last executing test programs: 7m59.923707481s ago: executing program 2 (id=2916): r0 = socket(0x10, 0x3, 0x0) getpeername$tipc(r0, 0x0, &(0x7f0000000400)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), r1) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000000000", @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) (fail_nth: 1) 7m59.021721141s ago: executing program 2 (id=2918): r0 = socket(0x10, 0x3, 0x0) getpeername$tipc(r0, 0x0, &(0x7f0000000400)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), r1) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000000000", @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 7m58.633950279s ago: executing program 2 (id=2922): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000180)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000380)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000081b000002000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940), &(0x7f0000000000), 0x7, r2}, 0x38) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) mmap(&(0x7f000071f000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r5 = socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="20e20d0b0a0001"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 7m57.696054459s ago: executing program 2 (id=2925): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) rt_sigqueueinfo(r0, 0x41, &(0x7f0000000240)={0x21, 0x4, 0x81}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r2, &(0x7f00000002c0)="7e0002ae88cdbc7f36abff347ed1595e2adf5b406237c47c0a8a7f0a0a8c6e3c18f45899c22b809076b638cff468409fbb1a4e86bd87bec701256beffcffae841c57ffff5a28824f130d4bc77dcc701f86f55fd5bbbcf42b812ca1d0a10661071b2980c5450d6dd21572b2d226afb24d411d07c980e3657f71b1e9d928f96d1d7ec53e9e3a12c4dbf0abcb8d0272e05973fa4e45c238ba8c369f20d238b4605c978b63553790c33f309296f1f7dcb5521a238064d827a403aac7a13696e714928be6750c4d79ccfdcd61567ba041de1618301adc403ec32019edc9d704753f804d0e7eb6b4c2d3f62d2e", 0xea, 0x40004, &(0x7f00000003c0)=@nl=@kern={0x10, 0x0, 0x0, 0x200}, 0x80) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='map=off,iocharset=iso8859-1,session=0x0000000000000023,overriderockperm,uid=', @ANYRESHEX=0x0, @ANYBLOB=',check=strict,cruft,mode=0x0000000000000\x00\x00\x00\x00map=normal,dmode=0x000000000000107b,\x00'], 0x0, 0x567, &(0x7f00000003c0)="$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") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10081, 0x0, 0x207, 0x0, 0x6, 0x8001, 0x7fff, 0x0, 0x400}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000740)=""/4100, 0x1004}], 0x1, 0x145, 0x0) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20) creat(&(0x7f0000000080)='./file0\x00', 0xd) syz_io_uring_setup(0x1d1f, &(0x7f0000000200)={0x0, 0xcd1d, 0x10100, 0x0, 0xaa}, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f00000001c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xd57a, 0x1c080, 0x2, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x2f) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={r7, &(0x7f0000000500), &(0x7f00000005c0)=""/35}, 0x20) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) 7m57.18609853s ago: executing program 2 (id=2926): socket$nl_generic(0x10, 0x3, 0x10) restart_syscall() syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) fcntl$getflags(r0, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 7m56.355352029s ago: executing program 2 (id=2928): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x84042, 0x1f3) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) read$char_usb(r0, 0x0, 0x0) write$P9_RLINK(r0, 0x0, 0x0) 7m56.333421219s ago: executing program 32 (id=2928): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x84042, 0x1f3) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) read$char_usb(r0, 0x0, 0x0) write$P9_RLINK(r0, 0x0, 0x0) 6m31.041295231s ago: executing program 1 (id=3244): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4000002}, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x22, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075}, 0x38) 6m30.998760812s ago: executing program 1 (id=3245): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x242, 0x2e0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x400c804) io_uring_setup(0x7, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x1, 0x0) mq_timedsend(r1, 0x0, 0x0, 0xa, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) close(r1) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xb54) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) r2 = syz_clone(0xa1c68400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x10000000) 6m30.948660873s ago: executing program 1 (id=3247): bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff, 0x2b, 0x0, @val=@netkit}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8417, 0x1}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x480, 0x408, 0x408, 0xffffffff, 0x190, 0x408, 0x4f8, 0x4f8, 0xffffffff, 0x4f8, 0x4f8, 0x5, 0x0, {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x26}, 0xff000000, 0xff000000, 'vcan0\x00', 'rose0\x00', {}, {0xff}, 0xc, 0x2, 0xc}, 0x0, 0x98, 0xd0, 0x48, {}, [@common=@unspec=@addrtype1={{0x28}, {0x901, 0x40, 0x5}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x18, @remote, @rand_addr=0x64010102, @gre_key=0x4, @port=0x4e21}}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0xe4, 0x0}, 0xffffffff, 0xff000000, 'team_slave_1\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x11, 0x0, 0x42}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@empty, [0x0, 0xff, 0xffffff00, 0xc20f5e0473180537], @ipv4=@empty, [0xffffffff, 0x0, 0xff000000, 0xff], @ipv4=@remote, [0xffffff00, 0xff, 0xff000000, 0xffffffff], @ipv4=@private=0xa010102, [0xffffffff, 0x0, 0xff000000, 0xff000000], 0x3, 0x0, 0x87, 0x4e20, 0x4e23, 0x4e21, 0x4e24}, 0x80, 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_vlan\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="5bdef0470748", 0x1, 0xb, [0x23, 0x3c, 0x2f, 0x7, 0x1a, 0xb, 0x33, 0x3e, 0xf, 0x10, 0x7, 0x25, 0x39, 0x3a, 0x1e, 0x2e], 0x1, 0x7, 0x5}}}, {{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id, @gre_key=0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) capset(0x0, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x85, 0xffffffff, 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000001000)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=@newtfilter={0x34, 0x2c, 0x1, 0x72bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x3, 0x3}, {0x9, 0x3}, {0x9, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048095}, 0x40) 6m29.933152095s ago: executing program 1 (id=3253): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (fail_nth: 1) 6m29.650259661s ago: executing program 1 (id=3254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x54, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x2408c843}, 0x0) 6m29.538821563s ago: executing program 1 (id=3255): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x1a, 0x0, 0x2}, 0x28) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x10) ioctl$XFS_IOC_GETBMAPX(r2, 0xc0205838, &(0x7f0000000000)={0x5, 0x43df, 0xdd80, 0x100, 0x2, 0x4, 0x6}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="4000000010003704000000000000", @ANYRES32, @ANYBLOB="8304050000000000200012800800010067747000140002"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20088814}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0xb}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, r1, 0x25, 0x8, @void}, 0x10) 6m14.419273266s ago: executing program 33 (id=3255): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x1a, 0x0, 0x2}, 0x28) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x10) ioctl$XFS_IOC_GETBMAPX(r2, 0xc0205838, &(0x7f0000000000)={0x5, 0x43df, 0xdd80, 0x100, 0x2, 0x4, 0x6}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="4000000010003704000000000000", @ANYRES32, @ANYBLOB="8304050000000000200012800800010067747000140002"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20088814}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0xb}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, r1, 0x25, 0x8, @void}, 0x10) 3m52.624515304s ago: executing program 4 (id=4053): r0 = gettid() r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x0, @dev}, {0x2, 0x20, @dev={0xac, 0x14, 0x14, 0xc}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeec, 0x8031, 0xffffffffffffffff, 0x0) 3m52.146335484s ago: executing program 4 (id=4056): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) fallocate(r0, 0x0, 0x0, 0x1001f0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x11, 0x801afd) 3m51.285532982s ago: executing program 4 (id=4064): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x200005}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 3m50.662875806s ago: executing program 4 (id=4070): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x11c) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) fallocate(r0, 0x0, 0xbf1, 0x2000402) 3m50.608104616s ago: executing program 3 (id=4071): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x407f, 0x5, 0x3, 0xb9fe, 0x9, "ffff5300"}) writev(0xffffffffffffffff, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe009", 0x1b}], 0x1) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xbfb3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 3m49.937753711s ago: executing program 3 (id=4076): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7d, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0xa, 0x20002f7}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m49.847621233s ago: executing program 3 (id=4078): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m49.847532253s ago: executing program 4 (id=4079): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000440)="ee", 0x1}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)='l', 0x1}], 0x1) 3m49.807195053s ago: executing program 3 (id=4080): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4cb, &(0x7f00000005c0)="$eJzs3ctvG9UaAPDPdpMmbe7t415dtb3SbaVeqfehxnkINQEkxApYVEJUYgNSCYkbSpw6ip3SRF2ksOuCBQKBhFiw5y9gQ1dUlRBrEFtWqBWUIAECychju83DTkNJbZr5/aSpz8y4/s6x+50en5nxBJBax2p/ZCIGIuLziNhXX137hGP1h5XblydrSyaq1TPfZpLn1dabT23+vb0RsRwRfRHx3FMRL2c2xi0vLs1MFIuF+cZ6vjI7ly8vLp08PzsxXZguXBgeOzU+PjY0OjK+bW29+uarV09//EzvRz++cfP6W59+UqvWQGPf6nZsp3rTe+LAqm27IuLxBxGsC3KN9vR3uyLcl9rn97eIOJ7k/77IJZ8mkAbVarX6a3V3u93LVWDHyiZj4Ex2MCLq5Wx2cLA+hv977MkWS+XK/8+VFi5M1cfK+6Mne+58sTDU+K6wP3oytfXhpHx3fWTd+mhEMgZ+O9efrA9OlopTne3qgHX2rsv/H3L1/AdSwld+SC/5D+kl/yG95D+kl/yH9JL/kF7yH9JL/kN6yX9IL/kP6bVZ/vd2sB5ARz17+nRtqTavf5+6uLgwU7p4cqpQnhmcXZgcnCzNzw1Ol0rTyTU7s/d6vWKpNDf8SCxcylcK5Uq+vLh0dra0cKFyNrmu/2yhpyOtArbiwNFrX2YiYvnR/mSJVf/ly1XY2arVTHT7GmSgO3Ld7oCArjH1D+n1O77jt/2RMODh1uInetfoa735iZh7ELUBOiG72c5fbnSuIkDHnTjs+B+klfl/SC/z/5BexvjAfc7/h/l/eHhtOv8P7GgDbe7/9ZdV9+4aioi/RsQXuZ7dzXt9ATtB9ptMY/x/Yt+/B9bv7c38lBwi6I2I194/8+6liUplfri2/bs72yvvNbaPdKP+QHtrZ/iaedrMYwAgvVZuX55sLp2Me+vJ+kkIG+PvasxN9iUjmD0rmTXnKmS26dyF5SsRcahV/Ezjfuf1Ix97VnIb4h9sPGbqL5HUd1dy3/TOxD+8Kv6/VsU/8offFUiHa7X+Z6hV/mWTnI47+be2/xnYpnMnmv1f85zr1fGb/V+uTf93dIsxXvng9baHd29diTjSsv9txutLYq2PX6vbiS3Gv/ni8/9ot6/6Yf11WsVvqpXyldm5fHlx6eT5Zi3GTo2Pjw2NjoznkznqfHOmeqPHDn12fbP2N7Rp/1ct21/b9t8ttv/nf9544dgm8f9zvPW/v4PJY+v3vz8i/rfF+N+PfP1Su321+FNt3v/sJvFr20a3GL/8ztOuHQaAP5Hy4tLMRLFYmFdQUFC4U7hXz7HcmQ4KeGDuJn23awIAAAAAAAAAAABsVSdOJ+52GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdoLfAgAA//8N/c3z") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf79e6d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc17753538b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) write$cgroup_subtree(r0, &(0x7f00000002c0)={[{0x2b, 'io'}]}, 0x4) write$binfmt_misc(r0, &(0x7f0000000340)="25e0c69ce5", 0x5) 3m49.598099698s ago: executing program 4 (id=4083): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0xa, 0x1, 0x1, 0x0, 0x0, 0x8, 0xc, 0x4, 0x8, 0x2, 0x2, 0x10}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000004c0)=[@in6={0xa, 0x4e24, 0x20b, @loopback, 0x7fff}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x7d, &(0x7f0000000080)={r1}, &(0x7f00000001c0)=0x8) 3m49.550669919s ago: executing program 34 (id=4083): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0xa, 0x1, 0x1, 0x0, 0x0, 0x8, 0xc, 0x4, 0x8, 0x2, 0x2, 0x10}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000004c0)=[@in6={0xa, 0x4e24, 0x20b, @loopback, 0x7fff}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x7d, &(0x7f0000000080)={r1}, &(0x7f00000001c0)=0x8) 3m49.110962729s ago: executing program 3 (id=4088): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x28002f3}) 3m48.397305754s ago: executing program 3 (id=4094): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) 3m48.326274535s ago: executing program 35 (id=4094): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) 1m31.831363839s ago: executing program 5 (id=5395): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0xfffffffc, 0x7c, {0x0, 0x0, 0x0, 0x0, 0x17b93, 0x25}}, 0x20}, 0x1, 0x0, 0x0, 0x20041808}, 0x0) 1m31.762053091s ago: executing program 5 (id=5398): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) pipe2$9p(0x0, 0x200000000000000) 1m31.735780401s ago: executing program 5 (id=5399): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="141000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000030900020073797a310000000008000a40fffffffc080003400000010614000000110001efffffff00000000000100000a"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x4, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) listen(r3, 0x80c) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1}]}, 0x10) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 1m31.706183122s ago: executing program 5 (id=5400): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f00"], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={[{@noload}, {@grpjquota}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@discard}]}, 0xff, 0x46e, &(0x7f0000000940)="$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") r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='mountinfo\x00') syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x10, 0x0, 0x0, 0x4, {[@md5sig={0x13, 0x12, "623eebe039a1f617fd02722e3486ebd9"}]}}}}}}}, 0x0) sendfile(r0, r3, &(0x7f0000000000)=0x2eb4, 0x2000007fc) 1m31.633833424s ago: executing program 5 (id=5401): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="163280", 0x3}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m31.226203443s ago: executing program 5 (id=5405): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = socket(0xa, 0x5, 0x0) r2 = socket(0x11, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) (async) setsockopt(r2, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) (async) sendmmsg$inet_sctp(r1, &(0x7f0000005b00)=[{&(0x7f0000000280)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000fc0)="d0", 0x1}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="3000000000000000840000000100000027007f000100000003f3000008000000000000000600000007000000", @ANYRES32, @ANYBLOB="1800000000000000840000000000000000000000ff01000018000000000000008400000007"], 0x60, 0x4000000}], 0x1, 0x20040099) (async) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f0000001940)={0xa, 0x0, 0x1000006, @private0, 0x4005}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002200)=[{{0x0, 0xf5, 0x0}}], 0x40000000000027f, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) (async) write$binfmt_script(r0, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x0, 0x12, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r6) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x2c, r7, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000004}, 0x24040810) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r5, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x0, 0x6, 0x5, 0x1000, 0xc, @dev={0xfe, 0x80, '\x00', 0x14}, @remote, 0x7800, 0x700, 0xfff, 0x8}}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x3c0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x10, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="1854000001000000000000000000000d18490000020000000000000022c5036f4a00000000950000853c91f4cdbbb350e9953656717c4f408bdda9e85065b57abd36d532d08692fcb4239c39e2c60fd5a4034b57e30fa8812d01f6d867eb79c59a227249da6f63d238f49c668c8c8055ccf287ab0fa02c4b81b08e60ae52a604f1c917e41a7bd5a6bbfcf3f8040916eb946fc9de44e9baa083f2a4a17a9b765239497ddfbf914401ed018700f6eb2e99592e3f2575f2bcddced236fa94ed6b42522aa35e32d63bb4e4203903e37d95"], &(0x7f0000000040)='GPL\x00', 0xb558, 0x0, 0x0, 0x40f00, 0x38, '\x00', r9, @fallback=0x14, r0, 0x8, &(0x7f0000000200)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xe, 0x4, 0x4}, 0x10, r10, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000300)=[{0x5, 0x2, 0x1, 0xb}, {0x5, 0x2, 0xf, 0xa}, {0x2, 0x5, 0x5, 0x5}, {0x2, 0x1, 0x8, 0x9}, {0x4, 0x5, 0x5, 0xc}, {0x3, 0x1, 0xd, 0xc}], 0x10, 0x3}, 0x94) 1m31.213050693s ago: executing program 36 (id=5405): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = socket(0xa, 0x5, 0x0) r2 = socket(0x11, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) (async) setsockopt(r2, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) (async) sendmmsg$inet_sctp(r1, &(0x7f0000005b00)=[{&(0x7f0000000280)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000fc0)="d0", 0x1}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="3000000000000000840000000100000027007f000100000003f3000008000000000000000600000007000000", @ANYRES32, @ANYBLOB="1800000000000000840000000000000000000000ff01000018000000000000008400000007"], 0x60, 0x4000000}], 0x1, 0x20040099) (async) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f0000001940)={0xa, 0x0, 0x1000006, @private0, 0x4005}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002200)=[{{0x0, 0xf5, 0x0}}], 0x40000000000027f, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) (async) write$binfmt_script(r0, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x0, 0x12, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r6) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x2c, r7, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000004}, 0x24040810) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r5, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x0, 0x6, 0x5, 0x1000, 0xc, @dev={0xfe, 0x80, '\x00', 0x14}, @remote, 0x7800, 0x700, 0xfff, 0x8}}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x3c0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x10, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="1854000001000000000000000000000d18490000020000000000000022c5036f4a00000000950000853c91f4cdbbb350e9953656717c4f408bdda9e85065b57abd36d532d08692fcb4239c39e2c60fd5a4034b57e30fa8812d01f6d867eb79c59a227249da6f63d238f49c668c8c8055ccf287ab0fa02c4b81b08e60ae52a604f1c917e41a7bd5a6bbfcf3f8040916eb946fc9de44e9baa083f2a4a17a9b765239497ddfbf914401ed018700f6eb2e99592e3f2575f2bcddced236fa94ed6b42522aa35e32d63bb4e4203903e37d95"], &(0x7f0000000040)='GPL\x00', 0xb558, 0x0, 0x0, 0x40f00, 0x38, '\x00', r9, @fallback=0x14, r0, 0x8, &(0x7f0000000200)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xe, 0x4, 0x4}, 0x10, r10, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000300)=[{0x5, 0x2, 0x1, 0xb}, {0x5, 0x2, 0xf, 0xa}, {0x2, 0x5, 0x5, 0x5}, {0x2, 0x1, 0x8, 0x9}, {0x4, 0x5, 0x5, 0xc}, {0x3, 0x1, 0xd, 0xc}], 0x10, 0x3}, 0x94) 13.569472581s ago: executing program 6 (id=6062): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x20, 0x3, 0x3b8, 0x138, 0xa, 0x148, 0x0, 0x10, 0x340, 0x2a8, 0x2a8, 0x340, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010101, @multicast1, 0x0, 0x0, 'bridge0\x00', 'pim6reg\x00'}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00', {}, {}, 0x20}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x1, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x240}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x418) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1080, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) futex(&(0x7f0000000100)=0x2, 0x6, 0x2, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)=0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) accept$unix(r2, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@local, @in6=@mcast1, 0x1, 0x4, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x5800) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_default\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffde5, 0x0, 0xffffffffffffffff, 0x39}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=@raw=[@generic={0x0, 0x2, 0x8, 0x101, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x10}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x400}, @exit, @exit, @alu={0x4, 0x0, 0x1, 0x8, 0x5, 0x30, 0xffffffffffffffff}, @map_fd={0x18, 0x6, 0x1, 0x0, r5}, @jmp={0x5, 0x0, 0x4, 0xb, 0xa, 0xffffffffffffffff}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r5, r5, r5, r5, 