc160cee83c9f5f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xd8}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0xb378, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x6, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0xee01, r4}}, './file0\x00'}) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}}, 0x800) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000280)={'wg2\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x21200, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x9}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x80) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000000906010200000000c9a0fd516d46671f0900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414190c000280080001406401010124d5644523512c69c6afa09c4aa1f3d8b08e"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5758661d46}, 0x4) 22.428821132s ago: executing program 4 (id=7050): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002980)={0x38, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) 22.377500185s ago: executing program 4 (id=7052): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="700000005e7f928d8aa43ec025e7339bfcb6bc4e5e6f90b382424bed", @ANYRES16=r2, @ANYBLOB="020026bd7000ffdbdf25090000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000000800090002000000080001007063690011000200303030303a30303a31302e300000000008000300020000000800090000000000"], 0x70}, 0x1, 0x0, 0x0, 0x5}, 0x20000040) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000500)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x6, 0x476, &(0x7f0000000680)="$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") r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r4) r5 = syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0xff0a, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$char_usb(r7, &(0x7f0000000600)=""/156, 0x9c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_rdma(0x10, 0x3, 0x14) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000714010000000000000000000800", @ANYRES32=r10], 0x30}}, 0x94) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000005, 0x11, r8, 0x55e9d000) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x15a8, 0xd0, 0x0, 0x12e0, 0x0, 0xd0, 0x14d8, 0x14d8, 0x14d8, 0x14d8, 0x14d8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x80}}}, {{@ipv6={@mcast1, @local, [0xffff00], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@empty, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x1100, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x0, './cgroup.cpu/syz0\x00', 0x5, {0x31b}}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}}, @inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xfd}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1608) sendmsg$nl_generic(r0, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x2, 0x9, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xbc02}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x20004000) 21.820376252s ago: executing program 4 (id=7056): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0xf, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$netlink(0x10, 0x3, 0xb) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x800000000000002, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4, 0x4}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000480), 0x9, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x18, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x40088c0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x558}}, 0x40) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000e40)}], 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x0, 0x0, &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000001, &(0x7f0000000300), 0x2, 0x1}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r4 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000180)) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, 0x0, 0x9, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @NFCTH_TUPLE={0x44, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x14, 0x4, @local}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4000}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 20.900870741s ago: executing program 4 (id=7062): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', '', [], 0xa, "6c9cf7b8984c01a4cd95c04a6f862f8d295a0ce7675d270a9fed608a49cf68e9928be30300519c602b50a1cd6b7a6014529ccd5f4060319be1d47868c8fcd94ff177169ad4228c7e7e000000000000000000000000b909"}, 0x5b) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x7, 0x100}, 0x200204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x24000000000, 0xffffffffffffffff, 0xa) open(0x0, 0xecb42, 0x83) pwritev2(r0, 0x0, 0x0, 0x6400, 0x18b, 0x3) 20.848794233s ago: executing program 34 (id=7062): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', '', [], 0xa, "6c9cf7b8984c01a4cd95c04a6f862f8d295a0ce7675d270a9fed608a49cf68e9928be30300519c602b50a1cd6b7a6014529ccd5f4060319be1d47868c8fcd94ff177169ad4228c7e7e000000000000000000000000b909"}, 0x5b) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x7, 0x100}, 0x200204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x24000000000, 0xffffffffffffffff, 0xa) open(0x0, 0xecb42, 0x83) pwritev2(r0, 0x0, 0x0, 0x6400, 0x18b, 0x3) 8.675274917s ago: executing program 7 (id=7096): r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000040), 0xfd, 0x269, &(0x7f0000000a00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x81) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000000c0)={0x3, 0x1731b, 0x3}) setuid(0xee01) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="28000000000000002900000004"], 0x28}, 0x4004004) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000080)={0x9, [0x0, 0x9, 0x38, 0x4, 0x2, 0x8001, 0x7, 0x4, 0x8]}, &(0x7f00000000c0)=0x16) 8.175802973s ago: executing program 7 (id=7101): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x3a5, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6, 0xb}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x514, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x7, 0x4fff, 0xb709, 0x58c, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_ACT={0x4ec, 0x7, [@m_mirred={0x184, 0x5, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x9b, 0x5, 0x6, 0xffffff80}, 0x3, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x40, 0x2, 0x2f, 0x4}, 0x6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x3, 0x3, 0x6, 0x1}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x935, 0x8000, 0x3, 0x3, 0x23}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x4, 0x5, 0x5a4, 0x7f}, 0x3, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8000, 0x7, 0xffffffffffffffff, 0x63, 0x4}, 0x2}}]}, {0x97, 0x6, "6dc5d4e28d7270e7c01759350e96a54139ab0947d6b49a099d928dbb5553e797537a8a7bcec682dc7d4c34ad0d418c693c63b16d9fc8eaa536cc6736bd266546adec041d3784e962d090695ad1288d4c9c2b5c6a8fd20fb6ba31c884134505b389859aa82f1735f62469c956f9df391e243caa71c5d3203d127dc6f0919df1dc128e77ffacfa4a4ca5885b2e9f70ea2df2a5f4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x5c, 0x1c, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, {0x23, 0x6, "b93131299c45ee80e6217f4b155003d81d7dfb67703a30039e135eef185109"}, {0xc}, {0xc, 0x8, {0x5}}}}, @m_csum={0xd0, 0xf, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x9812, 0x4, 0x4, 0xd8}, 0x33}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x9, 0x20000000, 0x10001}, 0x61}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x4, 0x7, 0x5, 0x2}, 0x1f}}]}, {0x50, 0x6, "d860a011f67a9459a269b19671cd29065a597b3fa07c65ce88d74cf563f6f3793af7ad5b06f90017edc28b4cf5cc2e22a9cff972b96b2abde30381bb6b300c7999fffe34a60c28c8efb9bf68"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ct={0xec, 0x10, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x7, 0x3, 0x8, 0x6, 0x5}}, @TCA_CT_LABELS={0x14, 0x7, "8eecbc51eadfcc13527407e01bb139e9"}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast2}, @TCA_CT_ZONE={0x6, 0x4, 0x7}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @empty}]}, {0x68, 0x6, "f0697837520c9d7acf451ddea8461e0f3fa8670a6958ec215cd8a5ea83a015e71e0b311f7060abf5f3455410f7c46fbf496b28de42e03f211d2cff61e53bba2692ca4fc6d37bed6aad63247f9526b06650860c9b5412e5f494e5554d86255ab2f34b6492"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x14c, 0x15, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6b, 0x4, 0x7, 0xa1ad, 0x4}}}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}]}, {0xfc, 0x6, "e3095ef78bad55d7e08d0ddf7a97d4d2a3a8da30a7e60a2aa09927734c96e4b3950a35661eecb7e977c93a4f6e37ceec1b9d731454f85a4fe4405fc0c33810d47179db695902654410d749563947da165cbd04f57a982200dfb21f4395a490633b6dddf75b902befc87b66a0c24cd028b73f09a61d4fa8b92f049d6f282423fd51b7495853d17df14436bf7c81422b5be36fb2329cb0e5b7a1a464a6c3b787963a1dae1f6d3ebcb93cded57e58491f635fb7bf96cba3cb9ebfeffabd5ee487e2c78024d77302ea3701041f337e0a94ed4fa3c5fa8ae112c920aaab29203e2a866c8c736b504859634b9f07b446709d8febd5142d4a996cb9"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x140c, 0x1, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004810}, 0x40) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x44, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x7, 0x6, @mcast2}]}, 0x44}}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r5, 0x420, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8001) 7.92476069s ago: executing program 7 (id=7103): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0xe, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000001c0)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="b0000000100001006cbd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db20200305b0100140003006e657464657673696d3000000000000074001680700001800c0007000900000001000000280001"], 0xb0}, 0x1, 0x0, 0x0, 0x44010}, 0x4000040) unshare(0x60600) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000", @ANYRES32=r6, @ANYBLOB="06001c004e2100", @ANYRES32], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) sendmmsg(r5, 0x0, 0x0, 0x2000000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x5, 0x0, &(0x7f0000000100)="e0b9547ed3", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40200, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r8, 0x29, 0x35, 0x0, 0x0) r9 = io_uring_setup(0x47a7, &(0x7f0000000240)={0x0, 0xc796, 0x80, 0x400003, 0x376}) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r10, 0xfffffffc) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) 7.673118558s ago: executing program 7 (id=7106): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4024074) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x48) open_by_handle_at(r1, &(0x7f0000000040)=@FILEID_BTRFS_WITH_PARENT={0x28, 0x4e, {0x81, 0x5, 0x4, 0x1, 0x91b8, 0xfff}}, 0x600800) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000040)="4dff000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001302564aa58b9a64411f6bbf44dc48f57", 0x39}, {&(0x7f0000000100)="884110b7cd5b4a3ada948c43e3b2639288633907e771d287cc148ca251b097678667197367311ae750cf3e439d841980aae1bc37b02d396f397e4f7a042cbcd307f93e0d50e685862537f90343296d917f6a82a7f6786f04c373782ef21850c64ac426b4883ff4f5d28b2db6c6a7", 0x6e}], 0x2) 7.644781659s ago: executing program 7 (id=7107): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=0x0) wait4(r1, 0x0, 0x4, &(0x7f0000019340)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x1}, 0x4580, 0x0, 0x800000, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000013c0)=ANY=[@ANYBLOB='utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f6a6f6c6965742c6e6f636f6d70726573732c73686f776173736f632c6d61703d61636f726e2c6d6f64653d3078303030303030303030303043303030382c6d61703d6e6f726d616c2c6d6f64653d3078303030303030303030303030303030342c6d61703d6f66662c646d6f64653d3078303030303030303030303030396662632c696f636861727365743d64656661756c742c666f776e65723c68f4355b55fca2b2d23044a03fee37cc47cca980766fbdf61f12a7a21e4981b8222a29fe5c4bf0d05630773a8577c929f60e4a151d3244b7f95dc2cdc67bc617c7623dd32683079d11f9faf501afd25b4e8e1c3f5155e1cc6d90cc9d49d06b5d38939574c94e10d91517ce774610d79434364c1f7ab8d2669bc899632c19bd721fa526ddf71812e81a209c89738129cf67f74c5392fd32c847046896de34cb3875127161a6ec3a51cf0da42f2bf3e47f5cd08003e25d9da8638d0c897d7631b11514d0", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x2, 0xa45, &(0x7f00000007c0)="$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") setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) unshare(0x6020400) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') fallocate(r7, 0x40, 0x8000, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010002104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c33cedcbd0007007f0000010a000100aa"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x40000000015, 0x805, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd26, 0x8000, {0x0, 0x0, 0x0, r8, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'ip6gre0\x00'}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @empty}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @remote}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2204c038}, 0x0) 6.185192665s ago: executing program 6 (id=7109): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 6.071550829s ago: executing program 6 (id=7110): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$kcm(0xa, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x7dff, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) syz_read_part_table(0x1057, &(0x7f00000006c0)="$eJzszzGKwlAUBdCbzyTkV1PNEqayt3YT1paCpW4gja3uw01GYkJ2ICKc09zHf5cPL3xU0+V02ExTTTKsz0v+jElK7ufbts3lmKSbFzWp5X9alqX6O0dZv+7n2CV9M9bXPLTJ9S/j0ij7x7vvAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBv8AwAAP//0G4J+w==") sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x522, &(0x7f0000000440)="$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") r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="88000000", @ANYRES16=r6, @ANYBLOB="050026bd7000000000000f00000008000300", @ANYRES32, @ANYBLOB="4c000e001c"], 0x88}}, 0x20000014) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x5, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r7}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x80000) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40005}, 0x20040001) 5.674376761s ago: executing program 7 (id=7111): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@mpol={'mpol', 0x3d, {'interleave'}}, 0x4e}]}) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x7ff80000}, 0x0, 0x1, 0x0, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f2435f0100088000000000950800", 0xe, 0x1, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'dummy0\x00', 0x1}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x44fb, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}]}}, &(0x7f0000001b80)=""/4090, 0x3a, 0xffa, 0xa}, 0x28) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0x2d, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0xfffffffffffffdb1, 0x8, 0x3e}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) syz_emit_ethernet(0x97, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6151be0000612f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be00060001bf3f030b7d27010088a80090000b003e000086dd000986dd", @ANYBLOB="36ed"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 5.049137552s ago: executing program 6 (id=7115): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x4}]}, 0x34}}, 0x4000010) 4.797230749s ago: executing program 6 (id=7118): io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x2d3}) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x180, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x150, 0x2, {{0x1, [0x1, 0x9, 0x0, 0x0, 0x7, 0x0, 0x40, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfffd, 0x8, 0x0, 0x5c4, 0x7ffc, 0x20, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x1000]}, [@TCA_MQPRIO_MIN_RATE64={0x58, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x9}, {0xc, 0x3, 0x7}, {0xc, 0x3, 0x8}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0x7}, {0xc, 0x3, 0xffff}]}, @TCA_MQPRIO_MAX_RATE64={0x64, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x6c6f}, {0xc, 0x4, 0xffff}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0xfffffffffffffffc}, {0xc, 0x4, 0x6}, {0xc}, {0xc, 0x4, 0x100000000}, {0xc, 0x4, 0x6}]}, @TCA_MQPRIO_MIN_RATE64={0x34, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x9}, {0xc, 0x3, 0x3}, {0xc, 0x3, 0x401}, {0xc}]}, @TCA_MQPRIO_MODE={0x6}]}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000000) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="a03dcf3a", @ANYRES16, @ANYBLOB="00082dbd7000fcdbdf251800000004000280050006000000000008000700090000007000018008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="1400020076657468305f6d6163767461700000000800030001000000080003000100000008000300010000001400020076657468315f746f5f6873720000000008000100", @ANYRES32=r1, @ANYBLOB="1400020065727370616e3000000000000000000008000700f8ffffff"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x0, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x5}, 0x200, 0x1ff, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a8001600a400014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, @can, @qipcrtr={0x2a, 0xffffffffffffffff, 0x8000}, @sco={0x1f, @none}, 0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='vxcan1\x00', 0x1, 0xfeff, 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000640)={&(0x7f0000000380), 0xc, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB=')\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000828bd7000ffdbdf25030000000c00068006000100020000000800030000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x44401) r7 = socket$inet6(0xa, 0x6, 0x1000) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021ec0700000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000c0070380bc0700800800034000000002b0070b802c0001800a0001"], 0x870}}, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f00000001c0)=0xc) ioprio_set$uid(0x3, r11, 0x2004) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="030f000000000000000034000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) 4.498325339s ago: executing program 5 (id=7121): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=0x0) wait4(r1, 0x0, 0x4, &(0x7f0000019340)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x1}, 0x4580, 0x0, 0x800000, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000013c0)=ANY=[@ANYBLOB='utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f6a6f6c6965742c6e6f636f6d70726573732c73686f776173736f632c6d61703d61636f726e2c6d6f64653d3078303030303030303030303043303030382c6d61703d6e6f726d616c2c6d6f64653d3078303030303030303030303030303030342c6d61703d6f66662c646d6f64653d3078303030303030303030303030396662632c696f636861727365743d64656661756c742c666f776e65723c68f4355b55fca2b2d23044a03fee37cc47cca980766fbdf61f12a7a21e4981b8222a29fe5c4bf0d05630773a8577c929f60e4a151d3244b7f95dc2cdc67bc617c7623dd32683079d11f9faf501afd25b4e8e1c3f5155e1cc6d90cc9d49d06b5d38939574c94e10d91517ce774610d79434364c1f7ab8d2669bc899632c19bd721fa526ddf71812e81a209c89738129cf67f74c5392fd32c847046896de34cb3875127161a6ec3a51cf0da42f2bf3e47f5cd08003e25d9da8638d0c897d7631b11514d0", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x2, 0xa45, &(0x7f00000007c0)="$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") setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) unshare(0x6020400) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') fallocate(r7, 0x40, 0x8000, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010002104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c33cedcbd0007007f0000010a000100aa"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x40000000015, 0x805, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd26, 0x8000, {0x0, 0x0, 0x0, r8, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'ip6gre0\x00'}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @empty}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @remote}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2204c038}, 0x0) 3.358861415s ago: executing program 1 (id=7122): open(0x0, 0x200, 0x41) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$pptp(0x18, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2, &(0x7f0000000000)=@raw=[@alu={0x3, 0x0, 0xd, 0x1, 0x8, 0x10, 0x129}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x829}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x110, 0x10, 0x7, 0x0, 0x0, {{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0x4e20, 0xc1a, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff, 0x3}, {0x3, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0xb}, [@coaddr={0x14, 0xe, @in6=@remote}, @offload={0xc, 0x1c, {0x0, 0x6}}]}, 0x110}}, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @local}}, 0x1e) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000040)=0x1) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r7, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006c00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000580), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x200000d4}, 0x24008000) 3.145639871s ago: executing program 1 (id=7124): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x8a, &(0x7f00000000c0), 0x4) ioctl$XFS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000180)) 2.496476882s ago: executing program 5 (id=7127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x80, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x80}}, 0x0) 2.370491216s ago: executing program 5 (id=7128): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x98e4, 0xfffffffd}}, 0x2e) 2.2411093s ago: executing program 5 (id=7129): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x4}]}, 0x34}}, 0x4000010) 2.202345811s ago: executing program 5 (id=7130): migrate_pages(0x0, 0x7ffb, &(0x7f00000000c0)=0x1, 0x0) socket$kcm(0x29, 0x7, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f00000000c0)) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4010) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, 0x0, 0x0) socket$inet6(0xa, 0x80000, 0x94c6) r4 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r4, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x203, 0x0) shmdt(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r5) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x2000c010) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000330001072cbd704855"], 0x14}}, 0x24040094) 2.102582424s ago: executing program 1 (id=7131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x2c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000080) 2.062195415s ago: executing program 1 (id=7132): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0xe2000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_macvtap\x00', 0x20}) socketpair(0x1, 0x803, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000005000000080000000f"], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89fc, &(0x7f0000000080)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737908000000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) 2.060671715s ago: executing program 6 (id=7133): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000004500)={0x0, 0x0, "9ed4561387de657c2b5df8a70979904e43e11eccd8082bbf3ec183f6b83f06861be4f5195bae5a78c0be51a15d47116ea65c5b79e80a372aeb384c14650b4754a1576c1cdfb7fc6a6a1b79f8d0c3dbd11f0566f3f0fae607c6e0f865d628f936f10a7b38def6f16d06f16770c495260a26fabdfa83a8aa085605a4f0a42f0782d1a806fdd9081e119c84cbbd087625379f6e314bc5fc82981ecc634ff5af9b1f3620af331c00f12377327e3eedc78242637238a15ecd61386caac895de99db77ab1b160d48e004d8d24a0d64d095d7af3c4c1761e2056007acaab8676d24fe6f043407db2defec9474c1dc66aaf31f75f90d61c5f903e9349ab69dc003d2a488", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{r4, 0x4fa9, 0x2, 0x7, 0x6, 0x10001, 0x2, 0x9, 0x0, 0x3, 0x7fff, 0x401, 0x9, 0xffffffffffff3d7a, 0x4}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000000640)={0x2, [{0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x43, "b71c8ad399b8d9"}) write$selinux_validatetrans(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='system_u:object_r:xconsole_device_t:s0 system_u:object_r:logrotate_exec_t:s0 00000000000000000001 sy'], 0x80) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4b, 0x1, {0xf, '\x00', 0x2, 0x4, 0x8000, 0x733}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4546cfee17049510}, 0x4008000) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0xffffffffffffdffb) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r1, 0x41015500, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000206030000000000000000e0060000000c00078008000640047708150500010006000000050005000200000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004090) kexec_load(0x2, 0x3, &(0x7f00000026c0)=[{&(0x7f0000000280)="4c289b38242969fce4db3b7ddb009643ff16bac6e1db0113e1335ccfae23f2048c9d5e0af0623c188fbbb902f84da82aefa22079f71a7c2f18", 0x39, 0x3, 0x10000}, {&(0x7f0000001640)="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", 0x1000, 0xffffffff, 0x9}, {&(0x7f0000002640)="836d04ee0acee0910869a578052643c170883a136ee3eda1f63eb3f3cb95901f07815124b131b36578bb78429c8a0e39f40cef2565d10dd73098f3f8a0892f0376431ff8f5e0c6b3a6b856a99999cf96ce32a4b06933ce59222a", 0x5a, 0x3d30, 0x9}], 0x80000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r9, 0x0, 0x0, 0x8ffff) socket$nl_generic(0x10, 0x3, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(0x0, 0x0, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, 0x0, &(0x7f0000000200)) 2.030097416s ago: executing program 5 (id=7134): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x200201) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000140)={{0x6, 0xfe}, 'port0\x00', 0x88, 0x0, 0x4, 0x9, 0x0, 0xc, 0x200000, 0x0, 0x2}) r1 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x300, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f0000000040)=0xc8) fstat(r2, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdirat(0xffffffffffffff9c, 0x0, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x20, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_REPLY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044841}, 0x10) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x2000000, &(0x7f0000000640), 0x1, 0x5b9, &(0x7f0000000680)="$eJzs3W2IHHcdB/Df7N6mebiaNLZqa2xOQ20gdPdyuYREfGGJD7UmtaL4IhTCkdvuhezdnrkN9LaCLb4pCiL4RgShYl9YEQ3kTaXU9kWLbxSU+kClxoAKIhStFERQV2YfrmszaYr3MHjz+cDc/ec/c/v/7y3fndmd/8wEUFgT6Y8kYjwiLkXEzv7sf68w0f/VOXRxLp2S6HY//Zekt97soYtzw1WHf7cj/TEWsTUidh9PYl/l6naXljvnZprN+vnBfK09v1hbWu7cdXZ+plFv1BcOH50+NnVk+uj02j3XyZ9uv+WPd9x35Ynn//7Pb/76yPfT/o4Plo0+j7UyEROD/0klbhqpH0si7l3rxnJS7r/UccdIXTKWY4d4y7rd3d9LX7+3R8S+Xv53Rjn6L95LTz/wt53xy3vy7iOwfrpD2Ytf7QKbVqm3D5yUqhHRL5dK1Wp/H/7m2F5qtpbaBx5sXViY7e8r74pK6cGzzfrk4LPCrqgk6fzBXvn1+ak3zB+K6O0DP1be1puvnmk1Zzf6zQ7oGY+4fOlzZ7bseEP+/1Tu5x/YvNL8/+KFp55Ny6+V8+4NsJHS/H/3tflPhPxD4cg/FJf8Q3HJPxSX/ENxyT8Ul/xDcck/FJf8Q3HJPxTXMP/3nzwZ95882e0Mzn9faDXOnptbPDY1WZ2/cKZ6pnV+sdpotRq9M3bmr/+4zVZr8eBUXHio1q4vtWtLy53T860LC+3TvfP6T9czLgUA5ODUla333rT3uZeSiHjkA9t6U2rLYLmswubW7SaR9znIQD589Ificqk2KC6f8YHkOsu3XmtBc+37AmyMUt4dAHJz562O/0FR+f4fisv3/1Bc9vEB3/9D8fj+H4pr/Br3/7px5N5dkxHxtoj4Sblyw/BeX8D/r/GIy5e//dnayn24FRQUFFYKeb9DAevt9dDn3RMgL7OHLs4Np41q85nGRrUEZHnl7v4goDT3ncHUXzK2cmygsk7jhF5+LGIifvjbx/fPldMpBu9D69AUkOGRRyPiXVnb/6R3bGDXYL3d/dXi5oi4JSLeERHvXGXbX/9Umv8X6qN18g8b563m/9aIuD0ibouId0fEnoh4zyrb/vmlNP+/2jZaJ/9QDJ9/Pu8eAHn5+FN59wDIyyljDKCwvvNw3j0A8vL0D/LuAZCXr7yYdw+g2J67OyIms47/lXrH+4cqg+sC3jC4FsC2iNgeETsG5xDeODhHcOfIMcPrOf3JiIm4/UejdY7/wcYZjv/rXDX+r7Qy/q8cEXtX0cYzHxz/clb9zJ40/088PBz/l05p+8OxgMD6euXRiNsy85+sjPlNIs1pxHv/xzYmvnDlyaz6F+9LH7fyM/mHfHS/FfH+yM7/UFqqtecXa0vLnbt69/Fu1BcOH50+NnVk+uh0rXeJkNrwQiEZTvz11QNZ9S9Ppfn/xmH5h3yk2//t18j/6P7/+1bRxvGvfelUVv3479P873n2zfNf+vOW5DO9+eF9CR6aabfPH4zYkpy4un5qFR2FTW6YkWGG0vzv35f9+X/34G/S7f/xiPhwur8QEf+KiH9HxEci4qMR8bGIuOdN2vzqnY0rWfW/ezLN/+PnbP8hH2n+Z6+z/U9//2MVbRzY/+MvZtV/aG+a/+pv/nDigbF0kn8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtbe03Dk302zWz69jIe/nCAAAAAAAAEXxnwAAAP//xOQ08g==") lsetxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v3={0x3000000, [{0xeb1d, 0x8}, {0x8c, 0x5}]}, 0x18, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwritev2(r7, &(0x7f00000000c0)=[{&(0x7f0000000000)="ffb9", 0x2}], 0x1, 0xe7b, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) syz_init_net_socket$x25(0x9, 0x5, 0x0) 1.828028423s ago: executing program 1 (id=7135): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010021bd7000ffdbdf250c0000000800040000000002080005000000000008"], 0x2c}, 0x1, 0x0, 0x0, 0x4004011}, 0x4052) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x68190, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x1c}, 0x10d1e8, 0x7, 0x0, 0x3, 0x6, 0x6, 0x7ffb}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, r3, 0x731, 0x0, 0x0, {0x38}}, 0x14}, 0x1, 0x2, 0x0, 0x1bb5818a0d53d7b}, 0x40) 1.738306966s ago: executing program 2 (id=7136): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x25dfdbfd, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) 1.615926629s ago: executing program 1 (id=7137): futex(&(0x7f000000cffc), 0xc, 0x3, 0x0, &(0x7f0000048000), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getdents(r0, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000040)={[{@usrquota}, {@delalloc}, {@acl}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50a, &(0x7f00000002c0)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000b00)={'#! ', './file0', [{0x20, '&-'}, {0x20, 's\b\x00\x00\x00\x00\x00\x00\x00evm\x00\xa4\xab\xba\x05\xab\xdd\xa6(\x91\xa3\xbb\xeeT\xe7\x84\xa0Y!\b\xa0\x1a\xa7\xc0k\r\x11\xd3\xde\x98'}, {0x20, 'usrjquota='}], 0xa, "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"}, 0x175) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file1\x00', 0x0, 0x1) fcntl$setlease(r2, 0x400, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) setxattr$security_evm(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880), &(0x7f0000000a40)=ANY=[@ANYBLOB="041102142c047b3ebd6d0ca87ac3c608597d9332bc3e1c930c4032df4d153188443098887df41c42e73bcef53837ca6b71f925447e49a9747f0659467ceea3e72401e64124b72c91ce54f57ef723ed15ec698de7bb63fee7faa0b71b8ace1f0a30d2932356ccc856aac8570bef4cdaa79b8ff47dc87217e93b72f6cec3e95060559814d704fc42c41d4ba543"], 0xc, 0x1) fcntl$getflags(r4, 0x401) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x10010, 0xffffffffffffffff, 0xfffff000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f00000000c0)={[0xfff]}, 0x8, 0x80000) setxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180), &(0x7f0000000800)={'U-', 0x2}, 0x16, 0x3) ppoll(&(0x7f00000000c0), 0x2000000000000248, &(0x7f00000002c0)={0x0, 0x989680}, 0x0, 0x0) lseek(0xffffffffffffffff, 0x400, 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="0400000004000000040000000500010000000000", @ANYRES32, @ANYBLOB="f6b768c1f7c30c375d00339c9c00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES8=r0], 0x50) r6 = socket$unix(0x1, 0xfffffffffffffffe, 0x0) bind$unix(r6, &(0x7f00000003c0)=@abs={0x1}, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r5, 0x58, &(0x7f0000000340)}, 0x10) prlimit64(0x0, 0x7, &(0x7f0000002640)={0x3, 0xa5b1}, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3e, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) 1.58683261s ago: executing program 2 (id=7138): open(0x0, 0x200, 0x41) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$pptp(0x18, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2, &(0x7f0000000000)=@raw=[@alu={0x3, 0x0, 0xd, 0x1, 0x8, 0x10, 0x129}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x829}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x110, 0x10, 0x7, 0x0, 0x0, {{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0x4e20, 0xc1a, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff, 0x3}, {0x3, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0xb}, [@coaddr={0x14, 0xe, @in6=@remote}, @offload={0xc, 0x1c, {0x0, 0x6}}]}, 0x110}}, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @local}}, 0x1e) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000040)=0x1) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006c00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000580), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x200000d4}, 0x24008000) 783.245786ms ago: executing program 2 (id=7139): syz_open_procfs(0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x400002, 0x111, 0x1}, 0x18) getdents(r0, &(0x7f0000000480)=""/4098, 0xfffffffffffffda4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0xae582, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x110002, 0x5, 0x1, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r2, 0xb) socket$inet6(0xa, 0x805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in={{0x2, 0x4e24, @remote}}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) r8 = getpid() r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r9, &(0x7f0000000500)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f00005f2000/0x2000)=nil], 0x0, &(0x7f0000000200), 0x0) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)=ANY=[@ANYBLOB="440000001000000826bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="b34001009000000008000a00", @ANYRES32=r3, @ANYBLOB="140012800c0001006d616376746170000400028008000500", @ANYBLOB="ffa1b4f7a07606c29b6f3b984e9f4ca049bc7cd8d25c4f52ec2925bf6d18e667e8d42c3d09e9098e04e46cbc764be784a3fbdc9d39eed91ae1c7ab0fe4fbbc0f0f2b17ebd385425f7b15474254176b410ef54e3ec0d051738511d955a35049e3e939ed6f2f195c9f0a4b7c7837c9e4723465184fe6166ab90942c06c6bf09669ab6770b2009d401fab3de5836f"], 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x20000004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x1010, 0xffffffffffffffff, 0x28f41000) 240.964303ms ago: executing program 2 (id=7140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x81000000, 0x200400dc}, 0x0) 173.273485ms ago: executing program 2 (id=7141): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x5, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000001740)=0x1000004, 0x4) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000000080)={&(0x7f0000000140)={0xa, 0xa, 0x4, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000002900000008"], 0x18}, 0x922bac8552bdad9e) 218.68µs ago: executing program 6 (id=7142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x2c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000080) 0s ago: executing program 2 (id=7143): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x11dc0, &(0x7f00000030c0)=ANY=[], 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) kernel console output (not intermixed with test programs): 184] loop6: detected capacity change from 0 to 4096 [ 1101.471127][T28184] EXT4-fs: inline encryption not supported [ 1101.513907][T28184] EXT4-fs: Ignoring removed mblk_io_submit option [ 1101.545812][ T28] audit: type=1400 audit(2000524605.453:12284): avc: denied { create } for pid=28193 comm="syz.5.6581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1101.581389][T28184] EXT4-fs: Ignoring removed bh option [ 1101.609343][T28184] ext4: Unknown parameter 'smackfsroot' [ 1101.665436][T28194] netlink: 6024 bytes leftover after parsing attributes in process `syz.5.6581'. [ 1101.684795][ T28] audit: type=1400 audit(2000524605.453:12285): avc: denied { allowed } for pid=28189 comm="syz.2.6580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1101.726400][ T28] audit: type=1400 audit(2000524605.481:12286): avc: denied { lock } for pid=28191 comm="syz.4.6579" path="socket:[86581]" dev="sockfs" ino=86581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1101.750661][ T28] audit: type=1400 audit(2000524605.537:12287): avc: denied { create } for pid=28189 comm="syz.2.6580" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1102.068127][T28201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6584'. [ 1102.077574][T28201] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6584'. [ 1102.096071][T24770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1103.091869][T28209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6585'. [ 1103.333788][T28214] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6587'. [ 1103.644574][T28222] netlink: 332 bytes leftover after parsing attributes in process `syz.4.6589'. [ 1103.741001][T28225] netlink: 'syz.5.6590': attribute type 12 has an invalid length. [ 1103.757536][T28220] loop6: detected capacity change from 0 to 8192 [ 1103.771305][T28225] netlink: 'syz.5.6590': attribute type 29 has an invalid length. [ 1103.784686][T28225] netlink: 148 bytes leftover after parsing attributes in process `syz.5.6590'. [ 1103.794705][T28225] netlink: 59 bytes leftover after parsing attributes in process `syz.5.6590'. [ 1103.815748][T28220] loop6: p1 < > p2 p4 < p5 > [ 1103.828279][T28220] loop6: partition table partially beyond EOD, truncated [ 1103.852524][T28220] loop6: p1 start 134217728 is beyond EOD, truncated [ 1103.866040][T28220] loop6: p2 size 591360 extends beyond EOD, truncated [ 1103.893607][T28220] loop6: p5 size 591360 extends beyond EOD, truncated [ 1104.138812][T28237] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6595'. [ 1104.174068][T28239] tmpfs: Bad value for 'mpol' [ 1104.183341][T28239] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1104.388278][T28219] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1104.465923][T28219] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1104.537787][T28247] usb usb7: usbfs: process 28247 (syz.5.6598) did not claim interface 0 before use [ 1104.961826][T28276] netlink: 'syz.6.6609': attribute type 12 has an invalid length. [ 1104.987354][T28276] netlink: 'syz.6.6609': attribute type 29 has an invalid length. [ 1105.011712][T28276] FAULT_INJECTION: forcing a failure. [ 1105.011712][T28276] name failslab, interval 1, probability 0, space 0, times 0 [ 1105.035665][T28278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.045445][T28276] CPU: 0 UID: 0 PID: 28276 Comm: syz.6.6609 Tainted: G W syzkaller #0 PREEMPT(full) [ 1105.045492][T28276] Tainted: [W]=WARN [ 1105.045557][T28276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1105.045574][T28276] Call Trace: [ 1105.045583][T28276] [ 1105.045594][T28276] __dump_stack+0x1d/0x30 [ 1105.045627][T28276] dump_stack_lvl+0x95/0xd0 [ 1105.045653][T28276] dump_stack+0x15/0x1b [ 1105.045673][T28276] should_fail_ex+0x263/0x280 [ 1105.045808][T28276] should_failslab+0x8c/0xb0 [ 1105.045851][T28276] kmem_cache_alloc_noprof+0x66/0x3f0 [ 1105.045894][T28276] ? skb_clone+0x151/0x1f0 [ 1105.045933][T28276] skb_clone+0x151/0x1f0 [ 1105.045994][T28276] __netlink_deliver_tap+0x2c9/0x500 [ 1105.046044][T28276] ? netlink_attachskb+0x2e2/0x660 [ 1105.046121][T28276] netlink_sendskb+0x126/0x150 [ 1105.046155][T28276] netlink_unicast+0x28a/0x680 [ 1105.046237][T28276] netlink_ack+0x4c8/0x500 [ 1105.046286][T28276] netlink_rcv_skb+0x192/0x220 [ 1105.046382][T28276] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1105.046424][T28276] rtnetlink_rcv+0x1c/0x30 [ 1105.046459][T28276] netlink_unicast+0x5a8/0x680 [ 1105.046496][T28276] netlink_sendmsg+0x5c8/0x6f0 [ 1105.046531][T28276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1105.046563][T28276] ____sys_sendmsg+0x563/0x5b0 [ 1105.046639][T28276] ___sys_sendmsg+0x195/0x1e0 [ 1105.046678][T28276] __x64_sys_sendmsg+0xd4/0x160 [ 1105.046713][T28276] x64_sys_call+0x194c/0x3020 [ 1105.046746][T28276] do_syscall_64+0x12c/0x3b0 [ 1105.046804][T28276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.046831][T28276] RIP: 0033:0x7f69c600ce59 [ 1105.046851][T28276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1105.046872][T28276] RSP: 002b:00007f69c4a67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1105.046892][T28276] RAX: ffffffffffffffda RBX: 00007f69c6285fa0 RCX: 00007f69c600ce59 [ 1105.046991][T28276] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000005 [ 1105.047009][T28276] RBP: 00007f69c4a67090 R08: 0000000000000000 R09: 0000000000000000 [ 1105.047033][T28276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1105.047047][T28276] R13: 00007f69c6286038 R14: 00007f69c6285fa0 R15: 00007ffda4201908 [ 1105.047068][T28276] [ 1105.053251][T28278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.353768][T28278] loop5: detected capacity change from 0 to 1024 [ 1105.379024][T28278] EXT4-fs: Ignoring removed bh option [ 1105.410412][T28278] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1105.463847][T28286] loop6: detected capacity change from 0 to 4096 [ 1105.491015][T28286] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1105.545076][T28286] EXT4-fs (loop6): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 1105.592737][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 1105.592753][ T28] audit: type=1400 audit(2000524609.250:12358): avc: denied { create } for pid=28291 comm="syz.1.6612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1105.627113][T28286] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1105.667412][ T28] audit: type=1400 audit(2000524609.316:12359): avc: denied { write } for pid=28285 comm="syz.6.6611" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1105.715118][T27942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1105.739023][ T28] audit: type=1400 audit(2000524609.316:12360): avc: denied { remove_name } for pid=28285 comm="syz.6.6611" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1105.781392][ T28] audit: type=1400 audit(2000524609.316:12361): avc: denied { unlink } for pid=28285 comm="syz.6.6611" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1105.806648][ T28] audit: type=1400 audit(2000524609.447:12362): avc: denied { create } for pid=28296 comm="syz.6.6613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1105.838884][ T28] audit: type=1400 audit(2000524609.475:12363): avc: denied { write } for pid=28296 comm="syz.6.6613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1105.964131][T28264] syz.2.6607 (28264) used greatest stack depth: 7416 bytes left [ 1105.984534][T26750] IPVS: starting estimator thread 0... [ 1105.999028][ T28] audit: type=1400 audit(2000524609.615:12364): avc: denied { bind } for pid=28303 comm="syz.6.6616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1106.112714][T28305] IPVS: using max 2400 ests per chain, 120000 per kthread [ 1106.139962][T25692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1106.260763][ T28] audit: type=1400 audit(2000524609.868:12365): avc: denied { create } for pid=28315 comm="syz.6.6621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1106.344630][ T28] audit: type=1400 audit(2000524609.896:12366): avc: denied { ioctl } for pid=28315 comm="syz.6.6621" path="socket:[86007]" dev="sockfs" ino=86007 ioctlcmd=0xf512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1107.392043][ T28] audit: type=1400 audit(2000524610.055:12367): avc: denied { map } for pid=28313 comm="syz.5.6620" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=86889 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1108.310909][T28334] __nla_validate_parse: 6 callbacks suppressed [ 1108.310930][T28334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6626'. [ 1108.333489][T28323] Set syz1 is full, maxelem 65536 reached [ 1108.632218][T28344] loop5: detected capacity change from 0 to 512 [ 1108.773722][T28344] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.6627: corrupted inode contents [ 1108.785726][T28344] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1108.786716][T28344] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #16: comm syz.5.6627: mark_inode_dirty error [ 1108.807207][T28344] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1108.807895][T28344] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.6627: corrupted inode contents [ 1108.828994][T28344] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1108.829286][T28344] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.6627: mark_inode_dirty error [ 1108.849939][ C0] EXT4-fs (loop5): error count since last fsck: 3 [ 1108.849989][ C0] EXT4-fs (loop5): initial error at time 2000524612: ext4_do_update_inode:5690: inode 16 [ 1108.850235][ C0] EXT4-fs (loop5): last error at time 2000524612: ext4_do_update_inode:5690: inode 16 [ 1108.880308][T28344] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1108.886770][T28344] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.6627: corrupted inode contents [ 1108.909091][T28344] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1108.911360][T28344] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 1108.930106][T28344] loop5: lost filesystem error report for type 5 error -117 [ 1108.932476][T28344] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.6627: corrupted inode contents [ 1108.952497][T28344] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1108.954212][T28344] EXT4-fs error (device loop5): ext4_truncate:4690: inode #16: comm syz.5.6627: mark_inode_dirty error [ 1108.975549][T28344] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1108.978161][T28344] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 1108.997366][T28344] loop5: lost filesystem error report for type 5 error -117 [ 1109.005050][T28344] EXT4-fs (loop5): 1 truncate cleaned up [ 1109.026424][T28344] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1109.040419][T28344] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1109.066564][T11755] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:26: Failed to release dquot type 1 [ 1110.230123][T25692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1110.579958][T28370] FAULT_INJECTION: forcing a failure. [ 1110.579958][T28370] name failslab, interval 1, probability 0, space 0, times 0 [ 1110.620714][T28370] CPU: 1 UID: 0 PID: 28370 Comm: syz.5.6633 Tainted: G W syzkaller #0 PREEMPT(full) [ 1110.620753][T28370] Tainted: [W]=WARN [ 1110.620760][T28370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1110.620774][T28370] Call Trace: [ 1110.620844][T28370] [ 1110.620853][T28370] __dump_stack+0x1d/0x30 [ 1110.620878][T28370] dump_stack_lvl+0x95/0xd0 [ 1110.620899][T28370] dump_stack+0x15/0x1b [ 1110.620923][T28370] should_fail_ex+0x263/0x280 [ 1110.621038][T28370] should_failslab+0x8c/0xb0 [ 1110.621081][T28370] kmem_cache_alloc_noprof+0x66/0x3f0 [ 1110.621165][T28370] ? skb_clone+0x151/0x1f0 [ 1110.621252][T28370] skb_clone+0x151/0x1f0 [ 1110.621276][T28370] __netlink_deliver_tap+0x2c9/0x500 [ 1110.621334][T28370] ? netlink_attachskb+0x2e2/0x660 [ 1110.621370][T28370] netlink_sendskb+0x126/0x150 [ 1110.621512][T28370] netlink_unicast+0x28a/0x680 [ 1110.621549][T28370] netlink_ack+0x4c8/0x500 [ 1110.621615][T28370] netlink_rcv_skb+0x192/0x220 [ 1110.621647][T28370] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1110.621685][T28370] rtnetlink_rcv+0x1c/0x30 [ 1110.621733][T28370] netlink_unicast+0x5a8/0x680 [ 1110.621771][T28370] netlink_sendmsg+0x5c8/0x6f0 [ 1110.621810][T28370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1110.621949][T28370] ____sys_sendmsg+0x563/0x5b0 [ 1110.621982][T28370] ___sys_sendmsg+0x195/0x1e0 [ 1110.622094][T28370] __x64_sys_sendmsg+0xd4/0x160 [ 1110.622124][T28370] x64_sys_call+0x194c/0x3020 [ 1110.622150][T28370] do_syscall_64+0x12c/0x3b0 [ 1110.622225][T28370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.622250][T28370] RIP: 0033:0x7fedfcf4ce59 [ 1110.622270][T28370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1110.622310][T28370] RSP: 002b:00007fedfb9a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1110.622335][T28370] RAX: ffffffffffffffda RBX: 00007fedfd1c5fa0 RCX: 00007fedfcf4ce59 [ 1110.622349][T28370] RDX: 0000000004000844 RSI: 0000200000000040 RDI: 0000000000000003 [ 1110.622363][T28370] RBP: 00007fedfb9a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1110.622378][T28370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1110.622395][T28370] R13: 00007fedfd1c6038 R14: 00007fedfd1c5fa0 R15: 00007fffc217d3a8 [ 1110.622482][T28370] [ 1110.983340][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 1110.983359][ T28] audit: type=1400 audit(2000524614.255:12380): avc: denied { accept } for pid=28367 comm="syz.1.6636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1111.041098][ T28] audit: type=1400 audit(2000524614.264:12381): avc: denied { read } for pid=28373 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1111.232930][ T28] audit: type=1400 audit(2000524614.264:12382): avc: denied { read open } for pid=28373 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1111.258987][ T28] audit: type=1400 audit(2000524614.264:12383): avc: denied { getattr } for pid=28373 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1111.286227][ T28] audit: type=1400 audit(2000524614.264:12384): avc: denied { getattr } for pid=28373 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1111.313065][ T28] audit: type=1400 audit(2000524614.498:12385): avc: denied { read } for pid=28376 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1111.353826][T28385] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6640'. [ 1111.385195][T28384] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6639'. [ 1111.394693][ T28] audit: type=1400 audit(2000524614.498:12386): avc: denied { open } for pid=28376 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1111.460329][ T28] audit: type=1400 audit(2000524614.685:12387): avc: denied { write } for pid=28372 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1111.529565][ T28] audit: type=1400 audit(2000524614.685:12388): avc: denied { add_name } for pid=28372 comm="dhcpcd-run-hook" name="resolv.conf.eth5.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1111.607657][ T28] audit: type=1400 audit(2000524614.685:12389): avc: denied { create } for pid=28372 comm="dhcpcd-run-hook" name="resolv.conf.eth5.