0xffffffffffffffff, r5], 0x0, 0x10, 0xfffffffe}, 0xc3) socket$l2tp6(0xa, 0x2, 0x73) 11.006574515s ago: executing program 6 (id=6069): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x521340, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000010500)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0xd}, {0xe}, {0xfff7, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8080) gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x7, 0x11000, 0x4, 0x9484, 0x2001, 0x402, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) fsmount(0xffffffffffffffff, 0x1, 0x0) futex(&(0x7f0000000280), 0x80, 0x0, &(0x7f0000000300), 0x0, 0x2) lstat(0x0, &(0x7f00000007c0)) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f00000001c0)='./file2\x00', 0x824004, &(0x7f0000000780), 0x1, 0x438, &(0x7f0000000340)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0dff"], 0x14}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x20, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, 0x0, 0x64e98, 0x16ac1}}, 0x20}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) 10.3189212s ago: executing program 6 (id=6074): poll(0x0, 0x0, 0x1ff8) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1ce600005e00010028"], 0x1c}], 0x1}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2, 0x1, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}]}, 0x28}}, 0x0) 9.430941879s ago: executing program 6 (id=6078): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x3}, 0x100, 0x0, 0x0, 0x9, 0x0, 0x1, 0x800, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x8, r2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000000)=0xffffff7e, 0x50) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) r5 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1c, "fee8a2030000000000000096072000001ea89d68b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000080), 0x0, 0x8888, &(0x7f0000000280)={0x11, 0x8, r7, 0x1, 0xfb, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="290e29bd7000fadb0005270000000a0001007770616e31000000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) 9.318287371s ago: executing program 0 (id=6079): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 9.209828923s ago: executing program 0 (id=6082): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = syz_io_uring_setup(0x3e3, &(0x7f0000000080)={0x0, 0xe138, 0x0, 0x1200001, 0x0, 0x0, 0x0}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(r1, 0x35b3, 0x22c8, 0x46, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x21d8, 0xcb15, 0x21, 0x0, 0x0) io_uring_enter(r1, 0x1, 0xfffffffd, 0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f636f6d70726573739cdf4bbd3c08fe226865636b3d7374726963742c6d6f64653d30783030303030303030303030303030306f64653d3078303030303030303030303030306137632c757466382c757466e74632eba896382ebc4ae78d89"], 0x0, 0x569, &(0x7f0000000200)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000007b975419e50a271419000000000000003fd0dad0e05166b1d42726ab19be58bb41fc8d7bcd02029095af633477b741eeba7b82b5f7078bcd88c187f286c89eed2e8cfa091067e877173b94e5168d20f92a2411437d0df7bf06780ac28c384fb97731f98cd614fbda9eca", @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x50) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x271b, 0x0, &(0x7f0000000040)) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) 9.063285827s ago: executing program 6 (id=6086): socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000001c0)}], 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0x10e88d, 0x2, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x400a4) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x2c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@noauto_da_alloc}, {@nolazytime}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@noauto_da_alloc}, {@nouid32}]}, 0x7, 0x56a, &(0x7f00000015c0)="$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") fallocate(0xffffffffffffffff, 0x0, 0x6, 0x10001) 8.973977239s ago: executing program 8 (id=6088): poll(0x0, 0x0, 0x1ff8) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1ce600005e00010028"], 0x1c}], 0x1}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2, 0x1, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}]}, 0x28}}, 0x0) 6.989021371s ago: executing program 0 (id=6089): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x400, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x6a040000) socket$rds(0x15, 0x5, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x1, 0x6, 0x0, &(0x7f0000000240)={0x77359400}, 0x0, 0x1) 6.988563701s ago: executing program 8 (id=6090): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474203, 0x408}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$eJzs3c9rXNUeAPDvncmkSZv30j4ej9fyHi/wFi1I00wtVt3Y1oVdFCzYhYiLhiapodMfNCmYWGgKLhQURNyKdOM/4F66dyeCunMtVJGKikpH7syddDKZSdIkM9Pmfj5wM/ece2fO+c6dM/fce3PmBpBbY+mfQsT+iAfnk4jRpmUjUV84lq13/6ebF9IpiWr1lR+TSLK8xvpJ9rgnSwxFxJenIv5RXF3u3MLipclKte5WxJH5y9eOzC0sHp69PHlx+uL0lfLRZ48dn3iufKy8LXHuyR5Pn3n5P++//cYzM19VDidxIs6V3pqKlji2y1iMxYMsxOb8gYg4ns60eV+eNDsghFwrZp/HUkT8K0ajWEvVjcbse32tHNBV1WJEFcipRPuHnGr0AxrH9hs7Dj7X5V5J79w7WT8AWh3/QP3cSAzVjo1230+ajowGauc29m5D+WkZf9488HE6xYrzEL8ub52BbSink6XbEfHvdvEntbrtrUWaxl9YUY8kIiYiYjCr34tbqEPSNN+N8zBr2Wz8hYg4kT2m+ac2Wf5YS7rX8QOQT3dPZjvypTT1cP+X9j0a/Z9Y1f+pXxtq3XdtRr/3f537f439/VDtHHmhpR+W9lnOtn/JUmvGd++e/rBT+c39v3RKy2/0BXvh3u2IAy3xv5MGm/V/0viTNts/XeX8iY2V8dLXP5zutKzf8VfvRBxse/zzsFeazrVenxzOlpWPlY/MzFamJ+p/25bx+Revf9qp/H7Hn27/3R3ib9r+hdbnpe/JtQ2W8dnZO5c7LRtZN/7C94NJ/XhzMMt5c3J+/no5YjA5k61Sv5BVyz+6dl0a6zReI43/0P/bt/8Vn//bK19nuPGVuQHXXr10v9OyzWz/povJD6obrEMnafxT62//Ve0/zftgOXVrzTJ+ee3GfzstWyv+4S3GBgAAAAAAAHlTqF2DTQrjy/OFwvh4fbzsP2N3oXJ1bv6pmas3rkxFHKr9P2Sp0LjSPVpPJ2m6nP0/bCN9tCX9dETsi4iPisO19PiFq5WpfgcPAAAAAAAAAAAAAAAAAAAAj4k92fj/xn2qfy7Wx/8DOdHNG8wBjzftH/Kr1v5X3eIJyAP7f8gv7R/yS/uH/NL+Ib+0f8gv7R/yS/uH/NL+AQAAAGBH2ve/u98mEbH0/HBtSg1my4wIgp2t1O8KAH1T7HcFgL5ZvvSvsw+5s6H+/+/ZjwN2vzpAHyTtMmudg+rajf9u22cCAAAAAAAAAAAAAF1wcH/78f+JscGw4xn2B/m1hfH/fjoAnnB++h/yyzE+sN4o/qFOC4z/BwAAAAAAAAAAAICeGalNSWE8Gws8EoXC+HjE3yJib5SSmdnK9ERE/D0ivimWdqXpcr8rDQAAAAAAAAAAAAAAAAAAADvM3MLipclKZfp688wfq3J29kzjLqg9KOuFeMRnRdL7t2U4IpZzShGPWufuzezKPrZbeZ2BuYXF5LdqTRKxFI9PgFuKa5tn1v3qGOzqFxMAAAAAAAAAAAAAAAAAAORQ09jj9g580uMaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvPbz/f/dm+h0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBk+isAAP//GjM9YA==") (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474203, 0x408}, 0x18) (async) 6.203608288s ago: executing program 7 (id=6091): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x521340, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000010500)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0xd}, {0xe}, {0xfff7, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8080) gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x7, 0x11000, 0x4, 0x9484, 0x2001, 0x402, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) fsmount(0xffffffffffffffff, 0x1, 0x0) futex(&(0x7f0000000280), 0x80, 0x0, &(0x7f0000000300), 0x0, 0x2) lstat(0x0, &(0x7f00000007c0)) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f00000001c0)='./file2\x00', 0x824004, &(0x7f0000000780), 0x1, 0x438, &(0x7f0000000340)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0dff"], 0x14}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.206099399s ago: executing program 8 (id=6092): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 4.404834226s ago: executing program 7 (id=6093): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0)={0x1c, 0xff, 0x10, 0x3, 0x3, 0x20, 0x0, 0x80, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$OCFS2_IOC_UNRESVSP64(r1, 0x4030582b, &(0x7f0000000000)={0x2, 0x0, 0x7fffffffffffffff, 0x8, 0x2cd, 0x2}) shutdown(r0, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001400090003000000ffdbdf250100000008000100f8"], 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x60, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x21, 'pedit\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 4.387502466s ago: executing program 6 (id=6094): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400000004000000040000001500000000000000", @ANYRES32, @ANYBLOB="0000000000003635000000000000000000006faf", @ANYRES32=0x0, @ANYRES8=r0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r2, &(0x7f0000000340), &(0x7f0000000180)=""/122}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r6 = timerfd_create(0x7, 0x800) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) open_by_handle_at(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="0c000000fe000000030078"], 0x0) timerfd_gettime(r6, &(0x7f0000000140)) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x2f0, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x8, 0xfff3}, {}, {0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c0, 0x2, [@TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @multicast1}, @TCA_FLOWER_ACT={0x2a4, 0x3, [@m_sample={0xcc, 0x14, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7fffffff, 0x7fff, 0x2, 0x4, 0x4}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}]}, {0x76, 0x6, "acdacc9ddaaec00c19d750fffc9821a7abc97867d48de20054945a0c94f816032a11372f3871fb66d8dcf711c421b12279c08dd057c92bb70cb63bcaa0ddaec379a689f6b5337d4b2844a09305927ae60bc794e9fc329d54b0775b09a3e5641991db429bedd0db0599fd211ee3b2b3c3562e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0xa0, 0x10, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x43}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x9, 0x0, 0x5, 0x320}, 0x2}}]}, {0x3e, 0x6, "694f956364af73e9b9f4f58b55a91a1ce9325e0b41c36e42c1fe0207c6658a8abb424d5027424778ef71cbae6e0e5f779d1c6449171dcb49e63d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mpls={0x50, 0x13, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x37539}, @TCA_MPLS_TTL={0x5, 0x7, 0x3}, @TCA_MPLS_LABEL={0x8, 0x5, 0xeea38}]}, {0xc, 0x6, "51287d6f29a29f48"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_bpf={0xe4, 0x16, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_FD={0x8, 0x5, r6}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x99, 0x6, "640f7e376350c74924c6e4bd9ebd8c141c6a34249d3367d2bd52e303c8e6135a30a8bd3b4b53f037415176af3881fc82874deacc99240dfccff95959b913b87713cb62bb56c97c0f124ddb9a610110d5fd95bd397ff95a26e9d3e81d3c98c41c1a12a5b18e7e4e7dbd600340a8d7f5864e6d40b108575f4c6c436780cb69e162e746a3e2fe5643beb973a23efdfaf96873be001897"}, {0xc, 0x7, {0x1}}, {0xc}}}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}]}}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r4) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r9, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) r10 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) dup3(r10, r3, 0x0) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c200000028cefbaa222986dd605d000000283aff20010000000000000000000000000002ff0200000000000000000000000000018900907800000000ff0500000000000000000000000000010000000000000000122e5cf8536c5bc36192ce9764ee76f60000000000000000"], 0x0) close(r1) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001880)=ANY=[@ANYBLOB="bc0100001900010025bd700001000000fe8000000000000000000000000000bb6401010100000000000000000000000000000000000000800200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000010000000000000000000000000000009000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000408000000000000000000000000000000020000000000000100010000000000040105"], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 4.312935438s ago: executing program 0 (id=6095): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='rpc_pipefs\x00', 0x3109050, 0x0) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f00000003c0)='./file0\x00', 0x5200016e) umount2(&(0x7f0000000000)='./file0\x00', 0x2) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000100)=0x4, 0x4) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x8, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x400c000) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000000)={0x80000001, 0xd33, 0x6, 0x7a9, 0x4f, "010047620159d345b76700", 0x14, 0x8001}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000002440)=0xd) fstat(r0, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setregid(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$netlink(r7, 0x0, 0x20044440) 4.181906761s ago: executing program 7 (id=6096): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x3}, 0x100, 0x0, 0x0, 0x9, 0x0, 0x1, 0x800, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x8, r2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000000)=0xffffff7e, 0x50) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) r5 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1c, "fee8a2030000000000000096072000001ea89d68b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000080), 0x0, 0x8888, &(0x7f0000000280)={0x11, 0x8, r7, 0x1, 0xfb, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="290e29bd7000fadb0005270000000a0001007770616e31000000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.178306831s ago: executing program 9 (id=6097): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x24, r2, 0x321, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24044094}, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback={0xff00000000000000}, 0x800000}, 0x1c) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xffbe3525, 0x100006, 0x600, 0x400ffa, 0xb4, ' \x00\x00\b\x00\x00@\x00', 0xc, 0xdb25}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 4.153060371s ago: executing program 8 (id=6098): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000089"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, &(0x7f00000025c0), &(0x7f0000000600), 0x80, r3, 0x0, 0x7}, 0x38) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) dup(0xffffffffffffffff) 4.023290034s ago: executing program 9 (id=6099): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b70200000f001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1b8d1bd0c7cb9d76eebf2f1"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff03076003008cd4aa9c18ed0f", 0x0, 0xfe5, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.958093496s ago: executing program 9 (id=6100): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x0, 0x20, 0x0, 0xfffffb81}, {0xff, 0x0, 0x9}, 0x0, 0x1}}, @TCA_TBF_PTAB={0x404, 0x3, [0x6, 0x8000, 0x5, 0x5, 0xf, 0x1, 0x9, 0x7, 0x4, 0x7, 0x5, 0xb, 0xa6, 0x25d2, 0x7fff, 0x1, 0x800, 0x7, 0x8001, 0xff, 0x7f, 0x200, 0x3, 0xffff, 0x6, 0x800, 0x200802, 0x5, 0x3, 0x1, 0x7, 0x5, 0xfffffffd, 0x80000001, 0x5, 0x2, 0x100, 0x50, 0x8, 0x6, 0x1, 0x938, 0x2, 0x0, 0xd, 0x8, 0x9, 0x7f, 0x5, 0x2, 0x3, 0x3cf9c485, 0x6, 0x1, 0x9, 0x6, 0x8001, 0x3, 0xea68, 0x8000, 0x114, 0x8f19, 0x5, 0x8, 0x599ed91f, 0x4, 0x5d20, 0x4, 0x0, 0x2, 0x3, 0x3, 0x7, 0x800, 0x7, 0x4, 0x6, 0x4, 0x55, 0x99d, 0x800, 0x3, 0x5, 0x8000, 0x7fff, 0x8001, 0xc2, 0x7ff, 0x1b7cde5c, 0x832, 0x3, 0xd4, 0x1000, 0xb46, 0x81, 0x7, 0x7fffffff, 0xe353, 0x7, 0x7, 0xfffffff9, 0xcd, 0x4, 0x400, 0xff, 0xe8e, 0x2, 0x3, 0xf, 0x2, 0x5, 0x5, 0x7, 0x8, 0x8f7, 0x1, 0x6, 0x5, 0x8, 0x5, 0x9, 0x9, 0x3, 0x0, 0x0, 0x725, 0xef, 0x9, 0x101, 0x1000, 0x9, 0x1, 0x7, 0x4, 0x331e54b1, 0x5, 0x7, 0x5, 0xa0000, 0x7, 0x4, 0x3, 0x100, 0x7, 0x9, 0xfb, 0x3e, 0x0, 0x6e6f, 0xffff, 0x1, 0x5, 0x700000, 0x2000, 0x9, 0x0, 0x4, 0x40, 0x7, 0x2, 0x3, 0x7, 0x8, 0x0, 0x4, 0x401, 0x400, 0x6343, 0x80, 0x4, 0x101, 0x8b0b, 0x5, 0xd, 0x9, 0xffffffff, 0x6, 0x3, 0xb, 0x6, 0x3ff, 0x0, 0x4, 0x6, 0x7ff, 0x1cbe52bd, 0x8, 0x7f, 0x39933be1, 0x5, 0x49b, 0x33d431d7, 0x4, 0xffffffff, 0xcbb, 0xf0000000, 0x1, 0xffffffff, 0x4, 0x5, 0x2, 0x7, 0x4, 0xffff, 0xee, 0x8001, 0x6a, 0xa, 0x5, 0x6, 0x8316, 0x2, 0xffffffff, 0x3, 0x7a98, 0x480000, 0xfffffff7, 0x7f, 0x9, 0x9, 0x0, 0xe0, 0x2, 0x7, 0x557, 0x0, 0xfc6, 0x3, 0x81, 0x9, 0xffff, 0x0, 0x400, 0x8, 0x4, 0x6f1, 0x9, 0x200, 0x8, 0x9b, 0x80000001, 0x2, 0xff85, 0xfffffe00, 0x7ff, 0x1ff, 0x7, 0x3, 0x6, 0xfffffffe, 0x10001, 0x7, 0xbf, 0x2, 0x400, 0x81]}]}}]}, 0x45c}}, 0x14) syz_io_uring_setup(0x7634, &(0x7f0000001080)={0x0, 0x5361, 0x20, 0x0, 0xd2}, &(0x7f0000002280), &(0x7f0000001140), &(0x7f0000001180)) 3.932366286s ago: executing program 7 (id=6101): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, r1, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x2}, {0x81, 0x4}, {0x4, 0x3}, {0x59, 0x4}, {0x7, 0x7}, {0x70, 0x2}, {0x23, 0x1}, {0xea, 0x4}, {0x4, 0x5}, {0x3, 0x3}, {0xc0, 0x4}, {0x40}, {0x9, 0x5}], "22e6626308d86987"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0xd, 0x7}, {0x6, 0x7}, {0x8, 0x3}, {0x2, 0x6}, {0xe}, {0x5, 0x2}, {0x5}, {0xa0, 0x1}, {0xfd, 0x7}, {0x1, 0x80}, {0xa, 0x5}, {0x1, 0x1}, {0x1}, {0x8, 0x1}, {0xf7, 0x2}, {0x3}, {0xe}, {0x3, 0x7}, {0x3, 0x7}], "7fb45887376c65c3"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x7, 0x5}, {0x2, 0x4}, {0x8, 0x3}, {0x5, 0x3}, {0xfd, 0x2}, {0x5, 0x6}, {0x1, 0x6}, {0x7, 0x2}, {0x3, 0x1}, {0x81, 0x2}, {0x5, 0x6}, {0x9, 0x1}, {0xc}, {0xf2, 0x5}, {0x6, 0x2}, {0x7, 0x7}, {0x9, 0x7}], "5a8f5c3dfa5f74de"}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x48001) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a000000", 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0x66, @mcast2, 0x80000000}]}, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x40002}, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r6, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'unlock', ' ', 'io'}, 0xa) 3.034050185s ago: executing program 9 (id=6102): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='gadgetfs\x06', &(0x7f0000000200)='({^)\x18\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24048044) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x38, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x1, 0x4}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002080)='uid_map\x00') r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000300)={&(0x7f00000001c0)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x80, 0x0}, 0x24000008) lseek(r2, 0xffffe80000000001, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000009900)=@deltfilter={0x2198, 0x2d, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x7}}, @filter_kind_options=@f_basic={{0xa}, {0x2160, 0x2, [@TCA_BASIC_ACT={0x2cc, 0x3, [@m_csum={0x108, 0x5, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xffffff75, 0x8, 0x44, 0x10000}, 0x4f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x94, 0x1, 0xffffffffffffffff, 0x65027dcc, 0xf}, 0x4e}}]}, {0xa1, 0x6, "a65466d155423b8b5c6eecd904bd21b671369fe2a52d8d56dd8cd96cdf6eefe59e0f44b674364b059b7d2020ad54f9597f816654dc72723ebba599657a042ee9a699fc1208705147a8d68cbd6bf6af72760ee1e00665f87bfa4cecccaf6c8e22aaab8c1e0e603e3eae600596482436bd715f0caa8c3fc079664a70469d2b1e8fec2c076bac77d0f87ddd8ef75f785e2c43a0d6e12f106ba76480e31abb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0xd4, 0x11, 0x0, 0x0, {{0xb}, {0x90, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xfff, 0x6, 0xfffffffffffffffe, 0x3, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x2c, 0x5, 0xfffffeff, 0x8}}, @TCA_DEF_DATA={0x7, 0x3, ',.\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x6, 0x3, '#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x5, 0x20000000, 0x27ec, 0xab}}, @TCA_DEF_DATA={0xb, 0x3, 'cgroup\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x10001, 0x1000000e, 0x7, 0xfffffa7a}}]}, {0x19, 0x6, "0d06856a02a646180aaf76e0cd2f2599276c61bf17"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ct={0xec, 0x15, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x2}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @loopback}]}, {0xa5, 0x6, "e36263b27c256b943f6f5ad98e02b9142df37ffee262ea2f6014cbbd1b040e42d14faa396ba92b896d6ca796387d0c3c1f7a6813fd6c2ef3b540de856753bbda25c404af9c7490df8f7428b4d41a0be9b1129c2e6d82d03cc3fa1c93dbd602f62f61d7d37ac804c3a0f175e49ac03f413349ddc088f744175e71e2acfc42c107e699c0f428f19825ede0499140249669198ccebda3a5721df09815200ef6bb494e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_BASIC_ACT={0x1e90, 0x3, [@m_skbedit={0x3c, 0x0, 0x0, 0x0, {{0xc}, {0x4}, {0xd, 0x6, "a00f6c0a1a300b43d6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0xa4, 0x12, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x7, 0x2, 0xeb1, 0x1}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xfffffff8, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x4, 0xffffffffffffffff, 0x10, 0x5}, @empty, @rand_addr=0x64010101}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x6, 0x5, 0x100, 0xe9}, @remote, @local}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_ife={0xbc, 0x19, 0x0, 0x0, {{0x8}, {0x94, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x1, 0xfffffffa, 0x5}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0xea7, 0xfffffffffffffff9, 0xa, 0xc}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0xae9c, 0x1, 0x81, 0x4}, 0x1}}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_pedit={0x1cf0, 0x8, 0x0, 0x0, {{0xa}, {0x1cc4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0xfffffbff, 0x5, 0x5, 0x0, 0x1}, 0xf, 0x9, [{0x6, 0x8000, 0x6, 0x7fff, 0x1, 0xb}, {0x4, 0x1, 0x9, 0xb852, 0xfffff0d7, 0x1}]}, [{0x6, 0x9, 0x8, 0x3, 0xa, 0x5}, {0x4, 0x2, 0x2, 0x8, 0x6, 0xfffffffd}, {0xfffffff9, 0x6, 0x4, 0x7, 0x7, 0x22}, {0xb, 0x1000, 0x1000, 0x400, 0x3, 0x23e8}, {0x10, 0xa6e, 0x1, 0x1, 0x5, 0x800}, {0xc, 0x3, 0xfffffffa, 0x101, 0x5, 0x2}, {0xfffffffa, 0x586, 0x8, 0x10001, 0x101, 0x80000000}, {0x7b5, 0x9, 0x41ca, 0x8001, 0xc, 0x7}, {0x20000000, 0x3, 0xbe, 0x800, 0x8, 0x6}, {0x4, 0x800, 0x2, 0x1, 0x5, 0x5}, {0x1, 0x4, 0x2, 0x3, 0x614c, 0x54}, {0x9, 0x7c14, 0x13, 0x1, 0x2, 0x80000001}, {0xf, 0x2d2, 0x80000001, 0x6, 0x9, 0x80002}, {0x7, 0x7b, 0x2, 0x1, 0x200}, {0xb, 0x81, 0x1f7c, 0x3, 0x9, 0xfa9}, {0x8, 0x5a0, 0x29, 0x9, 0x6, 0x80}, {0x2, 0x5cbc, 0x400, 0x2, 0x3, 0x7}, {0x400, 0x1ff, 0x6, 0x10000, 0xe000, 0x1534}, {0x800, 0x200, 0x5, 0x4, 0x6b, 0xf}, {0xd, 0x6, 0xbc8a, 0x7, 0x1, 0x2}, {0x7f, 0xc, 0x1, 0x515a, 0x6, 0x7}, {0x7, 0xe0, 0xfd, 0xe672, 0x4, 0x9}, {0x9, 0x5, 0xbb7d, 0x8000}, {0x9, 0x87f, 0x9, 0x9}, {0x1, 0x20000000, 0x5, 0x3, 0x1000000, 0x7c}, {0x2, 0xd, 0x7, 0x10, 0x4, 0x4}, {0x7, 0x0, 0x83b, 0x6, 0x8, 0x6}, {0x1, 0x5, 0xef, 0xfb90, 0x2, 0xff}, {0x4, 0x7, 0x8, 0x4, 0x1, 0xfffffffe}, {0x7c5, 0xa02, 0x2, 0x1, 0x4, 0x9f}, {0x7fffffff, 0x5, 0x0, 0x1, 0x8, 0xffff9e42}, {0x8001, 0xfffffff7, 0xa, 0x7fff, 0x800, 0x800}, {0x5, 0x9, 0xb41, 0x5, 0x9}, {0x8, 0x4, 0x7, 0x2, 0x5cc, 0x1}, {0x9, 0x8, 0x84, 0x5, 0x3, 0x594}, {0x2, 0x7, 0x1, 0x1, 0x40, 0x1}, {0x5, 0x3b, 0x6, 0xc133, 0x0, 0x18b3}, {0x2, 0x3, 0x6, 0x10000, 0xfffffff9, 0x7}, {0x3, 0xcb8, 0x1, 0x81, 0xd, 0x4}, {0x6, 0x99c8, 0x3, 0x7, 0x3, 0xb91}, {0x43d7, 0x3be, 0x2, 0x78, 0xffffffff, 0xf}, {0x5, 0x9, 0x9, 0x6b, 0x7f, 0x20000000}, {0x7, 0x2, 0xfffffbff, 0x9, 0x7, 0x2}, {0x96a2, 0x5, 0x8, 0xf, 0x5, 0x4}, {0x4, 0x5, 0x4, 0x0, 0x8, 0x8}, {0x200, 0x435d, 0x400, 0x81, 0x9, 0x79}, {0x0, 0x8, 0x4, 0x6, 0x9, 0x8001}, {0x1ff, 0x5, 0x9, 0x2, 0x7fff, 0x9161843a}, {0x4d, 0x7f, 0x2, 0x3, 0x0, 0x200}, {0xf, 0x3, 0x3, 0x2, 0x6, 0x10001}, {0x7, 0x8, 0xe728, 0xacb, 0x400, 0x8}, {0xfffffffa, 0x1, 0x80000001, 0x217d, 0x7, 0x599}, {0x3, 0x10, 0x0, 0xa5, 0x400}, {0x2, 0x9a, 0x6, 0x3, 0x4, 0x7}, {0xb, 0xfffffff3, 0xbd, 0xb1, 0x5, 0x4}, {0x823, 0x0, 0xce, 0xfffffff7, 0x1, 0x9}, {0x3, 0x8, 0x6, 0x4ac, 0x6, 0x4}, {0x400, 0x7, 0xfffffffe, 0x6, 0x0, 0xfffffffc}, {0x3, 0x2, 0x8, 0xffff, 0x8}, {0x0, 0x0, 0x2000000, 0x9, 0xa, 0x8}, {0x800, 0x8, 0x2, 0x121, 0x1000, 0xfffffff7}, {0x81, 0x92, 0x4, 0x6, 0xffff02d0, 0x7}, {0x100, 0x0, 0xb, 0x2, 0x53f}, {0x8, 0x1ff, 0xe5b, 0x2, 0x4, 0x4}, {0x400, 0x9, 0x6, 0x7, 0x2, 0x7fff}, {0x2, 0xa, 0x9, 0x7, 0x3}, {0x4, 0x1, 0x3, 0xf7, 0x4, 0x1ff}, {0x6, 0x0, 0x41, 0x5, 0xfffff800, 0x2}, {0x3, 0xd, 0x5, 0x5, 0x6, 0x5}, {0x5, 0x3, 0x4, 0x9de7, 0x10, 0xfff}, {0x9, 0xb04, 0x4, 0xf4, 0x3, 0x9}, {0x4, 0xfffffffa, 0x8, 0x5, 0x4, 0xf}, {0x9, 0x1, 0x7fff, 0x0, 0x8, 0x2}, {0x4, 0x6, 0x8, 0x3, 0x2, 0x1}, {0x6, 0x7fffffff, 0x7, 0xc5, 0x7, 0x2}, {0x8, 0xffffffa0, 0x8, 0x10001, 0x8, 0x800}, {0x71d, 0x3, 0x3, 0x8, 0x401, 0x2}, {0x9, 0x2, 0x2, 0xc, 0x3, 0x400}, {0x2f78, 0x50, 0xb0, 0x6e8, 0x5d, 0x8}, {0x8, 0x7, 0x8, 0x7, 0x40, 0x1000}, {0x3, 0xf68, 0x0, 0x2, 0x8001}, {0x0, 0x0, 0x1ff, 0x9f8, 0x4, 0xffffffff}, {0x7fffffff, 0xf9f, 0x4, 0x9, 0x5, 0xa5}, {0x32521048, 0xa, 0xfffffffd, 0x1, 0x4, 0x1}, {0x2000, 0x4ff, 0xb7b, 0xe02, 0x9, 0x2}, {0x8, 0x5, 0x5, 0x7, 0x0, 0x7}, {0x1, 0xc, 0x2, 0x43, 0xfffffff9, 0x40}, {0xb, 0xb, 0xd, 0x5, 0x15, 0x1}, {0x2, 0xb9, 0x8, 0x3, 0x1ea2, 0xe4b}, {0x0, 0x3, 0x9, 0x0, 0x7, 0xf3}, {0x0, 0x2, 0x0, 0x5, 0x81, 0x6}, {0x7, 0x8, 0x6, 0x91f2, 0x8001, 0xe7c4}, {0x69f6836a, 0x4, 0xffff, 0xf108, 0x4, 0x1}, {0x7, 0xff, 0x4, 0x5, 0x7ff, 0x5}, {0xfff, 0xd3a, 0x7, 0x0, 0x32c2, 0x3}, {0x0, 0x7, 0x1, 0xff, 0x3, 0x1ec7}, {0x2, 0x3, 0x7, 0x10001, 0x5, 0xb7c3}, {0x1, 0x5, 0x1, 0xfe7f, 0x2, 0x8}, {0x5, 0x4, 0x7, 0x1, 0x0, 0x4}, {0xfffffff6, 0x3d, 0x6, 0x6eaf, 0x37f, 0x9}, {0x4, 0x0, 0x1000, 0x2, 0x5, 0xfffff328}, {0xfffffffc, 0x5, 0x3, 0x8, 0x3, 0x8}, {0x6, 0x0, 0x1, 0x7, 0x8, 0x1}, {0x7, 0x9, 0xa7, 0x2, 0x0, 0xf}, {0x5, 0x7, 0x3, 0x2, 0x2}, {0x8, 0x4, 0x2, 0x5, 0xe27, 0x4}, {0x5, 0x800, 0x3ee1, 0x3, 0x5, 0x8}, {0x40, 0x7, 0xf, 0x0, 0x1, 0x4}, {0x0, 0x4000000, 0x1, 0x1, 0x28, 0x5}, {0x10001, 0x6, 0x4, 0xec, 0x3, 0xd}, {0x0, 0x9, 0x1, 0x3, 0x2f78, 0x7}, {0x7, 0x400, 0x8, 0x7ff, 0x0, 0x8}, {0x1, 0x1, 0x8, 0x6, 0x1, 0x9}, {0x4, 0xa91, 0x6, 0x7, 0xf6, 0x7}, {0x8, 0x40, 0x82a, 0x64f, 0x2, 0x100}, {0x8, 0x5c, 0x6, 0x9, 0xfffffffd, 0xa3}, {0x8, 0x3, 0x401, 0x678, 0x8, 0xff}, {0x1, 0x4, 0x9, 0x0, 0x2b, 0x4}, {0xfff, 0x4, 0x8, 0x3, 0x2, 0x7}, {0x1, 0x9, 0x401, 0x6, 0x101, 0x1}, {0x793, 0x8, 0x33, 0x8000, 0x6909efb1, 0x95}, {0xfffffff7, 0xd0b, 0x5, 0x661800, 0x0, 0x1}, {0x1000, 0xffff, 0x4, 0x6055, 0x8, 0x2}, {0x2, 0xb, 0x7, 0x7, 0xe, 0x8000}, {0x10, 0xfffffff9, 0x2, 0x7, 0x80000001, 0x3}, {0xa, 0xfffffffb, 0x8, 0x7, 0x1, 0x3}, {0xfffff57d, 0x7f, 0xb, 0x5, 0x9, 0x49df}, {0x2, 0x4, 0x4, 0xe, 0x14b2, 0x6}], [{0x2}, {0x1}, {0x8, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x2}, {}, {0x4}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {}, {0x2}, {0x5}, {0x4}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x7}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x7}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x2}, {0x1}, {0x5}, {0x5, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0xf}, {}, {0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x5}, {0x2}, {0x5}, {0x2}, {0x2, 0x1}, {0x4}, {0x2}, {0x2}, {0x0, 0x1}, {}, {0x2}, {0x7, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x50, 0x5, 0x0, 0x1, [{0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x9, 0x0, 0x1, 0x3, 0x8}, 0xb, 0x6}, [{0x5, 0x7b, 0x5, 0x0, 0x6}, {0x8, 0x8a2, 0x8001, 0x4, 0x3, 0x9}, {0x7f, 0x0, 0xd09b, 0x2, 0x0, 0x9f5}, {0x9, 0x79e, 0x7ff, 0x63b979c4, 0x8, 0xfff}, {0xcf, 0x8f1d, 0x80, 0x294f, 0x7, 0xa2e}, {0x2, 0x6, 0x1, 0x8fdf, 0x71a, 0xfffffff8}, {0x0, 0xfffff801, 0x3, 0xff, 0xffff, 0x2ef0}, {0x3, 0x2, 0x4, 0x0, 0x3, 0xa7b}, {0x49, 0x6, 0xde77, 0xffffffff, 0x40, 0x527}, {0x0, 0x6, 0x100, 0x8343, 0x7fff, 0x6}, {0x9, 0x4, 0x4, 0x7, 0x3, 0x6}, {0xc, 0xe605, 0x3, 0x1, 0x1, 0x9}, {0x2, 0x9, 0x6, 0x6, 0x0, 0x4a93}, {0x5, 0x5, 0x401, 0x7ff, 0x6, 0x7f}, {0x6, 0x215, 0x1, 0x7, 0xfffffffc, 0x5}, {0x9, 0x2, 0x1, 0x9, 0x5, 0x22}, {0x8, 0x1, 0x4, 0x0, 0xc00}, {0x90, 0x4, 0x7, 0x5, 0xc37, 0x7}, {0x6, 0x10000, 0x9, 0x0, 0x3, 0x9c}, {0xe3, 0x3ff, 0x4, 0x3, 0x9, 0x9}, {0x100, 0x1, 0xffff, 0x8, 0x1, 0x6c}, {0x4, 0x1, 0x3, 0x8001, 0x0, 0xfffffff8}, {0x80, 0xa, 0x40, 0x5, 0xfffffffe, 0x1}, {0x8, 0xfffffffd, 0xf, 0x3, 0x3, 0x5}, {0x2, 0x1, 0x80000000, 0x4, 0x4, 0x4}, {0x5, 0x4, 0x8000, 0x4, 0x80000001, 0xfffffff8}, {0x66, 0xff, 0x9, 0x3, 0x5e04, 0x10001}, {0x7, 0x6, 0xfffffffc, 0x8, 0x3b, 0x9}, {0xb, 0x1, 0x3, 0x6, 0xfc95, 0x1}, {0x3, 0xcc, 0x3, 0x7f, 0x6, 0x9}, {0x7, 0x7f, 0x5, 0x74c, 0x79, 0x5}, {0x3, 0x6, 0x6, 0xccc, 0x5, 0xa3}, {0x0, 0x7b2f, 0x10, 0x1ff, 0xe2, 0x10000}, {0x0, 0xfffffffd, 0x5, 0x8, 0x4, 0x1}, {0xffffffff, 0x0, 0x4, 0x1a, 0x9, 0x1f92}, {0x10000, 0x10, 0xf, 0x10000, 0x6, 0x3}, {0x7, 0x5, 0x4, 0x7fff, 0xfab, 0x6}, {0xff, 0x5, 0x1, 0xb, 0x7, 0xfb6}, {0x1, 0x4, 0xfca, 0x3, 0x8, 0x8}, {0x10000, 0x5e9, 0x8, 0x0, 0x101, 0x7}, {0x163, 0x2e, 0x1, 0x5, 0x8191, 0x7cec}, {0x6, 0x9, 0xb, 0x39b, 0x8, 0xd5c2}, {0x5, 0x85, 0xfff, 0x81, 0x4, 0x3}, {0x3, 0x400, 0x6, 0x7ff, 0x80000000, 0xac0}, {0x8, 0xfffffe01, 0x1, 0xffff, 0xfffffff9, 0x2}, {0x200, 0x7fff, 0x80000000, 0x6, 0x66be, 0x6}, {0xfffffffc, 0x3, 0xf, 0x37, 0x7, 0x3}, {0x4, 0xb, 0x0, 0x4, 0x4, 0x9}, {0x8, 0xa, 0x3, 0x8, 0x7, 0x222c}, {0x9, 0x4, 0x0, 0xc, 0x4, 0x6}, {0xe, 0x1ff, 0xfff, 0x5, 0x4}, {0x6, 0x3, 0xfd59, 0xc06, 0x2, 0x932}, {0x4, 0x2, 0x5, 0x0, 0xa, 0x5}, {0x7, 0x2, 0x9, 0x9fd, 0x401, 0x8}, {0x3, 0xfffff000, 0x3, 0xda4000, 0x5, 0x80f1}, {0x1000, 0x4, 0xb142, 0x0, 0x9, 0x7}, {0x1, 0x94e, 0x4, 0xffff12c9, 0x3e3, 0x400}, {0x0, 0x5357, 0x3, 0x1, 0x4, 0x40}, {0x0, 0x800000, 0xa, 0x2, 0x2, 0x1000}, {0x584, 0x4, 0x5, 0xfffffffb, 0x7de76d1e, 0xfffffff7}, {0x0, 0x9, 0x5, 0xff, 0xdab, 0xfffffffa}, {0x1b31, 0x6, 0x100, 0x6, 0xe1f4, 0x94b}, {0x8, 0x8, 0x5, 0x101, 0x1, 0x800}, {0x3, 0x7, 0x6, 0x510, 0x5, 0x2}, {0x10001, 0x6, 0x9, 0x0, 0x5, 0x100}, {0x7, 0x1, 0x5cd3, 0x1, 0x9}, {0xda, 0x441865f2, 0xe, 0x80000000, 0xffff, 0x3}, {0x1, 0x2, 0x5, 0x2, 0x80000001, 0xb}, {0x7f, 0x9d, 0x80000001, 0x7fff, 0x8000, 0x3}, {0x4, 0xca000, 0x101, 0x0, 0xffff, 0x7}, {0x7, 0x100000, 0x93, 0x1, 0x1, 0x6}, {0x200, 0x2, 0x5, 0x163f9acb, 0x101, 0x7}, {0x401, 0x1, 0x8000, 0xe, 0x1000}, {0x80, 0x101, 0x771, 0xffff, 0x3, 0xf}, {0x4, 0xfffffffc, 0x8, 0x101, 0x2, 0x4}, {0x9, 0x40, 0x6, 0x4, 0xfff, 0x8}, {0x5, 0x1, 0x4, 0x5, 0x40, 0x81}, {0x7fff, 0x7, 0x1, 0x6, 0x1ff, 0x866}, {0x5, 0xfff, 0x4, 0x3ff, 0x0, 0x8}, {0x2, 0x9, 0x0, 0xaa, 0x9, 0x1}, {0x2, 0x1, 0x9, 0x4, 0xa00000, 0x3}, {0x0, 0x5, 0x3, 0xc, 0x9, 0xec5}, {0x1, 0x10, 0x4, 0x100, 0x8, 0x9}, {0x9, 0x7, 0x3, 0x7fffffff, 0x7, 0x6}, {0x7fffffff, 0x6, 0x101, 0xfffffff4, 0x10001, 0x7}, {0xae, 0x13, 0x0, 0x8, 0x400, 0x9}, {0x6, 0x3, 0x10000, 0x5c0, 0x80, 0x8}, {0x3, 0x3, 0xc, 0xe, 0xfffffff8, 0x800}, {0x9, 0x8, 0xd, 0x7, 0x1, 0x3}, {0xe, 0x5, 0x8, 0x774d, 0x10000, 0x8}, {0xed, 0x0, 0x5, 0x5, 0x9, 0x37375057}, {0xffff, 0x5, 0x6, 0x2, 0xe, 0x101}, {0x7ff, 0x7fff, 0x2, 0x80000000, 0x35f, 0x4}, {0x4, 0x0, 0x10000, 0x5, 0x5, 0xee63}, {0x1, 0x0, 0x7, 0x5, 0x8c6, 0x7}, {0x6, 0xeb0, 0x1, 0xfffff001, 0x5, 0x1}, {0x800, 0x1, 0xe8, 0x9, 0x7, 0x6}, {0x3, 0xe, 0x78a5, 0x0, 0x60b89413, 0x4}, {0x8, 0xe, 0xaec3, 0xa666, 0x3, 0x7}, {0x42, 0xffff, 0x4, 0x2, 0x3, 0x1000}, {0x2, 0x2bfc, 0xb7, 0x6, 0x9, 0x5}, {0x8260, 0x1, 0x1, 0x0, 0x3, 0xffff0000}, {0x0, 0xf5, 0x9, 0x2, 0x7, 0x5}, {0x10000, 0x480000, 0x3, 0x3, 0xd, 0xd}, {0x1000, 0x9, 0x12e, 0x101, 0x4}, {0x9, 0x5, 0x3ff, 0x65e, 0x8, 0x6}, {0x2, 0x8, 0x0, 0x9, 0x7, 0x5}, {0x6, 0x1, 0xfffffffe, 0xd5b, 0x5, 0x3}, {0x80000001, 0x2679e7b6, 0x1, 0xf, 0x4, 0x8}, {0x869, 0x6, 0x2, 0x4, 0x2, 0xf}, {0x8, 0x0, 0x5, 0x4, 0x581, 0x7}, {0x6, 0x1ff, 0x1000, 0x4, 0x35714a8e, 0x8ba}, {0x4, 0x96b, 0x3, 0xfff, 0x3ff, 0x4}, {0x10001, 0xe6, 0x7ff, 0x2, 0x7, 0xfffffff7}, {0x2, 0x7, 0xf8, 0x2, 0x6, 0x5}, {0x4, 0x800, 0x7, 0x7, 0x1, 0xf}, {0x0, 0x1, 0xc0e, 0x2, 0xc57}, {0x7ff, 0x6, 0x3, 0xd1c5, 0x6, 0x796}, {0x966f, 0x5, 0x9, 0x0, 0x53}, {0x4, 0x4, 0x7, 0x6, 0xbc42, 0x7fff}, {0x5, 0xfffffff9, 0x3, 0x64, 0x800, 0xe}, {0x6, 0xc00000, 0xfff, 0x2, 0x80}, {0xfffffeff, 0x7, 0x3, 0x5, 0x4, 0x100}, {0xff, 0x2, 0xfffffffa, 0x57d0bd35, 0x6, 0x2bfc248f}, {0xf, 0x8, 0x1ff, 0x400, 0x5}, {0x1, 0x40, 0x9, 0x80, 0xcd, 0xdc5}, {0x3, 0x6, 0x4, 0x6, 0x6, 0x9}, {0x0, 0x2d, 0x8b4, 0x9, 0x4, 0x3}], [{0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x7, 0x1}, {0x4, 0x1}, {0x4}, {0x3}, {0x4}, {0x1, 0x1}, {0x4}, {0x2}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x6, 0x51f1aed017d5064c}, {0x4}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x5}, {}, {0x1}, {0x2, 0x1}, {}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x1}, {0x1}, {0x5}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x3}, {0x4}, {0x4}, {0x3, 0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x5}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x6}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x2198}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)={@empty, @remote, 0x0, 0x4, [@dev={0xac, 0x14, 0x14, 0x2c}, @loopback, @private=0xa010101, @loopback]}, 0x20) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) 3.033672075s ago: executing program 8 (id=6103): pselect6(0x40, &(0x7f0000000080)={0xf, 0x3, 0x7, 0x0, 0x3, 0x1, 0x3, 0x5}, &(0x7f0000000140)={0x3, 0x1, 0x5, 0x397ddb, 0x2, 0x8, 0xffffffff, 0x5c2b}, &(0x7f0000000180)={0x7fffffff, 0x1, 0x4, 0x3f, 0x1, 0x6, 0x7fff, 0xfffffffffffffff3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0xfffffffffffffffc]}, 0x8}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f00000000c0), 0x1}, 0x200c, 0xa, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_pidfd_open(0x0, 0x0) setns(r3, 0x24020000) syz_clone(0xb31e0000, 0x0, 0x0, 0x0, 0x0, 0x0) setns(0xffffffffffffffff, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc, 0x8000}, 0x0, 0x200000, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listns(&(0x7f0000000080)={0x20, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f00000000c0), 0x259, 0x0) r4 = getpid() rt_sigqueueinfo(r4, 0x0, &(0x7f0000000300)={0xf, 0x7fffffff, 0x4}) r5 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) r6 = shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r5, &(0x7f0000ff9000/0x1000)=nil, 0x5000) shmdt(r6) socket$kcm(0xa, 0x2, 0x106) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0x9a, 0x300) openat$ptmx(0xffffffffffffff9c, 0x0, 0x312481, 0x0) 2.750227482s ago: executing program 0 (id=6104): socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000001c0)}], 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0x10e88d, 0x2, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x400a4) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x2c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@noauto_da_alloc}, {@nolazytime}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@noauto_da_alloc}, {@nouid32}]}, 0x7, 0x56a, &(0x7f00000015c0)="$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") fallocate(0xffffffffffffffff, 0x0, 0x6, 0x10001) 415.552291ms ago: executing program 7 (id=6105): socket(0x80000000000000a, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x8}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x38, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 274.383234ms ago: executing program 9 (id=6106): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f0000000480)=0xfe8e, 0x12) 78.542538ms ago: executing program 7 (id=6107): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r1, 0x27, 0x36, 0x0, &(0x7f0000000880)="f8ad1dcc02cb29dcc8003200810066a286ddc6617f503e7457188353133a3d4070574ac945c1be1c9b296e268bd0fabb3a4ba7534035", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x58e, &(0x7f00000001c0)={[{@errors_remount}, {@lazytime}, {@block_validity}, {@block_validity}, {@block_validity}, {@quota}, {@noload}]}, 0x1, 0x459, &(0x7f0000000240)="$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") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x26100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x5, @perf_config_ext={0xc8d, 0x9}, 0x1169c9, 0x201224, 0x0, 0x5, 0x8, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaafff8ffffffff86dd60b8112300080000fee9d5000000000000aafe80000000000000000004efb1edffaa2f00008000"/62], 0x0) 75.829889ms ago: executing program 0 (id=6108): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d00000000000030001280080001006873720024000280080002", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 26.536479ms ago: executing program 9 (id=6109): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80), 0x0, 0x200040c0) shutdown(0xffffffffffffffff, 0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7d, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x8, 0x3, 0x4}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket(0x1d, 0x2, 0x6) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f0000000000)) 0s ago: executing program 8 (id=6110): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = syz_io_uring_setup(0x3e3, &(0x7f0000000080)={0x0, 0xe138, 0x0, 0x1200001, 0x0, 0x0, 0x0}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(r1, 0x35b3, 0x22c8, 0x46, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x21d8, 0xcb15, 0x21, 0x0, 0x0) io_uring_enter(r1, 0x1, 0xfffffffd, 0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f636f6d70726573739cdf4bbd3c08fe226865636b3d7374726963742c6d6f64653d30783030303030303030303030303030306f64653d3078303030303030303030303030306137632c757466382c757466e74632eba896382ebc4ae78d89"], 0x0, 0x569, &(0x7f0000000200)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000007b975419e50a271419000000000000003fd0dad0e05166b1d42726ab19be58bb41fc8d7bcd02029095af633477b741eeba7b82b5f7078bcd88c187f286c89eed2e8cfa091067e877173b94e5168d20f92a2411437d0df7bf06780ac28c384fb97731f98cd614fbda9eca", @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x50) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x271b, 0x0, &(0x7f0000000040)) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) kernel console output (not intermixed with test programs): 001) [ 864.200637][T25942] FAT-fs (loop6): Filesystem has been set read-only [ 864.275072][T25947] loop6: detected capacity change from 0 to 2048 [ 864.316155][ T28] audit: type=1400 audit(1784199061.722:3018): avc: denied { read } for pid=25943 comm="syz.0.5579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 864.342511][T25947] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5580'. [ 864.365238][T25947] netlink: 'syz.6.5580': attribute type 1 has an invalid length. [ 864.397661][T25950] loop0: detected capacity change from 0 to 1024 [ 864.406560][T25950] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 864.424190][T25949] loop9: detected capacity change from 0 to 1024 [ 864.516927][T25950] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 864.552917][ T28] audit: type=1400 audit(1784199061.932:3019): avc: denied { write } for pid=25943 comm="syz.0.5579" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 864.606932][T25947] bond3: entered promiscuous mode [ 864.612138][T25947] bond3: entered allmulticast mode [ 864.627612][T25947] 8021q: adding VLAN 0 to HW filter on device bond3 [ 864.649874][T25949] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 864.809336][T25369] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 864.936615][T25961] loop6: detected capacity change from 0 to 512 [ 865.093016][T25961] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 865.125584][T25961] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 865.147368][T25961] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 865.162775][T25961] System zones: 0-2, 18-18, 34-35 [ 865.174421][T25961] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 865.205982][T25961] tipc: Can't bind to reserved service type 1 [ 865.239908][T21875] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 865.401491][T25970] FAULT_INJECTION: forcing a failure. [ 865.401491][T25970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 865.524996][T25970] CPU: 0 UID: 0 PID: 25970 Comm: syz.6.5586 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 865.525029][T25970] Tainted: [W]=WARN [ 865.525035][T25970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 865.525047][T25970] Call Trace: [ 865.525052][T25970] [ 865.525059][T25970] __dump_stack+0x1d/0x30 [ 865.525124][T25970] dump_stack_lvl+0x95/0xd0 [ 865.525146][T25970] dump_stack+0x15/0x1b [ 865.525163][T25970] should_fail_ex+0x25e/0x270 [ 865.525202][T25970] should_fail+0xb/0x20 [ 865.525227][T25970] should_fail_usercopy+0x1a/0x20 [ 865.525279][T25970] _copy_from_user+0x1c/0xb0 [ 865.525301][T25970] map_update_elem+0x3fa/0x6d0 [ 865.525333][T25970] __sys_bpf+0x9b5/0xc30 [ 865.525369][T25970] ? vfs_write+0x7a0/0x990 [ 865.525435][T25970] __x64_sys_bpf+0x69/0x80 [ 865.525507][T25970] x64_sys_call+0x10cb/0x3020 [ 865.525598][T25970] do_syscall_64+0x136/0x3c0 [ 865.525622][T25970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.525644][T25970] RIP: 0033:0x7f62f13fde59 [ 865.525703][T25970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 865.525720][T25970] RSP: 002b:00007f62efe57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 865.525739][T25970] RAX: ffffffffffffffda RBX: 00007f62f1685fa0 RCX: 00007f62f13fde59 [ 865.525752][T25970] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000002 [ 865.525763][T25970] RBP: 00007f62efe57090 R08: 0000000000000000 R09: 0000000000000000 [ 865.525778][T25970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 865.525793][T25970] R13: 00007f62f1686038 R14: 00007f62f1685fa0 R15: 00007fffcd5c5478 [ 865.525887][T25970] [ 866.045429][ T11] IPVS: starting estimator thread 0... [ 866.064821][T20904] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 866.092001][T25980] loop6: detected capacity change from 0 to 164 [ 866.098631][T25980] iso9660: Unknown parameter 'nocompressœßK½<þ"heck' [ 866.120432][T25982] FAULT_INJECTION: forcing a failure. [ 866.120432][T25982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 866.135948][T25978] IPVS: using max 2592 ests per chain, 129600 per kthread [ 866.160743][T25982] CPU: 0 UID: 0 PID: 25982 Comm: syz.0.5589 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 866.160779][T25982] Tainted: [W]=WARN [ 866.160788][T25982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 866.160804][T25982] Call Trace: [ 866.160824][T25982] [ 866.160843][T25982] __dump_stack+0x1d/0x30 [ 866.160926][T25982] dump_stack_lvl+0x95/0xd0 [ 