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1112.128585][T28421] loop2: detected capacity change from 0 to 512 [ 1112.219420][T28421] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.6644: corrupted inode contents [ 1112.232117][T28421] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1112.233691][T28421] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #16: comm syz.2.6644: mark_inode_dirty error [ 1112.243213][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1112.243316][ C1] EXT4-fs (loop2): initial error at time 2000524615: ext4_do_update_inode:5690: inode 16 [ 1112.243469][ C1] EXT4-fs (loop2): last error at time 2000524615: ext4_do_update_inode:5690: inode 16 [ 1112.282409][T28421] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1112.287200][T28421] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.6644: corrupted inode contents [ 1112.309217][T28421] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1112.310370][T28421] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.6644: mark_inode_dirty error [ 1112.334544][T28421] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.6644: corrupted inode contents [ 1112.350109][T28421] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 1112.359070][T28421] loop2: lost filesystem error report for type 5 error -117 [ 1112.360451][T28421] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.6644: corrupted inode contents [ 1112.381914][T28421] EXT4-fs error (device loop2): ext4_truncate:4690: inode #16: comm syz.2.6644: mark_inode_dirty error [ 1112.394555][T28421] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 1112.404105][T28421] loop2: lost filesystem error report for type 5 error -117 [ 1112.411128][T28421] EXT4-fs (loop2): 1 truncate cleaned up [ 1112.432779][T28421] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1112.447066][T28421] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1112.836531][ T815] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 1 [ 1113.051233][T28438] tmpfs: Bad value for 'mpol' [ 1113.232652][T28439] loop4: detected capacity change from 0 to 8192 [ 1113.257581][T28435] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6648'. [ 1113.312758][T28435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1113.342655][T28435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1113.504557][T28435] loop5: detected capacity change from 0 to 1024 [ 1113.523054][T28435] EXT4-fs: Ignoring removed bh option [ 1113.552449][T28435] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1113.638143][T28443] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6649'. [ 1113.663139][T28443] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1113.686263][T28451] loop1: detected capacity change from 0 to 256 [ 1113.699311][T28451] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1113.780425][T28439] loop4: p1 < > p2 p4 < p5 > [ 1113.785907][T27372] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1113.805226][T28439] loop4: partition table partially beyond EOD, truncated [ 1113.830682][T28455] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 1113.846612][T28439] loop4: p1 start 134217728 is beyond EOD, truncated [ 1113.867193][T28455] FAT-fs (loop1): Filesystem has been set read-only [ 1113.896830][T28455] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 1113.910606][T28439] loop4: p2 size 591360 extends beyond EOD, truncated [ 1113.922732][T28463] netlink: 'syz.2.6652': attribute type 4 has an invalid length. [ 1113.965276][T28439] loop4: p5 size 591360 extends beyond EOD, truncated [ 1113.966717][T28459] netlink: 'syz.2.6652': attribute type 4 has an invalid length. [ 1114.014464][T28459] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6652'. [ 1114.025197][ T2981] loop4: p1 < > p2 p4 < p5 > [ 1114.041349][ T2981] loop4: partition table partially beyond EOD, truncated [ 1114.068501][ T2981] loop4: p1 start 134217728 is beyond EOD, truncated [ 1114.098262][ T2981] loop4: p2 size 591360 extends beyond EOD, truncated [ 1114.143185][ T2981] loop4: p5 size 591360 extends beyond EOD, truncated [ 1114.165286][T28476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6653'. [ 1114.206278][T24786] udevd[24786]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1114.220397][T26974] udevd[26974]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1114.231603][T26972] udevd[26972]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 1114.283203][T24781] udevd[24781]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 1114.286733][T26972] udevd[26972]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1114.305021][T26974] udevd[26974]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1114.396676][T25692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1114.497774][T28492] netlink: 6024 bytes leftover after parsing attributes in process `syz.5.6657'. [ 1114.577869][T28501] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 1114.613747][T28490] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6656'. [ 1114.635878][T28490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1114.645278][T28490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1114.666461][T28490] loop4: detected capacity change from 0 to 1024 [ 1114.687685][T28490] EXT4-fs: Ignoring removed bh option [ 1114.712952][T28490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1114.733671][T28506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6664'. [ 1114.898964][T28513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6665'. [ 1115.176821][T28517] loop1: detected capacity change from 0 to 512 [ 1115.251302][T28517] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.6663: corrupted inode contents [ 1115.264404][T28517] fserror_report: 4 callbacks suppressed [ 1115.264553][T28517] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1115.272263][T28517] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #16: comm syz.1.6663: mark_inode_dirty error [ 1115.281962][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1115.282109][ C0] EXT4-fs (loop1): initial error at time 2000524618: ext4_do_update_inode:5690: inode 16 [ 1115.282375][ C0] EXT4-fs (loop1): last error at time 2000524618: ext4_do_update_inode:5690: inode 16 [ 1115.322384][T28517] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1115.330996][T28517] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.6663: corrupted inode contents [ 1115.353212][T28517] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1115.354395][T28517] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.6663: mark_inode_dirty error [ 1115.375930][T28517] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1115.378988][T28517] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.6663: corrupted inode contents [ 1115.401018][T28517] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1115.402510][T28517] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 1115.420991][T28517] loop1: lost filesystem error report for type 5 error -117 [ 1115.423347][T28517] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.6663: corrupted inode contents [ 1115.443713][T28517] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1115.448302][T28517] EXT4-fs error (device loop1): ext4_truncate:4690: inode #16: comm syz.1.6663: mark_inode_dirty error [ 1115.469544][T28517] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1115.471085][T28517] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 1115.490567][T28517] loop1: lost filesystem error report for type 5 error -117 [ 1115.496964][T28517] EXT4-fs (loop1): 1 truncate cleaned up [ 1115.536705][T28517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1115.551293][T28517] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1115.593616][T26409] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:14: Failed to release dquot type 1 [ 1115.845146][T24444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1116.006657][T28518] loop2: detected capacity change from 0 to 8192 [ 1116.133842][T28524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6666'. [ 1116.718188][T28518] loop2: p1 < > p2 p4 < p5 > [ 1116.724007][T24770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1116.748005][T28518] loop2: partition table partially beyond EOD, truncated [ 1116.852937][T28542] loop4: detected capacity change from 0 to 1764 [ 1116.861328][T28542] iso9660: Unknown parameter 'fowner p2 p4 < p5 > [ 1119.156426][T28592] loop2: partition table partially beyond EOD, truncated [ 1119.185496][T28592] loop2: p1 start 134217728 is beyond EOD, truncated [ 1119.204762][T28592] loop2: p2 size 591360 extends beyond EOD, truncated [ 1119.227402][T28592] loop2: p5 size 591360 extends beyond EOD, truncated [ 1119.676614][T28612] __nla_validate_parse: 1 callbacks suppressed [ 1119.676822][T28612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6694'. [ 1119.826364][T28614] loop5: detected capacity change from 0 to 1764 [ 1119.834021][T28614] iso9660: Unknown parameter 'fowner p2 p4 < p5 > [ 1123.898690][T28768] loop5: partition table partially beyond EOD, truncated [ 1123.916955][T28768] loop5: p1 start 134217728 is beyond EOD, truncated [ 1123.937969][T28768] loop5: p2 size 591360 extends beyond EOD, truncated [ 1123.973932][T28768] loop5: p5 size 591360 extends beyond EOD, truncated [ 1124.116174][T28775] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6724'. [ 1124.158223][T28775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1124.200070][T28775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1124.244893][T28775] loop2: detected capacity change from 0 to 1024 [ 1124.255126][T28775] EXT4-fs: Ignoring removed bh option [ 1124.285528][T28775] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1124.320519][ T28] audit: type=1400 audit(2000524626.770:12559): avc: denied { write } for pid=28774 comm="syz.2.6724" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1124.351252][T28783] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6727'. [ 1124.418381][T28783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1124.431994][T28783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1124.493498][T28783] loop6: detected capacity change from 0 to 1024 [ 1124.515305][T28783] EXT4-fs: Ignoring removed bh option [ 1124.546045][T28783] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1124.595122][ T28] audit: type=1400 audit(2000524627.014:12560): avc: denied { kexec_image_load } for pid=28782 comm="syz.6.6727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1124.658723][ T28] audit: type=1400 audit(2000524627.042:12561): avc: denied { write } for pid=28782 comm="syz.6.6727" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1124.690004][ T28] audit: type=1326 audit(2000524627.107:12562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28796 comm="syz.5.6731" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedfcf4ce59 code=0x7ffc0000 [ 1124.713962][T28798] FAULT_INJECTION: forcing a failure. [ 1124.713962][T28798] name failslab, interval 1, probability 0, space 0, times 0 [ 1124.715782][ T28] audit: type=1326 audit(2000524627.107:12563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28796 comm="syz.5.6731" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedfcf4ce59 code=0x7ffc0000 [ 1124.715816][ T28] audit: type=1326 audit(2000524627.107:12564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28796 comm="syz.5.6731" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedfcf4ce59 code=0x7ffc0000 [ 1124.780061][ T28] audit: type=1326 audit(2000524627.107:12565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28796 comm="syz.5.6731" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedfcf4ce59 code=0x7ffc0000 [ 1124.806016][T28798] CPU: 1 UID: 0 PID: 28798 Comm: syz.5.6731 Tainted: G W syzkaller #0 PREEMPT(full) [ 1124.806051][T28798] Tainted: [W]=WARN [ 1124.806058][T28798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1124.806071][T28798] Call Trace: [ 1124.806079][T28798] [ 1124.806087][T28798] __dump_stack+0x1d/0x30 [ 1124.806158][T28798] dump_stack_lvl+0x95/0xd0 [ 1124.806233][T28798] dump_stack+0x15/0x1b [ 1124.806260][T28798] should_fail_ex+0x263/0x280 [ 1124.806335][T28798] should_failslab+0x8c/0xb0 [ 1124.806454][T28798] __kmalloc_node_track_caller_noprof+0xc3/0x550 [ 1124.806505][T28798] ? sidtab_sid2str_get+0xa0/0x130 [ 1124.806541][T28798] kmemdup_noprof+0x2b/0x70 [ 1124.806591][T28798] sidtab_sid2str_get+0xa0/0x130 [ 1124.806622][T28798] security_sid_to_context_core+0x1eb/0x2e0 [ 1124.806677][T28798] security_sid_to_context+0x27/0x40 [ 1124.806706][T28798] selinux_lsmprop_to_secctx+0x67/0xf0 [ 1124.806741][T28798] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 1124.806774][T28798] audit_log_subj_ctx+0xa4/0x3e0 [ 1124.806857][T28798] ? skb_put+0xa9/0xf0 [ 1124.806916][T28798] audit_log_task_context+0x48/0x70 [ 1124.806943][T28798] audit_log_task+0xf3/0x250 [ 1124.806975][T28798] audit_seccomp+0x60/0x100 [ 1124.807003][T28798] ? __seccomp_filter+0x8db/0x1350 [ 1124.807083][T28798] __seccomp_filter+0x8ec/0x1350 [ 1124.807174][T28798] ? __rcu_read_unlock+0x4e/0x70 [ 1124.807302][T28798] ? __fget_files+0x184/0x1c0 [ 1124.807325][T28798] ? mutex_lock+0x57/0x90 [ 1124.807374][T28798] ? mutex_unlock+0x4e/0x90 [ 1124.807408][T28798] __secure_computing+0x81/0x150 [ 1124.807447][T28798] do_syscall_64+0xce/0x3b0 [ 1124.807537][T28798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.807566][T28798] RIP: 0033:0x7fedfcf4ce59 [ 1124.807582][T28798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1124.807601][T28798] RSP: 002b:00007fedfb9a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000006d [ 1124.807660][T28798] RAX: ffffffffffffffda RBX: 00007fedfd1c5fa0 RCX: 00007fedfcf4ce59 [ 1124.807730][T28798] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1124.807742][T28798] RBP: 00007fedfb9a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1124.807755][T28798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1124.807767][T28798] R13: 00007fedfd1c6038 R14: 00007fedfd1c5fa0 R15: 00007fffc217d3a8 [ 1124.807795][T28798] [ 1124.810309][T28798] audit: error in audit_log_subj_ctx [ 1124.971838][ T28] audit: type=1326 audit(2000524627.117:12566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28796 comm="syz.5.6731" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fedfcf4ce59 code=0x7ffc0000 [ 1124.997359][T28801] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6733'. [ 1125.004802][T27372] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1125.327010][T27942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1125.420438][T28816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6740'. [ 1125.475323][T28818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6741'. [ 1125.581140][T28821] loop1: detected capacity change from 0 to 8192 [ 1125.614717][T28814] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6739'. [ 1125.651000][T28821] loop1: p1 < > p2 p4 < p5 > [ 1125.655878][T28821] loop1: partition table partially beyond EOD, truncated [ 1125.667634][T28822] loop2: detected capacity change from 0 to 8192 [ 1125.681614][T28821] loop1: p1 start 134217728 is beyond EOD, truncated [ 1125.684465][T28814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1125.688344][T28821] loop1: p2 size 591360 extends beyond EOD, truncated [ 1125.706239][T28821] loop1: p5 size 591360 extends beyond EOD, truncated [ 1125.723734][T28814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1125.753727][T28822] loop2: p1 < > p2 p4 < p5 > [ 1125.759161][T28822] loop2: partition table partially beyond EOD, truncated [ 1125.781541][T28822] loop2: p1 start 134217728 is beyond EOD, truncated [ 1125.804968][T28822] loop2: p2 size 591360 extends beyond EOD, truncated [ 1125.822333][T28822] loop2: p5 size 591360 extends beyond EOD, truncated [ 1126.403569][T28838] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6748'. [ 1126.478649][T28840] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6749'. [ 1126.499844][T28842] loop5: detected capacity change from 0 to 4096 [ 1126.523723][T28842] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1126.703277][T28842] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 1126.712790][T28842] EXT4-fs: Cannot change quota options when quota turned on [ 1126.765071][T25692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1126.910220][T28869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6762'. [ 1127.049910][T28867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6761'. [ 1127.114941][T28875] loop2: detected capacity change from 0 to 8192 [ 1127.176707][T28875] loop2: p1 < > p2 p4 < p5 > [ 1127.189329][T28875] loop2: partition table partially beyond EOD, truncated [ 1127.210713][T28875] loop2: p1 start 134217728 is beyond EOD, truncated [ 1127.225296][T28875] loop2: p2 size 591360 extends beyond EOD, truncated [ 1127.245308][T28875] loop2: p5 size 591360 extends beyond EOD, truncated [ 1127.343994][T28881] loop5: detected capacity change from 0 to 1764 [ 1127.352627][T28881] iso9660: Unknown parameter 'fowner p2 p4 < p5 > [ 1147.676562][T29341] loop5: partition table partially beyond EOD, truncated [ 1147.696222][T29341] loop5: p1 start 134217728 is beyond EOD, truncated [ 1147.713341][T29341] loop5: p2 size 591360 extends beyond EOD, truncated [ 1147.730054][T29341] loop5: p5 size 591360 extends beyond EOD, truncated [ 1148.676513][ T28] audit: type=1400 audit(2000524649.547:12672): avc: denied { create } for pid=29373 comm="syz.5.6891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1148.942525][ T28] audit: type=1400 audit(2000524649.791:12673): avc: denied { load_policy } for pid=29373 comm="syz.5.6891" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1148.943167][T29374] SELinux: failed to load policy [ 1148.986603][T29381] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.6893'. [ 1149.048429][T29374] loop5: detected capacity change from 0 to 8192 [ 1149.060464][T29374] vfat: Unknown parameter 'rfmon' [ 1149.124806][T29384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6894'. [ 1149.181764][T29374] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6891'. [ 1149.269217][T29395] tmpfs: Bad value for 'mpol' [ 1149.274300][T29391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6896'. [ 1149.331349][T29399] FAULT_INJECTION: forcing a failure. [ 1149.331349][T29399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1149.344483][T29399] CPU: 1 UID: 0 PID: 29399 Comm: syz.1.6899 Tainted: G W syzkaller #0 PREEMPT(full) [ 1149.344585][T29399] Tainted: [W]=WARN [ 1149.344595][T29399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1149.344732][T29399] Call Trace: [ 1149.344741][T29399] [ 1149.344751][T29399] __dump_stack+0x1d/0x30 [ 1149.344776][T29399] dump_stack_lvl+0x95/0xd0 [ 1149.344798][T29399] dump_stack+0x15/0x1b [ 1149.344878][T29399] should_fail_ex+0x263/0x280 [ 1149.344912][T29399] should_fail+0xb/0x20 [ 1149.344946][T29399] should_fail_usercopy+0x1a/0x20 [ 1149.344987][T29399] _copy_to_user+0x20/0xa0 [ 1149.345130][T29399] simple_read_from_buffer+0xb5/0x130 [ 1149.345224][T29399] proc_fail_nth_read+0x10e/0x150 [ 1149.345291][T29399] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1149.345329][T29399] vfs_read+0x1ab/0x7f0 [ 1149.345365][T29399] ? __rcu_read_unlock+0x4e/0x70 [ 1149.345438][T29399] ? __fget_files+0x184/0x1c0 [ 1149.345461][T29399] ? mutex_lock+0x57/0x90 [ 1149.345487][T29399] ksys_read+0xdc/0x1a0 [ 1149.345577][T29399] __x64_sys_read+0x40/0x50 [ 1149.345642][T29399] x64_sys_call+0x2886/0x3020 [ 1149.345674][T29399] do_syscall_64+0x12c/0x3b0 [ 1149.345735][T29399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.345764][T29399] RIP: 0033:0x7fe3137fd68e [ 1149.345785][T29399] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1149.345810][T29399] RSP: 002b:00007fe312296fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1149.345854][T29399] RAX: ffffffffffffffda RBX: 00007fe3122976c0 RCX: 00007fe3137fd68e [ 1149.345874][T29399] RDX: 000000000000000f RSI: 00007fe3122970a0 RDI: 0000000000000004 [ 1149.345891][T29399] RBP: 00007fe312297090 R08: 0000000000000000 R09: 0000000000000000 [ 1149.345911][T29399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1149.345929][T29399] R13: 00007fe313ab6038 R14: 00007fe313ab5fa0 R15: 00007ffe79190fb8 [ 1149.345955][T29399] [ 1149.628033][T29400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6898'. [ 1149.637030][T29400] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1150.095550][T29417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6906'. [ 1150.318662][T29430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6911'. [ 1150.540138][T29437] loop1: detected capacity change from 0 to 8192 [ 1150.685148][T29443] loop5: detected capacity change from 0 to 1764 [ 1150.693222][T29443] iso9660: Unknown parameter 'fowner p2 p4 < p5 > [ 1150.960581][T29437] loop1: partition table partially beyond EOD, truncated [ 1151.014880][T29437] loop1: p1 start 134217728 is beyond EOD, truncated [ 1151.021738][T29437] loop1: p2 size 591360 extends beyond EOD, truncated [ 1151.227639][T29437] loop1: p5 size 591360 extends beyond EOD, truncated [ 1152.619625][T29454] loop2: detected capacity change from 0 to 512 [ 1153.746772][T29454] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.6915: corrupted inode contents [ 1153.758789][T29454] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1153.759066][T29454] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #16: comm syz.2.6915: mark_inode_dirty error [ 1153.768272][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1153.768292][ C0] EXT4-fs (loop2): initial error at time 2000524654: ext4_do_update_inode:5690: inode 16 [ 1153.768318][ C0] EXT4-fs (loop2): last error at time 2000524654: ext4_do_update_inode:5690: inode 16 [ 1153.805787][T29454] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1153.806186][T29454] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.6915: corrupted inode contents [ 1153.827343][T29454] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1153.831019][T29454] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.6915: mark_inode_dirty error [ 1153.851433][T29454] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1153.851858][T29454] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.6915: corrupted inode contents [ 1153.872963][T29454] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1153.873747][T29454] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 1153.892268][T29454] loop2: lost filesystem error report for type 5 error -117 [ 1153.895779][T29454] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.6915: corrupted inode contents [ 1153.915058][T29454] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1153.915412][T29454] EXT4-fs error (device loop2): ext4_truncate:4690: inode #16: comm syz.2.6915: mark_inode_dirty error [ 1153.935804][T29454] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1153.940572][T29454] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 1153.958681][T29454] loop2: lost filesystem error report for type 5 error -117 [ 1153.960818][T29454] EXT4-fs (loop2): 1 truncate cleaned up [ 1153.976137][T26411] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1153.996823][T29454] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1154.009410][T29454] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1154.012742][T26411] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:15: Failed to release dquot type 1 [ 1154.271508][T27372] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1154.291165][T29462] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6917'. [ 1154.312193][T29462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1154.339008][T29462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1154.402754][T29467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6919'. [ 1154.496200][T29471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6931'. [ 1155.026098][T29487] loop1: detected capacity change from 0 to 512 [ 1155.116501][T29487] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.6923: corrupted inode contents [ 1155.128435][T29487] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1155.129082][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1155.144798][ C1] EXT4-fs (loop1): initial error at time 2000524655: ext4_do_update_inode:5690: inode 16 [ 1155.154642][ C1] EXT4-fs (loop1): last error at time 2000524655: ext4_do_update_inode:5690: inode 16 [ 1155.165851][T29487] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #16: comm syz.1.6923: mark_inode_dirty error [ 1155.177232][T29487] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1155.178524][T29487] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.6923: corrupted inode contents [ 1155.200694][T29487] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1155.239364][T29487] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.6923: mark_inode_dirty error [ 1155.260615][T29487] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.6923: corrupted inode contents [ 1155.274976][T29487] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 1155.283559][T29487] loop1: lost filesystem error report for type 5 error -117 [ 1155.285391][T29487] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.6923: corrupted inode contents [ 1155.305694][T29487] EXT4-fs error (device loop1): ext4_truncate:4690: inode #16: comm syz.1.6923: mark_inode_dirty error [ 1155.318472][T29487] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 1155.327490][T29487] loop1: lost filesystem error report for type 5 error -117 [ 1155.329279][T29487] EXT4-fs (loop1): 1 truncate cleaned up [ 1155.343914][T29487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1155.357982][T29487] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1155.824914][T26420] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1155.855379][T26420] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:27: Failed to release dquot type 1 [ 1156.438134][T29496] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6926'. [ 1156.510539][T29496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1156.545711][T29496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1157.031565][T24770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1157.177676][T29504] loop1: detected capacity change from 0 to 1024 [ 1157.271172][T29504] loop1: detected capacity change from 0 to 512 [ 1157.323077][T29504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1157.354697][T29504] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1157.447306][ T28] audit: type=1400 audit(2000524657.723:12674): avc: denied { write } for pid=29503 comm="syz.1.6929" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1157.493796][T29504] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #18: comm syz.1.6929: corrupted inode contents [ 1157.510090][T29504] EXT4-fs (loop1): Remounting filesystem read-only [ 1157.516917][T29504] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -30) [ 1157.561216][T29509] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6930'. [ 1157.596307][T24770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1157.612707][T29509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1157.644639][T29509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1157.813792][T29524] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.6937'. [ 1157.834722][ T28] audit: type=1400 audit(2000524658.106:12675): avc: denied { getopt } for pid=29521 comm="syz.5.6936" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1157.984341][T29534] syz_tun: entered allmulticast mode [ 1157.990423][T29534] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 1158.003846][T29533] syz_tun: left allmulticast mode [ 1158.199659][ T28] audit: type=1400 audit(2000524658.452:12676): avc: denied { mount } for pid=29542 comm="syz.4.6944" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1158.204693][T29544] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6944'. [ 1158.237924][T29544] loop4: detected capacity change from 0 to 512 [ 1158.247068][T29544] EXT4-fs: Ignoring removed oldalloc option [ 1158.278340][ T28] audit: type=1400 audit(2000524658.499:12677): avc: denied { mounton } for pid=29542 comm="syz.4.6944" path="/bus" dev="bpf" ino=91114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 1158.320333][T29544] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1158.353329][T29544] ext4 filesystem being mounted at /bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1158.385817][T29544] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1158.468250][T29554] loop5: detected capacity change from 0 to 2048 [ 1158.492784][T29544] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6944'. [ 1158.503827][T29554] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1158.516413][T29554] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1158.612157][T29559] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.6948'. [ 1158.791952][T25692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1159.073125][T29576] tmpfs: Bad value for 'mpol' [ 1159.255824][ T28] audit: type=1400 audit(2000524659.444:12678): avc: denied { write } for pid=29585 comm="syz.6.6958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1159.276564][T29586] xt_recent: Unsupported userspace flags (000000de) [ 1159.292536][T29586] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6958'. [ 1159.301607][ T28] audit: type=1400 audit(2000524659.472:12679): avc: denied { read } for pid=29585 comm="syz.6.6958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1159.346782][T29589] netlink: 'syz.5.6959': attribute type 4 has an invalid length. [ 1159.472664][T29576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6954'. [ 1159.483358][T29576] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1159.607605][T29601] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6964'. [ 1159.616851][ T28] audit: type=1326 audit(2000524659.753:12680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29600 comm="syz.4.6964" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8951f8ce59 code=0x7ffc0000 [ 1159.642546][ T28] audit: type=1326 audit(2000524659.753:12681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29600 comm="syz.4.6964" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8951f8ce59 code=0x7ffc0000 [ 1159.668116][ T28] audit: type=1326 audit(2000524659.762:12682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29600 comm="syz.4.6964" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8951f8ce59 code=0x7ffc0000 [ 1159.701791][ T28] audit: type=1326 audit(2000524659.762:12683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29600 comm="syz.4.6964" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8951f8ce59 code=0x7ffc0000 [ 1159.732729][ T28] audit: type=1326 audit(2000524659.762:12684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29600 comm="syz.4.6964" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8951f8ce59 code=0x7ffc0000 [ 1159.759109][ T28] audit: type=1326 audit(2000524659.762:12685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29600 comm="syz.4.6964" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8951f8ce59 code=0x7ffc0000 [ 1159.785316][ T28] audit: type=1326 audit(2000524659.762:12686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29600 comm="syz.4.6964" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8951f8ce59 code=0x7ffc0000 [ 1159.813514][ T28] audit: type=1326 audit(2000524659.762:12687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29600 comm="syz.4.6964" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8951f8ce59 code=0x7ffc0000 [ 1159.874915][ T28] audit: type=1326 audit(2000524659.762:12688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29600 comm="syz.4.6964" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8951f8ce59 code=0x7ffc0000 [ 1159.925236][ T28] audit: type=1326 audit(2000524659.762:12689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29600 comm="syz.4.6964" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8951f8ce59 code=0x7ffc0000 [ 1160.392495][T29627] loop2: detected capacity change from 0 to 512 [ 1160.423459][T29627] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1160.464837][T29625] loop4: detected capacity change from 0 to 8192 [ 1160.471479][T29627] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1160.506842][T29625] loop4: p1 < > p2 p4 < p5 > [ 1160.511584][T29625] loop4: partition table partially beyond EOD, truncated [ 1160.519061][T29625] loop4: p1 start 134217728 is beyond EOD, truncated [ 1160.529169][T29625] loop4: p2 size 591360 extends beyond EOD, truncated [ 1160.533700][T27372] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1160.555331][T29625] loop4: p5 size 591360 extends beyond EOD, truncated [ 1160.705820][T29634] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.6974'. [ 1161.027615][T29644] loop6: detected capacity change from 0 to 512 [ 1161.056194][T29644] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1161.087309][T29644] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1161.142582][T27942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1161.708394][T29657] loop4: detected capacity change from 0 to 512 [ 1161.861503][T29657] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.6979: inode has both inline data and extents flags [ 1161.874765][T29657] fserror_report: 5 callbacks suppressed [ 1161.874792][T29657] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1161.880917][T29657] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.6979: couldn't read orphan inode 15 (err -117) [ 1161.890086][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1161.890102][ C1] EXT4-fs (loop4): initial error at time 2000524661: ext4_orphan_get:1397: inode 15 [ 1161.890133][ C1] EXT4-fs (loop4): last error at time 2000524661: ext4_orphan_get:1397: inode 15 [ 1161.926962][T29657] loop4: lost filesystem error report for type 5 error -117 [ 1161.927969][T29657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1163.031563][T29681] loop5: detected capacity change from 0 to 512 [ 1163.637136][T24444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1163.732861][T29681] EXT4-fs (loop5): 1 orphan inode deleted [ 1163.739756][T29681] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1163.752671][T29681] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1163.945993][T11752] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:25: Failed to release dquot type 1 [ 1164.136182][T29691] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 1164.145802][T29691] SELinux: failed to load policy [ 1164.269206][T29696] __nla_validate_parse: 2 callbacks suppressed [ 1164.269223][T29696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6992'. [ 1164.349327][T29688] loop6: detected capacity change from 0 to 8192 [ 1164.428509][T29704] netlink: 'syz.2.6996': attribute type 10 has an invalid length. [ 1164.616639][T29705] pimreg: entered allmulticast mode [ 1164.656700][T29705] pimreg: left allmulticast mode [ 1164.776772][T25692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1164.820360][T29683] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6991'. [ 1164.857352][T29717] loop5: detected capacity change from 0 to 256 [ 1164.872646][T29717] vfat: Unknown parameter '' [ 1165.113006][T29743] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7009'. [ 1165.208712][T29734] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7006'. [ 1165.301161][T29744] loop6: detected capacity change from 0 to 8192 [ 1165.340767][T29744] loop6: p1 < > p2 p4 < p5 > [ 1165.355084][T29744] loop6: partition table partially beyond EOD, truncated [ 1165.363337][T29744] loop6: p1 start 134217728 is beyond EOD, truncated [ 1165.370130][T29744] loop6: p2 size 591360 extends beyond EOD, truncated [ 1165.378653][T29744] loop6: p5 size 591360 extends beyond EOD, truncated [ 1165.529002][T29750] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7012'. [ 1165.829941][T29754] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.7013'. [ 1165.866192][ T28] kauditd_printk_skb: 156 callbacks suppressed [ 1165.866212][ T28] audit: type=1400 audit(2000524665.627:12845): avc: denied { setopt } for pid=29755 comm="syz.2.7014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1166.193322][ T28] audit: type=1400 audit(2000524665.926:12846): avc: denied { write } for pid=29771 comm="syz.4.7019" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1166.323394][T29787] tmpfs: Bad value for 'mpol' [ 1166.385215][T29768] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7016'. [ 1166.411546][T29768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1166.421392][T29768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1166.441313][T29791] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7024'. [ 