866.160951][T25982] dump_stack+0x15/0x1b [ 866.160968][T25982] should_fail_ex+0x25e/0x270 [ 866.160995][T25982] ? __pfx_ucma_get_event+0x10/0x10 [ 866.161024][T25982] should_fail+0xb/0x20 [ 866.161060][T25982] should_fail_usercopy+0x1a/0x20 [ 866.161088][T25982] _copy_from_user+0x1c/0xb0 [ 866.161105][T25982] ucma_get_event+0x77/0x3d0 [ 866.161268][T25982] ? should_fail_ex+0xd9/0x270 [ 866.161300][T25982] ? __pfx_ucma_get_event+0x10/0x10 [ 866.161326][T25982] ucma_write+0x1c9/0x260 [ 866.161413][T25982] ? __pfx_ucma_write+0x10/0x10 [ 866.161438][T25982] vfs_write+0x252/0x990 [ 866.161485][T25982] ? __fget_files+0x184/0x1c0 [ 866.161509][T25982] ksys_write+0xdc/0x1a0 [ 866.161527][T25982] __x64_sys_write+0x40/0x50 [ 866.161578][T25982] x64_sys_call+0x27e1/0x3020 [ 866.161601][T25982] do_syscall_64+0x136/0x3c0 [ 866.161619][T25982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.161643][T25982] RIP: 0033:0x7f135ab9de59 [ 866.161670][T25982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.161714][T25982] RSP: 002b:00007f13595f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 866.161771][T25982] RAX: ffffffffffffffda RBX: 00007f135ae25fa0 RCX: 00007f135ab9de59 [ 866.161784][T25982] RDX: 0000000000000010 RSI: 0000200000000500 RDI: 0000000000000003 [ 866.161798][T25982] RBP: 00007f13595f7090 R08: 0000000000000000 R09: 0000000000000000 [ 866.161887][T25982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 866.161898][T25982] R13: 00007f135ae26038 R14: 00007f135ae25fa0 R15: 00007ffcea72b418 [ 866.161916][T25982] [ 866.267778][ T3392] usb usb6-port1: unable to enumerate USB device [ 866.390313][T25988] loop0: detected capacity change from 0 to 512 [ 866.415174][T25988] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 866.424972][T25988] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 866.455216][T25988] FAT-fs (loop0): Filesystem has been set read-only [ 866.465410][ T3392] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 866.476015][ T3392] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 866.545279][T25993] netlink: 'syz.8.5594': attribute type 1 has an invalid length. [ 866.561656][T25993] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5594'. [ 866.688815][T25993] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 866.717847][T25997] loop9: detected capacity change from 0 to 1024 [ 866.822534][T25993] syzkaller0: entered promiscuous mode [ 866.826009][T25997] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 866.840219][T25993] syzkaller0: entered allmulticast mode [ 866.947513][T25369] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 867.010981][T26016] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5600'. [ 867.021483][ T28] audit: type=1400 audit(1784199064.412:3020): avc: denied { getopt } for pid=26015 comm="syz.8.5600" lport=33163 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 867.059756][ T28] audit: type=1400 audit(1784199064.412:3021): avc: denied { ioctl } for pid=26015 comm="syz.8.5600" path="socket:[102026]" dev="sockfs" ino=102026 ioctlcmd=0x6e81 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 867.113285][T26013] xt_recent: Unsupported userspace flags (000000b1) [ 867.162207][T26013] loop0: detected capacity change from 0 to 1024 [ 867.184946][T26013] EXT4-fs: Mount option(s) incompatible with ext3 [ 867.218494][ T28] audit: type=1326 audit(1784199064.622:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26020 comm="syz.6.5602" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f62f13fde59 code=0x0 [ 867.275708][ T28] audit: type=1326 audit(1784199064.672:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26012 comm="syz.0.5599" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135ab9de59 code=0x7ffc0000 [ 867.307423][ T28] audit: type=1326 audit(1784199064.702:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26012 comm="syz.0.5599" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135ab9de59 code=0x7ffc0000 [ 867.346279][T26042] xt_CT: You must specify a L4 protocol and not use inversions on it [ 867.847103][T26057] loop9: detected capacity change from 0 to 1024 [ 868.072421][T26057] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 868.430175][T25369] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 868.542006][T26088] loop9: detected capacity change from 0 to 512 [ 868.632389][T26098] loop6: detected capacity change from 0 to 256 [ 868.646783][T26092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5624'. [ 868.745477][T21011] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.753984][T21011] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.794793][T26104] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5628'. [ 868.819402][T21011] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.845756][T26106] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5628'. [ 868.860568][T26109] loop9: detected capacity change from 0 to 2048 [ 868.882215][T26109] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5629'. [ 868.897403][ T4514] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.921338][T26108] loop8: detected capacity change from 0 to 4096 [ 868.944777][T26114] netlink: 'syz.9.5629': attribute type 1 has an invalid length. [ 869.083809][T26114] bond1: entered promiscuous mode [ 869.109767][T26114] bond1: entered allmulticast mode [ 869.115901][T26108] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 869.128492][T26114] 8021q: adding VLAN 0 to HW filter on device bond1 [ 869.137553][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 869.137565][ T28] audit: type=1400 audit(1784199066.542:3074): avc: denied { write } for pid=26075 comm="syz.8.5617" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 869.620301][ T28] audit: type=1400 audit(1784199066.782:3075): avc: denied { write } for pid=26075 comm="syz.8.5617" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 869.821373][T26139] netlink: 'syz.0.5638': attribute type 4 has an invalid length. [ 869.959602][T26141] netlink: 14 bytes leftover after parsing attributes in process `syz.9.5637'. [ 870.084271][T26144] loop9: detected capacity change from 0 to 8192 [ 870.114920][T26141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 870.142069][T26141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 870.161344][T26141] bond0 (unregistering): Released all slaves [ 870.184069][T26144] loop9: p1 p2 p3 [ 870.188871][T26144] loop9: p2 start 9961480 is beyond EOD, truncated [ 870.195479][T26144] loop9: p3 start 117772289 is beyond EOD, truncated [ 870.241397][T26143] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63761 sclass=netlink_route_socket pid=26143 comm=syz.0.5638 [ 870.488758][T26148] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5641'. [ 870.690762][ T3361] lo speed is unknown, defaulting to 1000 [ 870.701561][ T3361] syz0: Port: 1 Link DOWN [ 870.801299][T26152] pim6reg: entered allmulticast mode [ 870.902075][T26155] pim6reg: left allmulticast mode [ 870.939192][T26154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5643'. [ 871.050674][T26154] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.060664][ T28] audit: type=1400 audit(1784199068.422:3076): avc: denied { mounton } for pid=26158 comm="syz.7.5644" path="/syzcgroup/unified/syz7" dev="cgroup2" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 871.796061][T26154] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.868106][T26154] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.949727][T26154] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.673518][T26181] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5652'. [ 872.833979][T26187] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5655'. [ 873.008473][T26194] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5658'. [ 873.204003][T26199] lo speed is unknown, defaulting to 1000 [ 873.518599][T26198] FAULT_INJECTION: forcing a failure. [ 873.518599][T26198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 873.565624][T26198] CPU: 0 UID: 0 PID: 26198 Comm: syz.7.5659 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 873.565661][T26198] Tainted: [W]=WARN [ 873.565669][T26198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 873.565703][T26198] Call Trace: [ 873.565708][T26198] [ 873.565715][T26198] __dump_stack+0x1d/0x30 [ 873.565741][T26198] dump_stack_lvl+0x95/0xd0 [ 873.565813][T26198] dump_stack+0x15/0x1b [ 873.565897][T26198] should_fail_ex+0x25e/0x270 [ 873.565929][T26198] should_fail+0xb/0x20 [ 873.565956][T26198] should_fail_usercopy+0x1a/0x20 [ 873.566061][T26198] _copy_to_user+0x20/0xa0 [ 873.566079][T26198] __se_sys_move_pages+0x1132/0x1510 [ 873.566153][T26198] ? get_pid_task+0x92/0xc0 [ 873.566177][T26198] ? ksys_write+0x194/0x1a0 [ 873.566194][T26198] __x64_sys_move_pages+0x78/0x90 [ 873.566224][T26198] x64_sys_call+0x1d35/0x3020 [ 873.566342][T26198] do_syscall_64+0x136/0x3c0 [ 873.566396][T26198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.566418][T26198] RIP: 0033:0x7f41c6c0de59 [ 873.566436][T26198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 873.566472][T26198] RSP: 002b:00007f41c5667028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 873.566493][T26198] RAX: ffffffffffffffda RBX: 00007f41c6e95fa0 RCX: 00007f41c6c0de59 [ 873.566506][T26198] RDX: 0000200000000080 RSI: 0000000000001efe RDI: 0000000000000000 [ 873.566518][T26198] RBP: 00007f41c5667090 R08: 0000200000000040 R09: 0000000000000000 [ 873.566530][T26198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 873.566590][T26198] R13: 00007f41c6e96038 R14: 00007f41c6e95fa0 R15: 00007ffd002e71d8 [ 873.566638][T26198] [ 873.913044][T26197] loop6: detected capacity change from 0 to 1024 [ 873.938088][T26197] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 874.021319][T21875] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.049996][ T4514] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 874.065064][ T4514] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.262634][T26219] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5665'. [ 874.304485][T26207] 8021q: adding VLAN 0 to HW filter on device bond3 [ 874.338719][T26207] 8021q: adding VLAN 0 to HW filter on device eth0 [ 874.361598][T26207] 8021q: adding VLAN 0 to HW filter on device eth1 [ 874.380512][T26207] 8021q: adding VLAN 0 to HW filter on device eth2 [ 874.400055][T26207] 8021q: adding VLAN 0 to HW filter on device eth3 [ 874.446184][ T4514] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 874.487414][ T4514] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.619291][T20325] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.683239][ T4514] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 874.712354][ T4514] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.792542][T26226] loop9: detected capacity change from 0 to 512 [ 874.821615][T26226] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 874.833020][ T4514] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 874.843714][ T4514] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.884575][T26226] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.5668: bg 0: block 4: invalid block bitmap [ 874.895975][ T4502] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.901254][T26226] loop9: lost filesystem error report for type 5 error -117 [ 874.911703][T26226] EXT4-fs (loop9): Remounting filesystem read-only [ 874.914453][T18428] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.919232][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 874.919251][ C1] EXT4-fs (loop9): initial error at time 1784199072: ext4_validate_block_bitmap:432 [ 874.919275][ C1] EXT4-fs (loop9): last error at time 1784199072: ext4_validate_block_bitmap:432 [ 874.931361][T26226] EXT4-fs (loop9): 1 truncate cleaned up [ 874.934716][T18428] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.941374][T26226] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 875.048852][T25369] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 875.197247][T18428] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.242913][ T4514] bridge_slave_1: left allmulticast mode [ 875.254875][ T4514] bridge_slave_1: left promiscuous mode [ 875.262111][ T4514] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.271200][ T4514] bridge_slave_0: left allmulticast mode [ 875.279602][ T4514] bridge_slave_0: left promiscuous mode [ 875.285303][ T4514] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.330074][T26255] loop0: detected capacity change from 0 to 1024 [ 875.383157][ T4514] bond1 (unregistering): (slave geneve2): Releasing active interface [ 875.391255][ T4514] geneve2 (unregistering): left allmulticast mode [ 875.402847][T26255] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 875.419554][ T4514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 875.429470][ T4514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 875.442791][T26262] loop9: detected capacity change from 0 to 128 [ 875.446336][ T4514] bond0 (unregistering): Released all slaves [ 875.470144][ T4514] bond1 (unregistering): Released all slaves [ 875.481333][T20904] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 875.486653][ T4514] bond2 (unregistering): Released all slaves [ 875.558903][ T4514] hsr_slave_0: left promiscuous mode [ 875.566558][ T4514] hsr_slave_1: left promiscuous mode [ 875.572329][ T4514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 875.579811][ T4514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 875.641428][ T28] audit: type=1400 audit(1784199073.012:3077): avc: denied { write } for pid=26269 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 875.664926][ T28] audit: type=1400 audit(1784199073.032:3078): avc: denied { write } for pid=26281 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 875.687698][ T4514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 875.695486][ T4514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 875.713359][T26286] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5680'. [ 875.722814][ T4514] veth1_macvtap: left promiscuous mode [ 875.728375][ T4514] veth0_macvtap: left promiscuous mode [ 875.733938][ T4514] veth1_vlan: left promiscuous mode [ 875.739160][ T4514] veth0_vlan: left promiscuous mode [ 875.828780][ T4514] team0 (unregistering): Port device team_slave_1 removed [ 875.855057][ T4514] team0 (unregistering): Port device team_slave_0 removed [ 875.931951][ T3020] 8021q: adding VLAN 0 to HW filter on device eth18 [ 876.157666][T26310] loop8: detected capacity change from 0 to 1024 [ 876.177148][T26310] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 876.280606][T26310] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 876.333603][ T28] audit: type=1400 audit(1784199073.702:3079): avc: denied { write } for pid=26294 comm="syz.8.5683" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 876.486225][T26315] loop6: detected capacity change from 0 to 1024 [ 876.900538][T26315] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 876.978014][T26336] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5691'. [ 877.020068][T26336] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5691'. [ 877.088432][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13 [ 877.099771][T21875] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 877.165633][T26352] netlink: 'syz.7.5692': attribute type 4 has an invalid length. [ 877.189085][T26352] netlink: 'syz.7.5692': attribute type 4 has an invalid length. [ 877.399004][ T3020] 8021q: adding VLAN 0 to HW filter on device eth19 [ 877.429583][T26366] loop9: detected capacity change from 0 to 512 [ 877.449410][ T28] audit: type=1400 audit(1784199074.392:3080): avc: denied { write } for pid=26304 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 877.472762][ T28] audit: type=1400 audit(1784199074.452:3081): avc: denied { write } for pid=26341 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 877.494880][ T28] audit: type=1400 audit(1784199074.622:3082): avc: denied { write } for pid=26348 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 877.521916][T26366] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 877.538984][T26371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5696'. [ 877.582295][T26366] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.5695: bg 0: block 4: invalid block bitmap [ 877.596681][ T4514] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 877.745100][ T4514] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 877.753496][T26366] loop9: lost filesystem error report for type 5 error -117 [ 877.755785][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 877.769528][ C0] EXT4-fs (loop9): initial error at time 1784199075: ext4_validate_block_bitmap:432 [ 877.778927][ C0] EXT4-fs (loop9): last error at time 1784199075: ext4_validate_block_bitmap:432 [ 877.788529][ T4514] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 877.798265][T26366] EXT4-fs (loop9): Remounting filesystem read-only [ 877.805352][T26366] EXT4-fs (loop9): 1 truncate cleaned up [ 877.815171][ T4514] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 877.829920][T26366] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 877.916264][ T28] audit: type=1400 audit(1784199074.642:3083): avc: denied { write } for pid=26360 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 878.053697][T20325] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 878.220446][T25369] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 878.312300][ T28] audit: type=1400 audit(1784199075.712:3084): avc: denied { write } for pid=26378 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 878.383315][ T28] audit: type=1400 audit(1784199075.782:3085): avc: denied { write } for pid=26401 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 878.424748][ T3020] 8021q: adding VLAN 0 to HW filter on device eth20 [ 878.473949][T26404] loop0: detected capacity change from 0 to 4096 [ 878.602447][T26415] loop6: detected capacity change from 0 to 512 [ 878.645955][T26418] loop9: detected capacity change from 0 to 4096 [ 878.768295][T26418] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 878.795015][T26418] FAULT_INJECTION: forcing a failure. [ 878.795015][T26418] name failslab, interval 1, probability 0, space 0, times 0 [ 878.815841][T26418] CPU: 0 UID: 0 PID: 26418 Comm: syz.9.5707 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 878.815876][T26418] Tainted: [W]=WARN [ 878.815884][T26418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 878.815945][T26418] Call Trace: [ 878.815953][T26418] [ 878.815967][T26418] __dump_stack+0x1d/0x30 [ 878.815990][T26418] dump_stack_lvl+0x95/0xd0 [ 878.816010][T26418] dump_stack+0x15/0x1b [ 878.816026][T26418] should_fail_ex+0x25e/0x270 [ 878.816080][T26418] should_failslab+0x8c/0xb0 [ 878.816105][T26418] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 878.816156][T26418] ? do_getname_kernel+0x53/0x190 [ 878.816178][T26418] ? do_getname_kernel+0x53/0x190 [ 878.816254][T26418] do_getname_kernel+0x53/0x190 [ 878.816313][T26418] kern_path+0x23/0xf0 [ 878.816407][T26418] lookup_bdev+0x66/0x150 [ 878.816439][T26418] __se_sys_quotactl+0x19a/0x630 [ 878.816565][T26418] __x64_sys_quotactl+0x55/0x70 [ 878.816591][T26418] x64_sys_call+0x1a2a/0x3020 [ 878.816675][T26418] do_syscall_64+0x136/0x3c0 [ 878.816770][T26418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.816789][T26418] RIP: 0033:0x7fb2563cde59 [ 878.816803][T26418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.816821][T26418] RSP: 002b:00007fb254e27028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 878.816945][T26418] RAX: ffffffffffffffda RBX: 00007fb256655fa0 RCX: 00007fb2563cde59 [ 878.816963][T26418] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffff80000600 [ 878.816975][T26418] RBP: 00007fb254e27090 R08: 0000000000000000 R09: 0000000000000000 [ 878.816987][T26418] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 878.817002][T26418] R13: 00007fb256656038 R14: 00007fb256655fa0 R15: 00007ffc0cc438d8 [ 878.817026][T26418] [ 879.038729][T26425] loop0: detected capacity change from 0 to 1024 [ 879.060990][T26425] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 879.121597][T26427] loop8: detected capacity change from 0 to 512 [ 879.129212][T26427] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 879.142271][T25369] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 879.190074][T26427] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.5709: bg 0: block 4: invalid block bitmap [ 879.208173][T26425] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 879.231053][T26427] loop8: lost filesystem error report for type 5 error -117 [ 879.231558][T26427] EXT4-fs (loop8): Remounting filesystem read-only [ 879.250197][ T28] audit: type=1400 audit(1784199076.572:3086): avc: denied { write } for pid=26416 