1166.450586][T29791] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1166.769420][ T28] audit: type=1400 audit(2000524666.469:12847): avc: denied { write } for pid=29798 comm="syz.1.7028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1166.793203][ T28] audit: type=1400 audit(2000524666.469:12848): avc: denied { map } for pid=29798 comm="syz.1.7028" path="socket:[91852]" dev="sockfs" ino=91852 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1166.817769][ T28] audit: type=1400 audit(2000524666.469:12849): avc: denied { accept } for pid=29798 comm="syz.1.7028" path="socket:[91852]" dev="sockfs" ino=91852 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1166.842350][ T28] audit: type=1400 audit(2000524666.497:12850): avc: denied { setopt } for pid=29798 comm="syz.1.7028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1166.998437][T29801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7029'. [ 1168.027446][T29804] loop1: detected capacity change from 0 to 8192 [ 1168.121198][T29804] loop1: p1 < > p2 p4 < p5 > [ 1168.158001][T29804] loop1: partition table partially beyond EOD, truncated [ 1168.212346][T29804] loop1: p1 start 134217728 is beyond EOD, truncated [ 1168.254869][T29804] loop1: p2 size 591360 extends beyond EOD, truncated [ 1168.326624][T29804] loop1: p5 size 591360 extends beyond EOD, truncated [ 1169.097389][T29824] loop4: detected capacity change from 0 to 512 [ 1169.223314][T29824] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.7036: corrupted inode contents [ 1169.235822][T29824] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1169.237393][T29824] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #16: comm syz.4.7036: mark_inode_dirty error [ 1169.247094][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1169.247241][ C0] EXT4-fs (loop4): initial error at time 2000524668: ext4_do_update_inode:5690: inode 16 [ 1169.247443][ C0] EXT4-fs (loop4): last error at time 2000524668: ext4_do_update_inode:5690: inode 16 [ 1169.288034][T29824] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1169.292382][T29824] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.7036: corrupted inode contents [ 1169.314582][T29824] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1169.316919][T29824] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.7036: mark_inode_dirty error [ 1169.340980][T29824] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1169.343013][T29824] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.7036: corrupted inode contents [ 1169.364810][T29824] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1169.366484][T29824] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 1169.385526][T29824] loop4: lost filesystem error report for type 5 error -117 [ 1169.387401][T29824] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.7036: corrupted inode contents [ 1169.407592][T29824] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1169.411650][T29824] EXT4-fs error (device loop4): ext4_truncate:4690: inode #16: comm syz.4.7036: mark_inode_dirty error [ 1169.433023][T29824] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1169.435222][T29824] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 1169.454011][T29824] loop4: lost filesystem error report for type 5 error -117 [ 1169.460987][T29824] EXT4-fs (loop4): 1 truncate cleaned up [ 1169.486381][T29824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1169.500970][T29824] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1169.537243][T11755] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1169.586456][T11755] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:26: Failed to release dquot type 1 [ 1170.386170][ T28] audit: type=1400 audit(2000524669.808:12851): avc: denied { create } for pid=29840 comm="syz.2.7042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1170.485709][ T28] audit: type=1400 audit(2000524669.808:12852): avc: denied { ioctl } for pid=29840 comm="syz.2.7042" path="socket:[92773]" dev="sockfs" ino=92773 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1170.726698][T24444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1170.970326][T29866] loop6: detected capacity change from 0 to 512 [ 1170.992100][T29866] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 1171.000597][T29868] loop4: detected capacity change from 0 to 512 [ 1171.020336][T29868] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1171.024437][T29866] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 1171.047782][T29868] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1171.058622][T29866] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.7051: bad orphan inode 4 [ 1171.072958][T29868] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.7052: bad orphan inode 4 [ 1171.089489][T29866] loop6: lost filesystem error report for type 5 error -117 [ 1171.089659][T29866] EXT4-fs (loop6): 1 orphan inode deleted [ 1171.097134][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1171.097158][ C0] EXT4-fs (loop6): initial error at time 2000524670: ext4_orphan_get:1423 [ 1171.097179][ C0] EXT4-fs (loop6): last error at time 2000524670: ext4_orphan_get:1423 [ 1171.132166][T29868] loop4: lost filesystem error report for type 5 error -117 [ 1171.132936][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1171.146839][ C0] EXT4-fs (loop4): initial error at time 2000524670: ext4_orphan_get:1423 [ 1171.155400][ C0] EXT4-fs (loop4): last error at time 2000524670: ext4_orphan_get:1423 [ 1171.163745][T29868] EXT4-fs (loop4): 1 orphan inode deleted [ 1171.170212][T29868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1171.186988][T29866] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1171.200492][T29866] FAULT_INJECTION: forcing a failure. [ 1171.200492][T29866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1171.216864][T29868] xt_cgroup: xt_cgroup: no path or classid specified [ 1171.223792][ T28] audit: type=1400 audit(2000524670.631:12853): avc: denied { write } for pid=29867 comm="syz.4.7052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1171.249312][T29866] CPU: 0 UID: 0 PID: 29866 Comm: syz.6.7051 Tainted: G W syzkaller #0 PREEMPT(full) [ 1171.249358][T29866] Tainted: [W]=WARN [ 1171.249366][T29866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1171.249379][T29866] Call Trace: [ 1171.249386][T29866] [ 1171.249393][T29866] __dump_stack+0x1d/0x30 [ 1171.249501][T29866] dump_stack_lvl+0x95/0xd0 [ 1171.249532][T29866] dump_stack+0x15/0x1b [ 1171.249558][T29866] should_fail_ex+0x263/0x280 [ 1171.249626][T29866] should_fail+0xb/0x20 [ 1171.249652][T29866] should_fail_usercopy+0x1a/0x20 [ 1171.249686][T29866] _copy_from_user+0x1c/0xb0 [ 1171.249738][T29866] ___sys_sendmsg+0xc1/0x1e0 [ 1171.249776][T29866] __x64_sys_sendmsg+0xd4/0x160 [ 1171.249804][T29866] x64_sys_call+0x194c/0x3020 [ 1171.249832][T29866] do_syscall_64+0x12c/0x3b0 [ 1171.249874][T29866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.249897][T29866] RIP: 0033:0x7f69c600ce59 [ 1171.249927][T29866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1171.249947][T29866] RSP: 002b:00007f69c4a67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1171.249968][T29866] RAX: ffffffffffffffda RBX: 00007f69c6285fa0 RCX: 00007f69c600ce59 [ 1171.249983][T29866] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 000000000000000e [ 1171.250073][T29866] RBP: 00007f69c4a67090 R08: 0000000000000000 R09: 0000000000000000 [ 1171.250092][T29866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1171.250172][T29866] R13: 00007f69c6286038 R14: 00007f69c6285fa0 R15: 00007ffda4201908 [ 1171.250196][T29866] [ 1171.314967][ T28] audit: type=1400 audit(2000524670.631:12854): avc: denied { map } for pid=29867 comm="syz.4.7052" path="socket:[92888]" dev="sockfs" ino=92888 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1171.438274][ T28] audit: type=1400 audit(2000524670.631:12855): avc: denied { read accept } for pid=29867 comm="syz.4.7052" path="socket:[92888]" dev="sockfs" ino=92888 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1171.469157][T24444] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 4: comm syz-executor: lblock 0 mapped to illegal pblock 4 (length 1) [ 1171.488957][T27942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1171.552448][T24444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1171.975383][T29887] loop6: detected capacity change from 0 to 512 [ 1172.146389][T29887] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.7058: corrupted inode contents [ 1172.159127][T29887] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1172.162499][T29887] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #16: comm syz.6.7058: mark_inode_dirty error [ 1172.183178][T29887] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1172.183909][T29887] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.7058: corrupted inode contents [ 1172.204975][T29887] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1172.205700][T29887] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.7058: mark_inode_dirty error [ 1172.226819][T29887] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.7058: corrupted inode contents [ 1172.239037][T29887] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 1172.247626][T29887] loop6: lost filesystem error report for type 5 error -117 [ 1172.248193][T29887] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.7058: corrupted inode contents [ 1172.267645][ C1] EXT4-fs (loop6): error count since last fsck: 6 [ 1172.267816][ C1] EXT4-fs (loop6): initial error at time 2000524671: ext4_do_update_inode:5690: inode 16 [ 1172.268049][ C1] EXT4-fs (loop6): last error at time 2000524671: ext4_orphan_del:303 [ 1172.298200][T29887] EXT4-fs error (device loop6): ext4_truncate:4690: inode #16: comm syz.6.7058: mark_inode_dirty error [ 1172.309649][T29887] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 1172.318640][T29887] loop6: lost filesystem error report for type 5 error -117 [ 1172.320259][T29887] EXT4-fs (loop6): 1 truncate cleaned up [ 1172.334659][T29887] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1172.347444][T29887] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1172.535177][T29895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7061'. [ 1172.763804][T11733] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1172.804886][T11733] EXT4-fs error (device loop6): ext4_release_dquot:7070: comm kworker/u8:16: Failed to release dquot type 1 [ 1172.822800][ T28] audit: type=1400 audit(2000524672.128:12856): avc: denied { getopt } for pid=29898 comm="syz.1.7064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1172.870695][T29897] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7063'. [ 1172.891353][ T28] audit: type=1326 audit(2000524672.128:12857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29898 comm="syz.1.7064" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31383ce59 code=0x7ffc0000 [ 1172.931555][T29903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1172.943252][T29903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1172.962355][ T28] audit: type=1326 audit(2000524672.128:12858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29898 comm="syz.1.7064" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31383ce59 code=0x7ffc0000 [ 1173.096895][ T28] audit: type=1326 audit(2000524672.128:12859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29898 comm="syz.1.7064" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31383ce59 code=0x7ffc0000 [ 1173.142883][ T28] audit: type=1326 audit(2000524672.128:12860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29898 comm="syz.1.7064" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fe31383ce59 code=0x7ffc0000 [ 1173.620862][T29909] loop1: detected capacity change from 0 to 1764 [ 1173.628189][T29909] iso9660: Unknown parameter 'fowner p2 p4 < p5 > [ 1175.056433][T29930] loop2: partition table partially beyond EOD, truncated [ 1175.065211][T29930] loop2: p1 start 134217728 is beyond EOD, truncated [ 1175.099849][T29900] team0: Port device team_slave_0 added [ 1175.112903][T29900] team0: Port device team_slave_1 added [ 1175.135429][T29930] loop2: p2 size 591360 extends beyond EOD, truncated [ 1175.177402][T29930] loop2: p5 size 591360 extends beyond EOD, truncated [ 1175.187790][T29900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1175.213280][T29900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1175.291999][T29900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1175.303704][T29900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1175.310752][T29900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1175.336861][T29900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1175.374130][T29900] hsr_slave_0: entered promiscuous mode [ 1175.388406][T29900] hsr_slave_1: entered promiscuous mode [ 1175.399148][T29900] debugfs: 'hsr0' already exists in 'hsr' [ 1175.412777][T29917] Set syz1 is full, maxelem 65536 reached [ 1175.419946][T29900] Cannot create hsr debugfs directory [ 1175.492812][T29936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29936 comm=syz.1.7070 [ 1175.523831][T29943] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7073'. [ 1175.559060][T29943] loop6: detected capacity change from 0 to 512 [ 1175.582270][T29943] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1175.622315][T29943] EXT4-fs (loop6): 1 truncate cleaned up [ 1175.632814][T29943] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1175.675238][T29947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7074'. [ 1175.687700][T29900] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1175.710034][T29900] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1175.730565][T29900] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1175.745335][T29900] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1175.753172][T29900] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1175.753563][T27942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1175.775115][T29900] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1175.858961][T29900] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1175.904519][T29900] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1176.090802][T29961] loop1: detected capacity change from 0 to 512 [ 1176.195547][T29961] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.7077: corrupted inode contents [ 1176.208284][T29961] fserror_report: 4 callbacks suppressed [ 1176.208408][T29961] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1176.216226][T29961] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #16: comm syz.1.7077: mark_inode_dirty error [ 1176.225785][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1176.225901][ C0] EXT4-fs (loop1): initial error at time 2000524675: ext4_do_update_inode:5690: inode 16 [ 1176.226052][ C0] EXT4-fs (loop1): last error at time 2000524675: ext4_do_update_inode:5690: inode 16 [ 1176.264823][T29961] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1176.269630][T29961] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.7077: corrupted inode contents [ 1176.291865][T29961] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1176.293361][T29961] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.7077: mark_inode_dirty error [ 1176.315537][T29961] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1176.320936][T29961] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.7077: corrupted inode contents [ 1176.345664][T29961] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1176.348241][T29961] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 1176.366998][T29961] loop1: lost filesystem error report for type 5 error -117 [ 1176.368776][T29961] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.7077: corrupted inode contents [ 1176.389427][T29961] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1176.399184][T29961] EXT4-fs error (device loop1): ext4_truncate:4690: inode #16: comm syz.1.7077: mark_inode_dirty error [ 1176.421242][T29961] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1176.423737][T29961] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 1176.443153][T29961] loop1: lost filesystem error report for type 5 error -117 [ 1176.450727][T29961] EXT4-fs (loop1): 1 truncate cleaned up [ 1176.475295][T29961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1176.491661][T29961] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1176.529642][T26411] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:15: Failed to release dquot type 1 [ 1176.754314][T29900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1176.772068][T29900] 8021q: adding VLAN 0 to HW filter on device team0 [ 1177.436390][T29970] loop2: detected capacity change from 0 to 1764 [ 1177.443833][T29970] iso9660: Unknown parameter 'fowner p2 p4 < p5 > [ 1185.382694][T30071] loop6: partition table partially beyond EOD, truncated [ 1185.384475][T30079] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7103'. [ 1185.415736][T30079] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 1185.424393][T30079] netlink: 56 bytes leftover after parsing attributes in process `syz.7.7103'. [ 1185.433562][T30071] loop6: p1 start 134217728 is beyond EOD, truncated [ 1185.451861][T30083] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7104'. [ 1185.455198][T30071] loop6: p2 size 591360 extends beyond EOD, [ 1185.461073][T30079] netlink: 280 bytes leftover after parsing attributes in process `syz.7.7103'. [ 1185.462152][T30071] truncated [ 1185.481732][T30071] loop6: p5 size 591360 extends beyond EOD, truncated [ 1185.567244][T30085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7105'. [ 1185.739784][T30087] loop2: detected capacity change from 0 to 8192 [ 1185.754795][T24770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1185.823388][T30087] loop2: p1 < > p2 p4 < p5 > [ 1185.829121][T30087] loop2: partition table partially beyond EOD, truncated [ 1185.849035][T30087] loop2: p1 start 134217728 is beyond EOD, truncated [ 1185.864747][T30087] loop2: p2 size 591360 extends beyond EOD, truncated [ 1185.938312][T30095] loop7: detected capacity change from 0 to 1764 [ 1185.946406][T30095] iso9660: Unknown parameter 'fowner [ 1193.399621][T30295] __dump_stack+0x1d/0x30 [ 1193.399675][T30295] dump_stack_lvl+0x95/0xd0 [ 1193.399760][T30295] dump_stack+0x15/0x1b [ 1193.399787][T30295] bad_page+0xee/0x100 [ 1193.399831][T30295] page_frag_free+0x11d/0x120 [ 1193.399946][T30295] __xdp_return+0x154/0x450 [ 1193.399983][T30295] bpf_xdp_frags_shrink_tail+0x2a8/0x400 [ 1193.400012][T30295] ? kmem_cache_free+0xca/0x380 [ 1193.400041][T30295] bpf_xdp_adjust_tail+0x125/0x130 [ 1193.400122][T30295] ? 