comm="syz.0.5706" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 879.272420][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 879.272441][ C0] EXT4-fs (loop8): initial error at time 1784199076: ext4_validate_block_bitmap:432 [ 879.272468][ C0] EXT4-fs (loop8): last error at time 1784199076: ext4_validate_block_bitmap:432 [ 879.363924][T26427] EXT4-fs (loop8): 1 truncate cleaned up [ 879.465006][T26427] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 879.538860][T26434] FAULT_INJECTION: forcing a failure. [ 879.538860][T26434] name failslab, interval 1, probability 0, space 0, times 0 [ 879.613433][T26434] CPU: 0 UID: 0 PID: 26434 Comm: syz.7.5711 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 879.613464][T26434] Tainted: [W]=WARN [ 879.613470][T26434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 879.613481][T26434] Call Trace: [ 879.613488][T26434] [ 879.613497][T26434] __dump_stack+0x1d/0x30 [ 879.613603][T26434] dump_stack_lvl+0x95/0xd0 [ 879.613628][T26434] dump_stack+0x15/0x1b [ 879.613649][T26434] should_fail_ex+0x25e/0x270 [ 879.613687][T26434] should_failslab+0x8c/0xb0 [ 879.613706][T26434] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 879.613725][T26434] ? skb_clone+0x151/0x1f0 [ 879.613756][T26434] ? skb_clone+0x151/0x1f0 [ 879.613837][T26434] skb_clone+0x151/0x1f0 [ 879.613931][T26434] __netlink_deliver_tap+0x2be/0x510 [ 879.613958][T26434] netlink_dump+0x803/0x870 [ 879.613983][T26434] __netlink_dump_start+0x435/0x520 [ 879.614003][T26434] genl_family_rcv_msg_dumpit+0x1a5/0x210 [ 879.614124][T26434] ? __pfx_genl_start+0x10/0x10 [ 879.614198][T26434] ? __pfx_genl_dumpit+0x10/0x10 [ 879.614247][T26434] ? __pfx_genl_done+0x10/0x10 [ 879.614287][T26434] genl_rcv_msg+0x3fd/0x470 [ 879.614315][T26434] ? __pfx_batadv_tt_local_dump+0x10/0x10 [ 879.614354][T26434] netlink_rcv_skb+0x11e/0x220 [ 879.614404][T26434] ? __pfx_genl_rcv_msg+0x10/0x10 [ 879.614440][T26434] genl_rcv+0x28/0x40 [ 879.614463][T26434] netlink_unicast+0x5a7/0x680 [ 879.614562][T26434] netlink_sendmsg+0x5be/0x6f0 [ 879.614586][T26434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 879.614612][T26434] ____sys_sendmsg+0x532/0x580 [ 879.614652][T26434] ___sys_sendmsg+0x195/0x1e0 [ 879.614713][T26434] __x64_sys_sendmsg+0xd4/0x160 [ 879.614854][T26434] x64_sys_call+0x194c/0x3020 [ 879.614901][T26434] do_syscall_64+0x136/0x3c0 [ 879.614944][T26434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.614989][T26434] RIP: 0033:0x7f41c6c0de59 [ 879.615005][T26434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.615026][T26434] RSP: 002b:00007f41c5667028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 879.615047][T26434] RAX: ffffffffffffffda RBX: 00007f41c6e95fa0 RCX: 00007f41c6c0de59 [ 879.615061][T26434] RDX: 0000000020000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 879.615154][T26434] RBP: 00007f41c5667090 R08: 0000000000000000 R09: 0000000000000000 [ 879.615172][T26434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 879.615222][T26434] R13: 00007f41c6e96038 R14: 00007f41c6e95fa0 R15: 00007ffd002e71d8 [ 879.615245][T26434] [ 880.078487][T26441] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5712'. [ 880.132791][T26441] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 880.143514][T26441] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.250435][T26441] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 880.266974][T26441] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.366656][T26441] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 880.400170][T26441] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.482292][T26441] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 880.510681][T26441] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.566717][ T4514] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.575109][ T4514] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.597884][ T4514] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.606658][ T4514] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.622528][ T4514] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.631577][ T4514] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.642908][ T4514] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.651590][ T4514] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.893981][T20325] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 880.914469][T26461] netlink: 'syz.6.5716': attribute type 3 has an invalid length. [ 880.990243][T20904] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 881.000952][T26467] loop9: detected capacity change from 0 to 512 [ 881.044220][T26471] loop8: detected capacity change from 0 to 512 [ 881.071928][T26471] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.5722: iget: bad i_size value: 38620345925642 [ 881.084738][T26471] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 881.091099][T26476] loop6: detected capacity change from 0 to 256 [ 881.100170][T26471] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.5722: couldn't read orphan inode 15 (err -117) [ 881.118812][T26471] loop8: lost filesystem error report for type 5 error -117 [ 881.128434][T26471] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 881.173118][T26476] pim6reg: entered allmulticast mode [ 881.180769][ T28] audit: type=1400 audit(1784199078.582:3087): avc: denied { write } for pid=26470 comm="syz.8.5722" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 881.234655][ T28] audit: type=1400 audit(1784199078.612:3088): avc: denied { setopt } for pid=26480 comm="syz.9.5725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 881.271715][T26485] pim6reg: left allmulticast mode [ 881.305398][T26471] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.5722: bg 0: block 5: invalid block bitmap [ 881.332377][T26471] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 956 with error 28 [ 881.380957][T26471] EXT4-fs (loop8): This should not happen!! Data will be lost [ 881.380957][T26471] [ 881.387874][T26496] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5729'. [ 881.399763][T26471] EXT4-fs (loop8): Total free blocks count 0 [ 881.406459][T26471] EXT4-fs (loop8): Free/Dirty block details [ 881.412561][T26471] EXT4-fs (loop8): free_blocks=0 [ 881.419678][T26496] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 881.429854][T26496] netdevsim netdevsim7 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 881.443224][T26471] EXT4-fs (loop8): dirty_blocks=960 [ 881.448699][T26471] EXT4-fs (loop8): Block reservation details [ 881.454789][T26471] EXT4-fs (loop8): i_reserved_data_blocks=960 [ 881.470601][T26471] EXT4-fs (loop8): shut down requested (0) [ 881.569541][T26496] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 881.579486][T26496] netdevsim netdevsim7 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 881.633604][T26496] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 881.643773][T26496] netdevsim netdevsim7 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 881.692698][T26508] loop6: detected capacity change from 0 to 1024 [ 881.730958][T26508] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 881.766044][ T28] audit: type=1400 audit(1784199079.142:3089): avc: denied { ioctl } for pid=26505 comm="syz.8.5731" path="socket:[104289]" dev="sockfs" ino=104289 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 881.800355][T26508] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 881.824628][T26496] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 881.834427][T26496] netdevsim netdevsim7 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 881.846202][ T28] audit: type=1400 audit(1784199079.202:3090): avc: denied { write } for pid=26501 comm="syz.6.5730" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 882.079467][ T4514] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 882.101984][ T4514] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 882.190188][T21011] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 882.246885][T21011] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 882.339000][T21011] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 882.354876][T21011] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 882.373450][T21011] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 882.384350][T21011] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 882.450949][T26523] loop8: detected capacity change from 0 to 512 [ 882.477656][T26523] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 882.511065][T26523] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 882.537284][ T28] audit: type=1400 audit(1784199079.942:3091): avc: denied { write } for pid=26522 comm="syz.8.5736" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 882.564057][T26523] EXT4-fs error (device loop8): mb_free_blocks:2049: group 0, inode 16: block 44:freeing already freed block (bit 44); block bitmap corrupt. [ 882.580148][T26523] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #16: comm syz.8.5736: corrupted inode contents [ 882.596710][ T28] audit: type=1400 audit(1784199080.002:3092): avc: denied { write } for pid=26522 comm="syz.8.5736" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 882.625174][T26523] EXT4-fs error (device loop8): ext4_dirty_inode:6639: inode #16: comm syz.8.5736: mark_inode_dirty error [ 882.639978][ T28] audit: type=1400 audit(1784199080.002:3093): avc: denied { write } for pid=26522 comm="syz.8.5736" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 882.665547][T26523] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #16: comm syz.8.5736: corrupted inode contents [ 882.801160][T26523] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #16: comm syz.8.5736: mark_inode_dirty error [ 882.813349][T26523] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #16: comm syz.8.5736: corrupted inode contents [ 882.825588][T26523] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #16: comm syz.8.5736: mark_inode_dirty error [ 882.837327][T26523] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #16: comm syz.8.5736: corrupted inode contents [ 883.039073][T26523] EXT4-fs error (device loop8): ext4_truncate:4691: inode #16: comm syz.8.5736: mark_inode_dirty error [ 883.334991][ T28] audit: type=1326 audit(1784199080.712:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26535 comm="syz.7.5740" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c6c0de59 code=0x7ffc0000 [ 883.381973][T21875] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 883.393156][T26541] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5741'. [ 883.514745][T26523] EXT4-fs error (device loop8) in ext4_setattr:6172: Corrupt filesystem [ 883.610223][ T28] audit: type=1326 audit(1784199080.722:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26535 comm="syz.7.5740" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c6c0de59 code=0x7ffc0000 [ 883.867724][T20325] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 883.917654][ T28] audit: type=1326 audit(1784199080.722:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26535 comm="syz.7.5740" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c6c0de59 code=0x7ffc0000 [ 885.101126][T26584] loop8: detected capacity change from 0 to 1024 [ 885.113458][T26584] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 885.148180][T26584] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 885.268554][T26589] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5755'. [ 885.278237][T26589] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5755'. [ 885.293236][T26589] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 885.303182][T26589] netdevsim netdevsim7 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 885.412661][T26589] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 885.509409][T26589] netdevsim netdevsim7 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 885.790402][T26589] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 885.830197][T26589] netdevsim netdevsim7 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 885.900321][T26604] loop6: detected capacity change from 0 to 736 [ 885.911403][T26589] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 885.959506][T26589] netdevsim netdevsim7 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 885.999787][T26602] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5758'. [ 886.085327][T26602] syzkaller0: entered promiscuous mode [ 886.099126][T26602] syzkaller0: entered allmulticast mode [ 886.232665][ T4521] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 886.246913][ T4521] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 886.259218][T26611] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5761'. [ 886.280539][ T4521] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 886.296282][ T4521] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 886.333173][ T4521] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 886.342854][T26606] loop0: detected capacity change from 0 to 1024 [ 886.362312][T26606] EXT4-fs: Ignoring removed orlov option [ 886.368312][ T4521] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 886.376868][T26606] EXT4-fs: inline encryption not supported [ 886.385833][T18421] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 886.401345][T18421] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 886.415930][T26606] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 886.467187][T26617] loop9: detected capacity change from 0 to 512 [ 886.771129][T26627] loop6: detected capacity change from 0 to 128 [ 886.788729][T26627] ext4: Unknown parameter 'noacl' [ 886.795233][T20325] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 886.838008][T26629] loop9: detected capacity change from 0 to 164 [ 886.845013][T26606] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 886.855059][T26629] iso9660: Unknown parameter 'nocompressœßK½<þ"heck' [ 886.880832][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 886.880844][ T28] audit: type=1400 audit(1784199084.242:3170): avc: denied { relabelto } for pid=26605 comm="syz.0.5760" name="272" dev="tmpfs" ino=1463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 886.993224][ T28] audit: type=1400 audit(1784199084.242:3171): avc: denied { associate } for pid=26605 comm="syz.0.5760" name="272" dev="tmpfs" ino=1463 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 887.045151][ T28] audit: type=1400 audit(1784199084.442:3172): avc: denied { write } for pid=26605 comm="syz.0.5760" name="272" dev="tmpfs" ino=1463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 887.085994][T26640] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5772'. [ 887.090552][ T28] audit: type=1400 audit(1784199084.442:3173): avc: denied { add_name } for pid=26605 comm="syz.0.5760" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 887.140553][ T28] audit: type=1400 audit(1784199084.442:3174): avc: denied { associate } for pid=26605 comm="syz.0.5760" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 887.253786][T26243] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 887.262893][T26243] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 887.647234][ T28] audit: type=1400 audit(1784199085.052:3175): avc: denied { write } for pid=20904 comm="syz-executor" name="272" dev="tmpfs" ino=1463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 887.713510][ T28] audit: type=1400 audit(1784199085.052:3176): avc: denied { remove_name } for pid=20904 comm="syz-executor" name="file0" dev="tmpfs" ino=1469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 887.779405][T26651] FAULT_INJECTION: forcing a failure. [ 887.779405][T26651] name failslab, interval 1, probability 0, space 0, times 0 [ 887.781990][ T28] audit: type=1400 audit(1784199085.052:3177): avc: denied { write } for pid=20904 comm="syz-executor" name="272" dev="tmpfs" ino=1463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 887.860067][T26651] CPU: 0 UID: 0 PID: 26651 Comm: syz.7.5775 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 887.860105][T26651] Tainted: [W]=WARN [ 887.860112][T26651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 887.860124][T26651] Call Trace: [ 887.860130][T26651] [ 887.860194][T26651] __dump_stack+0x1d/0x30 [ 887.860223][T26651] dump_stack_lvl+0x95/0xd0 [ 887.860249][T26651] dump_stack+0x15/0x1b [ 887.860269][T26651] should_fail_ex+0x25e/0x270 [ 887.860353][T26651] ? xfrm_policy_alloc+0x62/0x1b0 [ 887.860444][T26651] should_failslab+0x8c/0xb0 [ 887.860470][T26651] __kmalloc_cache_noprof+0x7b/0x3d0 [ 887.860501][T26651] ? xfrm_policy_alloc+0x62/0x1b0 [ 887.860600][T26651] xfrm_policy_alloc+0x62/0x1b0 [ 887.860674][T26651] pfkey_compile_policy+0x193/0x410 [ 887.860711][T26651] ? __pfx_pfkey_compile_policy+0x10/0x10 [ 887.860879][T26651] xfrm_user_policy+0x296/0x530 [ 887.860917][T26651] do_ip_setsockopt+0x1771/0x22f0 [ 887.861047][T26651] ? avc_has_perm_noaudit+0xa3/0x120 [ 887.861074][T26651] ip_setsockopt+0x58/0x110 [ 887.861099][T26651] tcp_setsockopt+0x98/0xb0 [ 887.861128][T26651] sock_common_setsockopt+0x69/0x80 [ 887.861210][T26651] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 887.861235][T26651] smc_setsockopt+0x16e/0x770 [ 887.861258][T26651] ? __pfx_smc_setsockopt+0x10/0x10 [ 887.861357][T26651] __sys_setsockopt+0x184/0x200 [ 887.861399][T26651] __x64_sys_setsockopt+0x64/0x80 [ 887.861514][T26651] x64_sys_call+0x2327/0x3020 [ 887.861544][T26651] do_syscall_64+0x136/0x3c0 [ 887.861568][T26651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.861602][T26651] RIP: 0033:0x7f41c6c0de59 [ 887.861622][T26651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 887.861658][T26651] RSP: 002b:00007f41c5667028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 887.861680][T26651] RAX: ffffffffffffffda RBX: 00007f41c6e95fa0 RCX: 00007f41c6c0de59 [ 887.861699][T26651] RDX: 0008008000000010 RSI: 0000000000000000 RDI: 0000000000000003 [ 887.861717][T26651] RBP: 00007f41c5667090 R08: 00000000000000b8 R09: 0000000000000000 [ 887.861733][T26651] R10: 0000200000005e40 R11: 0000000000000246 R12: 0000000000000001 [ 887.861748][T26651] R13: 00007f41c6e96038 R14: 00007f41c6e95fa0 R15: 00007ffd002e71d8 [ 887.861768][T26651] [ 887.885248][ T28] audit: type=1400 audit(1784199085.052:3178): avc: denied { write } for pid=20904 comm="syz-executor" name="272" dev="tmpfs" ino=1463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 888.027694][T26663] netlink: 'syz.8.5779': attribute type 8 has an invalid length. [ 888.106764][T26662] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5778'. [ 888.143200][T26663] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5779'. [ 888.178202][ T28] audit: type=1400 audit(1784199085.072:3179): avc: denied { write } for pid=20904 comm="syz-executor" name="272" dev="tmpfs" ino=1463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 888.604670][T26669] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.611883][T26669] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.720219][T26669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 888.826828][T26669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 889.047854][T26686] lo speed is unknown, defaulting to 1000 [ 889.196079][T18428] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 890.033435][T18428] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.059603][T18428] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 890.971171][T18428] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.209231][T26697] lo speed is unknown, defaulting to 1000 [ 892.139202][T18428] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 892.158475][T18428] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.210244][T26707] lo speed is unknown, defaulting to 1000 [ 892.340306][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 892.340318][ T28] audit: type=1400 audit(1784199089.732:3183): avc: denied { append } for pid=26709 comm="syz.0.5791" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 892.371692][T26713] tmpfs: Bad value for 'mpol' [ 892.385779][T18428] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 892.411840][T18428] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.434362][T26717] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5792'. [ 892.553124][ T28] audit: type=1400 audit(1784199089.952:3184): avc: denied { write } for pid=26701 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 892.581328][T26708] vti0: entered promiscuous mode [ 892.586338][T26708] vti0: entered allmulticast mode [ 892.673186][ T28] audit: type=1400 audit(1784199090.072:3185): avc: denied { write } for pid=26724 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 892.749659][T26730] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 892.780612][T26722] netlink: 64 bytes leftover after parsing attributes in process `syz.9.5793'. [ 892.780712][T26730] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5795'. [ 892.796132][ T28] audit: type=1400 audit(1784199090.152:3186): avc: denied { nlmsg_read } for pid=26729 comm="syz.7.5795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 893.065264][T26745] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5800'. [ 893.087146][T26734] loop0: detected capacity change from 0 to 1024 [ 893.103232][T26734] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 893.183964][T26734] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 893.302374][T26745] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.312301][T26734] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 893.354390][T26734] EXT4-fs (loop0): orphan cleanup on readonly fs [ 893.369340][T26745] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.393403][T26734] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.5791: Invalid inode table block 0 in block_group 0 [ 893.426518][T26757] loop9: detected capacity change from 0 to 1024 [ 893.452632][T26734] loop0: lost filesystem error report for type 5 error -117 [ 893.453115][T26734] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 893.460931][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 893.461032][ C1] EXT4-fs (loop0): initial error at time 1784199090: __ext4_get_inode_loc:4886 [ 893.461121][ C1] EXT4-fs (loop0): last error at time 1784199090: __ext4_get_inode_loc:4886 [ 893.549680][T26734] loop0: lost filesystem error report for type 5 error -117 [ 893.550501][T26734] EXT4-fs error (device loop0): ext4_quota_write:7430: inode #3: comm syz.0.5791: mark_inode_dirty error [ 893.571548][T26745] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.597979][T26734] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 893.600481][T26734] Quota error (device loop0): write_blk: dquota write failed [ 893.601380][ T28] audit: type=1400 audit(1784199091.002:3187): avc: denied { write } for pid=26743 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 893.621662][T26734] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 893.657297][T26734] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.5791: Failed to acquire dquot type 0 [ 893.671320][T26734] loop0: lost filesystem error report for type 5 error -117 [ 893.671421][T26734] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.5791: Invalid inode table block 0 in block_group 0 [ 893.691305][T26734] loop0: lost filesystem error report for type 5 error -117 [ 893.691603][T26734] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 893.700358][T26757] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 893.708256][T26734] loop0: lost filesystem error report for type 5 error -117 [ 893.720638][T26734] EXT4-fs error (device loop0): ext4_ext_truncate:4557: inode #15: comm syz.0.5791: mark_inode_dirty error [ 893.739306][T26734] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 893.739514][T26734] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.5791: Invalid inode table block 0 in block_group 0 [ 893.750988][ T28] audit: type=1400 audit(1784199091.112:3188): avc: denied { write } for pid=26770 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 893.761225][T26734] loop0: lost filesystem error report for type 5 error -117 [ 893.766385][T26734] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 893.799828][T26734] loop0: lost filesystem error report for type 5 error -117 [ 893.826347][T26734] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 893.842200][T26734] loop0: lost filesystem error report for type 5 error -117 [ 893.842275][T26734] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.5791: Invalid inode table block 0 in block_group 0 [ 893.865469][T26779] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5805'. [ 893.880931][T26745] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.895676][T25369] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 893.910455][T26734] loop0: lost filesystem error report for type 5 error -117 [ 893.910615][T26734] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 893.937738][T26774] loop6: detected capacity change from 0 to 1024 [ 893.962960][T26734] loop0: lost filesystem error report for type 5 error -117 [ 893.963048][T26734] EXT4-fs error (device loop0): ext4_truncate:4691: inode #15: comm syz.0.5791: mark_inode_dirty error [ 893.982918][T26734] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 893.983129][T26734] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 894.003101][T26734] EXT4-fs (loop0): 1 truncate cleaned up [ 894.011692][T26774] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 894.017158][T26734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 894.054273][ T28] audit: type=1400 audit(1784199091.452:3189): avc: denied { write } for pid=26778 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 894.084076][ T4502] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.101162][ T4502] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.101456][ T28] audit: type=1400 audit(1784199091.502:3190): avc: denied { write } for pid=26796 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 894.134694][ T4502] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.157454][T21875] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.177167][ T4502] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.217252][T26734] EXT4-fs error (device loop0): ext4_search_dir:1474: inode #2: block 16: comm syz.0.5791: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 894.473290][T26829] loop9: detected capacity change from 0 to 2048 [ 894.667915][T26829] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5815'. [ 894.777535][T26833] netlink: 'syz.9.5815': attribute type 1 has an invalid length. [ 894.854170][T20904] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.928864][T26833] bond0: entered promiscuous mode [ 894.957391][T26833] bond0: entered allmulticast mode [ 894.971056][T26833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 895.038564][T26817] netlink: 'syz.6.5814': attribute type 2 has an invalid length. [ 895.077674][T26837] loop0: detected capacity change from 0 to 1024 [ 895.117932][T26837] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 895.183698][T26848] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5818'. [ 895.202955][T20904] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.492976][T26860] lo speed is unknown, defaulting to 1000 [ 896.368289][T26872] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5828'. [ 896.391728][T26881] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5829'. [ 896.425043][T26882] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5828'. [ 896.462903][T26883] loop8: detected capacity change from 0 to 1024 [ 896.552766][T26884] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 896.571852][T26884] netdevsim netdevsim7 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 896.582518][T26883] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 896.616585][T26885] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 896.631626][T26885] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.657384][T26884] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 896.669985][T26884] netdevsim netdevsim7 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 896.707629][T26885] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 896.721048][T26885] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.741851][T26893] futex_wake_op: syz.6.5831 tries to shift op by 36; fix this program [ 896.757007][T26884] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 896.769011][T26884] netdevsim netdevsim7 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 896.807428][T26885] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 896.817644][T26885] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.849706][T26884] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 896.865395][T26884] netdevsim netdevsim7 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 896.887538][T26885] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 896.897475][T26885] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.935838][ T4502] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 896.944109][ T4502] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 896.952596][ T4502] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 896.960907][ T4502] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 896.998807][ T4502] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 897.015498][ T4502] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 897.032275][ T4502] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 897.046938][ T4502] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 897.059287][ T4502] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 897.082224][ T4502] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.111046][ T4502] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 897.140825][ T4502] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.152744][ T4502] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 897.161219][ T4502] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.169441][ T4502] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 897.177701][ T4502] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.223621][T20325] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.446281][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 897.446293][ T28] audit: type=1326 audit(1784199094.852:3196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26924 comm="syz.0.5843" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f135ab9de59 code=0x0 [ 897.529940][T26931] FAULT_INJECTION: forcing a failure. [ 897.529940][T26931] name failslab, interval 1, probability 0, space 0, times 0 [ 897.545176][T26931] CPU: 0 UID: 0 PID: 26931 Comm: syz.8.5844 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 897.545203][T26931] Tainted: [W]=WARN [ 897.545212][T26931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 897.545226][T26931] Call Trace: [ 897.545233][T26931] [ 897.545241][T26931] __dump_stack+0x1d/0x30 [ 897.545319][T26931] dump_stack_lvl+0x95/0xd0 [ 897.545387][T26931] dump_stack+0x15/0x1b [ 897.545459][T26931] should_fail_ex+0x25e/0x270 [ 897.545491][T26931] should_failslab+0x8c/0xb0 [ 897.545516][T26931] __kvmalloc_node_noprof+0x15b/0x590 [ 897.545545][T26931] ? io_alloc_cache_init+0x36/0xb0 [ 897.545583][T26931] ? io_alloc_cache_init+0x36/0xb0 [ 897.545633][T26931] io_alloc_cache_init+0x36/0xb0 [ 897.545688][T26931] io_ring_ctx_alloc+0x2e5/0x630 [ 897.545726][T26931] io_uring_create+0x4d/0x4f0 [ 897.545771][T26931] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 897.545888][T26931] __x64_sys_io_uring_setup+0x31/0x40 [ 897.545910][T26931] x64_sys_call+0x2962/0x3020 [ 897.545989][T26931] do_syscall_64+0x136/0x3c0 [ 897.546015][T26931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.546100][T26931] RIP: 0033:0x7fe5d332de59 [ 897.546124][T26931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 897.546141][T26931] RSP: 002b:00007fe5d1d86fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 897.546160][T26931] RAX: ffffffffffffffda RBX: 0000200000000840 RCX: 00007fe5d332de59 [ 897.546178][T26931] RDX: 0000200000000900 RSI: 0000200000000840 RDI: 0000000000000989 [ 897.546194][T26931] RBP: 00007fe5d1d87090 R08: 0000000000000000 R09: 0000000000000101 [ 897.546359][T26931] R10: 0000200000000940 R11: 0000000000000206 R12: 0000200000000900 [ 897.546376][T26931] R13: 0000200000000940 R14: 00002000000008c0 R15: 00007ffe44f80f98 [ 897.546439][T26931] [ 898.043368][T26944] lo speed is unknown, defaulting to 1000 [ 898.427100][ T28] audit: type=1400 audit(1784199095.822:3197): avc: denied { write } for pid=26942 comm="syz.7.5848" name="cgroup.subtree_control" dev="cgroup2" ino=382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 898.721040][ T28] audit: type=1400 audit(1784199095.862:3198): avc: denied { open } for pid=26942 comm="syz.7.5848" path="" dev="cgroup2" ino=382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 898.802832][T26953] loop6: detected capacity change from 0 to 2048 [ 898.921285][T26953] __nla_validate_parse: 2 callbacks suppressed [ 898.921308][T26953] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5851'. [ 899.001864][T26958] netlink: 'syz.6.5851': attribute type 1 has an invalid length. [ 899.076408][T26958] bond4: entered promiscuous mode [ 899.094427][T26958] bond4: entered allmulticast mode [ 899.111587][T26958] 8021q: adding VLAN 0 to HW filter on device bond4 [ 899.572169][T26982] loop8: detected capacity change from 0 to 512 [ 899.586166][T26982] EXT4-fs: Ignoring removed i_version option [ 899.631619][T26982] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 899.642173][T26988] SELinux: policydb version 0 does not match my version range 15-35 [ 899.652642][ T28] audit: type=1400 audit(1784199097.032:3199): avc: denied { load_policy } for pid=26986 comm="syz.9.5864" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 899.661148][T26982] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 899.692614][T26988] SELinux: failed to load policy [ 899.976451][T20325] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.076831][T27002] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 900.087389][T27005] loop8: detected capacity change from 0 to 512 [ 900.109634][T27005] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 900.512917][T27012] lo speed is unknown, defaulting to 1000 [ 901.173157][ T28] audit: type=1326 audit(1784199098.572:3200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27021 comm="syz.7.5877" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c6c0de59 code=0x7ffc0000 [ 901.202739][T27022] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5877'. [ 901.294549][ T28] audit: type=1326 audit(1784199098.572:3201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27021 comm="syz.7.5877" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f41c6c0de59 code=0x7ffc0000 [ 901.322593][T27026] loop9: detected capacity change from 0 to 512 [ 901.441162][ T28] audit: type=1326 audit(1784199098.572:3202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27021 comm="syz.7.5877" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c6c0de59 code=0x7ffc0000 [ 901.654820][ T28] audit: type=1326 audit(1784199098.572:3203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27021 comm="syz.7.5877" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f41c6c0de59 code=0x7ffc0000 [ 901.758174][ T28] audit: type=1326 audit(1784199098.572:3204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27021 comm="syz.7.5877" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c6c0de59 code=0x7ffc0000 [ 901.871646][T27039] loop0: detected capacity change from 0 to 256 [ 901.881694][ T28] audit: type=1326 audit(1784199098.602:3205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27021 comm="syz.7.5877" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f41c6c0de59 code=0x7ffc0000 [ 901.918264][T27039] vfat: Unknown parameter '01777777777777777777777' [ 902.072392][T27044] loop9: detected capacity change from 0 to 512 [ 902.084416][T27047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5884'. [ 902.178171][T27047] FAULT_INJECTION: forcing a failure. [ 902.178171][T27047] name failslab, interval 1, probability 0, space 0, times 0 [ 902.206671][T27047] CPU: 1 UID: 0 PID: 27047 Comm: syz.0.5884 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 902.206780][T27047] Tainted: [W]=WARN [ 902.206788][T27047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 902.206802][T27047] Call Trace: [ 902.206809][T27047] [ 902.206878][T27047] __dump_stack+0x1d/0x30 [ 902.206900][T27047] dump_stack_lvl+0x95/0xd0 [ 902.206973][T27047] dump_stack+0x15/0x1b [ 902.206991][T27047] should_fail_ex+0x25e/0x270 [ 902.207029][T27047] should_failslab+0x8c/0xb0 [ 902.207056][T27047] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 902.207080][T27047] ? skb_clone+0x151/0x1f0 [ 902.207180][T27047] ? skb_clone+0x151/0x1f0 [ 902.207208][T27047] skb_clone+0x151/0x1f0 [ 902.207236][T27047] __netlink_deliver_tap+0x2be/0x510 [ 902.207329][T27047] __netlink_sendskb+0xc3/0xd0 [ 902.207352][T27047] netlink_dump+0x6f8/0x870 [ 902.207380][T27047] __netlink_dump_start+0x435/0x520 [ 902.207413][T27047] genl_family_rcv_msg_dumpit+0x1a5/0x210 [ 902.207451][T27047] ? __pfx_genl_start+0x10/0x10 [ 902.207513][T27047] ? __pfx_genl_dumpit+0x10/0x10 [ 902.207552][T27047] ? __pfx_genl_done+0x10/0x10 [ 902.207605][T27047] genl_rcv_msg+0x3fd/0x470 [ 902.207684][T27047] ? __pfx_nl80211_dump_mpp+0x10/0x10 [ 902.207783][T27047] netlink_rcv_skb+0x11e/0x220 [ 902.207804][T27047] ? __pfx_genl_rcv_msg+0x10/0x10 [ 902.207839][T27047] genl_rcv+0x28/0x40 [ 902.207905][T27047] netlink_unicast+0x5a7/0x680 [ 902.207924][T27047] netlink_sendmsg+0x5be/0x6f0 [ 902.207999][T27047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 902.208023][T27047] ____sys_sendmsg+0x532/0x580 [ 902.208057][T27047] ___sys_sendmsg+0x195/0x1e0 [ 902.208107][T27047] __x64_sys_sendmsg+0xd4/0x160 [ 902.208199][T27047] x64_sys_call+0x194c/0x3020 [ 902.208220][T27047] do_syscall_64+0x136/0x3c0 [ 902.208239][T27047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.208262][T27047] RIP: 0033:0x7f135ab9de59 [ 902.208308][T27047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 902.208329][T27047] RSP: 002b:00007f13595f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 902.208348][T27047] RAX: ffffffffffffffda RBX: 00007f135ae25fa0 RCX: 00007f135ab9de59 [ 902.208360][T27047] RDX: 0000000000000080 RSI: 0000200000000280 RDI: 0000000000000004 [ 902.208373][T27047] RBP: 00007f13595f7090 R08: 0000000000000000 R09: 0000000000000000 [ 902.208445][T27047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 902.208460][T27047] R13: 00007f135ae26038 R14: 00007f135ae25fa0 R15: 00007ffcea72b418 [ 902.208481][T27047] [ 902.568672][T27056] loop8: detected capacity change from 0 to 512 [ 902.669527][T27056] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #16: comm syz.8.5886: corrupted inode contents [ 902.681513][T27056] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 902.682248][T27056] EXT4-fs error (device loop8): ext4_dirty_inode:6639: inode #16: comm syz.8.5886: mark_inode_dirty error [ 902.691492][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 902.691505][ C1] EXT4-fs (loop8): initial error at time 1784199100: ext4_do_update_inode:5742: inode 16 [ 902.691544][ C1] EXT4-fs (loop8): last error at time 1784199100: ext4_do_update_inode:5742: inode 16 [ 902.728720][T27056] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 902.744719][T27061] loop0: detected capacity change from 0 to 164 [ 902.763882][T27056] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #16: comm syz.8.5886: corrupted inode contents [ 902.775752][T27056] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 902.776441][T27056] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #16: comm syz.8.5886: mark_inode_dirty error [ 902.796837][T27056] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 902.797500][T27056] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #16: comm syz.8.5886: corrupted inode contents [ 902.818548][T27056] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 902.819495][T27056] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 902.837324][T27056] fserror_report: 1 callbacks suppressed [ 902.837377][T27056] loop8: lost filesystem error report for type 5 error -117 [ 902.845540][T27056] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #16: comm syz.8.5886: corrupted inode contents [ 902.864722][T27056] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 902.865341][T27056] EXT4-fs error (device loop8): ext4_truncate:4691: inode #16: comm syz.8.5886: mark_inode_dirty error [ 902.885589][T27056] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 902.888644][T27056] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 902.906710][T27056] loop8: lost filesystem error report for type 5 error -117 [ 902.907322][T27056] EXT4-fs (loop8): 1 truncate cleaned up [ 902.921716][T27056] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 902.934416][T27056] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 902.986978][T27061] iso9660: Unknown parameter 'nocompressœßK½<þ"heck' [ 902.999187][ T4521] __quota_error: 8 callbacks suppressed [ 902.999253][ T4521] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 903.014755][ T4521] EXT4-fs error (device loop8): ext4_release_dquot:7077: comm kworker/u8:21: Failed to release dquot type 1 [ 903.127247][T20325] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 903.353049][T26239] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 903.379926][T26239] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 903.685655][T27086] lo speed is