0xffffffffa02029c8 [ 1193.400138][T30295] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 1193.400158][T30295] bpf_dispatcher_xdp_func+0x25/0x30 [ 1193.400232][T30295] bpf_prog_run_generic_xdp+0x37f/0xb00 [ 1193.400277][T30295] do_xdp_generic+0x480/0x810 [ 1193.400394][T30295] ? tun_get_user+0x1ae1/0x27e0 [ 1193.400438][T30295] tun_get_user+0x1b1c/0x27e0 [ 1193.400498][T30295] ? avc_has_perm_noaudit+0xab/0x130 [ 1193.400612][T30295] ? ref_tracker_alloc+0x1eb/0x2f0 [ 1193.400721][T30295] ? selinux_file_permission+0x2ef/0x320 [ 1193.400754][T30295] tun_chr_write_iter+0x15e/0x210 [ 1193.400801][T30295] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1193.400863][T30295] vfs_write+0x5a6/0x9f0 [ 1193.400907][T30295] ksys_write+0xdc/0x1a0 [ 1193.400942][T30295] __x64_sys_write+0x40/0x50 [ 1193.401037][T30295] x64_sys_call+0x27e1/0x3020 [ 1193.401063][T30295] do_syscall_64+0x12c/0x3b0 [ 1193.401183][T30295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.401213][T30295] RIP: 0033:0x7f76e1f3d68e [ 1193.401235][T30295] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1193.401256][T30295] RSP: 002b:00007f76e09cefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1193.401276][T30295] RAX: ffffffffffffffda RBX: 00007f76e09cf6c0 RCX: 00007f76e1f3d68e [ 1193.401339][T30295] RDX: 0000000000011dc0 RSI: 00002000000030c0 RDI: 00000000000000c8 [ 1193.401358][T30295] RBP: 00007f76e2012d6f R08: 0000000000000000 R09: 0000000000000000 [ 1193.401375][T30295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1193.401393][T30295] R13: 00007f76e21f6038 R14: 00007f76e21f5fa0 R15: 00007ffd497dea48 [ 1193.401421][T30295] [ 1193.640623][T30295] Disabling lock debugging due to kernel taint [ 1193.646954][T30295] BUG: Bad page state in process syz.2.7143 pfn:117d59 [ 1193.654025][T30295] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888100000000 pfn:0x117d59 [ 1193.664613][T30295] flags: 0x200000000000000(node=0|zone=2) [ 1193.670395][T30295] page_type: f9(unknown) [ 1193.674667][T30295] raw: 0200000000000000 0000000000000000 ffff888100b14000 0000000000000000 [ 1193.683326][T30295] raw: ffff888100000000 0000000000000001 00000000f9000000 0000000000000000 [ 1193.691968][T30295] page dumped because: page_pool leak [ 1193.697357][T30295] Modules linked in: [ 1193.701415][T30295] CPU: 0 UID: 0 PID: 30295 Comm: syz.2.7143 Tainted: G B W syzkaller #0 PREEMPT(full) [ 1193.701455][T30295] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1193.701464][T30295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1193.701556][T30295] Call Trace: [ 1193.701563][T30295] [ 1193.701572][T30295] __dump_stack+0x1d/0x30 [ 1193.701603][T30295] dump_stack_lvl+0x95/0xd0 [ 1193.701646][T30295] dump_stack+0x15/0x1b [ 1193.701670][T30295] bad_page+0xee/0x100 [ 1193.701714][T30295] page_frag_free+0x11d/0x120 [ 1193.701754][T30295] __xdp_return+0x154/0x450 [ 1193.701796][T30295] bpf_xdp_frags_shrink_tail+0x2a8/0x400 [ 1193.701819][T30295] ? kmem_cache_free+0xca/0x380 [ 1193.701841][T30295] bpf_xdp_adjust_tail+0x125/0x130 [ 1193.701890][T30295] ? 0xffffffffa02029c8 [ 1193.701956][T30295] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 1193.701980][T30295] bpf_dispatcher_xdp_func+0x25/0x30 [ 1193.702030][T30295] bpf_prog_run_generic_xdp+0x37f/0xb00 [ 1193.702067][T30295] do_xdp_generic+0x480/0x810 [ 1193.702098][T30295] ? tun_get_user+0x1ae1/0x27e0 [ 1193.702210][T30295] tun_get_user+0x1b1c/0x27e0 [ 1193.702311][T30295] ? avc_has_perm_noaudit+0xab/0x130 [ 1193.702360][T30295] ? ref_tracker_alloc+0x1eb/0x2f0 [ 1193.702403][T30295] ? selinux_file_permission+0x2ef/0x320 [ 1193.702497][T30295] tun_chr_write_iter+0x15e/0x210 [ 1193.702534][T30295] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1193.702569][T30295] vfs_write+0x5a6/0x9f0 [ 1193.702635][T30295] ksys_write+0xdc/0x1a0 [ 1193.702668][T30295] __x64_sys_write+0x40/0x50 [ 1193.702699][T30295] x64_sys_call+0x27e1/0x3020 [ 1193.702793][T30295] do_syscall_64+0x12c/0x3b0 [ 1193.702828][T30295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.702852][T30295] RIP: 0033:0x7f76e1f3d68e [ 1193.702870][T30295] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1193.702897][T30295] RSP: 002b:00007f76e09cefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1193.702919][T30295] RAX: ffffffffffffffda RBX: 00007f76e09cf6c0 RCX: 00007f76e1f3d68e [ 1193.702971][T30295] RDX: 0000000000011dc0 RSI: 00002000000030c0 RDI: 00000000000000c8 [ 1193.702986][T30295] RBP: 00007f76e2012d6f R08: 0000000000000000 R09: 0000000000000000 [ 1193.703001][T30295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1193.703015][T30295] R13: 00007f76e21f6038 R14: 00007f76e21f5fa0 R15: 00007ffd497dea48 [ 1193.703037][T30295] [ 1193.703050][T30295] BUG: Bad page state in process syz.2.7143 pfn:10fbd0 [ 1193.950215][T30295] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10fbd0 [ 1193.959150][T30295] flags: 0x200000000000000(node=0|zone=2) [ 1193.964894][T30295] page_type: f9(unknown) [ 1193.969208][T30295] raw: 0200000000000000 0000000000000000 ffff888100b14000 0000000000000000 [ 1193.978086][T30295] raw: 0000000000000000 0000000000000001 00000000f9000000 0000000000000000 [ 1193.986885][T30295] page dumped because: page_pool leak [ 1193.992501][T30295] Modules linked in: [ 1193.996439][T30295] CPU: 0 UID: 0 PID: 30295 Comm: syz.2.7143 Tainted: G B W syzkaller #0 PREEMPT(full) [ 1193.996488][T30295] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1193.996500][T30295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1193.996588][T30295] Call Trace: [ 1193.996599][T30295] [ 1193.996681][T30295] __dump_stack+0x1d/0x30 [ 1193.996713][T30295] dump_stack_lvl+0x95/0xd0 [ 1193.996763][T30295] dump_stack+0x15/0x1b [ 1193.996786][T30295] bad_page+0xee/0x100 [ 1193.996908][T30295] page_frag_free+0x11d/0x120 [ 1193.996949][T30295] __xdp_return+0x154/0x450 [ 1193.996985][T30295] bpf_xdp_frags_shrink_tail+0x2a8/0x400 [ 1193.997076][T30295] ? kmem_cache_free+0xca/0x380 [ 1193.997106][T30295] bpf_xdp_adjust_tail+0x125/0x130 [ 1193.997252][T30295] ? 0xffffffffa02029c8 [ 1193.997275][T30295] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 1193.997293][T30295] bpf_dispatcher_xdp_func+0x25/0x30 [ 1193.997338][T30295] bpf_prog_run_generic_xdp+0x37f/0xb00 [ 1193.997388][T30295] do_xdp_generic+0x480/0x810 [ 1193.997429][T30295] ? tun_get_user+0x1ae1/0x27e0 [ 1193.997465][T30295] tun_get_user+0x1b1c/0x27e0 [ 1193.997584][T30295] ? avc_has_perm_noaudit+0xab/0x130 [ 1193.997694][T30295] ? ref_tracker_alloc+0x1eb/0x2f0 [ 1193.997729][T30295] ? selinux_file_permission+0x2ef/0x320 [ 1193.997765][T30295] tun_chr_write_iter+0x15e/0x210 [ 1193.997820][T30295] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1193.997906][T30295] vfs_write+0x5a6/0x9f0 [ 1193.997952][T30295] ksys_write+0xdc/0x1a0 [ 1193.998040][T30295] __x64_sys_write+0x40/0x50 [ 1193.998079][T30295] x64_sys_call+0x27e1/0x3020 [ 1193.998161][T30295] do_syscall_64+0x12c/0x3b0 [ 1193.998261][T30295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.998289][T30295] RIP: 0033:0x7f76e1f3d68e [ 1193.998305][T30295] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1193.998324][T30295] RSP: 002b:00007f76e09cefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1193.998344][T30295] RAX: ffffffffffffffda RBX: 00007f76e09cf6c0 RCX: 00007f76e1f3d68e [ 1193.998368][T30295] RDX: 0000000000011dc0 RSI: 00002000000030c0 RDI: 00000000000000c8 [ 1193.998459][T30295] RBP: 00007f76e2012d6f R08: 0000000000000000 R09: 0000000000000000 [ 1193.998495][T30295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1193.998507][T30295] R13: 00007f76e21f6038 R14: 00007f76e21f5fa0 R15: 00007ffd497dea48 [ 1193.998528][T30295] [ 1193.998537][T30295] BUG: Bad page state in process syz.2.7143 pfn:12a799 [ 1194.197554][ T28] kauditd_printk_skb: 268 callbacks suppressed [ 1194.197605][ T28] audit: type=1400 audit(2000524691.725:13187): avc: denied { read } for pid=2963 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1194.203951][T30295] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12a799 [ 1194.203978][T30295] flags: 0x200000000000000(node=0|zone=2) [ 1194.235569][ T28] audit: type=1400 audit(2000524691.725:13188): avc: denied { search } for pid=2963 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1194.236174][T30295] page_type: f9(unknown) [ 1194.245316][ T28] audit: type=1400 audit(2000524691.725:13189): avc: denied { append } for pid=2963 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1194.246161][T30295] raw: 0200000000000000 0000000000000000 ffff888100b14000 0000000000000000 [ 1194.246201][T30295] raw: 0000000000000000 0000000000000001 00000000f9000000 0000000000000000 [ 1194.288737][ T28] audit: type=1400 audit(2000524691.725:13190): avc: denied { open } for pid=2963 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1194.294142][T30295] page dumped because: page_pool leak [ 1194.356090][ T28] audit: type=1400 audit(2000524691.734:13191): avc: denied { getattr } for pid=2963 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1194.362166][T30295] Modules linked in: [ 1194.362192][T30295] CPU: 0 UID: 0 PID: 30295 Comm: syz.2.7143 Tainted: G B W syzkaller #0 PREEMPT(full) [ 1194.362409][T30295] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1194.362439][T30295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1194.362480][T30295] Call Trace: [ 1194.362509][T30295] [ 1194.362539][T30295] __dump_stack+0x1d/0x30 [ 1194.362621][T30295] dump_stack_lvl+0x95/0xd0 [ 1194.362774][T30295] dump_stack+0x15/0x1b [ 1194.362830][T30295] bad_page+0xee/0x100 [ 1194.362926][T30295] page_frag_free+0x11d/0x120 [ 1194.363031][T30295] __xdp_return+0x154/0x450 [ 1194.363215][T30295] bpf_xdp_frags_shrink_tail+0x2a8/0x400 [ 1194.363327][T30295] ? kmem_cache_free+0xca/0x380 [ 1194.363404][T30295] bpf_xdp_adjust_tail+0x125/0x130 [ 1194.363563][T30295] ? 0xffffffffa02029c8 [ 1194.363676][T30295] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 1194.363758][T30295] bpf_dispatcher_xdp_func+0x25/0x30 [ 1194.363973][T30295] bpf_prog_run_generic_xdp+0x37f/0xb00 [ 1194.364077][T30295] do_xdp_generic+0x480/0x810 [ 1194.364190][T30295] ? tun_get_user+0x1ae1/0x27e0 [ 1194.364318][T30295] tun_get_user+0x1b1c/0x27e0 [ 1194.364515][T30295] ? avc_has_perm_noaudit+0xab/0x130 [ 1194.364620][T30295] ? ref_tracker_alloc+0x1eb/0x2f0 [ 1194.364762][T30295] ? selinux_file_permission+0x2ef/0x320 [ 1194.364846][T30295] tun_chr_write_iter+0x15e/0x210 [ 1194.364967][T30295] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1194.365085][T30295] vfs_write+0x5a6/0x9f0 [ 1194.365265][T30295] ksys_write+0xdc/0x1a0 [ 1194.365421][T30295] __x64_sys_write+0x40/0x50 [ 1194.365528][T30295] x64_sys_call+0x27e1/0x3020 [ 1194.365627][T30295] do_syscall_64+0x12c/0x3b0 [ 1194.365729][T30295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.365807][T30295] RIP: 0033:0x7f76e1f3d68e [ 1194.365860][T30295] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1194.365947][T30295] RSP: 002b:00007f76e09cefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1194.366017][T30295] RAX: ffffffffffffffda RBX: 00007f76e09cf6c0 RCX: 00007f76e1f3d68e [ 1194.366096][T30295] RDX: 0000000000011dc0 RSI: 00002000000030c0 RDI: 00000000000000c8 [ 1194.366139][T30295] RBP: 00007f76e2012d6f R08: 0000000000000000 R09: 0000000000000000 [ 1194.366181][T30295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1194.366221][T30295] R13: 00007f76e21f6038 R14: 00007f76e21f5fa0 R15: 00007ffd497dea48 [ 1194.366313][T30295] [ 1194.366597][T30295] BUG: Bad page state in process syz.2.7143 pfn:12b002 [ 1194.664961][T30295] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888111e221c0 pfn:0x12b002 [ 1194.675248][T30295] flags: 0x200000000000000(node=0|zone=2) [ 1194.681085][T30295] page_type: f9(unknown) [ 1194.685396][T30295] raw: 0200000000000000 0000000000000000 ffff888100b14000 0000000000000000 [ 1194.694148][T30295] raw: ffff888111e221c0 0000000000000001 00000000f9000000 0000000000000000 [ 1194.703422][T30295] page dumped because: page_pool leak [ 1194.708843][T30295] Modules linked in: [ 1194.712772][T30295] CPU: 0 UID: 0 PID: 30295 Comm: syz.2.7143 Tainted: G B W syzkaller #0 PREEMPT(full) [ 1194.712820][T30295] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1194.712832][T30295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1194.712849][T30295] Call Trace: [ 1194.712858][T30295] [ 1194.712878][T30295] __dump_stack+0x1d/0x30 [ 1194.712909][T30295] dump_stack_lvl+0x95/0xd0 [ 1194.712979][T30295] dump_stack+0x15/0x1b [ 1194.712999][T30295] bad_page+0xee/0x100 [ 1194.713040][T30295] page_frag_free+0x11d/0x120 [ 1194.713080][T30295] __xdp_return+0x154/0x450 [ 1194.713195][T30295] bpf_xdp_frags_shrink_tail+0x2a8/0x400 [ 1194.713226][T30295] ? kmem_cache_free+0xca/0x380 [ 1194.713306][T30295] bpf_xdp_adjust_tail+0x125/0x130 [ 1194.713348][T30295] ? 0xffffffffa02029c8 [ 1194.713369][T30295] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 1194.713440][T30295] bpf_dispatcher_xdp_func+0x25/0x30 [ 1194.713510][T30295] bpf_prog_run_generic_xdp+0x37f/0xb00 [ 1194.713582][T30295] do_xdp_generic+0x480/0x810 [ 1194.713651][T30295] ? tun_get_user+0x1ae1/0x27e0 [ 1194.713738][T30295] tun_get_user+0x1b1c/0x27e0 [ 1194.713884][T30295] ? avc_has_perm_noaudit+0xab/0x130 [ 1194.713920][T30295] ? ref_tracker_alloc+0x1eb/0x2f0 [ 1194.713962][T30295] ? selinux_file_permission+0x2ef/0x320 [ 1194.714033][T30295] tun_chr_write_iter+0x15e/0x210 [ 1194.714082][T30295] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1194.714129][T30295] vfs_write+0x5a6/0x9f0 [ 1194.714242][T30295] ksys_write+0xdc/0x1a0 [ 1194.714289][T30295] __x64_sys_write+0x40/0x50 [ 1194.714402][T30295] x64_sys_call+0x27e1/0x3020 [ 1194.714492][T30295] do_syscall_64+0x12c/0x3b0 [ 1194.714532][T30295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.714555][T30295] RIP: 0033:0x7f76e1f3d68e [ 1194.714647][T30295] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1194.714674][T30295] RSP: 002b:00007f76e09cefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1194.714701][T30295] RAX: ffffffffffffffda RBX: 00007f76e09cf6c0 RCX: 00007f76e1f3d68e [ 1194.714755][T30295] RDX: 0000000000011dc0 RSI: 00002000000030c0 RDI: 00000000000000c8 [ 1194.714769][T30295] RBP: 00007f76e2012d6f R08: 0000000000000000 R09: 0000000000000000 [ 1194.714787][T30295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1194.714805][T30295] R13: 00007f76e21f6038 R14: 00007f76e21f5fa0 R15: 00007ffd497dea48 [ 1194.714834][T30295] [ 1194.714846][T30295] BUG: Bad page state in process syz.2.7143 pfn:10e056 [ 1194.962319][T30295] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10e056 [ 1194.971210][T30295] flags: 0x200000000000000(node=0|zone=2) [ 1194.977000][T30295] page_type: f9(unknown) [ 1194.981277][T30295] raw: 0200000000000000 0000000000000000 ffff888100b14000 0000000000000000 [ 1194.990014][T30295] raw: 0000000000000000 0000000000000001 00000000f9000000 0000000000000000 [ 1194.998698][T30295] page dumped because: page_pool leak [ 1195.004084][T30295] Modules linked in: [ 1195.008113][T30295] CPU: 0 UID: 0 PID: 30295 Comm: syz.2.7143 Tainted: G B W syzkaller #0 PREEMPT(full) [ 1195.008157][T30295] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1195.008169][T30295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1195.008186][T30295] Call Trace: [ 1195.008257][T30295] [ 1195.008269][T30295] __dump_stack+0x1d/0x30 [ 1195.008303][T30295] dump_stack_lvl+0x95/0xd0 [ 1195.008329][T30295] dump_stack+0x15/0x1b [ 1195.008358][T30295] bad_page+0xee/0x100 [ 1195.008458][T30295] page_frag_free+0x11d/0x120 [ 1195.008501][T30295] __xdp_return+0x154/0x450 [ 1195.008692][T30295] bpf_xdp_frags_shrink_tail+0x2a8/0x400 [ 1195.008771][T30295] ? kmem_cache_free+0xca/0x380 [ 1195.008803][T30295] bpf_xdp_adjust_tail+0x125/0x130 [ 1195.008896][T30295] ? 0xffffffffa02029c8 [ 1195.008914][T30295] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 1195.008933][T30295] bpf_dispatcher_xdp_func+0x25/0x30 [ 1195.009103][T30295] bpf_prog_run_generic_xdp+0x37f/0xb00 [ 1195.009204][T30295] do_xdp_generic+0x480/0x810 [ 1195.009261][T30295] ? tun_get_user+0x1ae1/0x27e0 [ 1195.009378][T30295] tun_get_user+0x1b1c/0x27e0 [ 1195.009422][T30295] ? avc_has_perm_noaudit+0xab/0x130 [ 1195.009466][T30295] ? ref_tracker_alloc+0x1eb/0x2f0 [ 1195.009576][T30295] ? selinux_file_permission+0x2ef/0x320 [ 1195.009688][T30295] tun_chr_write_iter+0x15e/0x210 [ 1195.009738][T30295] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1195.009785][T30295] vfs_write+0x5a6/0x9f0 [ 1195.009892][T30295] ksys_write+0xdc/0x1a0 [ 1195.009925][T30295] __x64_sys_write+0x40/0x50 [ 1195.009964][T30295] x64_sys_call+0x27e1/0x3020 [ 1195.009999][T30295] do_syscall_64+0x12c/0x3b0 [ 1195.010066][T30295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.010089][T30295] RIP: 0033:0x7f76e1f3d68e [ 1195.010111][T30295] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1195.010147][T30295] RSP: 002b:00007f76e09cefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1195.010174][T30295] RAX: ffffffffffffffda RBX: 00007f76e09cf6c0 RCX: 00007f76e1f3d68e [ 1195.010195][T30295] RDX: 0000000000011dc0 RSI: 00002000000030c0 RDI: 00000000000000c8 [ 1195.010213][T30295] RBP: 00007f76e2012d6f R08: 0000000000000000 R09: 0000000000000000 [ 1195.010268][T30295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1195.010286][T30295] R13: 00007f76e21f6038 R14: 00007f76e21f5fa0 R15: 00007ffd497dea48 [ 1195.010315][T30295] [ 1195.010325][T30295] BUG: Bad page state in process syz.2.7143 pfn:127ea9 [ 1195.257941][T30295] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888100000000 pfn:0x127ea9 [ 1195.268155][T30295] flags: 0x200000000000000(node=0|zone=2) [ 1195.273915][T30295] page_type: f9(unknown) [ 1195.278210][T30295] raw: 0200000000000000 0000000000000000 ffff888100b14000 0000000000000000 [ 1195.286924][T30295] raw: ffff888100000000 0000000000000001 00000000f9000000 0000000000000000 [ 1195.295639][T30295] page dumped because: page_pool leak [ 1195.301039][T30295] Modules linked in: [ 1195.305004][T30295] CPU: 0 UID: 0 PID: 30295 Comm: syz.2.7143 Tainted: G B W syzkaller #0 PREEMPT(full) [ 1195.305049][T30295] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1195.305111][T30295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1195.305125][T30295] Call Trace: [ 1195.305133][T30295] [ 1195.305141][T30295] __dump_stack+0x1d/0x30 [ 1195.305169][T30295] dump_stack_lvl+0x95/0xd0 [ 1195.305191][T30295] dump_stack+0x15/0x1b [ 1195.305214][T30295] bad_page+0xee/0x100 [ 1195.305357][T30295] page_frag_free+0x11d/0x120 [ 1195.305440][T30295] __xdp_return+0x154/0x450 [ 1195.305477][T30295] bpf_xdp_frags_shrink_tail+0x2a8/0x400 [ 1195.305554][T30295] ? kmem_cache_free+0xca/0x380 [ 1195.305585][T30295] bpf_xdp_adjust_tail+0x125/0x130 [ 1195.305622][T30295] ? 0xffffffffa02029c8 [ 1195.305642][T30295] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 1195.305679][T30295] bpf_dispatcher_xdp_func+0x25/0x30 [ 1195.305759][T30295] bpf_prog_run_generic_xdp+0x37f/0xb00 [ 1195.305892][T30295] do_xdp_generic+0x480/0x810 [ 1195.305937][T30295] ? tun_get_user+0x1ae1/0x27e0 [ 1195.305982][T30295] tun_get_user+0x1b1c/0x27e0 [ 1195.306027][T30295] ? avc_has_perm_noaudit+0xab/0x130 [ 1195.306125][T30295] ? ref_tracker_alloc+0x1eb/0x2f0 [ 1195.306255][T30295] ? selinux_file_permission+0x2ef/0x320 [ 1195.306284][T30295] tun_chr_write_iter+0x15e/0x210 [ 1195.306330][T30295] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1195.306375][T30295] vfs_write+0x5a6/0x9f0 [ 1195.306496][T30295] ksys_write+0xdc/0x1a0 [ 1195.306529][T30295] __x64_sys_write+0x40/0x50 [ 1195.306616][T30295] x64_sys_call+0x27e1/0x3020 [ 1195.306647][T30295] do_syscall_64+0x12c/0x3b0 [ 1195.306770][T30295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.306794][T30295] RIP: 0033:0x7f76e1f3d68e [ 1195.306814][T30295] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1195.306840][T30295] RSP: 002b:00007f76e09cefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1195.306867][T30295] RAX: ffffffffffffffda RBX: 00007f76e09cf6c0 RCX: 00007f76e1f3d68e [ 1195.306966][T30295] RDX: 0000000000011dc0 RSI: 00002000000030c0 RDI: 00000000000000c8 [ 1195.306999][T30295] RBP: 00007f76e2012d6f R08: 0000000000000000 R09: 0000000000000000 [ 1195.307016][T30295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1195.307034][T30295] R13: 00007f76e21f6038 R14: 00007f76e21f5fa0 R15: 00007ffd497dea48 [ 1195.307139][T30295] [ 1195.307151][T30295] BUG: Bad page state in process syz.2.7143 pfn:12a9fd [ 1195.554826][T30295] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888100000000 pfn:0x12a9fd [ 1195.565138][T30295] flags: 0x200000000000000(node=0|zone=2) [ 1195.570886][T30295] page_type: f9(unknown) [ 1195.575210][T30295] raw: 0200000000000000 0000000000000000 ffff888100b14000 0000000000000000 [ 1195.583941][T30295] raw: ffff888100000000 0000000000000001 00000000f9000000 0000000000000000 [ 1195.592570][T30295] page dumped because: page_pool leak [ 1195.598008][T30295] Modules linked in: [ 1195.601939][T30295] CPU: 0 UID: 0 PID: 30295 Comm: syz.2.7143 Tainted: G B W syzkaller #0 PREEMPT(full) [ 1195.602037][T30295] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1195.602055][T30295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1195.602072][T30295] Call Trace: [ 1195.602082][T30295] [ 1195.602093][T30295] __dump_stack+0x1d/0x30 [ 1195.602126][T30295] dump_stack_lvl+0x95/0xd0 [ 1195.602149][T30295] dump_stack+0x15/0x1b [ 1195.602244][T30295] bad_page+0xee/0x100 [ 1195.602280][T30295] page_frag_free+0x11d/0x120 [ 1195.602320][T30295] __xdp_return+0x154/0x450 [ 1195.602393][T30295] bpf_xdp_frags_shrink_tail+0x2a8/0x400 [ 1195.602419][T30295] ? kmem_cache_free+0xca/0x380 [ 1195.602448][T30295] bpf_xdp_adjust_tail+0x125/0x130 [ 1195.602568][T30295] ? 0xffffffffa02029c8 [ 1195.602584][T30295] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 1195.602663][T30295] bpf_dispatcher_xdp_func+0x25/0x30 [ 1195.602702][T30295] bpf_prog_run_generic_xdp+0x37f/0xb00 [ 1195.602745][T30295] do_xdp_generic+0x480/0x810 [ 1195.602787][T30295] ? tun_get_user+0x1ae1/0x27e0 [ 1195.602897][T30295] tun_get_user+0x1b1c/0x27e0 [ 1195.602961][T30295] ? avc_has_perm_noaudit+0xab/0x130 [ 1195.602998][T30295] ? ref_tracker_alloc+0x1eb/0x2f0 [ 1195.603107][T30295] ? selinux_file_permission+0x2ef/0x320 [ 1195.603159][T30295] tun_chr_write_iter+0x15e/0x210 [ 1195.603207][T30295] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1195.603253][T30295] vfs_write+0x5a6/0x9f0 [ 1195.603307][T30295] ksys_write+0xdc/0x1a0 [ 1195.603384][T30295] __x64_sys_write+0x40/0x50 [ 1195.603422][T30295] x64_sys_call+0x27e1/0x3020 [ 1195.603456][T30295] do_syscall_64+0x12c/0x3b0 [ 1195.603513][T30295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.603535][T30295] RIP: 0033:0x7f76e1f3d68e [ 1195.603627][T30295] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1195.603649][T30295] RSP: 002b:00007f76e09cefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1195.603673][T30295] RAX: ffffffffffffffda RBX: 00007f76e09cf6c0 RCX: 00007f76e1f3d68e [ 1195.603749][T30295] RDX: 0000000000011dc0 RSI: 00002000000030c0 RDI: 00000000000000c8 [ 1195.603839][T30295] RBP: 00007f76e2012d6f R08: 0000000000000000 R09: 0000000000000000 [ 1195.603854][T30295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1195.603867][T30295] R13: 00007f76e21f6038 R14: 00007f76e21f5fa0 R15: 00007ffd497dea48 [ 1195.603891][T30295] [ 1195.843816][T30295] BUG: Bad page state in process syz.2.7143 pfn:127eea [ 1195.850796][T30295] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888100000000 pfn:0x127eea [ 1195.861007][T30295] flags: 0x200000000000000(node=0|zone=2) [ 1195.866749][T30295] page_type: f9(unknown) [ 1195.871087][T30295] raw: 0200000000000000 0000000000000000 ffff888100b14000 0000000000000000 [ 1195.879701][T30295] raw: ffff888100000000 0000000000000001 00000000f9000000 0000000000000000 [ 1195.888398][T30295] page dumped because: page_pool leak [ 1195.894247][T30295] Modules linked in: [ 1195.898221][T30295] CPU: 0 UID: 0 PID: 30295 Comm: syz.2.7143 Tainted: G B W syzkaller #0 PREEMPT(full) [ 1195.898303][T30295] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1195.898396][T30295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1195.898409][T30295] Call Trace: [ 1195.898418][T30295] [ 1195.898430][T30295] __dump_stack+0x1d/0x30 [ 1195.898462][T30295] dump_stack_lvl+0x95/0xd0 [ 1195.898484][T30295] dump_stack+0x15/0x1b [ 1195.898584][T30295] bad_page+0xee/0x100 [ 1195.898627][T30295] page_frag_free+0x11d/0x120 [ 1195.898659][T30295] __xdp_return+0x154/0x450 [ 1195.898694][T30295] bpf_xdp_frags_shrink_tail+0x2a8/0x400 [ 1195.898796][T30295] ? kmem_cache_free+0xca/0x380 [ 1195.898818][T30295] bpf_xdp_adjust_tail+0x125/0x130 [ 1195.898852][T30295] ? 0xffffffffa02029c8 [ 1195.898873][T30295] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 1195.898924][T30295] bpf_dispatcher_xdp_func+0x25/0x30 [ 1195.898970][T30295] bpf_prog_run_generic_xdp+0x37f/0xb00 [ 1195.899012][T30295] do_xdp_generic+0x480/0x810 [ 1195.899126][T30295] ? tun_get_user+0x1ae1/0x27e0 [ 1195.899181][T30295] tun_get_user+0x1b1c/0x27e0 [ 1195.899216][T30295] ? avc_has_perm_noaudit+0xab/0x130 [ 1195.899325][T30295] ? ref_tracker_alloc+0x1eb/0x2f0 [ 1195.899364][T30295] ? selinux_file_permission+0x2ef/0x320 [ 1195.899463][T30295] tun_chr_write_iter+0x15e/0x210 [ 1195.899500][T30295] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1195.899545][T30295] vfs_write+0x5a6/0x9f0 [ 1195.899599][T30295] ksys_write+0xdc/0x1a0 [ 1195.899630][T30295] __x64_sys_write+0x40/0x50 [ 1195.899794][T30295] x64_sys_call+0x27e1/0x3020 [ 1195.899906][T30295] do_syscall_64+0x12c/0x3b0 [ 1195.899938][T30295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.899965][T30295] RIP: 0033:0x7f76e1f3d68e [ 1195.900053][T30295] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1195.900072][T30295] RSP: 002b:00007f76e09cefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1195.900092][T30295] RAX: ffffffffffffffda RBX: 00007f76e09cf6c0 RCX: 00007f76e1f3d68e [ 1195.900112][T30295] RDX: 0000000000011dc0 RSI: 00002000000030c0 RDI: 00000000000000c8 [ 1195.900131][T30295] RBP: 00007f76e2012d6f R08: 0000000000000000 R09: 0000000000000000 [ 1195.900185][T30295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1195.900199][T30295] R13: 00007f76e21f6038 R14: 00007f76e21f5fa0 R15: 00007ffd497dea48 [ 1195.900227][T30295] [ 1195.900239][T30295] BUG: Bad page state in process syz.2.7143 pfn:10fbd2 [ 1196.148134][T30295] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10fbd2 [ 1196.157081][T30295] flags: 0x200000000000000(node=0|zone=2) [ 1196.162851][T30295] page_type: f9(unknown) [ 1196.167129][T30295] raw: 0200000000000000 0000000000000000 ffff888100b14000 0000000000000000 [ 1196.175783][T30295] raw: 0000000000000000 0000000000000001 00000000f9000000 0000000000000000 [ 1196.184505][T30295] page dumped because: page_pool leak [ 1196.189956][T30295] Modules linked in: [ 1196.193977][T30295] CPU: 0 UID: 0 PID: 30295 Comm: syz.2.7143 Tainted: G B W syzkaller #0 PREEMPT(full) [ 1196.194085][T30295] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1196.194094][T30295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1196.194112][T30295] Call Trace: [ 1196.194121][T30295] [ 1196.194189][T30295] __dump_stack+0x1d/0x30 [ 1196.194223][T30295] dump_stack_lvl+0x95/0xd0 [ 1196.194254][T30295] dump_stack+0x15/0x1b [ 1196.194338][T30295] bad_page+0xee/0x100 [ 1196.194382][T30295] page_frag_free+0x11d/0x120 [ 1196.194455][T30295] __xdp_return+0x154/0x450 [ 1196.194496][T30295] bpf_xdp_frags_shrink_tail+0x2a8/0x400 [ 1196.194593][T30295] ? kmem_cache_free+0xca/0x380 [ 1196.194731][T30295] bpf_xdp_adjust_tail+0x125/0x130 [ 1196.194776][T30295] ? 0xffffffffa02029c8 [ 1196.194797][T30295] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 1196.194851][T30295] bpf_dispatcher_xdp_func+0x25/0x30 [ 1196.194908][T30295] bpf_prog_run_generic_xdp+0x37f/0xb00 [ 1196.194941][T30295] do_xdp_generic+0x480/0x810 [ 1196.194985][T30295] ? tun_get_user+0x1ae1/0x27e0 [ 1196.195027][T30295] tun_get_user+0x1b1c/0x27e0 [ 1196.195175][T30295] ? avc_has_perm_noaudit+0xab/0x130 [ 1196.195220][T30295] ? ref_tracker_alloc+0x1eb/0x2f0 [ 1196.195327][T30295] ? selinux_file_permission+0x2ef/0x320 [ 1196.195362][T30295] tun_chr_write_iter+0x15e/0x210 [ 1196.195403][T30295] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1196.195518][T30295] vfs_write+0x5a6/0x9f0 [ 1196.195578][T30295] ksys_write+0xdc/0x1a0 [ 1196.195616][T30295] __x64_sys_write+0x40/0x50 [ 1196.195647][T30295] x64_sys_call+0x27e1/0x3020 [ 1196.195721][T30295] do_syscall_64+0x12c/0x3b0 [ 1196.195840][T30295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.195941][T30295] RIP: 0033:0x7f76e1f3d68e [ 1196.195963][T30295] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1196.195991][T30295] RSP: 002b:00007f76e09cefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1196.196068][T30295] RAX: ffffffffffffffda RBX: 00007f76e09cf6c0 RCX: 00007f76e1f3d68e [ 1196.196090][T30295] RDX: 0000000000011dc0 RSI: 00002000000030c0 RDI: 00000000000000c8 [ 1196.196109][T30295] RBP: 00007f76e2012d6f R08: 0000000000000000 R09: 0000000000000000 [ 1196.196124][T30295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1196.196141][T30295] R13: 00007f76e21f6038 R14: 00007f76e21f5fa0 R15: 00007ffd497dea48 [ 1196.196247][T30295] [ 1196.196260][T30295] BUG: Bad page state in process syz.2.7143 pfn:12b031 [ 1196.443365][T30295] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12b031 [ 1196.452284][T30295] flags: 0x200000000000000(node=0|zone=2) [ 1196.458112][T30295] page_type: f9(unknown) [ 1196.462424][T30295] raw: 0200000000000000 0000000000000000 ffff888100b14000 0000000000000000 [ 1196.471125][T30295] raw: 0000000000000000 0000000000000001 00000000f9000000 0000000000000000 [ 1196.479751][T30295] page dumped because: page_pool leak [ 1196.485194][T30295] Modules linked in: [ 1196.489153][T30295] CPU: 0 UID: 0 PID: 30295 Comm: syz.2.7143 Tainted: G B W syzkaller #0 PREEMPT(full) [ 1196.489275][T30295] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1196.489287][T30295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1196.489306][T30295] Call Trace: [ 1196.489314][T30295] [ 1196.489330][T30295] __dump_stack+0x1d/0x30 [ 1196.489357][T30295] dump_stack_lvl+0x95/0xd0 [ 1196.489379][T30295] dump_stack+0x15/0x1b [ 1196.489399][T30295] bad_page+0xee/0x100 [ 1196.489445][T30295] page_frag_free+0x11d/0x120 [ 1196.489507][T30295] __xdp_return+0x154/0x450 [ 1196.489550][T30295] bpf_xdp_frags_shrink_tail+0x2a8/0x400 [ 1196.489643][T30295] ? kmem_cache_free+0xca/0x380 [ 1196.489666][T30295] bpf_xdp_adjust_tail+0x125/0x130 [ 1196.489702][T30295] ? 0xffffffffa02029c8 [ 1196.489792][T30295] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 1196.489816][T30295] bpf_dispatcher_xdp_func+0x25/0x30 [ 1196.489925][T30295] bpf_prog_run_generic_xdp+0x37f/0xb00 [ 1196.489964][T30295] do_xdp_generic+0x480/0x810 [ 1196.489995][T30295] ? tun_get_user+0x1ae1/0x27e0 [ 1196.490041][T30295] tun_get_user+0x1b1c/0x27e0 [ 1196.490196][T30295] ? avc_has_perm_noaudit+0xab/0x130 [ 1196.490240][T30295] ? ref_tracker_alloc+0x1eb/0x2f0 [ 1196.490279][T30295] ? selinux_file_permission+0x2ef/0x320 [ 1196.490315][T30295] tun_chr_write_iter+0x15e/0x210 [ 1196.490451][T30295] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1196.490542][T30295] vfs_write+0x5a6/0x9f0 [ 1196.490588][T30295] ksys_write+0xdc/0x1a0 [ 1196.490743][T30295] __x64_sys_write+0x40/0x50 [ 1196.490774][T30295] x64_sys_call+0x27e1/0x3020 [ 1196.490935][T30295] do_syscall_64+0x12c/0x3b0 [ 1196.490972][T30295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.491004][T30295] RIP: 0033:0x7f76e1f3d68e [ 1196.491026][T30295] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1196.491091][T30295] RSP: 002b:00007f76e09cefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1196.491113][T30295] RAX: ffffffffffffffda RBX: 00007f76e09cf6c0 RCX: 00007f76e1f3d68e [ 1196.491128][T30295] RDX: 0000000000011dc0 RSI: 00002000000030c0 RDI: 00000000000000c8 [ 1196.491142][T30295] RBP: 00007f76e2012d6f R08: 0000000000000000 R09: 0000000000000000 [ 1196.491161][T30295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1196.491179][T30295] R13: 00007f76e21f6038 R14: 00007f76e21f5fa0 R15: 00007ffd497dea48 [ 1196.491277][T30295] [ 1196.752252][T30277] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1196.769589][T25692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1196.799747][T30304] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7147'. [ 1196.850225][T24770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1196.979578][T30309] loop7: detected capacity change from 0 to 8192 [ 1197.038245][T30309] loop7: p1 < > p2 p4 < p5 > [ 1197.043495][T30309] loop7: partition table partially beyond EOD, truncated [ 1197.051745][T30309] loop7: p1 start 134217728 is beyond EOD, truncated [ 1197.077574][T30309] loop7: p2 size 591360 extends beyond EOD, truncated [ 1197.086519][T30309] loop7: p5 size 591360 extends beyond EOD, truncated