unknown, defaulting to 1000 [ 904.274652][T27091] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5899'. [ 904.329536][T27091] FAULT_INJECTION: forcing a failure. [ 904.329536][T27091] name failslab, interval 1, probability 0, space 0, times 0 [ 904.505966][T27091] CPU: 1 UID: 0 PID: 27091 Comm: syz.8.5899 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 904.505998][T27091] Tainted: [W]=WARN [ 904.506006][T27091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 904.506021][T27091] Call Trace: [ 904.506029][T27091] [ 904.506037][T27091] __dump_stack+0x1d/0x30 [ 904.506197][T27091] dump_stack_lvl+0x95/0xd0 [ 904.506222][T27091] dump_stack+0x15/0x1b [ 904.506251][T27091] should_fail_ex+0x25e/0x270 [ 904.506279][T27091] ? nft_trans_flowtable_add+0x39/0x1b0 [ 904.506384][T27091] should_failslab+0x8c/0xb0 [ 904.506410][T27091] __kmalloc_cache_noprof+0x7b/0x3d0 [ 904.506432][T27091] ? nft_trans_flowtable_add+0x39/0x1b0 [ 904.506504][T27091] nft_trans_flowtable_add+0x39/0x1b0 [ 904.506534][T27091] nf_tables_newflowtable+0x10e5/0x1490 [ 904.506638][T27091] nfnetlink_rcv+0xbf7/0x1740 [ 904.506747][T27091] netlink_unicast+0x5a7/0x680 [ 904.506770][T27091] netlink_sendmsg+0x5be/0x6f0 [ 904.506796][T27091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 904.506882][T27091] ____sys_sendmsg+0x532/0x580 [ 904.506919][T27091] ___sys_sendmsg+0x195/0x1e0 [ 904.506986][T27091] __x64_sys_sendmsg+0xd4/0x160 [ 904.507107][T27091] x64_sys_call+0x194c/0x3020 [ 904.507138][T27091] do_syscall_64+0x136/0x3c0 [ 904.507159][T27091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.507245][T27091] RIP: 0033:0x7fe5d332de59 [ 904.507263][T27091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.507333][T27091] RSP: 002b:00007fe5d1d87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 904.507358][T27091] RAX: ffffffffffffffda RBX: 00007fe5d35b5fa0 RCX: 00007fe5d332de59 [ 904.507377][T27091] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 904.507393][T27091] RBP: 00007fe5d1d87090 R08: 0000000000000000 R09: 0000000000000000 [ 904.507407][T27091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 904.507420][T27091] R13: 00007fe5d35b6038 R14: 00007fe5d35b5fa0 R15: 00007ffe44f80f98 [ 904.507470][T27091] [ 905.156189][T27098] loop9: detected capacity change from 0 to 1024 [ 905.349160][T27098] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 905.404510][T27098] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 905.478664][ T28] audit: type=1400 audit(1784199102.802:3214): avc: denied { write } for pid=27093 comm="syz.9.5900" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 905.734701][T27105] loop6: detected capacity change from 0 to 1764 [ 906.365393][T27128] loop8: detected capacity change from 0 to 512 [ 906.407665][T27128] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 906.457731][T27128] ext4 filesystem being mounted at /349/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 906.474329][T27131] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5914'. [ 906.500216][ T28] audit: type=1400 audit(1784199103.902:3215): avc: denied { write } for pid=27127 comm="syz.8.5913" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 906.524602][T27131] netlink: 'syz.7.5914': attribute type 1 has an invalid length. [ 906.554251][T27131] bond6: entered promiscuous mode [ 906.560781][T27131] bond6: entered allmulticast mode [ 906.568360][T27131] 8021q: adding VLAN 0 to HW filter on device bond6 [ 906.629763][ T28] audit: type=1400 audit(1784199104.032:3216): avc: denied { ioctl } for pid=27127 comm="syz.8.5913" path="/349/file1/file1" dev="loop8" ino=15 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 906.705127][T27143] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5915'. [ 906.736777][T25369] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 906.763093][T20325] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 906.789244][ T28] audit: type=1326 audit(1784199104.192:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27146 comm="syz.9.5916" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2563cde59 code=0x7ffc0000 [ 906.841669][ T28] audit: type=1326 audit(1784199104.192:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27146 comm="syz.9.5916" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2563cde59 code=0x7ffc0000 [ 906.869159][ T28] audit: type=1326 audit(1784199104.222:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27146 comm="syz.9.5916" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2563cde59 code=0x7ffc0000 [ 906.902885][ T28] audit: type=1326 audit(1784199104.222:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27146 comm="syz.9.5916" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2563cde59 code=0x7ffc0000 [ 906.929300][ T28] audit: type=1326 audit(1784199104.222:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27146 comm="syz.9.5916" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fb2563cde59 code=0x7ffc0000 [ 906.956937][ T28] audit: type=1326 audit(1784199104.222:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27146 comm="syz.9.5916" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2563cde59 code=0x7ffc0000 [ 907.088509][T27170] loop6: detected capacity change from 0 to 512 [ 907.122261][T27172] loop0: detected capacity change from 0 to 1024 [ 907.132840][T27175] loop8: detected capacity change from 0 to 512 [ 907.176767][T27172] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 907.222538][T20904] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 907.293574][T27185] netlink: 248 bytes leftover after parsing attributes in process `syz.0.5928'. [ 907.358334][T27188] loop0: detected capacity change from 0 to 512 [ 907.473700][T27195] loop8: detected capacity change from 0 to 512 [ 908.187016][T27206] loop0: detected capacity change from 0 to 2048 [ 908.248120][T27206] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 908.262165][T27206] ext4 filesystem being mounted at /296/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 908.308333][ T28] kauditd_printk_skb: 368 callbacks suppressed [ 908.308356][ T28] audit: type=1400 audit(1784199105.702:3591): avc: denied { write } for pid=27197 comm="syz.0.5934" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 908.338947][T27206] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5934: bg 0: block 345: padding at end of block bitmap is not set [ 908.361427][T27206] EXT4-fs (loop0): Remounting filesystem read-only [ 908.402387][ T28] audit: type=1400 audit(1784199105.712:3592): avc: denied { create } for pid=27197 comm="syz.0.5934" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 908.463361][T27203] loop9: detected capacity change from 0 to 1024 [ 908.608064][T20904] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 908.609265][T27203] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 908.775062][T27203] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 908.847861][T25369] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 908.892860][T27236] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 909.146852][T27250] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 909.217734][ T28] audit: type=1400 audit(1784199106.582:3593): avc: denied { map } for pid=27244 comm="syz.7.5952" path="socket:[107164]" dev="sockfs" ino=107164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 909.306520][T27250] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 909.491797][ T28] audit: type=1400 audit(1784199106.732:3594): avc: denied { write } for pid=27239 comm="syz.9.5949" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 909.662958][T27263] netlink: 'syz.8.5956': attribute type 3 has an invalid length. [ 909.879217][T27261] xt_hashlimit: size too large, truncated to 1048576 [ 909.905586][T27263] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.5956'. [ 909.937624][T27267] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 909.974631][T27267] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.5956: bg 0: block 4: invalid block bitmap [ 910.007052][T27273] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 910.039308][T27273] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.5959: bg 0: block 4: invalid block bitmap [ 910.058015][T27267] loop8: lost filesystem error report for type 5 error -117 [ 910.061049][T27267] EXT4-fs (loop8): Remounting filesystem read-only [ 910.068520][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 910.068546][ C1] EXT4-fs (loop8): initial error at time 1784199107: ext4_validate_block_bitmap:432 [ 910.068572][ C1] EXT4-fs (loop8): last error at time 1784199107: ext4_validate_block_bitmap:432 [ 910.102715][T27273] loop0: lost filesystem error report for type 5 error -117 [ 910.103003][T27273] EXT4-fs (loop0): Remounting filesystem read-only [ 910.110460][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 910.110478][ C1] EXT4-fs (loop0): initial error at time 1784199107: ext4_validate_block_bitmap:432 [ 910.110498][ C1] EXT4-fs (loop0): last error at time 1784199107: ext4_validate_block_bitmap:432 [ 910.143679][T27238] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 910.179557][T27273] EXT4-fs (loop0): 1 truncate cleaned up [ 910.222437][T27273] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 910.235399][T21875] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 910.311239][T27267] EXT4-fs (loop8): 1 truncate cleaned up [ 910.345545][T20904] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 910.363650][T27267] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 910.422901][T27288] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5964'. [ 910.620044][T27288] set_capacity_and_notify: 5 callbacks suppressed [ 910.620072][T27288] loop0: detected capacity change from 0 to 512 [ 910.674879][T27295] loop6: detected capacity change from 0 to 512 [ 910.710229][T27288] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 910.738004][T27295] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 910.784176][T27288] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.5964: bg 0: block 4: invalid block bitmap [ 910.813547][T27295] EXT4-fs (loop6): 1 orphan inode deleted [ 910.820885][T27288] loop0: lost filesystem error report for type 5 error -117 [ 910.821252][T27288] EXT4-fs (loop0): Remounting filesystem read-only [ 910.828723][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 910.828754][ C0] EXT4-fs (loop0): initial error at time 1784199108: ext4_validate_block_bitmap:432 [ 910.828852][ C0] EXT4-fs (loop0): last error at time 1784199108: ext4_validate_block_bitmap:432 [ 910.861372][T27295] EXT4-fs (loop6): 1 truncate cleaned up [ 910.864672][T25369] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 910.869746][T27295] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 910.912634][T27288] EXT4-fs (loop0): 1 truncate cleaned up [ 910.922842][T27300] loop9: detected capacity change from 0 to 764 [ 910.942024][T27288] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 910.984763][T27305] IPv6: sit1: Disabled Multicast RS [ 911.065077][T20325] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 911.081994][T27313] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=257 sclass=netlink_tcpdiag_socket pid=27313 comm=syz.7.5974 [ 911.103798][T27309] loop9: detected capacity change from 0 to 1024 [ 911.129346][T21875] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 911.140643][T27309] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 911.158814][T26674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.178077][T20904] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 911.219124][T27325] netlink: 'syz.0.5977': attribute type 8 has an invalid length. [ 911.226865][T27325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5977'. [ 911.253117][T27320] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5975'. [ 911.274776][T27320] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5975'. [ 911.300001][T27329] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5978'. [ 911.317820][T25369] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 911.329970][T27329] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5978'. [ 911.356093][T27329] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 911.366689][T27329] netdevsim netdevsim7 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 911.445306][ T28] audit: type=1400 audit(1784199108.842:3595): avc: denied { write } for pid=27343 comm="syz.9.5982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 911.476434][T27355] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5982'. [ 911.486059][ T28] audit: type=1326 audit(1784199108.872:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27343 comm="syz.9.5982" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2563cde59 code=0x7ffc0000 [ 911.513583][ T28] audit: type=1326 audit(1784199108.872:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27343 comm="syz.9.5982" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2563cde59 code=0x7ffc0000 [ 911.539475][ T28] audit: type=1326 audit(1784199108.872:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27343 comm="syz.9.5982" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2563cde59 code=0x7ffc0000 [ 911.559695][T27356] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5988'. [ 911.566655][ T28] audit: type=1326 audit(1784199108.872:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27343 comm="syz.9.5982" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fb2563cde59 code=0x7ffc0000 [ 911.581684][T27356] loop0: detected capacity change from 0 to 512 [ 911.606298][ T28] audit: type=1326 audit(1784199108.872:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27343 comm="syz.9.5982" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2563cde59 code=0x7ffc0000 [ 911.614292][T27356] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 911.647721][T27356] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.5988: bg 0: block 4: invalid block bitmap [ 911.660736][T27356] loop0: lost filesystem error report for type 5 error -117 [ 911.661175][T27356] EXT4-fs (loop0): Remounting filesystem read-only [ 911.661533][T27329] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 911.668716][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 911.668775][ C1] EXT4-fs (loop0): initial error at time 1784199109: ext4_validate_block_bitmap:432 [ 911.676251][T27329] netdevsim netdevsim7 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 911.685528][ C1] [ 911.713634][ C1] EXT4-fs (loop0): last error at time 1784199109: ext4_validate_block_bitmap:432 [ 911.724738][T27356] EXT4-fs (loop0): 1 truncate cleaned up [ 911.753043][T27356] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 911.867623][T27329] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 911.920708][T27329] netdevsim netdevsim7 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 911.934292][T20904] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 911.988441][T27329] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 912.016954][T27329] netdevsim netdevsim7 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 912.139970][ T4502] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 912.164858][ T4502] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 912.219471][T18444] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 912.234687][T18444] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 912.308380][T18444] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 912.335370][T18444] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 912.346523][T27367] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5992'. [ 912.705005][T18444] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 912.726893][T18444] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 912.819294][T27369] loop0: detected capacity change from 0 to 512 [ 912.845403][T27369] ext4: Unknown parameter 'smackfsdef' [ 912.992784][T27371] loop6: detected capacity change from 0 to 1024 [ 913.436843][T27371] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 913.652771][T27392] loop8: detected capacity change from 0 to 512 [ 913.705086][T21875] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.776922][T27400] FAULT_INJECTION: forcing a failure. [ 913.776922][T27400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 913.848588][T27400] CPU: 0 UID: 0 PID: 27400 Comm: syz.6.6002 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 913.848624][T27400] Tainted: [W]=WARN [ 913.848633][T27400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 913.848647][T27400] Call Trace: [ 913.848655][T27400] [ 913.848664][T27400] __dump_stack+0x1d/0x30 [ 913.848691][T27400] dump_stack_lvl+0x95/0xd0 [ 913.848712][T27400] dump_stack+0x15/0x1b [ 913.848804][T27400] should_fail_ex+0x25e/0x270 [ 913.848850][T27400] should_fail+0xb/0x20 [ 913.848878][T27400] should_fail_usercopy+0x1a/0x20 [ 913.848955][T27400] _copy_from_user+0x1c/0xb0 [ 913.849027][T27400] sctp_setsockopt+0x161/0xea0 [ 913.849051][T27400] sock_common_setsockopt+0x69/0x80 [ 913.849081][T27400] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 913.849106][T27400] __sys_setsockopt+0x184/0x200 [ 913.849134][T27400] __x64_sys_setsockopt+0x64/0x80 [ 913.849190][T27400] x64_sys_call+0x2327/0x3020 [ 913.849210][T27400] do_syscall_64+0x136/0x3c0 [ 913.849228][T27400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.849287][T27400] RIP: 0033:0x7f62f13fde59 [ 913.849304][T27400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 913.849378][T27400] RSP: 002b:00007f62efe57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 913.849400][T27400] RAX: ffffffffffffffda RBX: 00007f62f1685fa0 RCX: 00007f62f13fde59 [ 913.849416][T27400] RDX: 0000000000000080 RSI: 0000000000000084 RDI: 0000000000000003 [ 913.849430][T27400] RBP: 00007f62efe57090 R08: 0000000000000008 R09: 0000000000000000 [ 913.849441][T27400] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 913.849500][T27400] R13: 00007f62f1686038 R14: 00007f62f1685fa0 R15: 00007fffcd5c5478 [ 913.849517][T27400] [ 914.863075][T27414] lo speed is unknown, defaulting to 1000 [ 916.239944][T27425] loop0: detected capacity change from 0 to 1024 [ 916.345401][T27425] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 916.359057][T27437] __nla_validate_parse: 1 callbacks suppressed [ 916.359262][T27437] netlink: 256 bytes leftover after parsing attributes in process `syz.6.6016'. [ 916.551503][T27437] loop6: detected capacity change from 0 to 512 [ 916.558614][T27437] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 916.570425][T27444] netlink: 'syz.8.6017': attribute type 4 has an invalid length. [ 916.591099][T27437] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.6016: bg 0: block 4: invalid block bitmap [ 916.603874][T27437] loop6: lost filesystem error report for type 5 error -117 [ 916.604246][T27437] EXT4-fs (loop6): Remounting filesystem read-only [ 916.619005][T27437] EXT4-fs (loop6): 1 truncate cleaned up [ 916.627852][T27437] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 916.642057][T27446] netlink: 'syz.8.6017': attribute type 1 has an invalid length. [ 916.747435][T27449] loop9: detected capacity change from 0 to 512 [ 917.353874][T20904] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 917.538970][T27459] netlink: 'syz.0.6019': attribute type 1 has an invalid length. [ 917.569943][T27459] bond2: entered promiscuous mode [ 917.575199][T27459] 8021q: adding VLAN 0 to HW filter on device bond2 [ 917.717221][T27470] loop9: detected capacity change from 0 to 1024 [ 917.726749][T27470] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 917.818116][T27470] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 917.840554][ T28] kauditd_printk_skb: 141 callbacks suppressed [ 917.840580][ T28] audit: type=1400 audit(1784199115.242:3742): avc: denied { write } for pid=27453 comm="syz.9.6020" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 918.423280][T21875] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 918.597697][T27479] loop8: detected capacity change from 0 to 2048 [ 918.602736][T27483] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 918.653156][T27479] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6027'. [ 918.662531][T27483] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6025'. [ 918.673141][T27485] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6028'. [ 918.683159][T27479] netlink: 'syz.8.6027': attribute type 1 has an invalid length. [ 918.697837][T27479] bond5: entered promiscuous mode [ 918.876861][T27485] netlink: 'syz.7.6028': attribute type 1 has an invalid length. [ 919.188601][ T28] audit: type=1400 audit(1784199116.592:3743): avc: denied { setopt } for pid=27482 comm="syz.6.6025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 919.209948][T27479] bond5: entered allmulticast mode [ 919.229862][T25369] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 919.245409][T27479] 8021q: adding VLAN 0 to HW filter on device bond5 [ 919.339688][T27488] lo speed is unknown, defaulting to 1000 [ 919.488915][T27485] bond7: entered promiscuous mode [ 919.493995][T27485] bond7: entered allmulticast mode [ 919.499250][T27485] 8021q: adding VLAN 0 to HW filter on device bond7 [ 919.800096][T27506] netlink: 256 bytes leftover after parsing attributes in process `syz.8.6035'. [ 920.513161][T27506] loop8: detected capacity change from 0 to 512 [ 920.555483][T27506] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 920.565755][T27506] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.6035: bg 0: block 4: invalid block bitmap [ 920.578058][T27506] loop8: lost filesystem error report for type 5 error -117 [ 920.578290][T27506] EXT4-fs (loop8): Remounting filesystem read-only [ 920.592116][T27506] EXT4-fs (loop8): 1 truncate cleaned up [ 920.599092][T27506] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 920.755932][T26242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.895970][ T28] audit: type=1400 audit(1784199118.292:3744): avc: denied { bind } for pid=27523 comm="syz.6.6040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 920.948568][T27526] loop0: detected capacity change from 0 to 2048 [ 920.963236][T20325] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.991075][T27526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6041'. [ 921.104777][T27533] loop6: detected capacity change from 0 to 2048 [ 921.123426][T27526] netlink: 'syz.0.6041': attribute type 1 has an invalid length. [ 921.144702][T27526] bond3: entered promiscuous mode [ 921.149817][T27526] bond3: entered allmulticast mode [ 921.155485][T27526] 8021q: adding VLAN 0 to HW filter on device bond3 [ 921.177724][T27533] loop6: p1 < > p4 [ 921.201070][T27533] loop6: p4 size 8388608 extends beyond EOD, truncated [ 921.307059][T27532] loop6: detected capacity change from 0 to 128 [ 921.385733][T13432] udevd[13432]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 921.406810][T18321] udevd[18321]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 921.957510][T27545] loop8: detected capacity change from 0 to 512 [ 922.491373][T27554] loop6: detected capacity change from 0 to 1024 [ 922.546843][T27560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6052'. [ 922.613315][T27554] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 922.802485][T27554] ext4 filesystem being mounted at /336/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 922.859370][T27569] loop0: detected capacity change from 0 to 2048 [ 922.928060][T27573] lo speed is unknown, defaulting to 1000 [ 923.147191][T27569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6055'. [ 923.184535][T27571] loop8: detected capacity change from 0 to 512 [ 923.197751][T27565] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 923.221191][T27577] netlink: 'syz.0.6055': attribute type 1 has an invalid length. [ 923.314004][T21875] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 923.360238][T27577] bond4: entered promiscuous mode [ 923.411297][T27577] bond4: entered allmulticast mode [ 923.580888][T27577] 8021q: adding VLAN 0 to HW filter on device bond4 [ 924.989117][T27604] FAULT_INJECTION: forcing a failure. [ 924.989117][T27604] name failslab, interval 1, probability 0, space 0, times 0 [ 925.001798][T27604] CPU: 0 UID: 0 PID: 27604 Comm: syz.8.6066 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 925.001889][T27604] Tainted: [W]=WARN [ 925.001898][T27604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 925.001910][T27604] Call Trace: [ 925.001916][T27604] [ 925.001923][T27604] __dump_stack+0x1d/0x30 [ 925.001945][T27604] dump_stack_lvl+0x95/0xd0 [ 925.002039][T27604] dump_stack+0x15/0x1b [ 925.002055][T27604] should_fail_ex+0x25e/0x270 [ 925.002083][T27604] ? __get_vm_area_node+0x106/0x1d0 [ 925.002104][T27604] should_failslab+0x8c/0xb0 [ 925.002197][T27604] __kmalloc_cache_node_noprof+0x81/0x3e0 [ 925.002226][T27604] ? __get_vm_area_node+0x106/0x1d0 [ 925.002256][T27604] __get_vm_area_node+0x106/0x1d0 [ 925.002281][T27604] __vmalloc_node_range_noprof+0x266/0x11e0 [ 925.002336][T27604] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 925.002372][T27604] ? selinux_file_open+0x2e6/0x330 [ 925.002455][T27604] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 925.002484][T27604] __vmalloc_noprof+0xa4/0xf0 [ 925.002561][T27604] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 925.002595][T27604] bpf_prog_alloc_no_stats+0x47/0x390 [ 925.002627][T27604] ? bpf_prog_alloc+0x2a/0x150 [ 925.002652][T27604] bpf_prog_alloc+0x3c/0x150 [ 925.002741][T27604] bpf_prog_load+0x54b/0x1100 [ 925.002769][T27604] ? avc_has_perm_noaudit+0xa3/0x120 [ 925.002797][T27604] ? vfs_write+0x7a0/0x990 [ 925.002829][T27604] __sys_bpf+0xbae/0xc30 [ 925.002990][T27604] ? vfs_write+0x7a0/0x990 [ 925.003110][T27604] ? vfs_write+0x7a0/0x990 [ 925.003132][T27604] __x64_sys_bpf+0x69/0x80 [ 925.003176][T27604] x64_sys_call+0x10cb/0x3020 [ 925.003197][T27604] do_syscall_64+0x136/0x3c0 [ 925.003285][T27604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.003304][T27604] RIP: 0033:0x7fe5d332de59 [ 925.003317][T27604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 925.003408][T27604] RSP: 002b:00007fe5d1d87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 925.003430][T27604] RAX: ffffffffffffffda RBX: 00007fe5d35b5fa0 RCX: 00007fe5d332de59 [ 925.003474][T27604] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005 [ 925.003485][T27604] RBP: 00007fe5d1d87090 R08: 0000000000000000 R09: 0000000000000000 [ 925.003497][T27604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 925.003511][T27604] R13: 00007fe5d35b6038 R14: 00007fe5d35b5fa0 R15: 00007ffe44f80f98 [ 925.003535][T27604] [ 925.003544][T27604] syz.8.6066: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 925.292260][T27598] loop9: detected capacity change from 0 to 512 [ 925.316897][T27598] EXT4-fs: Ignoring removed oldalloc option [ 925.786390][T27604] ,cpuset=/,mems_allowed=0 [ 925.791234][T27604] CPU: 1 UID: 0 PID: 27604 Comm: syz.8.6066 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 925.791266][T27604] Tainted: [W]=WARN [ 925.791272][T27604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 925.791284][T27604] Call Trace: [ 925.791290][T27604] [ 925.791364][T27604] __dump_stack+0x1d/0x30 [ 925.791391][T27604] dump_stack_lvl+0x95/0xd0 [ 925.791415][T27604] dump_stack+0x15/0x1b [ 925.791505][T27604] warn_alloc+0x145/0x1c0 [ 925.791582][T27604] __vmalloc_node_range_noprof+0x28b/0x11e0 [ 925.791667][T27604] ? selinux_file_open+0x2e6/0x330 [ 925.791688][T27604] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 925.791797][T27604] __vmalloc_noprof+0xa4/0xf0 [ 925.791824][T27604] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 925.791852][T27604] bpf_prog_alloc_no_stats+0x47/0x390 [ 925.791948][T27604] ? bpf_prog_alloc+0x2a/0x150 [ 925.791973][T27604] bpf_prog_alloc+0x3c/0x150 [ 925.792081][T27604] bpf_prog_load+0x54b/0x1100 [ 925.792118][T27604] ? avc_has_perm_noaudit+0xa3/0x120 [ 925.792183][T27604] ? vfs_write+0x7a0/0x990 [ 925.792199][T27604] __sys_bpf+0xbae/0xc30 [ 925.792226][T27604] ? vfs_write+0x7a0/0x990 [ 925.792248][T27604] ? vfs_write+0x7a0/0x990 [ 925.792353][T27604] __x64_sys_bpf+0x69/0x80 [ 925.792385][T27604] x64_sys_call+0x10cb/0x3020 [ 925.792407][T27604] do_syscall_64+0x136/0x3c0 [ 925.792475][T27604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.792495][T27604] RIP: 0033:0x7fe5d332de59 [ 925.792513][T27604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 925.792535][T27604] RSP: 002b:00007fe5d1d87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 925.792557][T27604] RAX: ffffffffffffffda RBX: 00007fe5d35b5fa0 RCX: 00007fe5d332de59 [ 925.792575][T27604] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005 [ 925.792594][T27604] RBP: 00007fe5d1d87090 R08: 0000000000000000 R09: 0000000000000000 [ 925.792606][T27604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 925.792617][T27604] R13: 00007fe5d35b6038 R14: 00007fe5d35b5fa0 R15: 00007ffe44f80f98 [ 925.792640][T27604] [ 925.792661][T27604] Mem-Info: [ 926.122315][T27604] active_anon:38125 inactive_anon:15470 isolated_anon:0 [ 926.122315][T27604] active_file:15186 inactive_file:17072 isolated_file:0 [ 926.122315][T27604] unevictable:0 dirty:376 writeback:0 [ 926.122315][T27604] slab_reclaimable:4101 slab_unreclaimable:24440 [ 926.122315][T27604] mapped:37367 shmem:38601 pagetables:4008 [ 926.122315][T27604] sec_pagetables:0 bounce:0 [ 926.122315][T27604] kernel_misc_reclaimable:0 [ 926.122315][T27604] free:1813438 free_pcp:7418 free_cma:0 [ 926.197219][T27598] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 926.217298][ T28] audit: type=1400 audit(1784199123.572:3745): avc: denied { write } for pid=27596 comm="syz.9.6063" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 926.271063][T27604] Node 0 active_anon:152616kB inactive_anon:61880kB active_file:60744kB inactive_file:68288kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:153528kB dirty:1504kB writeback:0kB shmem:154404kB kernel_stack:5616kB pagetables:16032kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 926.436752][T27620] loop6: detected capacity change from 0 to 512 [ 926.481328][T27604] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 926.568200][T25369] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 926.603799][T27604] lowmem_reserve[]: 0 2878 7857 7857 [ 926.620297][T27604] Node 0 DMA32 free:2944164kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947688kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 926.662809][T27629] bridge1: entered promiscuous mode [ 926.674808][T27629] bridge1: entered allmulticast mode [ 926.725339][T27604] lowmem_reserve[]: 0 0 4978 4978 [ 926.740084][T27604] Node 0 Normal free:4293876kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:142176kB inactive_anon:61880kB active_file:60744kB inactive_file:68288kB unevictable:0kB writepending:1040kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:34416kB local_pcp:21228kB free_cma:0kB [ 926.840802][T27604] lowmem_reserve[]: 0 0 0 0 [ 926.861674][T27604] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 926.900686][T27604] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 2*16kB (M) 3*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944164kB [ 926.917642][T27633] loop9: detected capacity change from 0 to 512 [ 926.961135][T27604] Node 0 Normal: 1023*4kB (UME) 287*8kB (UM) 812*16kB (UME) 390*32kB (UME) 320*64kB (UME) 176*128kB (UME) 99*256kB (UM) 26*512kB (UM) 25*1024kB (UME) 7*2048kB (UME) 1011*4096kB (UM) = 4294516kB [ 927.049741][T27604] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 927.077295][T27604] 67889 total pagecache pages [ 927.097348][T27604] 0 pages in swap cache [ 927.110806][T27604] Free swap = 124996kB [ 927.119716][T27604] Total swap = 124996kB [ 927.128534][T27604] 2097051 pages RAM [ 927.136991][T27604] 0 pages HighMem/MovableOnly [ 927.146068][T27604] 81730 pages reserved [ 927.301365][T27639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.309576][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.344069][ T28] audit: type=1400 audit(1784199124.742:3746): avc: denied { rename } for pid=27641 comm="syz.0.6076" name="file0" dev="tmpfs" ino=1781 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 927.396189][T27642] 9p: Unknown Cache mode or invalid value 777777777777777777 [ 927.404101][T27642] xt_addrtype: ipv6 does not support BROADCAST matching [ 927.411148][ T28] audit: type=1400 audit(1784199124.802:3747): avc: denied { mounton } for pid=27641 comm="syz.0.6076" path="/329/file7" dev="tmpfs" ino=1781 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 927.643717][T27644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.653417][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.663348][T27644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.678850][T18444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.695883][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.770898][T27649] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6076'. [ 928.057085][T27638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.065312][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.089221][T27658] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6079'. [ 928.143214][T27662] loop0: detected capacity change from 0 to 164 [ 928.152905][T27662] iso9660: Unknown parameter 'nocompressœßK½<þ"heck' [ 928.297833][ T28] audit: type=1400 audit(1784199125.702:3748): avc: denied { getopt } for pid=27669 comm="syz.8.6085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 928.330286][T27666] loop9: detected capacity change from 0 to 1764 [ 928.393211][ T3392] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 928.450372][ T3392] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 929.316859][T27673] loop6: detected capacity change from 0 to 1024 [ 929.569673][T27683] fido_id[27683]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 929.755164][T27684] 8021q: adding VLAN 0 to HW filter on device bond2 [ 929.814589][T27684] loop9: detected capacity change from 0 to 764 [ 929.821166][T27684] iso9660: Bad value for 'uid' [ 929.825987][T27684] iso9660: Bad value for 'uid' [ 930.398141][T27673] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 930.414185][T27689] loop8: detected capacity change from 0 to 1024 [ 930.991891][T27689] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 931.184913][T26245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.357126][T27697] lo speed is unknown, defaulting to 1000 [ 931.431796][T27689] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #3: block 2: comm syz.8.6090: lblock 2 mapped to illegal pblock 2 (length 1) [ 931.469278][T27689] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 931.470837][T27689] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 931.479917][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 931.479937][ C1] EXT4-fs (loop8): initial error at time 1784199128: ext4_map_blocks:791: inode 3: block 2 [ 931.479963][ C1] EXT4-fs (loop8): last error at time 1784199128: ext4_map_blocks:791: inode 3: block 2 [ 931.644150][T27689] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #3: block 48: comm syz.8.6090: lblock 0 mapped to illegal pblock 48 (length 1) [ 931.658329][T27689] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 931.658555][T27689] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 931.678819][T27689] EXT4-fs error (device loop8): ext4_acquire_dquot:7041: comm syz.8.6090: Failed to acquire dquot type 0 [ 931.690771][T27689] loop8: lost filesystem error report for type 5 error -117 [ 931.690851][T27689] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 931.708812][T27689] loop8: lost filesystem error report for type 5 error -117 [ 931.709057][T27689] EXT4-fs error (device loop8): ext4_evict_inode:267: inode #11: comm syz.8.6090: mark_inode_dirty error [ 931.778521][T27689] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 931.778850][T27689] EXT4-fs warning (device loop8): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 931.948554][T27689] EXT4-fs (loop8): 1 orphan inode deleted [ 931.960727][T27689] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 931.972851][T18421] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 931.987475][T18421] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 931.987612][T18421] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 932.017356][ T28] audit: type=1400 audit(1784199129.412:3749): avc: denied { write } for pid=27686 comm="syz.8.6090" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 932.048031][T18421] EXT4-fs error (device loop8): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 0 [ 932.066705][ T28] audit: type=1400 audit(1784199129.462:3750): avc: denied { write } for pid=27686 comm="syz.8.6090" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 932.097695][ T28] audit: type=1400 audit(1784199129.462:3751): avc: denied { write } for pid=27686 comm="syz.8.6090" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 932.120164][ T28] audit: type=1400 audit(1784199129.462:3752): avc: denied { write } for pid=27686 comm="syz.8.6090" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 932.200680][T20325] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 932.924198][T18421] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 932.938353][T18421] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 932.940102][T18421] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 932.958223][T18421] EXT4-fs error (device loop8): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 0 [ 932.969747][T18421] loop8: lost filesystem error report for type 5 error -117 [ 932.970270][T20325] EXT4-fs error (device loop8): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 932.991066][T21875] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 933.010016][T20325] loop8: lost filesystem error report for type 5 error -117 [ 933.010112][T20325] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 933.027207][T20325] loop8: lost filesystem error report for type 5 error -117 [ 933.027351][T20325] EXT4-fs error (device loop8): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 933.046777][T20325] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 933.058301][T27704] netlink: 'syz.7.6093': attribute type 3 has an invalid length. [ 933.077372][T27704] IPv6: NLM_F_CREATE should be specified when creating new route [ 933.088242][T27706] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6094'. [ 933.098384][T27706] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27706 comm=syz.6.6094 [ 933.147455][T27714] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6092'. [ 933.261524][T27706] xt_hashlimit: size too large, truncated to 1048576 [ 933.724759][T27730] sch_tbf: burst 240 is lower than device lo mtu (32783) ! [ 935.341456][T27739] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6102'. [ 935.363799][T27739] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6102'. [ 936.384313][T27745] loop0: detected capacity change from 0 to 1024 [ 936.966581][T27745] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 937.247427][T27758] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 937.276204][T20904] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 937.362653][ T2981] ================================================================== [ 937.370783][ T2981] BUG: KCSAN: data-race in atime_needs_update / inode_set_ctime_current [ 937.379177][ T2981] [ 937.381506][ T2981] write to 0xffff8881681f9c18 of 8 bytes by task 13432 on cpu 0: [ 937.389226][ T2981] inode_set_ctime_current+0x600/0x8e0 [ 937.394701][ T2981] simple_unlink+0x2d/0x80 [ 937.399127][ T2981] shmem_unlink+0x12d/0x140 [ 937.403644][ T2981] vfs_unlink+0x1c3/0x490 [ 937.407979][ T2981] filename_unlinkat+0x1dc/0x410 [ 937.412923][ T2981] __se_sys_unlink+0x2b/0xe0 [ 937.417525][ T2981] __x64_sys_unlink+0x1f/0x30 [ 937.422216][ T2981] x64_sys_call+0x2eb6/0x3020 [ 937.426900][ T2981] do_syscall_64+0x136/0x3c0 [ 937.431491][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.437388][ T2981] [ 937.439709][ T2981] read to 0xffff8881681f9c18 of 8 bytes by task 2981 on cpu 1: [ 937.447252][ T2981] atime_needs_update+0x2ef/0x3e0 [ 937.452302][ T2981] touch_atime+0x4a/0x300 [ 937.456652][ T2981] do_readlinkat+0x137/0x2f0 [ 937.461367][ T2981] __x64_sys_readlink+0x47/0x60 [ 937.466242][ T2981] x64_sys_call+0x2b51/0x3020 [ 937.470935][ T2981] do_syscall_64+0x136/0x3c0 [ 937.475528][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.481424][ T2981] [ 937.483744][ T2981] value changed: 0x000000006a58b7db -> 0x000000006a58b7de [ 937.490847][ T2981] [ 937.493172][ T2981] Reported by Kernel Concurrency Sanitizer on: [ 937.499321][ T2981] CPU: 1 UID: 0 PID: 2981 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 937.509737][ T2981] Tainted: [W]=WARN [ 937.513537][ T2981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 937.523592][ T2981] ================================================================== [ 937.542938][T27765] loop8: detected capacity change from 0 to 164 [ 937.553510][T27765] iso9660: Unknown parameter 'nocompressœßK½<þ"heck' [ 937.567063][T27767] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6108'. [ 937.804105][T26239] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 937.818086][T26239] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 938.162849][T26245] usb usb6-port1: attempt power cycle [ 939.986132][T26245] usb usb6-port1: unable to enumerate USB device [ 940.596023][T26245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.716060][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog