last executing test programs: 46.023428075s ago: executing program 3 (id=455): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x40002020, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0x4661b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) getsockopt$inet_tcp_int(r4, 0x6, 0x18, 0x0, &(0x7f0000000280)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="a1ab00000000000000003200000008001781"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4800) 44.937393743s ago: executing program 3 (id=464): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100030a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) (fail_nth: 5) 44.67371926s ago: executing program 3 (id=466): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x7, 0x8, 0x42, 0x0, 0x3ff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x2, 0x800, 0x2, 0xc, 0x1, 0x81, 0x0, 0xc05, 0x0, 0x4e9c}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa) getpgrp(0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x121080, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) prctl$PR_GET_FPEXC(0xb, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000600)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="34000000180001000000000000000046674e6ac5cb9ef2b2172cb7f349690002000000fc000009000000000600150005000000100016800c000380a9000100", @ANYRES32, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) setns(0xc9, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000009000000711230c9676250c63a000000000095001dbc6790c4b902163b9bd8c80ec4da4ad8b2750dc45f4cb5bc3719d67a07399f375363a4b6226b375f288a57abbbb0efe5f627fc91b1d625fe23de2516bbc879eec8a3d51d375a6fd1c33f1bef2597911c099b127d336303271b66d0257fe819a41a609f0879775c8bacf7f633b58dbaed566bfec094"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc80}, 0x94) accept(r3, 0x0, 0x0) 43.221093927s ago: executing program 3 (id=478): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = socket$kcm(0xa, 0x4, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x8205, &(0x7f00000027c0), 0x81, 0x63e, &(0x7f0000000c40)="$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") r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={'veth0_to_bond\x00', {0x2, 0x4e5f, @empty}}) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)) r3 = syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000740)=@newtaction={0x9c, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x88, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0xffffff9d, 0x1, {{0x66, 0xffffff80, 0xffffffffffffffff, 0x0, 0x8af}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff000000, 0x1}}]}, {0x4, 0x6, "0dd98ae6018d5ac108deaf461fe091dc61aeb4e32dc64e36bee01d12814757c03bfecf42bee24e0f93356e84f885b2b28ecf81bcd74ddf6e53d3efd386cceadc59bf6920df9718d022c68f4322f5608ee203bd5d52d66f134ccf54c25b501596b74f5fa8bc9fa65d06daff2ced0a6d4542ef767477255c2a9934c9616764c61c7b4e51a8351d35509a6cf0e66f3448b26aecd96738dddddb5b887cb2354c277db3552f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x6}}}}, @m_police={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0xffffffffffffff9e}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) sendto$inet(r5, 0x0, 0x0, 0x800, 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)={0x33, 0x17, 0x1, {0x2a, './cgroup.cpu/test/memory.oom_control/file0'}}, 0x33) setxattr$security_evm(&(0x7f00000000c0)='./cgroup.cpu/test/memory.oom_control/file0\x00', &(0x7f0000000180), &(0x7f00000004c0)=ANY=[@ANYBLOB="0301130000000d00f47b3547c0b4eee7f44ad59f8640cba1ead83550f7c85b24801f6f133b38100bc3c2c56a03f5771c6b82641c1514dae7b664bc21906cae35715dd315e0b8c379796e6eab0396d0c87d0dd57bb92c21757224639e384b4e40f8c385d38b70326e22645c91a0a60efa20a4fb7f5486132dbbe2e8e9e071e53cf61af821ecfc440d7787e8d46dcfc9f50e82877a3df2781058bdb6d89614490322ce33289b7e24d2f3b3309195081c6689a22ca2e3fd7bd0c966eac4d68d11b4a95fefb352f3eb4eaadeeb64b30733e34e8f3513d2368cdf4be86a7a298c41b220e68133b82ccbbc6d4731402c694341febc51b289df055019edca339634cb3af9953961f937801a14c9ea11f7b6d91921625de597795ed08675c7858f68cd3ed5afc2d8"], 0xfd, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x1) unlinkat(r0, &(0x7f0000000080)='./cgroup.cpu/test/memory.oom_control/file0\x00', 0x0) syncfs(0xffffffffffffffff) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r6, &(0x7f0000000200)='1', 0x1) r7 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000002c0)='proto\x00', &(0x7f0000000300)='udp\x00', 0x0) openat(0xffffffffffffffff, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x0, 0x0) 42.654751122s ago: executing program 3 (id=486): r0 = socket$inet6_udp(0xa, 0x2, 0x0) shutdown(r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x2, @perf_config_ext={0x4, 0x60}, 0x10c0e8, 0x1, 0x0, 0x3, 0x209, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x50000004, 0x1) 42.346821s ago: executing program 3 (id=491): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x5c, 0x0, 0x1, 0x0, 0x0, 0xd, 0x65}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x51, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x4) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) fsopen(&(0x7f0000000100)='nfs\x00', 0x0) sendmsg$key(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001080)={0x2, 0x8, 0x4, 0x6, 0xe, 0x0, 0x70bd2b, 0x25dfdbfc, [@sadb_ident={0x2, 0xa, 0x9, 0x0, 0x9}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e21, 0x5, @mcast2}, @in6={0xa, 0x4e22, 0x3, @empty}}, @sadb_x_sa2={0x2, 0x13, 0x30, 0x0, 0x0, 0x70bd2a, 0x3503}]}, 0x70}}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x400, @private=0xa010102}, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200}) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20004090) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000001000)=0x1, 0x4) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x7, 0xffe0}, {}, {0x9, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xf}}]}}]}, 0x40}}, 0x20004804) fcntl$setflags(r0, 0x2, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={r2, 0x80}, 0x8) 42.286359002s ago: executing program 32 (id=491): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x5c, 0x0, 0x1, 0x0, 0x0, 0xd, 0x65}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x51, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x4) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) fsopen(&(0x7f0000000100)='nfs\x00', 0x0) sendmsg$key(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001080)={0x2, 0x8, 0x4, 0x6, 0xe, 0x0, 0x70bd2b, 0x25dfdbfc, [@sadb_ident={0x2, 0xa, 0x9, 0x0, 0x9}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e21, 0x5, @mcast2}, @in6={0xa, 0x4e22, 0x3, @empty}}, @sadb_x_sa2={0x2, 0x13, 0x30, 0x0, 0x0, 0x70bd2a, 0x3503}]}, 0x70}}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x400, @private=0xa010102}, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200}) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20004090) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000001000)=0x1, 0x4) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x7, 0xffe0}, {}, {0x9, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xf}}]}}]}, 0x40}}, 0x20004804) fcntl$setflags(r0, 0x2, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={r2, 0x80}, 0x8) 21.528696876s ago: executing program 2 (id=668): lseek(0xffffffffffffffff, 0xfffffffffffffffd, 0x0) 21.290123572s ago: executing program 2 (id=669): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write(r0, 0x0, 0x0) 20.994882799s ago: executing program 2 (id=671): bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000002000200000000003f1ff8f3693dff9b7c87a397f70ba65eea7748a943d8e2c14f6321e99c5d8e7fef8985476a2066e86c19890a"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000400)='./dev\x00', 0x100, 0x125) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYRES64, @ANYRESHEX=r0], 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r1, 0xc138fd05, &(0x7f0000000000)="0400000002000000000000007e0100003801") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0x8000, 0x20000a, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000000)=0xcc, 0x4) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r1, 0x24, &(0x7f00000007c0)={0x9dc, 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000019000100f1ffff07000000001c140000fe00000400180000efdc06ac5a585047420527c560d0837029002e2c5a537efa8032e18d8e0ab236fef4ff8d97303cd2de9bdc95fb953118c3d6d0a327e7"], 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x10) 20.523946172s ago: executing program 2 (id=676): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @local}, {0x7530, 0x7530, 0x8}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@typedef={0x3, 0x0, 0x0, 0x8, 0x2}, @typedef={0x3, 0x0, 0x0, 0x8, 0x4}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x1}, @fwd={0x6}]}, {0x0, [0x2e, 0x30, 0x2e, 0x5f, 0x61, 0x61, 0x2e]}}, 0x0, 0x51, 0x0, 0x1}, 0x28) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r5}, &(0x7f0000000880), 0x0}, 0x20) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) getpid() bind$llc(r4, &(0x7f00000000c0)={0x1a, 0x205, 0x2, 0x6, 0x6, 0x2, @remote}, 0x10) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) (async) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) (async) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f00000002c0)) (async) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 18.866455025s ago: executing program 2 (id=687): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) 18.062039725s ago: executing program 2 (id=695): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180), 0x4) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) socket$inet6(0xa, 0x800000000000002, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0xe2, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r2}, 0xc) 18.061590695s ago: executing program 33 (id=695): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180), 0x4) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) socket$inet6(0xa, 0x800000000000002, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0xe2, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r2}, 0xc) 4.022237766s ago: executing program 4 (id=838): unshare(0x62040200) unshare(0x22000c00) unshare(0x62040200) (async) unshare(0x22000c00) (async) 3.581559948s ago: executing program 4 (id=839): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e22, @remote}}}, 0x84) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="1200", 0x2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x181601) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) close(0x3) r3 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x48, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.980342363s ago: executing program 4 (id=847): socket$netlink(0x10, 0x3, 0x0) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001500)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x3, 0x1, 0x1}}) bpf$LINK_DETACH(0x22, &(0x7f0000000040), 0x4) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000140)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, 0x0, 0x1) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001540)=@deltfilter={0x1b8, 0x2d, 0x1, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x3}, {0xe}, {0x0, 0xffff}}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x0, 0x62}}, @filter_kind_options=@f_fw={{0x7}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0xb}}, @TCA_RATE={0x6, 0x5, {0x40, 0x39}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_cgroup={{0xb}, {0x13c, 0x2, [@TCA_CGROUP_EMATCHES={0x30, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1e42, 0x7, 0x80}, {{0x1, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x3, 0x7, 0x5}, {{0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}}}]}]}, @TCA_CGROUP_EMATCHES={0x4}, @TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}, @TCA_CGROUP_ACT={0xf8, 0x1, [@m_simple={0xf4, 0x17, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x4, 0xdd7, 0x20000001, 0x8, 0x4}}, @TCA_DEF_DATA={0x12, 0x3, 'veth0_to_team\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x0, 0x6, 0x10, 0xcd71}}]}, {0x82, 0x6, "de24f6cbcab203c7325c1d130ec95e13eb96dc7f799ee7799fb4f3f9774d821029ebb025d2caf968de5d3c7d16e63e180c4ba1bd4c70940e08cc6bb63280b2620f364116238c07eca4fde7d5ba8c62c36f98244088cafef6ec4e8b62a422b00576ef070d367c2bb15bd75f656a108e55e43315bb20176d36d058891e0ac4"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xae}]}}]}, 0x1b8}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) creat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x83) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e") ptrace$getregset(0x4205, 0x0, 0x2, 0x0) 2.936151224s ago: executing program 1 (id=848): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) mprotect(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200200, 0x0) bind$can_j1939(r4, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000027c0)='attr/keycreate\x00') exit(0xffff) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x4000080, 0x0, 0x0) 2.882181046s ago: executing program 0 (id=859): setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001004850600000000ff6122314a000800", @ANYRESHEX, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x8849}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=r2, @ANYBLOB="0800020096"], 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001040)=@newlink={0x44, 0x10, 0x503, 0x70bd28, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3816}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x440b0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001004850600000000ff6122314a000800", @ANYRESHEX, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x8849}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=r2, @ANYBLOB="0800020096"], 0x20}}, 0x40000c0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001040)=@newlink={0x44, 0x10, 0x503, 0x70bd28, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3816}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x440b0) (async) 2.881390936s ago: executing program 4 (id=850): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x7, 0x8, 0x42, 0x0, 0x3ff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x2, 0x800, 0x2, 0xc, 0x1, 0x81, 0x0, 0xc05, 0x0, 0x4e9c}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x121080, 0x0) ioctl$TIOCMBIS(r0, 0x5416, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) prctl$PR_GET_FPEXC(0xb, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000600)) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="34000000180001000000000000000046674e6ac5cb9ef2b2172cb7f349690002000000fc000009000000000600150005000000100016800c000380a9000100", @ANYRES32, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) setns(0xc9, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000009000000711230c9676250c63a000000000095001dbc6790c4b902163b9bd8c80ec4da4ad8b2750dc45f4cb5bc3719d67a07399f375363a4b6226b375f288a57abbbb0efe5f627fc91b1d625fe23de2516bbc879eec8a3d51d375a6fd1c33f1bef2597911c099b127d336303271b66d0257fe819a41a609f0879775c8bacf7f633b58dbaed566bfec094"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc80}, 0x94) accept(r4, 0x0, 0x0) 2.765662629s ago: executing program 0 (id=851): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x800, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'hsr0\x00', @local}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000800000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x79}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000b40), 0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x2, 0x2ffffffff}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000340)=@ethtool_link_settings={0x4d, 0x600, 0xf, 0x80, 0x0, 0x0, 0xfc, 0x1, 0x80, 0x4, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4]}}) ioctl$TIOCSSOFTCAR(r3, 0x5453, 0x0) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000080)=0x6) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) lsm_get_self_attr(0x64, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105142, 0x1d8) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2.226348882s ago: executing program 6 (id=853): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) fchdir(0xffffffffffffffff) unlink(0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000900000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x10) syz_open_dev$loop(&(0x7f0000000080), 0x5, 0x20000) 2.209494323s ago: executing program 0 (id=854): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x3}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x7}]}}]}, 0x40}}, 0x8000) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x1, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendmmsg$inet(r0, &(0x7f0000006440)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f00000003c0)="f8c0c809001000000000000100008000000000372be90aa7eb4167816a39f4748cfc8b64aa9cd6be0d948929b215b750b033b962ecd27372a41a2f9eff2aaab4bffc8d4083e08d04488151af0f1b2c1f651bcc60933e61020e69a5b17e61696ee1045fc39da74f7e81aeb700", 0xfffffebf}], 0x2}}, {{0x0, 0x0, &(0x7f0000003680), 0x1}}], 0x2, 0x4000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) r4 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x138, 0x98, 0x138, 0x0, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x9, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) mbind(&(0x7f0000aaf000/0x3000)=nil, 0x3000, 0x4003, &(0x7f00000000c0)=0x7, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) acct(&(0x7f0000000400)='./dev/cpu_dma_latency\x00') 2.077761077s ago: executing program 1 (id=855): arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000000)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000040)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000080)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f00000000c0)) r0 = syz_open_pts(0xffffffffffffffff, 0x40200) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x19, 0x1, 0x1a7, &(0x7f0000000100)="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"}) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000540)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r2, &(0x7f00000005c0)=""/168, 0xa8, 0x2040, &(0x7f0000000680)=@file={0x1, './file0\x00'}, 0x6e) ptrace$getenv(0x4201, 0x0, 0x9571, &(0x7f0000000700)) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000740)={0x3, 0x7e, "b9b68d50d92169e626036a1b990405486d45529755b64d13c4a515330919bb5a88b0cba89791838c7aff804aefa35602d852d9b88701a9e6187fbd02361492c16d815f460be8f78532e5f3bfa370b6726bb755f9696dec537e3ec93b7104648d5c3dc168c238043a3726657d0dd6a69f793d5e75d690547f05d2691f7492"}) ioctl$NILFS_IOCTL_GET_VINFO(r1, 0xc0186e86, &(0x7f0000000840)={&(0x7f0000000800)=[{0x100, 0x9, 0x1000, 0x200}], 0x1, 0x20, 0x6, 0x6}) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000880)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'wg2\x00', 0x0}) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000900)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000a00)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000940)="be9308fa803a0347f5b617c7be1d3fef5311255915fb70f23436d7953383952c783c90e99c12b8831782f4cd1ae3997fc9065a897173291d4a2b142ede2e745ac7ae2d4ad6a5d5f37c7addb0414d4b22a7b22e4ce392f0b9f1f59d27a6d4c1d3ebe9eed17d9f744c7e917b2b538744dcdf97fcb68f0eb25f69d73f007f930ad3f48e0d51fa37806fd7eea522eb234b44cbfd8b0cddee0729008d5bea80c749d73e4a866bc0b0bd51b3e4", 0xaa, r0}, 0x68) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000a80)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000ac0)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000b00)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000b40)) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000c00)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e21, @remote}, {0x2, 0x4e23, @multicast1}, 0x8, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000bc0), 0x6, 0xfffffffffffffffe}) r5 = socket$xdp(0x2c, 0x3, 0x0) sendmmsg$inet(r5, &(0x7f0000004e40)=[{{&(0x7f0000000c80)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000000cc0)="6b9aa5b0fa20874b3aa017ca822e5287f25ad2568f836bf0d3d8c7909abb235b0246bb36fa7d1d3d90c9081cb1f36549680f9b4a607444f6bf52fea420864e71ef076fae53b4f6ade33dd20ff23b99397952c7ffc17debdcfa2af25ca1cbc317cb1ac35ff0cb272a9c5681090dd2452724c6d9c7f8fba4aa", 0x78}, {&(0x7f0000000d40)="150bcadf251cbcc1fbdc49c6d331cfc37d6b5e80542d072650159eb79bddb7791313a01d1be71d6fbcd96636cbf430ccd05f847be68f6ac648e6f56bfc89b81ed7e8360428abd14a2eb185262f8914dfb5a295608abd759537f6f6669e0265920a246ab262ede4bb036caff9875f0cbabfc05ee8b56dc235bb2d86a852d044a0fda099a7aea3b51eec0fc305f1b8d1739d7c511152b109209189c6d23d7ade0b09145dd61c4a947e064ba908e1e7c82a16", 0xb1}, {&(0x7f0000000e00)="d2", 0x1}, {&(0x7f0000000e40)="3fdfb051c7fc23d1029cecf7ac3f1f2763097eb43349d17857ba1bf740a525de05e2d74923261fcebbac05f41c50fb479419a4176aa501857cce14f5e062f62ff13e1e4082f24a84cbe0b3a839a39ea38a084647c751ff1dfdf99ebb99161159e8a2b10b9abe1bbe94fb0bd3ccd2bf8351a39ce3947a75b430a321527d84be5d703b6c7109c0833e1eca9605eabd7e10e8330940afc786442bb4d73e2e28392d35ae79cffd6ed49a4a755353b13da1d3dff5286631c4973a69edcd4d6c454d80", 0xc0}], 0x4, &(0x7f0000000f40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0xc4, 0x0, 0x7, {[@end, @cipso={0x86, 0x35, 0x6, [{0x1, 0x11, "8eb960775454be9f38ae9e081d466b"}, {0x7, 0xf, "badef0e391dca8eb2686830604"}, {0x1, 0x7, "f5e39e5aec"}, {0x7, 0x8, "21f24c9b0834"}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @generic={0x82, 0x5, "8ce777"}, @timestamp_prespec={0x44, 0x24, 0x36, 0x3, 0xe, [{@local, 0x3}, {@loopback, 0x8}, {@initdev={0xac, 0x1e, 0xf, 0x0}, 0x9}, {@private=0xa010101, 0xfff}]}, @ssrr={0x89, 0x7, 0x61, [@broadcast]}, @timestamp={0x44, 0x10, 0x3f, 0x0, 0x1, [0x8, 0x2de8, 0xe2]}, @ssrr={0x89, 0xb, 0x2e, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x28, 0x75, 0x0, 0x4, [0xc7c5, 0xd, 0x3, 0x800, 0x4, 0x0, 0x7, 0x0, 0x80000001]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x40}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x128}}, {{&(0x7f0000001080)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000003240)=[{&(0x7f00000010c0)="0b7fda0e259e366f9f8c170000f851eb2c3fdf5b5e0d26bbc83555048fe6aa456bfbdd5f9ff8a79d61ce47feaec01bd67bf6299d7f20677bb26e84b06f38c3976be75d0cdac02358f41dfd0222b6f23d3070a2f282b38086d892a65e597b87b5d07f8ba285e7bc840ea74bd7b6c5b19448652ed8e8e6f91fdf44e99f6af1", 0x7e}, {&(0x7f0000001140)="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", 0x1000}, {&(0x7f0000002140)="a1b187a3546059c862592046671666ec3f25c9e84ac959620ff5ee59ffeaa9c6dad792798f92905bceecd79567bc731158dbf6f8ca1495d9fd1f4b7c0a0a69ec03c0abdc85b32c6c2de7d70074a7a67f73ccef6e865d373728d00e2143c1042507663d8791d3934a0cc7a9950a6cf042c6ebb1517b925e9425d2ca00a98804da4cb66886bd6f9c18fe24bd8de31ab4e6e1eff9fd8462d4652232927b86a1580d6f111f7e2813c8be8e2e6685a8b42d44365d26bc7708829e7e44df6c08a9963dc0b8784a6fb9555904ad9fabd024c5a85e207f8f4e64af4e0a058d8a25e271c82542c0fff425cbcebff842cac024c8763525096078f9182764fd8792f379992622509b09934cc65902a231a0d6cce9654c66e0f40b3a7ab0094ec64bc4ab1136d871e90df5a0053d070e9fe1d6d1d358add241cae5af4d5ca0b144de98e8efc8dadbcaf617204a45dcf2702dbe3f0c17a430727878e18755d3274c97a6680af9a0fc99fcc0cc43e5e5e1a66a70480b15c2121385aa22d36729b73f73838e48bdfded09dfe6fbc5f7fe6ac9c5bd0800da5e8eea3a0baf59c43dcc6b1e610e04b27fb186e5a27302c13b5578099a6a0201d18901ee69f657128d5d0f883088f02081cb6c22265f111820a31fafab543385b81c17a8ca9232b53e3783478f1319203016721b6b2118b9e075a48391914842ad86917993aa4a9968fc0003f48c6b7932768e7ffba7c763fa2ec0340251085ad0e84231c8713a042ab34029ea61ca06920a6f86b7636b9f728011a54ddbda7dff3601821432544160f419a6384eb0aa9b0795f22a55bc67fd91fd6449a7b5be1b6b6064e9d5503cc1df43fcd1ab38adc92bd4c7d9d2aaeaaef36db3ae0c54491f69e4e3c61a2f53dbd33aa5551a0ee6ed548ba2183a7da253014ca630f7a0a199f3e5d3f37bd4c31749e7d3d026f5039a0a6a70ee371b87ac15ccdfc6088e777f6e200d42daaa2b914a77bcca9e8f0a670e1093c1fd4164da37f21af521cab60c321de8b485f336eaeaa4c838af2f803b21a2d51867aa31d9fcc5666143f9fa0f2913f67d40863bec72f12b25ea9eb854cd05ba8d5c69d9c8cf81a9b722d1a2d6583306877e4646a8d99bc9de988fc8134832b1ea1dca3eb1c95f114db0092927129abdeb67b175a5ff0b3788bea300c0bf35f6a7e001133aa2bed9cb00c5e6cfa5670dec437d21658424f1dee2cdd70fb675f3b0b02f52dff2801ac8bb108414a91fdf015482b338753f325fbf422dbb0977da84cb5836617ab511772973bcb92f1f715265971d5497dfe58f1fbf7a7c63eafcf43ec1b1b68777a512dc3e99330d83e352768ceeaef8ad7247d0012e74186be0da86c08f0c37b4e704d6b4521c7b94bbb595646a1b1aab76a83edfc8a3151103e3797df2a1b3b061d038898e0e265cad84722ce8fe441b277566f679ab960fb66a7f01c290657c8c9627eb704156bb6eb1e46ff736d758b231a742536e437a5a65989666e9c789461e111e47e52af1fd441dd309763410ee2467d03a409a2d06de042192eb4a839dc8d00151865239c9a1f27969103aa6b266367af75c5e2463b5b3a6785026b92643e63d9dc051e73d64eab459061f1c6b7b92c1a38f8330d7436df4f4344a1a8d0d393d4263bd8c8b0cd80db82b7a20ed6027d30ec44e224ac70ecd95af51fb288d44dddae6dcc7d4d2447a8390f98448504b8a07c507d45cb5fc603be11cac5b7e9c19219859fc32fb0ad99b6346dd090213bca1a7a81eacf53237b76b68c0db6d49df78bc89e9057fb83d953b88878088c53b239878974ae59ffad8fdca24e12f03de76e7cba3519014aa920c0821472a2631537f52e97d6cf249492e29f14dd4fc5e4e858b2b2ee058cf81508d8fc2f54d91596987ff0a65ef4fac053b9b72321e61e0645390aa46653f0e05dc76a8876788561f8b0cc6250bcb413992e45dd538d950509064abe1fbfa4e52ecef98bfd2af50e6f203d25b2f28652365306a1b85bce8b529411b3ff5e299f44081a34cb13afd0199b4346b0eec475be954ebed250da3b32b5c0e8d4530331ad443da0b5a1bed905cd0788402965a7610134c0361cf9eb1e5e7d6b137b099b0214e0b1bc1cad52b103480fe53413a151958543275d076d1c71a70128c508b4e4b4e4ffa2cc35cdca686dd444169f31cb32d9a5cc65f6f311b5ce9c1718da9d1aa3c6cb13132538f53ac7ed750a4b7cac1ef261dde784ecf130d9e12d05d6463da9f9a8cb3c50263978f0fa85d4a713401ef60fa7fdb9f80c535847d91d74df1206211d829970d76730afb2a4728d07381680ccf73d7c9acdafabeab9402021991441605178b4794caeaca447862e315dc320ea9dd1a947bd8f048f02e389f9a345455d1ecbffc82e22f20206088cee377dd4a734d02c04f3a625526e578fc82019cbb22671d6a02d78f11c233be8059d3fb86c048f8db3f789a3562385c9d7a927c8fdfc4045f22e1bc2b44a52ce5e4cbae5c4558042d92b79c41590b0b6cb43507b87c068394c4f311e27edf22ffdd4a73db93d806aa39a37a5922bfc4faeda1fb7ee5e7cd2477067811e522ad6fc57e06bb08ca52caac8b85a788b0eb08fea8cbf13ada801ff6edbf02d14987c8cd24b50ce36c2c818b4c9d0ec7e5f386f9bc81772536a2731817101a23776ad51816029215b79f7fd91ac59a0fd5da35d895c9933201c7571b965866b0f4de312b0adf1812646611d2c0f8cb2314f9b371a59e285b3b37831c7be2553740db3eda36a6877332cc2350138d75865f6e8dab592065b2fba4214c5c008861f226b18e665f71f3fbb86dfb6683700dbc82116d496cba586f99dfce434af5648b9e7f02abfc97149cadb98864fdfb20273e2125666efa0d7f5605c746eb074f455267550921f5dd8aaa37c020029f27af133cd320247f36afc59706091bfe5bb9193b0b01eeffdfb5857f095edd294996bb5d90148a217dd29f7ddae00c83fbc9eb002256fdfe670a5151e6115dd18f21d5d5141b73b038a7c90827122ae15031d910392756de3e85a5d48f7401d18cb1203b805482b3c3470a2fd285999deab48ca4f7c8bbe771aa50966a29356a370e59420bcaa56bccd766c9a962cfa1286d852db4600599a736dbb74851ff5fe70f8dcd5f3d477fb00a4043975a0eb7bdae30e20f1366f0d88ac551fc471aac1d63f43f42d37c64887f434d37e530c8e870a098ed9f571698730414b7be8b3b249d2a38b35700cd84d498309cb8841d5ca8f5229902b0e2480f40a63f299c12edc742d568f2c4445cfbf4ac0e4f32c5d3e6306d0fcea6e4c72f8b040fa03e7e37b75693cd8791cdc4e414a860c68a21ce767b9f293f70d07a810032357621658f0736a036290f7904eb9e1545f8f3dbb1b121b22088f607883f5202aba26b4da0152bc7b135a63cc50ca91dda0786e7f33920e5ba86108a7e1512b7bb582d214dd6bc8b4dc2baf5c2f2c94683292b06b4bed72666c0d689d8f859f216467196871cf47fea35d82bcf4aaaf4cf586c22d751e4a5e361cf5c375089195e5cf41e8c97e40977d8a798f1a0e1e1e754aecba0fb941f4a21ec8fc8ee91160d30b053dce123113d8cc8b351cff7208f9a14c27b00db056e5ade730050f7e8442a2e0a7dcb36a07cb96763ddec308d0240b1fe041378d13bc763b73f1568ef1392c03f8255f79db77c89ff54610e59475a96a309d537593ec91ea66a719e9d0c5dc2ab480d97a00598397d4fd086c779207e71abe26e8ba9581eed03ae225f3648971b8bc4edf4d244072cb74ed7580cc6a0c606b95036c99f3485f14b8bb37cb731cf7daf97b1fa44a88d5d1e93ec97c7dc28eb39d6dee14ac022001343b057e0fabb278994eb41da710f30a10080044128c1c7612c2ea6401416b0751e3a69d02af8d3f78d64fa651492a4417f5c9ff7f9dfd2193cdbd133bf194341364b0a1cbfe5d9f93ea0eaef8db8672fb83a78dcd2d9c1610fd772432570ea2d8740728efafbd209cd3a42b6da8f7e40948f4353e1ebb9adad45b4e2a940eda33d2dd41decce61f852bba4b72cec378362a0d5445aa9af22ede43d0f9222725875c618d395bb40340eebb03e97a37a02a23b55917a1f543d2f30a3b67a828d9076c6f115336b38edb7d77d6d9c7be8f85b31af680d6a01bb31fdc37929cf5b4253e6f94b44d87e5d4d1ebe5a6df86a06f3eb7a06d8ff45f94fc1f06a14220f5d50c863b92d6b2f21d90d08f1c3c50d9f2889a84bbcab6d483cb47337e2f94f82a4ab226f8fc8d7f328dd634c7dd9225a92f942efb81e32f4dd47ea0af092a8b6f83bb5cd1947b58fa4899d8c28820b0d88ba75362273a4b020a461c07966b0c021cf80e97259f5b6e1f90d4a6ef5bb94225798dfb1d14cb6aeb19b121311e0085af2eb38726e829db7241e5b7b9be0cf84258183e88dcaf6189ddc9047f4dbc89970d18698378ad3342a7105c2e4f16a7905602c9610bb1c397c468fb297f472ebe765849bf7ea8addace90a19576fbe1d7906a313377fb1bef29ee125dc9051e76ec36fa88fbff858e9794d787d306a9b9b4190ef4eadb6b68be8dd00d76a09a400493db1210cdd9955592ae764f29625c9e9e22bd84d9ead826526dec6742ffe5ed13f6648705b3d0ff97a64994726dbb172c33695822729f27c98d26f25ae0e0fb073bf35cdc9a5d78b93984db03ba3900291f605808c6e86d35eae29954fbde09b6ff24afd389b617fd2d0aa08b0402611a9ab3aba22e5873a21601f6adacf8b28c3d785c8d91ba916b0a5b7526064faeae4174588be788858de74bfdc171a8e414069c2860897028d6a49ae249402114ca4605a999aaaa66e9676ac1179aaeb945b28681989567c33201e30d888012f3a476f55a597d0928e934a07fbacebf296f3727530d26c63aacacd5c5ff3f2bdb21e1858b1addd95f80c6febd6a530b46ed64b2f82bca267ca7f807bd90d44fa91c35c055f3c0d3d0bd3ad75f4695c16df1c4e63c604752bf002a1c6bfcf61adc7dfaa6703a25801882349c0db9b0dd5fdb79cb5f3cf46e84dea903d75189988158973052e1c8b9641a0b5a8ab0103064a30fc26265a9a76789624bbc8bed8662b581b5f9339ed0e9961cb1f2dad5c6395a071822de3ff48d4b7fb837afdd3117be0e10a79a52106b407434d6d4b9b19c8032ccdd42d47161581607fcc65d28fc564b40d73a7adf8c306d1f96e456483fabffd56107a94b7f0dd8b314133d142ca452c751fc83af28e4631ff38337bec67acb6f1f25cbceeed0a2e2ad67fd26d767f803c6c486f49f4f1bfa924f863c4444a55a32be6d84e9bbaf061554faa91e104e7074cbc39e8f77c1774edc5f4a97e2cbb46903ce8f747252b1c3312e263b9f353cd1485f7130d15de3218a63e251d6f6e6a605b8bd24e01a0792a77364e65ec06496baa5b2ec54ec1fb461a18e2c5c7aa7fe2c871e4c12904a83ed0cbece975084ac4d4ddff9d565d98ebc61caaa691a08cbad149e689fdfb1346085ece27cc36f4aa57d67ce1a6262031880c84843a16aed41f7dac994d55f48811db9dabbe08ac5a43b41a75c3aaf5ce8a456dffb7aeb2450e082dca93b0d9a9af6b752ca6f9b878f501cfd951fcf60b10bff906a2caf54f3a7151a233fd845f9d2e66d17ff13eb06be514cc62c90a42f10e13aedf410745034afcb33da0e33d2709b068a4a4ef3dd68c46e5116602daff3b3eed096d0190a3396c0915adf0fdeef42ff1ed8160dd60cf778a922d26c91e0578562b6884a080e9a1dedb713d260a64f0", 0x1000}, {&(0x7f0000003140)="20173df183debeed771f5b2ba424b11c89060d1125ad45c99b088a14aaa621cc09bcf0057db86e9ef9119be7aa0837d8cf4f3900cd013f1d1c684c74e48950f9a42e13d2d209d2bed6ae53de5b86c38129c3f03f236671e39c38cb11220df74045cb5fb6bf4c4ef500f58c1825cea8e42f07f4ba2cb1997f72b3a7f071c61b1642ec321da28f96b3de86051301169e28279c783ed686d4d576f4de213adae7ac449b70402658e6816bcffab7f669fd4cc66cf882fa952de295701481d37762ecb4aef2fb0e038536", 0xc8}], 0x4, &(0x7f0000003280)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @broadcast}}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], 0x70}}, {{&(0x7f0000003300)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000003480)=[{&(0x7f0000003340)="9b8b7bf7d668d5cc0fc9dd939e8496368acfa83b99d8f406ef8c8c3dcf1f42c7c9ed0ca90cb968453ff608a1c5b9b760fc3492d661685c46a5e74da3e38ad20bf3fea09d5c05ed55464d0ee2e07135c3a6729154f8ba5900bae621d3aa4ce84de4a144478c0decd31e1e0472276c29b651add6e9b877230e3d4377e851f634d1c078019bd6f2a904e4f357830e326b39d051970367a7d1133519a7a08aa9f9e7e5d43acd4c92", 0xa6}, {&(0x7f0000003400)="f41f7dadf406ff0162a575f0968163181dd973adda097cab9863b472aaa60a2012f7be4022b020b682808b261432c3b620c5a2b45ee0be9517d7aa691e73ab6ba167ce20674db8f5a549a84f0fcec63b1b38fbb0bf748352deacdacee68fe0a2ae1b1f4bc3fff5b4ae395a39ddadd8170c7d", 0x72}], 0x2}}, {{&(0x7f00000034c0)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000004a00)=[{&(0x7f0000003500)="a4d1fa420208da15170d490b7eabff1e4eb5b6a5542b258058c245bd161c72dfd00a53f0106b55cc06e0a56d3ee82ce9541d97402797b6c71c19d297f13dc4dfc1216b447989c6f6641513fae544cc4a3bc374b4cbfb54f8b6c2341313bafce6874a07cfb86a813873a642e205b1f597a02b9bb8adb4dbe7fc0cd6e4e60723795e61584cc5415afd4f7656c3be965b91604a2dd11023709db53561e019", 0x9d}, {&(0x7f00000035c0)="68adcf9695d1660b99a2b19ac44dc4913eb2d6581027499ca2680064e159af5b5592e5e6d2972d", 0x27}, {&(0x7f0000003600)="bbebe941283ba3975b2cd92f7f305593aa3e0661741e7d1c8f6f3b4848a927945287629d444801e033137688259c46ee8ba0d42510025142ac636944aa9d4795f2e9581059e2e04c07a585088df494a3d614a1465e3a3434d92f81b007cc5fcd80e00cd29e2a9cd4b0ef7c8b632b34dbadb5371c7ccb6deb53210fd0d34f9f1020c2247e7b94fe03e835318533d2afcc5b", 0x91}, {&(0x7f00000036c0)="e59204f22371e85dd2b6601309d9fb615de0715956fbce5908de3e61fb89301394d508d5ee422a3f09d4a2560c90ca07dbcdc647af3dee0989e70b3c4a75e2c30883fe8a017e7fe70d2814d9439f2491c0bb1e9c7f900e966c3dfe42a7958e1cd0d2c3a9eba6aaa72ab043737b367e88f939054f79cbbb0c647a08a6102ee009bed62faa965c8f7fa46fc7d6f7c35be0d421f886993b089efcbb53ce9f739a5a5c846bb100ea96f7134cb178b142c099c7c4613201417b40ef14bcbb415d8ac0de7a492e05fc4bceb1dc03636a1230d9420ffaa8b82b0e2d8bd6b3efad238f28f1e9ee9bca659db5e69d09e1b4c4", 0xee}, {&(0x7f00000037c0)="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", 0x1000}, {&(0x7f00000047c0)="ebc6002606e2e5c7d0237682f913b5f0f74ba5bbe2284d31c8e6331d384b8529abb7e0f0c69db601a8016ea34af56a89ab3404b3088edae4019e8a859ffa0624a55a5f4a79ed6aab2e4497c80c0b9495bf61ece40adbcd74e5f518f5347569e11a788726f611e9a1005c8b88ed2768749b52bbe7027a78c81b2487e6dffc6b99bee8c8559d12cafa0fbc2d4c02d41e8e922caad29c22", 0x96}, {&(0x7f0000004880)="96cd4466469536b09fdd323c0d64a2612e339979b458e9a3715e0d490caed83ea88a73de5de4852fd98946c780327c50b3fc804ec2d008aacbe7a84fbc14a67625403db233c3daa38a6bd3a2324c551ff8bed89d3d59a5", 0x57}, {&(0x7f0000004900)="0055a95841d520484a441abc5dce2742258afe90afeb6b17fd27d24338217bc20616cea7001c1b7cad3a4e49f1170b8b17cf525a63d957f79c15fa717c06280bc95f408ed3bae533e8530c8e173b5ebfea483c61808332dcf09627ffd2fa636188fa1a856a2c86456a01f6dbc1d689cfa16b8f5a3fe13f3891784020f6e433971af690385389502b37c72e02a238f272cd24f412acfcbd3ded0ecf7789fd092ff5ac7fac08c76cda25ca0b0049dde22f633adc041f5d88e77bc028048402abcfd0f65ce6e1745acacd46", 0xca}], 0x8, &(0x7f0000004a80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @private=0xa010100, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @private=0xa010101, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x90}}, {{&(0x7f0000004b40)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000004bc0)=[{&(0x7f0000004b80)="90d90f58fddc7b37e4c2fb8a171824d6504dc1958d61898ba0d3cefd", 0x1c}], 0x1, &(0x7f0000004c00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010101, @private=0xa010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x40000}}, @ip_retopts={{0x48, 0x0, 0x7, {[@end, @cipso={0x86, 0x37, 0x1, [{0x6, 0xa, "70dcfe69ccaec424"}, {0x5, 0x11, "3ca67a5bffd8144b8642dde815f41c"}, {0x2, 0x4, "db4d"}, {0x1, 0x12, "aac9c73a3f0751ea15767e1cf029091e"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x138}}, {{&(0x7f0000004d40)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000004dc0)=[{&(0x7f0000004d80)="1c87d69bdb643cdab3679e08e0d64755", 0x10}], 0x1, &(0x7f0000004e00)=[@ip_retopts={{0x34, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1b, 0x33, [@broadcast, @rand_addr=0x64010100, @rand_addr=0x64010101, @loopback, @multicast2, @remote]}, @ra={0x94, 0x4}]}}}], 0x38}}], 0x6, 0x20000110) ftruncate(r5, 0x3) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000004fc0)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000005000)) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000005040)) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000005180)={r1, &(0x7f0000005080)='@\x00', 0x410100, &(0x7f00000050c0)={@_ha_fsid={[0x8, 0x2]}, {0x7ff, 0x4, 0x2, 0x94}}, 0xe0000000, &(0x7f0000005100), &(0x7f0000005140)=0xff}) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f00000051c0)) 1.630149228s ago: executing program 1 (id=856): mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x10012, &(0x7f0000000100)={[{@name={'name', 0x3d, '.\x00\x14\x00'}}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) syz_emit_ethernet(0x32, &(0x7f0000001b40)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880f, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x3}}}}}}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050b0000000000000000240000000e0001"], 0x34}}, 0x0) 1.629592258s ago: executing program 1 (id=857): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffffff}, 0x0) syz_clone(0x24100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000100000000000000000000009110dd000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setns(0xc9, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r0 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r0, 0x0, 0x0) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0xa00300, &(0x7f00000023c0)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0xfff}}, {@resgid}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@barrier}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") chdir(&(0x7f0000000400)='./file0\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x111) rmdir(0x0) io_uring_setup(0x7, 0x0) fchmodat(r1, &(0x7f0000000180)='./file0\x00', 0x88) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) socket$kcm(0x2, 0x200000000000001, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x401, 0x1, &(0x7f0000006680)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x8810}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x8, 0x40, 0x10, 0x401, {{0xa, 0x4, 0x0, 0x3a, 0x28, 0x65, 0x0, 0x5, 0x29, 0x0, @broadcast, @multicast1, {[@cipso={0x86, 0x11, 0x3, [{0x4, 0xb, "ccd5116b67645276ef"}]}]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0xffed, 0xffff}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0xfc, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfd], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0xffff, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0xd, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1002]}}}}]}, 0x88}}, 0x20000000) 1.619560078s ago: executing program 5 (id=858): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e22, @remote}}}, 0x84) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="1200", 0x2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x181601) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) close(0x3) r3 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.577135479s ago: executing program 4 (id=860): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) fchdir(0xffffffffffffffff) unlink(0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000900000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x10) syz_open_dev$loop(&(0x7f0000000080), 0x5, 0x20000) 1.471175622s ago: executing program 5 (id=861): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x500, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 1.281403347s ago: executing program 6 (id=862): socket$netlink(0x10, 0x3, 0x0) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001500)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x3, 0x1, 0x1}}) bpf$LINK_DETACH(0x22, &(0x7f0000000040), 0x4) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000140)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, 0x0, 0x1) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001540)=@deltfilter={0x1b8, 0x2d, 0x1, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x3}, {0xe}, {0x0, 0xffff}}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x0, 0x62}}, @filter_kind_options=@f_fw={{0x7}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0xb}}, @TCA_RATE={0x6, 0x5, {0x40, 0x39}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_cgroup={{0xb}, {0x13c, 0x2, [@TCA_CGROUP_EMATCHES={0x30, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1e42, 0x7, 0x80}, {{0x1, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x3, 0x7, 0x5}, {{0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}}}]}]}, @TCA_CGROUP_EMATCHES={0x4}, @TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}, @TCA_CGROUP_ACT={0xf8, 0x1, [@m_simple={0xf4, 0x17, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x4, 0xdd7, 0x20000001, 0x8, 0x4}}, @TCA_DEF_DATA={0x12, 0x3, 'veth0_to_team\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x0, 0x6, 0x10, 0xcd71}}]}, {0x82, 0x6, "de24f6cbcab203c7325c1d130ec95e13eb96dc7f799ee7799fb4f3f9774d821029ebb025d2caf968de5d3c7d16e63e180c4ba1bd4c70940e08cc6bb63280b2620f364116238c07eca4fde7d5ba8c62c36f98244088cafef6ec4e8b62a422b00576ef070d367c2bb15bd75f656a108e55e43315bb20176d36d058891e0ac4"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xae}]}}]}, 0x1b8}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) creat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x83) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) 1.190033769s ago: executing program 5 (id=863): r0 = syz_clone(0x8202000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) readahead(0xffffffffffffffff, 0x0, 0x3) 1.189676999s ago: executing program 0 (id=864): socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) close(0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000e000000cc0002000600000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)='P', &(0x7f0000000740), 0x800000, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r1}, 0x38) 1.064542053s ago: executing program 1 (id=865): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x800, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'hsr0\x00', @local}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000800000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x79}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000b40), 0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x2, 0x2ffffffff}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000340)=@ethtool_link_settings={0x4d, 0x600, 0xf, 0x80, 0x0, 0x0, 0xfc, 0x1, 0x80, 0x4, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4]}}) ioctl$TIOCSSOFTCAR(r3, 0x5453, 0x0) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000080)=0x6) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) lsm_get_self_attr(0x64, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105142, 0x1d8) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 985.153585ms ago: executing program 0 (id=866): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) mprotect(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200200, 0x0) bind$can_j1939(r4, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000027c0)='attr/keycreate\x00') exit(0xffff) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x4000080, 0x0, 0x0) 798.45108ms ago: executing program 6 (id=867): socket$inet(0x2, 0x2, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x100}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x8010) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x4, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x4040850) sendmsg$NFT_BATCH(r0, 0x0, 0x24000840) sendmsg$NFT_BATCH(r0, 0x0, 0x20008040) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0xe, 0xb}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x54815}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x3, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xde7a}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffc293}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2a}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008010) writev(0xffffffffffffffff, &(0x7f0000000b40), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000007240)) 705.535632ms ago: executing program 5 (id=868): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./mnt\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x80000000000000, 0x1113a, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000008, 0x2, @perf_config_ext={0x0, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setns(0xc9, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}}, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x92c9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000140)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) 253.261234ms ago: executing program 5 (id=869): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x9, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="e196bc1480bb", 0x6}], 0x2, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}, @ip_tos_int={{0xffffffffffffffb6, 0x0, 0x1, 0x7}}], 0x38}, 0x2400c004) io_cancel(0x0, 0x0, 0x0) 252.349333ms ago: executing program 4 (id=870): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x7, 0x8, 0x42, 0x0, 0x3ff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x2, 0x800, 0x2, 0xc, 0x1, 0x81, 0x0, 0xc05, 0x0, 0x4e9c}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x121080, 0x0) ioctl$TIOCMBIS(r0, 0x5416, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) prctl$PR_GET_FPEXC(0xb, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000600)) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="34000000180001000000000000000046674e6ac5cb9ef2b2172cb7f349690002000000fc000009000000000600150005000000100016800c000380a9000100", @ANYRES32, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) setns(0xc9, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000009000000711230c9676250c63a000000000095001dbc6790c4b902163b9bd8c80ec4da4ad8b2750dc45f4cb5bc3719d67a07399f375363a4b6226b375f288a57abbbb0efe5f627fc91b1d625fe23de2516bbc879eec8a3d51d375a6fd1c33f1bef2597911c099b127d336303271b66d0257fe819a41a609f0879775c8bacf7f633b58dbaed566bfec094"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc80}, 0x94) accept(r4, 0x0, 0x0) 251.992624ms ago: executing program 1 (id=871): r0 = io_uring_setup(0x4254, &(0x7f0000000800)={0x0, 0xa87, 0x1000, 0x1, 0xbb}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x8100, 0xe, 0x0, &(0x7f00000002c0)="c8e8a1aee95e10e19e00399da26f", 0x0, 0xadf0, 0x21, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x0, 0x6a98047402e98331}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4000c00) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f00000001c0)="b5", 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x0}, 0x20) 220.601665ms ago: executing program 6 (id=872): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e22, @remote}}}, 0x84) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="1200", 0x2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x181601) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) close(0x3) r3 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 161.988766ms ago: executing program 5 (id=873): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) fchdir(0xffffffffffffffff) unlink(0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000900000002000000ffff000005"], 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x10) syz_open_dev$loop(&(0x7f0000000080), 0x5, 0x20000) 100.955477ms ago: executing program 6 (id=874): syz_emit_ethernet(0x1de, &(0x7f0000000000)=ANY=[], 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) syz_extract_tcp_res(&(0x7f0000000000), 0x3, 0x1) 32.297799ms ago: executing program 6 (id=875): pipe(&(0x7f0000000140)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(r0, &(0x7f0000001140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001180)=0x14) eventfd(0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x16}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1a, 0x1, "10c4e3257eaa66a5725a38cd58d26115453baa910be0"}]}]}]}]}], {0x14, 0x10}}, 0xd4}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010040, &(0x7f0000000680)={[{@lazytime}, {@discard}, {@nodelalloc}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@noinit_itable}, {@dioread_nolock}]}, 0xff, 0x54a, &(0x7f0000001300)="$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") lseek(r4, 0x10001, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000600)=@allocspi={0x100, 0x16, 0x501, 0x70bd2c, 0x25dfdbfa, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x37}, @in=@remote, 0x4e22, 0x6, 0x4e24, 0x1, 0x2, 0x80, 0x120, 0x88}, {@in=@multicast2, 0x4d5, 0x33}, @in6=@remote, {0x1ff, 0xa2, 0x7, 0xfffffffffffffffc, 0x0, 0x4, 0x7fff, 0x48fe}, {0x4, 0x9, 0x1005fde, 0xffff}, {0x5, 0xfffffff8, 0x8}, 0x70bd26, 0x0, 0xa, 0x2, 0x9, 0x1}, 0x3, 0xde}, [@replay_thresh={0x8, 0xb, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x4075}, 0xc800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x1, 0x2, 0x2, 0xfffc, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r7, 0x40104d00, &(0x7f0000000a00)="00000200000000000000020001") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 0s ago: executing program 0 (id=876): socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) close(0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000e000000cc0002000600000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)='P', &(0x7f0000000740), 0x800000, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r1}, 0x38) kernel console output (not intermixed with test programs): Started in network mode [ 67.215781][ T4645] tipc: Node identity 7f000001, cluster identity 4711 [ 67.215947][ T4645] tipc: New replicast peer: 127.0.0.1 [ 67.216138][ T4645] tipc: Enabled bearer , priority 10 [ 67.217089][ T29] audit: type=1400 audit(1787822983.708:1141): avc: denied { setopt } for pid=4654 comm="syz.3.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 67.538203][ T4672] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 67.971123][ T4685] netlink: 'syz.2.343': attribute type 5 has an invalid length. [ 67.971602][ T4685] netlink: 'syz.2.343': attribute type 9 has an invalid length. [ 67.971665][ T4685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.343'. [ 67.972541][ T4685] netlink: 68 bytes leftover after parsing attributes in process `syz.2.343'. [ 68.059612][ T4672] md: array md0 already initialised! [ 68.138858][ T4672] md: could not open device unknown-block(1,1). [ 68.139120][ T4672] md: error, md_import_device() returned -6 [ 68.178271][ T4687] loop2: detected capacity change from 0 to 512 [ 68.250782][ T4687] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 68.251262][ T4687] EXT4-fs (loop2): orphan cleanup on readonly fs [ 68.251433][ T4687] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.344: bad orphan inode 15 [ 68.251554][ T4687] loop2: lost filesystem error report for type 5 error -117 [ 68.260013][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 68.260044][ C1] EXT4-fs (loop2): initial error at time 1787822984: ext4_orphan_get:1429 [ 68.260067][ C1] EXT4-fs (loop2): last error at time 1787822984: ext4_orphan_get:1429 [ 68.284957][ T4687] ext4_test_bit(bit=14, block=5) = 0 [ 68.288678][ T4687] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 68.329749][ T3362] tipc: Node number set to 2130706433 [ 68.350647][ T4707] loop3: detected capacity change from 0 to 512 [ 68.358952][ T4707] EXT4-fs: inline encryption not supported [ 68.359809][ T4707] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 68.385729][ T4707] EXT4-fs (loop3): 1 truncate cleaned up [ 68.386220][ T4707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.447462][ T4706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.349'. [ 68.450272][ T4707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.349'. [ 68.457637][ T4705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.349'. [ 68.458017][ T4705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.349'. [ 68.485138][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.486387][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.520042][ T4721] FAULT_INJECTION: forcing a failure. [ 68.520042][ T4721] name failslab, interval 1, probability 0, space 0, times 0 [ 68.520083][ T4721] CPU: 0 UID: 0 PID: 4721 Comm: syz.2.354 Not tainted syzkaller #0 PREEMPT(lazy) [ 68.520115][ T4721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.520126][ T4721] Call Trace: [ 68.520132][ T4721] [ 68.520139][ T4721] __dump_stack+0x1d/0x30 [ 68.520164][ T4721] dump_stack_lvl+0x95/0xd0 [ 68.520301][ T4721] dump_stack+0x15/0x1b [ 68.520323][ T4721] should_fail_ex+0x262/0x280 [ 68.520385][ T4721] ? dst_alloc+0xbd/0x100 [ 68.520415][ T4721] should_failslab+0x8c/0xb0 [ 68.520442][ T4721] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 68.520515][ T4721] ? dst_alloc+0xbd/0x100 [ 68.520540][ T4721] dst_alloc+0xbd/0x100 [ 68.520575][ T4721] ip_route_input_rcu+0x1463/0x1b80 [ 68.520609][ T4721] ip_route_input_noref+0x5f/0x90 [ 68.520638][ T4721] ip_rcv_finish_core+0x308/0xb50 [ 68.520725][ T4721] ? nf_nat_ipv4_pre_routing+0xb1/0x210 [ 68.520743][ T4721] ? __pfx_nf_nat_ipv4_pre_routing+0x10/0x10 [ 68.520851][ T4721] ip_rcv_finish+0x100/0x1a0 [ 68.520884][ T4721] ip_rcv+0x62/0x160 [ 68.520909][ T4721] ? __pfx_ip_rcv_finish+0x10/0x10 [ 68.520936][ T4721] ? __pfx_ip_rcv+0x10/0x10 [ 68.520978][ T4721] netif_receive_skb+0x137/0x4c0 [ 68.521008][ T4721] ? tun_rx_batched+0xca/0x430 [ 68.521033][ T4721] tun_rx_batched+0x101/0x430 [ 68.521126][ T4721] tun_get_user+0x1fd6/0x2870 [ 68.521152][ T4721] ? ref_tracker_alloc+0x1eb/0x2f0 [ 68.521245][ T4721] tun_chr_write_iter+0x15a/0x210 [ 68.521268][ T4721] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 68.521343][ T4721] vfs_write+0x57f/0x9a0 [ 68.521371][ T4721] ksys_write+0xdc/0x1a0 [ 68.521396][ T4721] __x64_sys_write+0x40/0x50 [ 68.521421][ T4721] x64_sys_call+0x154e/0x2550 [ 68.521458][ T4721] do_syscall_64+0x112/0x360 [ 68.521482][ T4721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.521505][ T4721] RIP: 0033:0x7f2baeb1e90e [ 68.521538][ T4721] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 68.521557][ T4721] RSP: 002b:00007f2bad5b6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 68.521577][ T4721] RAX: ffffffffffffffda RBX: 00007f2bad5b76c0 RCX: 00007f2baeb1e90e [ 68.521592][ T4721] RDX: 000000000000003a RSI: 0000200000001c00 RDI: 00000000000000c8 [ 68.521661][ T4721] RBP: 00007f2bad5b7090 R08: 0000000000000000 R09: 0000000000000000 [ 68.521674][ T4721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.521687][ T4721] R13: 00007f2baede6038 R14: 00007f2baede5fa0 R15: 00007ffc6c1bb2e8 [ 68.521707][ T4721] [ 68.584195][ T4718] loop4: detected capacity change from 0 to 1024 [ 68.585943][ T4718] EXT4-fs: Ignoring removed bh option [ 68.585975][ T4718] EXT4-fs: Ignoring removed orlov option [ 68.615352][ T4718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.683455][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.845010][ T4734] FAULT_INJECTION: forcing a failure. [ 68.845010][ T4734] name failslab, interval 1, probability 0, space 0, times 0 [ 68.845105][ T4734] CPU: 0 UID: 0 PID: 4734 Comm: syz.4.359 Not tainted syzkaller #0 PREEMPT(lazy) [ 68.845128][ T4734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.845138][ T4734] Call Trace: [ 68.845144][ T4734] [ 68.845193][ T4734] __dump_stack+0x1d/0x30 [ 68.845220][ T4734] dump_stack_lvl+0x95/0xd0 [ 68.845240][ T4734] dump_stack+0x15/0x1b [ 68.845337][ T4734] should_fail_ex+0x262/0x280 [ 68.845370][ T4734] ? tcf_block_get_ext+0x236/0xcf0 [ 68.845403][ T4734] should_failslab+0x8c/0xb0 [ 68.845463][ T4734] __kmalloc_cache_noprof+0x7a/0x400 [ 68.845557][ T4734] ? tcf_block_get_ext+0x236/0xcf0 [ 68.845586][ T4734] tcf_block_get_ext+0x236/0xcf0 [ 68.845612][ T4734] ? should_fail_ex+0xdb/0x280 [ 68.845662][ T4734] ? should_failslab+0x8c/0xb0 [ 68.845767][ T4734] tcf_block_get+0x67/0xa0 [ 68.845792][ T4734] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 68.845821][ T4734] htb_change_class+0xbe6/0x1950 [ 68.845945][ T4734] tc_ctl_tclass+0x6f3/0xcd0 [ 68.845981][ T4734] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 68.846081][ T4734] rtnetlink_rcv_msg+0x6a7/0x720 [ 68.846108][ T4734] netlink_rcv_skb+0x11e/0x220 [ 68.846150][ T4734] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 68.846172][ T4734] rtnetlink_rcv+0x1c/0x30 [ 68.846240][ T4734] netlink_unicast+0x5a9/0x680 [ 68.846260][ T4734] netlink_sendmsg+0x5be/0x6f0 [ 68.846283][ T4734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.846389][ T4734] ____sys_sendmsg+0x532/0x580 [ 68.846418][ T4734] ___sys_sendmsg+0x195/0x1e0 [ 68.846456][ T4734] __x64_sys_sendmsg+0xd4/0x160 [ 68.846491][ T4734] x64_sys_call+0x22ab/0x2550 [ 68.846609][ T4734] do_syscall_64+0x112/0x360 [ 68.846710][ T4734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.846732][ T4734] RIP: 0033:0x7fe973cce0d9 [ 68.846749][ T4734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.846767][ T4734] RSP: 002b:00007fe972727028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.846788][ T4734] RAX: ffffffffffffffda RBX: 00007fe973f55fa0 RCX: 00007fe973cce0d9 [ 68.846803][ T4734] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 68.846839][ T4734] RBP: 00007fe972727090 R08: 0000000000000000 R09: 0000000000000000 [ 68.846852][ T4734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.846865][ T4734] R13: 00007fe973f56038 R14: 00007fe973f55fa0 R15: 00007ffd4960c078 [ 68.846885][ T4734] [ 69.491159][ T4745] loop1: detected capacity change from 0 to 8192 [ 69.499423][ T4745] vfat: Unknown parameter 'ÿÿÿÿ`’NX#öEeOnŽßøá©Hï°Ô¹©ÔÃ]¬³Á§ê%‡Õ‘ew' [ 69.593428][ T4742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.348'. [ 69.593502][ T4742] netlink: 32 bytes leftover after parsing attributes in process `syz.1.348'. [ 69.722395][ T4771] loop3: detected capacity change from 0 to 128 [ 69.736987][ T4771] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.737136][ T4771] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.796689][ T3305] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.829840][ T4775] loop3: detected capacity change from 0 to 1024 [ 69.854875][ T4775] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.937181][ T4775] veth0: entered promiscuous mode [ 69.998926][ T4775] veth0: left promiscuous mode [ 70.009262][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.335005][ T29] kauditd_printk_skb: 516 callbacks suppressed [ 70.335029][ T29] audit: type=1400 audit(1787822986.828:1658): avc: denied { ioctl } for pid=4788 comm="syz.1.374" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.416466][ T4805] loop2: detected capacity change from 0 to 128 [ 70.585945][ T4816] loop0: detected capacity change from 0 to 128 [ 70.812426][ T4826] FAULT_INJECTION: forcing a failure. [ 70.812426][ T4826] name failslab, interval 1, probability 0, space 0, times 0 [ 70.812462][ T4826] CPU: 0 UID: 0 PID: 4826 Comm: syz.4.387 Not tainted syzkaller #0 PREEMPT(lazy) [ 70.812489][ T4826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 70.812507][ T4826] Call Trace: [ 70.812514][ T4826] [ 70.812522][ T4826] __dump_stack+0x1d/0x30 [ 70.812548][ T4826] dump_stack_lvl+0x95/0xd0 [ 70.812590][ T4826] dump_stack+0x15/0x1b [ 70.812612][ T4826] should_fail_ex+0x262/0x280 [ 70.812647][ T4826] ? alloc_fdtable+0x8c/0x1d0 [ 70.812759][ T4826] should_failslab+0x8c/0xb0 [ 70.812791][ T4826] __kmalloc_cache_noprof+0x7a/0x400 [ 70.812822][ T4826] ? alloc_fdtable+0x8c/0x1d0 [ 70.812862][ T4826] ? kmem_cache_alloc_noprof+0x1f5/0x3f0 [ 70.812969][ T4826] alloc_fdtable+0x8c/0x1d0 [ 70.813001][ T4826] dup_fd+0x4ae/0x530 [ 70.813060][ T4826] ? _raw_spin_unlock+0x9/0x30 [ 70.813089][ T4826] ksys_unshare+0x36c/0x710 [ 70.813116][ T4826] ? ksys_write+0x194/0x1a0 [ 70.813187][ T4826] __x64_sys_unshare+0x1f/0x30 [ 70.813215][ T4826] x64_sys_call+0x1e33/0x2550 [ 70.813243][ T4826] do_syscall_64+0x112/0x360 [ 70.813270][ T4826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.813426][ T4826] RIP: 0033:0x7fe973cce0d9 [ 70.813444][ T4826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.813515][ T4826] RSP: 002b:00007fe972727028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 70.813554][ T4826] RAX: ffffffffffffffda RBX: 00007fe973f55fa0 RCX: 00007fe973cce0d9 [ 70.813569][ T4826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064000600 [ 70.813584][ T4826] RBP: 00007fe972727090 R08: 0000000000000000 R09: 0000000000000000 [ 70.813599][ T4826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.813613][ T4826] R13: 00007fe973f56038 R14: 00007fe973f55fa0 R15: 00007ffd4960c078 [ 70.813712][ T4826] [ 70.844447][ T4828] sctp: [Deprecated]: syz.4.388 (pid 4828) Use of int in max_burst socket option. [ 70.844447][ T4828] Use struct sctp_assoc_value instead [ 71.406998][ T4841] netlink: 24 bytes leftover after parsing attributes in process `syz.1.391'. [ 71.417166][ T4841] loop1: detected capacity change from 0 to 128 [ 71.425168][ T4841] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.441428][ T4841] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 71.444759][ T51] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 71.445947][ T4841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.446106][ T4841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.450565][ T29] audit: type=1400 audit(1787822987.938:1659): avc: denied { remount } for pid=4840 comm="syz.1.391" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 71.707250][ T29] audit: type=1326 audit(1787822988.128:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4847 comm="syz.0.393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e3f2e0d9 code=0x7ffc0000 [ 71.707401][ T29] audit: type=1326 audit(1787822988.128:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4847 comm="syz.0.393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e3f2e0d9 code=0x7ffc0000 [ 71.707439][ T29] audit: type=1326 audit(1787822988.128:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4847 comm="syz.0.393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e3f2e0d9 code=0x7ffc0000 [ 71.707504][ T29] audit: type=1326 audit(1787822988.128:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4847 comm="syz.0.393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f91e3f2e0d9 code=0x7ffc0000 [ 71.707537][ T29] audit: type=1326 audit(1787822988.128:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4847 comm="syz.0.393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e3f2e0d9 code=0x7ffc0000 [ 71.707562][ T29] audit: type=1326 audit(1787822988.128:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4847 comm="syz.0.393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e3f2e0d9 code=0x7ffc0000 [ 71.707653][ T29] audit: type=1326 audit(1787822988.128:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4847 comm="syz.0.393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e3f2e0d9 code=0x7ffc0000 [ 71.707736][ T29] audit: type=1326 audit(1787822988.128:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4847 comm="syz.0.393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e3f2e0d9 code=0x7ffc0000 [ 71.739394][ T4854] netlink: 88 bytes leftover after parsing attributes in process `syz.2.397'. [ 71.740350][ T4854] netlink: 88 bytes leftover after parsing attributes in process `syz.2.397'. [ 72.115294][ T4858] netlink: 20 bytes leftover after parsing attributes in process `syz.2.398'. [ 72.115445][ T4858] netlink: 20 bytes leftover after parsing attributes in process `syz.2.398'. [ 72.210007][ T4861] netlink: 'syz.1.399': attribute type 10 has an invalid length. [ 72.269930][ T4861] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.299436][ T4861] team0: Port device netdevsim2 added [ 72.433130][ T4874] loop3: detected capacity change from 0 to 128 [ 73.400074][ T4904] FAULT_INJECTION: forcing a failure. [ 73.400074][ T4904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.400127][ T4904] CPU: 1 UID: 0 PID: 4904 Comm: syz.1.412 Not tainted syzkaller #0 PREEMPT(lazy) [ 73.400204][ T4904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 73.400218][ T4904] Call Trace: [ 73.400225][ T4904] [ 73.400241][ T4904] __dump_stack+0x1d/0x30 [ 73.400268][ T4904] dump_stack_lvl+0x95/0xd0 [ 73.400369][ T4904] dump_stack+0x15/0x1b [ 73.400392][ T4904] should_fail_ex+0x262/0x280 [ 73.400429][ T4904] should_fail+0xb/0x20 [ 73.400461][ T4904] should_fail_usercopy+0x1a/0x20 [ 73.400551][ T4904] _copy_from_user+0x1c/0xb0 [ 73.400574][ T4904] __sys_bpf+0x1e2/0xc30 [ 73.400604][ T4904] ? get_pid_task+0x92/0xc0 [ 73.400625][ T4904] ? vfs_write+0x800/0x9a0 [ 73.400697][ T4904] __x64_sys_bpf+0x69/0x80 [ 73.400719][ T4904] x64_sys_call+0xf26/0x2550 [ 73.400778][ T4904] do_syscall_64+0x112/0x360 [ 73.400804][ T4904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.400825][ T4904] RIP: 0033:0x7faa6ff8e0d9 [ 73.400896][ T4904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.400913][ T4904] RSP: 002b:00007faa6e9e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 73.400933][ T4904] RAX: ffffffffffffffda RBX: 00007faa70215fa0 RCX: 00007faa6ff8e0d9 [ 73.400946][ T4904] RDX: 0000000000000038 RSI: 0000200000000080 RDI: 000000000000001b [ 73.400961][ T4904] RBP: 00007faa6e9e7090 R08: 0000000000000000 R09: 0000000000000000 [ 73.400977][ T4904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.400992][ T4904] R13: 00007faa70216038 R14: 00007faa70215fa0 R15: 00007ffd4267b748 [ 73.401071][ T4904] [ 73.633849][ T4913] netlink: 32 bytes leftover after parsing attributes in process `syz.1.425'. [ 73.634450][ T4911] netlink: 'syz.3.414': attribute type 10 has an invalid length. [ 73.673236][ T4911] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.727417][ T4911] team0: Port device netdevsim2 added [ 73.739733][ T3303] cgroup: fork rejected by pids controller in /syz1 [ 73.905427][ T4925] warn_alloc: 10 callbacks suppressed [ 73.905449][ T4925] syz.2.421: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 73.905583][ T4925] CPU: 0 UID: 0 PID: 4925 Comm: syz.2.421 Not tainted syzkaller #0 PREEMPT(lazy) [ 73.905610][ T4925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 73.905699][ T4925] Call Trace: [ 73.905707][ T4925] [ 73.905715][ T4925] __dump_stack+0x1d/0x30 [ 73.905766][ T4925] dump_stack_lvl+0x95/0xd0 [ 73.905857][ T4925] dump_stack+0x15/0x1b [ 73.905876][ T4925] warn_alloc+0x146/0x1c0 [ 73.905950][ T4925] ? futex_unqueue+0xc5/0xf0 [ 73.905980][ T4925] __vmalloc_node_range_noprof+0x9b/0x1040 [ 73.906066][ T4925] ? __pfx_futex_wake_mark+0x10/0x10 [ 73.906103][ T4925] ? __rcu_read_unlock+0x4e/0x70 [ 73.906191][ T4925] ? xskq_create+0x38/0x160 [ 73.906215][ T4925] ? __kmalloc_cache_noprof+0x331/0x400 [ 73.906262][ T4925] ? xskq_create+0x38/0x160 [ 73.906292][ T4925] xskq_create+0xea/0x160 [ 73.906352][ T4925] ? xsk_init_queue+0x70/0xb0 [ 73.906377][ T4925] xsk_init_queue+0x70/0xb0 [ 73.906462][ T4925] xsk_setsockopt+0x3ef/0x640 [ 73.906516][ T4925] ? __pfx_xsk_setsockopt+0x10/0x10 [ 73.906541][ T4925] __sys_setsockopt+0x184/0x200 [ 73.906572][ T4925] __x64_sys_setsockopt+0x64/0x80 [ 73.906670][ T4925] x64_sys_call+0x248f/0x2550 [ 73.906780][ T4925] do_syscall_64+0x112/0x360 [ 73.906853][ T4925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.906877][ T4925] RIP: 0033:0x7f2baeb5e0d9 [ 73.906894][ T4925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.906913][ T4925] RSP: 002b:00007f2bad5b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 73.906934][ T4925] RAX: ffffffffffffffda RBX: 00007f2baede5fa0 RCX: 00007f2baeb5e0d9 [ 73.906949][ T4925] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 73.906999][ T4925] RBP: 00007f2baebf5024 R08: 0000000000000004 R09: 0000000000000000 [ 73.907013][ T4925] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.907027][ T4925] R13: 00007f2baede6038 R14: 00007f2baede5fa0 R15: 00007ffc6c1bb2e8 [ 73.907073][ T4925] [ 73.914836][ T4925] Mem-Info: [ 73.914845][ T4925] active_anon:45633 inactive_anon:1 isolated_anon:0 [ 73.914845][ T4925] active_file:640 inactive_file:24708 isolated_file:0 [ 73.914845][ T4925] unevictable:0 dirty:190 writeback:0 [ 73.914845][ T4925] slab_reclaimable:3287 slab_unreclaimable:15968 [ 73.914845][ T4925] mapped:39619 shmem:38468 pagetables:1203 [ 73.914845][ T4925] sec_pagetables:0 bounce:0 [ 73.914845][ T4925] kernel_misc_reclaimable:0 [ 73.914845][ T4925] free:1837440 free_pcp:12097 free_cma:0 [ 73.915007][ T4925] Node 0 active_anon:182532kB inactive_anon:4kB active_file:2560kB inactive_file:98832kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158476kB dirty:760kB writeback:0kB shmem:153872kB kernel_stack:3488kB pagetables:4812kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 73.915185][ T4925] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 73.915330][ T4925] lowmem_reserve[]: 0 2877 7856 7856 [ 73.915359][ T4925] Node 0 DMA32 free:2943448kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2946972kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 73.915440][ T4925] lowmem_reserve[]: 0 0 4978 4978 [ 73.915469][ T4925] Node 0 Normal free:4390952kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:182532kB inactive_anon:4kB active_file:2560kB inactive_file:98832kB unevictable:0kB writepending:760kB zspages:0kB present:5242880kB managed:5098228kB mlocked:0kB bounce:0kB free_pcp:44864kB local_pcp:4352kB free_cma:0kB [ 73.915574][ T4925] lowmem_reserve[]: 0 0 0 0 [ 73.915602][ T4925] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 73.915796][ T4925] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 2*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2943448kB [ 73.916128][ T4925] Node 0 Normal: 124*4kB (UE) 133*8kB (U) 6*16kB (UM) 44*32kB (UM) 25*64kB (UE) 13*128kB (UE) 13*256kB (UE) 7*512kB (UME) 1*1024kB (M) 5*2048kB (UME) 1066*4096kB (UM) = 4390840kB [ 73.918043][ T4925] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 73.918061][ T4925] 63871 total pagecache pages [ 73.918069][ T4925] 1 pages in swap cache [ 73.918075][ T4925] Free swap = 124824kB [ 73.918083][ T4925] Total swap = 124996kB [ 73.918091][ T4925] 2097051 pages RAM [ 73.918098][ T4925] 0 pages HighMem/MovableOnly [ 73.918105][ T4925] 81911 pages reserved [ 74.302545][ T4935] loop2: detected capacity change from 0 to 128 [ 74.376180][ T128] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.433958][ T4935] smpboot: CPU 1 is now offline [ 74.461105][ T128] team0: Port device netdevsim2 removed [ 74.461833][ T128] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.504885][ T4935] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 74.520720][ T128] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.522744][ T4939] FAULT_INJECTION: forcing a failure. [ 74.522744][ T4939] name failslab, interval 1, probability 0, space 0, times 0 [ 74.522778][ T4939] CPU: 1 UID: 0 PID: 4939 Comm: syz.3.428 Not tainted syzkaller #0 PREEMPT(lazy) [ 74.522922][ T4939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.522935][ T4939] Call Trace: [ 74.522941][ T4939] [ 74.522949][ T4939] __dump_stack+0x1d/0x30 [ 74.522981][ T4939] dump_stack_lvl+0x95/0xd0 [ 74.523035][ T4939] dump_stack+0x15/0x1b [ 74.523056][ T4939] should_fail_ex+0x262/0x280 [ 74.523121][ T4939] ? do_getname+0x2e/0x1c0 [ 74.523228][ T4939] should_failslab+0x8c/0xb0 [ 74.523255][ T4939] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 74.523348][ T4939] ? should_fail+0xb/0x20 [ 74.523377][ T4939] ? do_getname+0x2e/0x1c0 [ 74.523451][ T4939] do_getname+0x2e/0x1c0 [ 74.523481][ T4939] __se_sys_renameat2+0x38/0x1c0 [ 74.523548][ T4939] __x64_sys_renameat2+0x67/0x80 [ 74.523579][ T4939] x64_sys_call+0x1f7d/0x2550 [ 74.523605][ T4939] do_syscall_64+0x112/0x360 [ 74.523630][ T4939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.523733][ T4939] RIP: 0033:0x7f0a1f38e0d9 [ 74.523749][ T4939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.523768][ T4939] RSP: 002b:00007f0a1dde7028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 74.523867][ T4939] RAX: ffffffffffffffda RBX: 00007f0a1f615fa0 RCX: 00007f0a1f38e0d9 [ 74.523882][ T4939] RDX: ffffffffffffff9c RSI: 0000200000000000 RDI: ffffffffffffff9c [ 74.523897][ T4939] RBP: 00007f0a1dde7090 R08: 0000000000000000 R09: 0000000000000000 [ 74.523911][ T4939] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 74.523928][ T4939] R13: 00007f0a1f616038 R14: 00007f0a1f615fa0 R15: 00007ffdb9b0b9b8 [ 74.523947][ T4939] [ 74.619326][ T4943] loop3: detected capacity change from 0 to 512 [ 74.626717][ T128] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.917519][ T128] bond0 (unregistering): Released all slaves [ 74.931149][ T3023] 8021q: adding VLAN 0 to HW filter on device eth1 [ 74.988939][ T128] IPVS: stopping backup sync thread 4461 ... [ 74.998422][ T128] hsr_slave_0: left promiscuous mode [ 75.003768][ T128] hsr_slave_1: left promiscuous mode [ 75.009373][ T128] veth1_macvtap: left promiscuous mode [ 75.009431][ T128] veth0_macvtap: left promiscuous mode [ 75.009508][ T128] veth1_vlan: left promiscuous mode [ 75.009546][ T128] veth0_vlan: left promiscuous mode [ 75.083986][ T4982] loop0: detected capacity change from 0 to 128 [ 75.091023][ T3282] udevd[3282]: incorrect ext4 checksum on /dev/loop0 [ 75.254050][ T3023] 8021q: adding VLAN 0 to HW filter on device eth2 [ 75.263020][ T4995] loop0: detected capacity change from 0 to 1764 [ 75.341337][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 75.341361][ T29] audit: type=1326 audit(2000000001.240:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4996 comm="syz.4.437" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe973c8e90e code=0x7ffc0000 [ 75.351280][ T29] audit: type=1326 audit(2000000001.240:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4996 comm="syz.4.437" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe973ccf3d7 code=0x7ffc0000 [ 75.360674][ T29] audit: type=1326 audit(2000000001.240:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4996 comm="syz.4.437" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe973cce0d9 code=0x7ffc0000 [ 75.384568][ T29] audit: type=1400 audit(2000000001.270:1728): avc: denied { create } for pid=4996 comm="syz.4.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 75.389952][ T29] audit: type=1326 audit(2000000001.270:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4996 comm="syz.4.437" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe973ccf3d7 code=0x7ffc0000 [ 75.390701][ T29] audit: type=1326 audit(2000000001.270:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4996 comm="syz.4.437" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe973cce0d9 code=0x7ffc0000 [ 75.390815][ T29] audit: type=1326 audit(2000000001.270:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4996 comm="syz.4.437" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe973ccde42 code=0x7ffc0000 [ 75.391054][ T29] audit: type=1326 audit(2000000001.270:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4996 comm="syz.4.437" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe973ccded7 code=0x7ffc0000 [ 75.391222][ T29] audit: type=1326 audit(2000000001.270:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4996 comm="syz.4.437" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe973c8add1 code=0x7ffc0000 [ 75.391446][ T29] audit: type=1326 audit(2000000001.270:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4996 comm="syz.4.437" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fe973cceec9 code=0x7ffc0000 [ 75.402416][ T4995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5122 sclass=netlink_route_socket pid=4995 comm=syz.0.429 [ 75.424663][ T5001] hsr_slave_0: left promiscuous mode [ 75.450118][ T5001] hsr_slave_1: left promiscuous mode [ 75.531118][ T5010] loop4: detected capacity change from 0 to 512 [ 75.533587][ T5010] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 75.538303][ T5010] EXT4-fs error (device loop4): __ext4_iget:5592: inode #11: block 2: comm syz.4.437: invalid block [ 75.538413][ T5010] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 75.538540][ T5010] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.437: couldn't read orphan inode 11 (err -117) [ 75.538566][ T5010] loop4: lost filesystem error report for type 5 error -117 [ 75.539075][ T5010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.739868][ T3023] 8021q: adding VLAN 0 to HW filter on device eth3 [ 75.777110][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.869435][ T128] IPVS: stop unused estimator thread 0... [ 75.876449][ T4954] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.876483][ T4954] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.876542][ T4954] bridge_slave_0: entered allmulticast mode [ 75.878776][ T4954] bridge_slave_0: entered promiscuous mode [ 75.879730][ T4954] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.879834][ T4954] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.879878][ T4954] bridge_slave_1: entered allmulticast mode [ 75.880598][ T4954] bridge_slave_1: entered promiscuous mode [ 75.892450][ T4954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.893510][ T4954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.915160][ T4954] team0: Port device team_slave_0 added [ 75.917465][ T4954] team0: Port device team_slave_1 added [ 75.932078][ T4954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.932091][ T4954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.932119][ T4954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.934245][ T4954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.934257][ T4954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.934283][ T4954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.042128][ T4954] hsr_slave_0: entered promiscuous mode [ 76.042489][ T4954] hsr_slave_1: entered promiscuous mode [ 76.079936][ T5038] Illegal XDP return value 438575272 on prog (id 70) dev syz_tun, expect packet loss! [ 77.140522][ T3023] 8021q: adding VLAN 0 to HW filter on device eth4 [ 77.163396][ T5071] loop2: detected capacity change from 0 to 512 [ 77.295408][ T5088] loop0: detected capacity change from 0 to 512 [ 77.357616][ T5095] loop3: detected capacity change from 0 to 512 [ 77.425906][ T5095] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.452: bad orphan inode 17 [ 77.425941][ T5095] loop3: lost filesystem error report for type 5 error -117 [ 77.426343][ T5095] ext4_test_bit(bit=16, block=4) = 1 [ 77.426358][ T5095] is_bad_inode(inode)=0 [ 77.426379][ T5095] NEXT_ORPHAN(inode)=0 [ 77.426386][ T5095] max_ino=32 [ 77.426392][ T5095] i_nlink=1 [ 77.426803][ T5095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.430181][ T4954] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.437896][ T4954] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.438530][ T4954] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.446591][ T4954] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.447156][ T4954] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.450348][ T4954] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.456108][ T4954] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.480045][ T4954] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.572416][ T5088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.573105][ T5088] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.776440][ T4954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.807572][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.818620][ T4954] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.830583][ T128] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.830619][ T128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.842066][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.842093][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.061300][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.091726][ T5131] device-mapper: ioctl: device name cannot contain '/' [ 78.162648][ T5143] netlink: 100 bytes leftover after parsing attributes in process `syz.2.456'. [ 78.209629][ T5143] loop2: detected capacity change from 0 to 512 [ 78.213576][ T5143] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 78.216807][ T5143] EXT4-fs (loop2): 1 truncate cleaned up [ 78.217239][ T5143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.225631][ T5143] EXT4-fs error (device loop2): __ext4_expand_extra_isize:6537: inode #15: comm syz.2.456: bad extra_isize 62 (inode size 256) [ 78.225807][ T5143] EXT4-fs (loop2): Remounting filesystem read-only [ 78.276242][ T4954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.343600][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.448239][ T4954] veth0_vlan: entered promiscuous mode [ 78.459007][ T4954] veth1_vlan: entered promiscuous mode [ 78.779695][ T5204] loop4: detected capacity change from 0 to 1024 [ 78.786424][ T5204] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.786468][ T5204] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.805156][ T4954] veth0_macvtap: entered promiscuous mode [ 78.818352][ T4954] veth1_macvtap: entered promiscuous mode [ 78.836977][ T4954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.847374][ T5204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.847460][ T5204] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.877506][ T4954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.936300][ T41] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.937897][ T41] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.937950][ T41] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.938035][ T41] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.997365][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 79.207254][ T5214] FAULT_INJECTION: forcing a failure. [ 79.207254][ T5214] name failslab, interval 1, probability 0, space 0, times 0 [ 79.207288][ T5214] CPU: 1 UID: 0 PID: 5214 Comm: syz.3.464 Not tainted syzkaller #0 PREEMPT(lazy) [ 79.207329][ T5214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.207361][ T5214] Call Trace: [ 79.207367][ T5214] [ 79.207374][ T5214] __dump_stack+0x1d/0x30 [ 79.207424][ T5214] dump_stack_lvl+0x95/0xd0 [ 79.207444][ T5214] dump_stack+0x15/0x1b [ 79.207527][ T5214] should_fail_ex+0x262/0x280 [ 79.207560][ T5214] ? skb_clone+0x151/0x1f0 [ 79.207641][ T5214] should_failslab+0x8c/0xb0 [ 79.207668][ T5214] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 79.207696][ T5214] ? skb_clone+0x151/0x1f0 [ 79.207801][ T5214] skb_clone+0x151/0x1f0 [ 79.207828][ T5214] pfkey_sendmsg+0x2c5/0x970 [ 79.207855][ T5214] ? avc_has_perm+0x101/0x190 [ 79.207880][ T5214] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 79.207927][ T5214] ____sys_sendmsg+0x532/0x580 [ 79.207957][ T5214] ___sys_sendmsg+0x195/0x1e0 [ 79.208072][ T5214] __x64_sys_sendmsg+0xd4/0x160 [ 79.208102][ T5214] x64_sys_call+0x22ab/0x2550 [ 79.208125][ T5214] do_syscall_64+0x112/0x360 [ 79.208192][ T5214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.208255][ T5214] RIP: 0033:0x7f0a1f38e0d9 [ 79.208270][ T5214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.208287][ T5214] RSP: 002b:00007f0a1dde7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.208325][ T5214] RAX: ffffffffffffffda RBX: 00007f0a1f615fa0 RCX: 00007f0a1f38e0d9 [ 79.208341][ T5214] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 79.208393][ T5214] RBP: 00007f0a1dde7090 R08: 0000000000000000 R09: 0000000000000000 [ 79.208408][ T5214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.208432][ T5214] R13: 00007f0a1f616038 R14: 00007f0a1f615fa0 R15: 00007ffdb9b0b9b8 [ 79.208450][ T5214] [ 79.414300][ T5216] netlink: 20 bytes leftover after parsing attributes in process `syz.0.465'. [ 79.426111][ T5219] loop3: detected capacity change from 0 to 512 [ 79.491895][ T5227] device-mapper: ioctl: device name cannot contain '/' [ 79.860567][ T5244] loop4: detected capacity change from 0 to 128 [ 80.444534][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 80.444558][ T29] audit: type=1326 audit(2000000006.339:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.1.472" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b6eae0d9 code=0x7ffc0000 [ 80.479044][ T22] IRQ fixup: irq 33 move in progress, old vector 46 [ 80.487897][ T5244] smpboot: CPU 1 is now offline [ 80.495849][ T29] audit: type=1326 audit(2000000006.389:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.1.472" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f22b6eae0d9 code=0x7ffc0000 [ 80.522897][ T29] audit: type=1326 audit(2000000006.419:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.1.472" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b6eae0d9 code=0x7ffc0000 [ 80.555709][ T29] audit: type=1326 audit(2000000006.449:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.1.472" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b6eae0d9 code=0x7ffc0000 [ 80.589163][ T29] audit: type=1326 audit(2000000006.489:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.1.472" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f22b6eae0d9 code=0x7ffc0000 [ 80.614803][ T29] audit: type=1326 audit(2000000006.519:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.1.472" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b6eae0d9 code=0x7ffc0000 [ 80.641032][ T29] audit: type=1326 audit(2000000006.539:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.1.472" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f22b6eae0d9 code=0x7ffc0000 [ 80.668178][ T29] audit: type=1326 audit(2000000006.569:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.1.472" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b6eae0d9 code=0x7ffc0000 [ 80.694036][ T29] audit: type=1326 audit(2000000006.589:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="syz.1.472" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b6eae0d9 code=0x7ffc0000 [ 80.737505][ T5244] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 80.905811][ T29] audit: type=1400 audit(2000000006.799:1926): avc: denied { create } for pid=5254 comm="syz.0.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 81.142407][ T5263] loop3: detected capacity change from 0 to 1024 [ 81.159922][ T5263] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 81.159973][ T5263] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 81.184909][ T5263] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 81.185052][ T5263] EXT4-fs (loop3): orphan cleanup on readonly fs [ 81.200071][ T5263] EXT4-fs error (device loop3): ext4_read_inode_bitmap:169: comm syz.3.478: Inode bitmap for bg 0 marked uninitialized [ 81.200095][ T5263] loop3: lost filesystem error report for type 5 error -117 [ 81.212602][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 81.212632][ C0] EXT4-fs (loop3): initial error at time 2000000007: ext4_read_inode_bitmap:169 [ 81.212653][ C0] EXT4-fs (loop3): last error at time 2000000007: ext4_read_inode_bitmap:169 [ 81.219091][ T5263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.264365][ T5263] netlink: 48 bytes leftover after parsing attributes in process `syz.3.478'. [ 81.264397][ T5263] netlink: 24 bytes leftover after parsing attributes in process `syz.3.478'. [ 81.264425][ T5263] netlink: 24 bytes leftover after parsing attributes in process `syz.3.478'. [ 81.264497][ T5263] netlink: 40 bytes leftover after parsing attributes in process `syz.3.478'. [ 81.341160][ T5274] device-mapper: ioctl: device name cannot contain '/' C ÿ[ 81.371415][ T5276] loop2: detected capacity change from 0 to 512 [ 81.390849][ T3305] EXT4-fs error (device loop3): ext4_readdir:280: inode #2: block 16: comm syz-executor: path /98/bus: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 81.391190][ T3305] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 81.391403][ T3305] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 81.400295][ T5276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.400416][ T5276] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.462938][ T5280] loop1: detected capacity change from 0 to 128 [ 81.463269][ T5280] EXT4-fs: Ignoring removed orlov option [ 81.463412][ T5280] ext3: Unknown parameter 'euid<00000000000000000000' [ 81.497641][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.530163][ T5278] syzkaller0: entered promiscuous mode [ 81.530221][ T5278] syzkaller0: entered allmulticast mode [ 81.560576][ T5288] loop4: detected capacity change from 0 to 512 [ 81.619420][ T5286] 9pnet_fd: p9_fd_create_tcp (5286): problem connecting socket to 127.0.0.1 [ 81.651355][ T3938] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.672569][ T41] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.758864][ T41] team0: Port device netdevsim2 removed [ 81.759976][ T41] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.778528][ T5297] netlink: 'syz.1.490': attribute type 5 has an invalid length. [ 81.778552][ T5297] netlink: 'syz.1.490': attribute type 9 has an invalid length. [ 81.778639][ T5297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.490'. [ 81.814654][ T41] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.844097][ T5297] netlink: 68 bytes leftover after parsing attributes in process `syz.1.490'. [ 81.867085][ T41] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.057469][ T5311] device-mapper: ioctl: device name cannot contain '/' [ 82.077317][ T41] bridge_slave_1: left allmulticast mode [ 82.077345][ T41] bridge_slave_1: left promiscuous mode [ 82.077486][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.084730][ T41] bridge_slave_0: left allmulticast mode [ 82.084746][ T41] bridge_slave_0: left promiscuous mode [ 82.086065][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.325767][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.349054][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.358954][ T41] bond0 (unregistering): Released all slaves [ 82.372310][ T41] bond1 (unregistering): Released all slaves [ 82.403458][ T5325] netlink: 44 bytes leftover after parsing attributes in process `syz.1.498'. [ 82.403555][ T5325] netlink: 51 bytes leftover after parsing attributes in process `syz.1.498'. [ 82.403572][ T5325] netlink: 'syz.1.498': attribute type 6 has an invalid length. [ 82.446748][ T41] hsr_slave_0: left promiscuous mode [ 82.452099][ T41] hsr_slave_1: left promiscuous mode [ 82.452470][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.452516][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.459033][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.459048][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.499721][ T41] veth1_macvtap: left promiscuous mode [ 82.499816][ T41] veth0_macvtap: left promiscuous mode [ 82.499871][ T41] veth1_vlan: left promiscuous mode [ 82.499906][ T41] veth0_vlan: left promiscuous mode [ 82.589394][ T5342] program syz.0.502 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.678946][ T41] team0 (unregistering): Port device team_slave_1 removed [ 82.690840][ T41] team0 (unregistering): Port device team_slave_0 removed [ 82.746526][ T3023] 8021q: adding VLAN 0 to HW filter on device eth1 [ 82.862069][ T5362] loop4: detected capacity change from 0 to 512 [ 82.908400][ T5362] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.508: corrupted in-inode xattr: invalid ea_ino [ 82.908516][ T5362] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 82.909167][ T5362] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.508: couldn't read orphan inode 15 (err -117) [ 82.909239][ T5362] loop4: lost filesystem error report for type 5 error -117 [ 82.928459][ T5362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.996441][ T5376] loop0: detected capacity change from 0 to 512 [ 83.023618][ T41] IPVS: stop unused estimator thread 0... [ 83.076902][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.088932][ T5388] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 83.089024][ T5388] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 83.089062][ T5388] vhci_hcd vhci_hcd.0: Device attached [ 83.139554][ T5304] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.139588][ T5304] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.139693][ T5304] bridge_slave_0: entered allmulticast mode [ 83.140202][ T5304] bridge_slave_0: entered promiscuous mode [ 83.144530][ T5304] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.144560][ T5304] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.144624][ T5304] bridge_slave_1: entered allmulticast mode [ 83.145110][ T5304] bridge_slave_1: entered promiscuous mode [ 83.168886][ T5390] vhci_hcd: connection closed [ 83.170070][ T3023] 8021q: adding VLAN 0 to HW filter on device eth2 [ 83.174063][ T51] vhci_hcd vhci_hcd.2: stop threads [ 83.174078][ T51] vhci_hcd vhci_hcd.2: release socket [ 83.174091][ T51] vhci_hcd vhci_hcd.2: disconnect device [ 83.175086][ T5304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.176305][ T5304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.212546][ T5304] team0: Port device team_slave_0 added [ 83.213374][ T5304] team0: Port device team_slave_1 added [ 83.239131][ T5304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.239143][ T5304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.239215][ T5304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.240513][ T5304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.240525][ T5304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.240564][ T5304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.281813][ T5304] hsr_slave_0: entered promiscuous mode [ 83.282380][ T5304] hsr_slave_1: entered promiscuous mode [ 83.283962][ T5403] ip_tables: iptables: counters copy to user failed while replacing table [ 83.285027][ T5304] debugfs: 'hsr0' already exists in 'hsr' [ 83.285041][ T5304] Cannot create hsr debugfs directory [ 83.416365][ T3023] 8021q: adding VLAN 0 to HW filter on device eth3 [ 83.543390][ T5304] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 83.550767][ T5304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.551513][ T5304] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 83.556279][ T5304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.561057][ T5304] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 83.568070][ T5304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.570069][ T5304] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 83.580865][ T5304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.669320][ T5304] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.669434][ T5304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.669592][ T5304] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.669701][ T5304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.844959][ T5416] loop4: detected capacity change from 0 to 1024 [ 83.878837][ T5304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.888919][ T3445] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.890580][ T5416] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 83.890691][ T5416] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 83.892277][ T3445] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.898455][ T5416] JBD2: no valid journal superblock found [ 83.898615][ T5416] EXT4-fs (loop4): Could not load journal inode [ 84.082030][ T5304] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.164588][ T3445] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.164630][ T3445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.190984][ T3445] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.191020][ T3445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.279109][ T3023] 8021q: adding VLAN 0 to HW filter on device eth4 [ 84.534742][ T5304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.535816][ T5416] loop4: detected capacity change from 0 to 256 [ 84.541868][ T5416] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 84.552217][ T5416] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.666132][ T5304] veth0_vlan: entered promiscuous mode [ 84.668445][ T5304] veth1_vlan: entered promiscuous mode [ 84.687230][ T5481] warn_alloc: 7 callbacks suppressed [ 84.687269][ T5481] syz.2.517: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 84.687346][ T5481] CPU: 1 UID: 0 PID: 5481 Comm: syz.2.517 Not tainted syzkaller #0 PREEMPT(lazy) [ 84.687374][ T5481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.687385][ T5481] Call Trace: [ 84.687391][ T5481] [ 84.687398][ T5481] __dump_stack+0x1d/0x30 [ 84.687456][ T5481] dump_stack_lvl+0x95/0xd0 [ 84.687477][ T5481] dump_stack+0x15/0x1b [ 84.687500][ T5481] warn_alloc+0x146/0x1c0 [ 84.687598][ T5481] ? futex_unqueue+0xc5/0xf0 [ 84.687626][ T5481] __vmalloc_node_range_noprof+0x9b/0x1040 [ 84.687656][ T5481] ? __pfx_futex_wake_mark+0x10/0x10 [ 84.687720][ T5481] ? __rcu_read_unlock+0x4e/0x70 [ 84.687752][ T5481] ? should_fail_ex+0x31/0x280 [ 84.687812][ T5481] ? xskq_create+0x38/0x160 [ 84.687839][ T5481] ? should_failslab+0x8c/0xb0 [ 84.687865][ T5481] ? __kmalloc_cache_noprof+0x19b/0x400 [ 84.687967][ T5481] ? xskq_create+0x38/0x160 [ 84.687991][ T5481] xskq_create+0xea/0x160 [ 84.688047][ T5481] ? xsk_init_queue+0x70/0xb0 [ 84.688172][ T5481] xsk_init_queue+0x70/0xb0 [ 84.688231][ T5481] xsk_setsockopt+0x3ef/0x640 [ 84.688255][ T5481] ? __pfx_xsk_setsockopt+0x10/0x10 [ 84.688277][ T5481] __sys_setsockopt+0x184/0x200 [ 84.688307][ T5481] __x64_sys_setsockopt+0x64/0x80 [ 84.688492][ T5481] x64_sys_call+0x248f/0x2550 [ 84.688520][ T5481] do_syscall_64+0x112/0x360 [ 84.688549][ T5481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.688573][ T5481] RIP: 0033:0x7f2baeb5e0d9 [ 84.688635][ T5481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.688657][ T5481] RSP: 002b:00007f2bad5b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 84.688680][ T5481] RAX: ffffffffffffffda RBX: 00007f2baede5fa0 RCX: 00007f2baeb5e0d9 [ 84.688695][ T5481] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 84.688708][ T5481] RBP: 00007f2baebf5024 R08: 0000000000000004 R09: 0000000000000000 [ 84.688720][ T5481] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.688733][ T5481] R13: 00007f2baede6038 R14: 00007f2baede5fa0 R15: 00007ffc6c1bb2e8 [ 84.688777][ T5481] [ 84.697082][ T5482] loop1: detected capacity change from 0 to 512 [ 84.736144][ T5482] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.736288][ T5482] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.747628][ T5304] veth0_macvtap: entered promiscuous mode [ 84.753460][ T5304] veth1_macvtap: entered promiscuous mode [ 84.768125][ T5304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.779011][ T5304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.797467][ T5482] xt_cgroup: path and classid specified [ 84.799729][ T364] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.800231][ T364] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.800265][ T364] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.800302][ T364] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.813175][ T5481] Mem-Info: [ 84.813184][ T5481] active_anon:24162 inactive_anon:1 isolated_anon:0 [ 84.813184][ T5481] active_file:705 inactive_file:24785 isolated_file:0 [ 84.813184][ T5481] unevictable:0 dirty:298 writeback:1 [ 84.813184][ T5481] slab_reclaimable:3339 slab_unreclaimable:16056 [ 84.813184][ T5481] mapped:29695 shmem:16866 pagetables:1141 [ 84.813184][ T5481] sec_pagetables:0 bounce:0 [ 84.813184][ T5481] kernel_misc_reclaimable:0 [ 84.813184][ T5481] free:1861773 free_pcp:8995 free_cma:0 [ 84.813270][ T5481] Node 0 active_anon:96648kB inactive_anon:4kB active_file:2820kB inactive_file:99140kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118780kB dirty:1192kB writeback:4kB shmem:67464kB kernel_stack:3504kB pagetables:4564kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 84.813341][ T5481] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 84.813463][ T5481] lowmem_reserve[]: 0 2877 7856 7856 [ 84.813494][ T5481] Node 0 DMA32 free:2943448kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2946972kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 84.813608][ T5481] lowmem_reserve[]: 0 0 4978 4978 [ 84.813637][ T5481] Node 0 Normal free:4488284kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:96648kB inactive_anon:4kB active_file:2820kB inactive_file:99140kB unevictable:0kB writepending:1196kB zspages:0kB present:5242880kB managed:5098228kB mlocked:0kB bounce:0kB free_pcp:32456kB local_pcp:8376kB free_cma:0kB [ 84.813788][ T5481] lowmem_reserve[]: 0 0 0 0 [ 84.813817][ T5481] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 84.813966][ T5481] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 2*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2943448kB [ 84.815400][ T5481] Node 0 Normal: 53*4kB (UME) 219*8kB (UME) 153*16kB (UM) 99*32kB (UME) 186*64kB (UME) 105*128kB (UME) 78*256kB (UME) 33*512kB (UM) 21*1024kB (UM) 13*2048kB (UME) 1067*4096kB (UM) = 4488348kB [ 84.816585][ T5481] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 84.816604][ T5481] 42383 total pagecache pages [ 84.816611][ T5481] 1 pages in swap cache [ 84.816618][ T5481] Free swap = 124992kB [ 84.816626][ T5481] Total swap = 124996kB [ 84.816633][ T5481] 2097051 pages RAM [ 84.816640][ T5481] 0 pages HighMem/MovableOnly [ 84.816647][ T5481] 81911 pages reserved [ 84.856018][ T4954] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.357241][ T5502] __nla_validate_parse: 5 callbacks suppressed [ 85.357297][ T5502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.521'. [ 85.357379][ T5502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.440865][ T5502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.524129][ T5505] netlink: 24 bytes leftover after parsing attributes in process `syz.0.521'. [ 85.529149][ T5514] loop1: detected capacity change from 0 to 512 [ 85.873722][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 85.873747][ T29] audit: type=1400 audit(2000000011.679:1976): avc: denied { write } for pid=5520 comm="syz.4.527" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 85.873776][ T29] audit: type=1400 audit(2000000011.749:1977): avc: denied { getopt } for pid=5520 comm="syz.4.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 85.970856][ T5530] loop2: detected capacity change from 0 to 512 [ 85.988823][ T5530] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.531: corrupted in-inode xattr: invalid ea_ino [ 85.988877][ T5530] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 86.002300][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 86.002324][ C1] EXT4-fs (loop2): initial error at time 2000000011: ext4_iget_extra_inode:5210: inode 15 [ 86.002356][ C1] EXT4-fs (loop2): last error at time 2000000011: ext4_iget_extra_inode:5210: inode 15 [ 86.002743][ T5530] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.531: couldn't read orphan inode 15 (err -117) [ 86.002810][ T5530] loop2: lost filesystem error report for type 5 error -117 [ 86.003259][ T5530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.028592][ T29] audit: type=1400 audit(2000000011.919:1978): avc: denied { write } for pid=5529 comm="syz.2.531" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.030316][ T29] audit: type=1400 audit(2000000011.929:1979): avc: denied { write } for pid=5529 comm="syz.2.531" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.072755][ T5534] xt_cgroup: xt_cgroup: no path or classid specified [ 86.098405][ T5528] loop0: detected capacity change from 0 to 1024 [ 86.105462][ T5528] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 86.105561][ T5528] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 86.122698][ T5537] loop5: detected capacity change from 0 to 128 [ 86.124749][ T5537] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 86.126536][ T5537] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 86.161884][ T5528] JBD2: no valid journal superblock found [ 86.162040][ T5528] EXT4-fs (loop0): Could not load journal inode [ 86.186884][ T364] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 86.249752][ T5539] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6426 sclass=netlink_route_socket pid=5539 comm=syz.5.534 [ 86.279016][ T5539] netlink: 12 bytes leftover after parsing attributes in process `syz.5.534'. [ 86.363018][ T5528] tcf_pedit_act: 7 callbacks suppressed [ 86.363072][ T5528] tc action pedit 'at' offset -2147483645 out of bounds [ 86.363135][ T5528] tc action pedit 'at' offset -2147483645 out of bounds [ 86.363191][ T5528] tc action pedit 'at' offset -2147483645 out of bounds [ 86.363283][ T5528] tc action pedit 'at' offset -2147483645 out of bounds [ 86.363313][ T5528] tc action pedit 'at' offset -2147483645 out of bounds [ 86.363344][ T5528] tc action pedit 'at' offset -2147483645 out of bounds [ 86.363423][ T5528] tc action pedit 'at' offset -2147483645 out of bounds [ 86.363464][ T5528] tc action pedit 'at' offset -2147483645 out of bounds [ 86.363544][ T5528] tc action pedit 'at' offset -2147483645 out of bounds [ 86.363664][ T5528] tc action pedit 'at' offset -2147483645 out of bounds [ 86.363894][ T5528] 0: reclassify loop, rule prio 0, protocol 800 [ 86.422035][ T5544] loop0: detected capacity change from 0 to 256 [ 86.422515][ T5544] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 86.433046][ T5544] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.599341][ T29] audit: type=1326 audit(2000000013.499:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5561 comm="syz.1.541" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b6eae0d9 code=0x50000 [ 87.599424][ T29] audit: type=1326 audit(2000000013.499:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5561 comm="syz.1.541" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b6eae0d9 code=0x50000 [ 87.599508][ T29] audit: type=1326 audit(2000000013.499:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5561 comm="syz.1.541" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b6eae0d9 code=0x50000 [ 87.623221][ T29] audit: type=1326 audit(2000000013.519:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5561 comm="syz.1.541" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b6eae0d9 code=0x50000 [ 87.623310][ T29] audit: type=1326 audit(2000000013.519:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5561 comm="syz.1.541" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b6eae0d9 code=0x50000 [ 87.623404][ T29] audit: type=1326 audit(2000000013.519:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5561 comm="syz.1.541" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b6eae0d9 code=0x50000 [ 87.703216][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.793859][ T5543] loop4: detected capacity change from 0 to 4096 [ 87.864153][ T5543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.877868][ T5567] loop5: detected capacity change from 0 to 512 [ 88.085466][ T5573] netlink: 'syz.0.553': attribute type 1 has an invalid length. [ 88.219020][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.565563][ T5582] loop0: detected capacity change from 0 to 512 [ 89.758654][ T5599] device-mapper: ioctl: device name cannot contain '/' [ 91.600188][ T5636] loop1: detected capacity change from 0 to 512 [ 91.825775][ T5640] loop4: detected capacity change from 0 to 512 [ 91.911929][ T5646] loop2: detected capacity change from 0 to 512 [ 91.941186][ T5640] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.941275][ T5640] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.948524][ T5646] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.575: corrupted in-inode xattr: invalid ea_ino [ 91.948554][ T5646] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 91.948796][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 91.948814][ C0] EXT4-fs (loop2): initial error at time 2000000017: ext4_iget_extra_inode:5210: inode 15 [ 91.948842][ C0] EXT4-fs (loop2): last error at time 2000000017: ext4_iget_extra_inode:5210: inode 15 [ 91.948927][ T5646] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.575: couldn't read orphan inode 15 (err -117) [ 91.948958][ T5646] loop2: lost filesystem error report for type 5 error -117 [ 91.949775][ T5646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.964998][ T29] kauditd_printk_skb: 17437 callbacks suppressed [ 91.965013][ T29] audit: type=1400 audit(2000000017.859:19423): avc: denied { write } for pid=5638 comm="syz.4.564" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.189236][ T29] audit: type=1400 audit(2000000018.079:19424): avc: denied { write } for pid=5648 comm="syz.1.566" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 92.459005][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.609474][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.648774][ T5661] device-mapper: ioctl: device name cannot contain '/' [ 92.858229][ T5673] loop2: detected capacity change from 0 to 128 [ 92.933431][ T5673] smpboot: CPU 1 is now offline [ 92.942575][ T5676] loop4: detected capacity change from 0 to 512 [ 93.000191][ T5673] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 93.258651][ T5681] loop2: detected capacity change from 0 to 1024 [ 93.274891][ T5681] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.275191][ T5681] EXT4-fs: Ignoring removed oldalloc option [ 93.306140][ T5681] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 93.309524][ T5681] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.717635][ T5689] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 93.794862][ T5695] loop5: detected capacity change from 0 to 8192 [ 93.862238][ T51] IPVS: starting estimator thread 0... [ 93.954074][ T5698] netlink: 4 bytes leftover after parsing attributes in process `syz.5.584'. [ 93.958877][ T5696] IPVS: using max 2400 ests per chain, 120000 per kthread [ 93.988466][ T5698] hsr_slave_1 (unregistering): left promiscuous mode [ 94.018631][ T5707] device-mapper: ioctl: device name cannot contain '/' [ 94.021765][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 94.251560][ T5725] loop4: detected capacity change from 0 to 512 [ 94.667510][ T29] audit: type=1400 audit(2000000020.559:19425): avc: denied { write } for pid=5732 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.716819][ T29] audit: type=1400 audit(2000000020.609:19426): avc: denied { write } for pid=5743 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.275443][ T5764] device-mapper: ioctl: device name cannot contain '/' [ 95.307211][ T5762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.602'. [ 95.533659][ T5781] loop2: detected capacity change from 0 to 256 [ 95.727693][ T29] audit: type=1400 audit(2000000021.619:19427): avc: denied { write } for pid=5788 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.787770][ T29] audit: type=1400 audit(2000000021.679:19428): avc: denied { write } for pid=5806 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.930733][ T29] audit: type=1400 audit(2000000021.829:19429): avc: denied { write } for pid=5810 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.960157][ T29] audit: type=1400 audit(2000000021.859:19430): avc: denied { write } for pid=5821 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.322486][ T5830] loop0: detected capacity change from 0 to 512 [ 96.490543][ T5850] device-mapper: ioctl: device name cannot contain '/' [ 96.570772][ T29] audit: type=1400 audit(2000000022.469:19431): avc: denied { write } for pid=5827 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.594390][ T29] audit: type=1400 audit(2000000022.469:19432): avc: denied { write } for pid=5856 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.178321][ T5870] 9pnet_fd: p9_fd_create_tcp (5870): problem connecting socket to 127.0.0.1 [ 97.380753][ T5886] FAULT_INJECTION: forcing a failure. [ 97.380753][ T5886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.380828][ T5886] CPU: 1 UID: 0 PID: 5886 Comm: syz.0.624 Not tainted syzkaller #0 PREEMPT(lazy) [ 97.380926][ T5886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.380940][ T5886] Call Trace: [ 97.380947][ T5886] [ 97.380955][ T5886] __dump_stack+0x1d/0x30 [ 97.380982][ T5886] dump_stack_lvl+0x95/0xd0 [ 97.381005][ T5886] dump_stack+0x15/0x1b [ 97.381108][ T5886] should_fail_ex+0x262/0x280 [ 97.381145][ T5886] should_fail+0xb/0x20 [ 97.381178][ T5886] should_fail_usercopy+0x1a/0x20 [ 97.381210][ T5886] _copy_from_user+0x1c/0xb0 [ 97.381374][ T5886] input_event_from_user+0x5e/0x190 [ 97.381411][ T5886] ? _raw_spin_unlock_irq_enable+0x9/0x50 [ 97.381510][ T5886] ? input_inject_event+0xcc/0xe0 [ 97.381537][ T5886] evdev_write+0x1b0/0x2b0 [ 97.381629][ T5886] ? __pfx_evdev_write+0x10/0x10 [ 97.381658][ T5886] vfs_write+0x254/0x9a0 [ 97.381762][ T5886] ? __fget_files+0x184/0x1c0 [ 97.381868][ T5886] ksys_write+0xdc/0x1a0 [ 97.381897][ T5886] __x64_sys_write+0x40/0x50 [ 97.381971][ T5886] x64_sys_call+0x154e/0x2550 [ 97.382059][ T5886] do_syscall_64+0x112/0x360 [ 97.382086][ T5886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.382110][ T5886] RIP: 0033:0x7f91e3f2e0d9 [ 97.382129][ T5886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.382150][ T5886] RSP: 002b:00007f91e2987028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 97.382215][ T5886] RAX: ffffffffffffffda RBX: 00007f91e41b5fa0 RCX: 00007f91e3f2e0d9 [ 97.382230][ T5886] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 97.382244][ T5886] RBP: 00007f91e2987090 R08: 0000000000000000 R09: 0000000000000000 [ 97.382256][ T5886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.382310][ T5886] R13: 00007f91e41b6038 R14: 00007f91e41b5fa0 R15: 00007ffe0abf49f8 [ 97.382351][ T5886] [ 97.979634][ T5905] device-mapper: ioctl: device name cannot contain '/' [ 98.007954][ T5908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.633'. [ 98.137387][ T5914] loop2: detected capacity change from 0 to 512 [ 98.145418][ T5915] loop0: detected capacity change from 0 to 256 [ 98.243209][ T5922] loop4: detected capacity change from 0 to 1024 [ 98.243519][ T5922] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 98.324260][ T5919] loop4: detected capacity change from 0 to 128 [ 99.038271][ T5942] device-mapper: ioctl: device name cannot contain '/' [ 99.349704][ T5951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.648'. [ 100.757323][ T5979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.652'. [ 101.134707][ T5987] netlink: 24 bytes leftover after parsing attributes in process `syz.0.656'. [ 101.176938][ T5990] device-mapper: ioctl: device name cannot contain '/' [ 101.210010][ T5991] loop5: detected capacity change from 0 to 512 [ 101.322182][ T5997] netlink: 'syz.1.661': attribute type 2 has an invalid length. [ 101.388587][ T6002] loop2: detected capacity change from 0 to 1024 [ 101.446433][ T6002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.446546][ T6002] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.494590][ T5999] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.662: bg 0: block 112: padding at end of block bitmap is not set [ 101.518737][ T5999] EXT4-fs error (device loop2): ext4_free_blocks:6719: comm syz.2.662: Freeing blocks not in datazone - block = 0, count = 16 [ 101.549545][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 101.560754][ T29] audit: type=1400 audit(2000000027.389:19433): avc: denied { write } for pid=5998 comm="syz.2.662" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.560853][ T29] audit: type=1400 audit(2000000027.409:19434): avc: denied { write } for pid=5998 comm="syz.2.662" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.560920][ T29] audit: type=1400 audit(2000000027.429:19435): avc: denied { getopt } for pid=5998 comm="syz.2.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 103.105571][ T6032] warn_alloc: 1 callbacks suppressed [ 103.111638][ T6032] syz.4.670: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 103.128292][ T6032] CPU: 1 UID: 0 PID: 6032 Comm: syz.4.670 Not tainted syzkaller #0 PREEMPT(lazy) [ 103.128353][ T6032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.128368][ T6032] Call Trace: [ 103.128374][ T6032] [ 103.128382][ T6032] __dump_stack+0x1d/0x30 [ 103.128408][ T6032] dump_stack_lvl+0x95/0xd0 [ 103.128434][ T6032] dump_stack+0x15/0x1b [ 103.128459][ T6032] warn_alloc+0x146/0x1c0 [ 103.128578][ T6032] ? preempt_schedule_irq+0x2c/0x50 [ 103.128611][ T6032] __vmalloc_node_range_noprof+0x9b/0x1040 [ 103.128646][ T6032] ? xskq_create+0x38/0x160 [ 103.128673][ T6032] ? should_fail_ex+0x31/0x280 [ 103.128714][ T6032] ? xskq_create+0x38/0x160 [ 103.128741][ T6032] ? should_failslab+0x8c/0xb0 [ 103.128831][ T6032] ? __kmalloc_cache_noprof+0x19b/0x400 [ 103.128859][ T6032] ? irqentry_exit_to_kernel_mode_preempt+0x2b/0x40 [ 103.128966][ T6032] ? xskq_create+0x38/0x160 [ 103.128990][ T6032] xskq_create+0xea/0x160 [ 103.129058][ T6032] ? xsk_init_queue+0x70/0xb0 [ 103.129080][ T6032] xsk_init_queue+0x70/0xb0 [ 103.129111][ T6032] xsk_setsockopt+0x3ef/0x640 [ 103.129139][ T6032] ? __pfx_xsk_setsockopt+0x10/0x10 [ 103.129208][ T6032] __sys_setsockopt+0x184/0x200 [ 103.129242][ T6032] __x64_sys_setsockopt+0x64/0x80 [ 103.129273][ T6032] x64_sys_call+0x248f/0x2550 [ 103.129298][ T6032] do_syscall_64+0x112/0x360 [ 103.129387][ T6032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.129412][ T6032] RIP: 0033:0x7fe973cce0d9 [ 103.129431][ T6032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.129475][ T6032] RSP: 002b:00007fe972727028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 103.129500][ T6032] RAX: ffffffffffffffda RBX: 00007fe973f55fa0 RCX: 00007fe973cce0d9 [ 103.129517][ T6032] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 103.129532][ T6032] RBP: 00007fe973d65024 R08: 0000000000000004 R09: 0000000000000000 [ 103.129548][ T6032] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.129574][ T6032] R13: 00007fe973f56038 R14: 00007fe973f55fa0 R15: 00007ffd4960c078 [ 103.129594][ T6032] [ 103.238806][ T6032] Mem-Info: [ 103.238817][ T6032] active_anon:30127 inactive_anon:1 isolated_anon:0 [ 103.238817][ T6032] active_file:640 inactive_file:24811 isolated_file:0 [ 103.238817][ T6032] unevictable:0 dirty:186 writeback:0 [ 103.238817][ T6032] slab_reclaimable:3359 slab_unreclaimable:16233 [ 103.238817][ T6032] mapped:36500 shmem:22582 pagetables:1301 [ 103.238817][ T6032] sec_pagetables:0 bounce:0 [ 103.238817][ T6032] kernel_misc_reclaimable:0 [ 103.238817][ T6032] free:1856906 free_pcp:5517 free_cma:0 [ 103.240083][ T6032] Node 0 active_anon:120508kB inactive_anon:4kB active_file:2560kB inactive_file:99244kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:146000kB dirty:744kB writeback:0kB shmem:90328kB kernel_stack:3696kB pagetables:5204kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 103.240214][ T6032] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 103.240284][ T6032] lowmem_reserve[]: 0 2877 7856 7856 [ 103.240340][ T6032] Node 0 DMA32 free:2943448kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2946972kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 103.240489][ T6032] lowmem_reserve[]: 0 0 4978 4978 [ 103.240587][ T6032] Node 0 Normal free:4468816kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:120508kB inactive_anon:4kB active_file:2560kB inactive_file:99244kB unevictable:0kB writepending:744kB zspages:0kB present:5242880kB managed:5098228kB mlocked:0kB bounce:0kB free_pcp:18544kB local_pcp:456kB free_cma:0kB [ 103.240664][ T6032] lowmem_reserve[]: 0 0 0 0 [ 103.240692][ T6032] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 103.240945][ T6032] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 2*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2943448kB [ 103.243103][ T6032] Node 0 Normal: 366*4kB (UME) 271*8kB (UME) 177*16kB (UME) 207*32kB (UME) 35*64kB (UME) 84*128kB (UM) 66*256kB (UME) 26*512kB (UM) 15*1024kB (UM) 15*2048kB (UME) 1066*4096kB (UM) = 4468704kB [ 103.243384][ T6032] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 103.243402][ T6032] 48030 total pagecache pages [ 103.243410][ T6032] 1 pages in swap cache [ 103.243417][ T6032] Free swap = 124992kB [ 103.243425][ T6032] Total swap = 124996kB [ 103.243499][ T6032] 2097051 pages RAM [ 103.243506][ T6032] 0 pages HighMem/MovableOnly [ 103.243513][ T6032] 81911 pages reserved [ 103.490968][ T6035] device-mapper: ioctl: device name cannot contain '/' [ 103.594119][ T29] audit: type=1400 audit(2000000029.469:19436): avc: denied { connect } for pid=6040 comm="syz.0.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 103.713678][ T6048] loop2: detected capacity change from 0 to 128 [ 104.358938][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.5.675'. [ 104.755935][ T6048] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.768320][ T6048] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.801191][ T29] audit: type=1400 audit(2000000030.689:19437): avc: denied { write } for pid=6047 comm="syz.2.676" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.832051][ T29] audit: type=1400 audit(2000000030.729:19438): avc: denied { write } for pid=6047 comm="syz.2.676" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.836725][ T29] audit: type=1400 audit(2000000030.729:19439): avc: denied { map } for pid=6047 comm="syz.2.676" path="/140/file1/file1" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 104.836768][ T29] audit: type=1400 audit(2000000030.729:19440): avc: denied { execute } for pid=6047 comm="syz.2.676" path="/140/file1/file1" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 105.130714][ T6080] loop1: detected capacity change from 0 to 256 [ 105.138759][ T29] audit: type=1400 audit(2000000030.979:19441): avc: denied { ioctl } for pid=6077 comm="syz.0.683" path="socket:[12930]" dev="sockfs" ino=12930 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 105.174244][ T3298] EXT4-fs error (device loop2): ext4_readdir:226: inode #11: comm syz-executor: path /140/file1/lost+found: directory fails checksum at offset 1024 [ 105.191588][ T3298] EXT4-fs error (device loop2): ext4_readdir:226: inode #11: comm syz-executor: path /140/file1/lost+found: directory fails checksum at offset 8192 [ 105.209806][ T3298] EXT4-fs error (device loop2): ext4_empty_dir:3116: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 105.210408][ T6088] netlink: 'syz.5.686': attribute type 1 has an invalid length. [ 105.210425][ T6088] netlink: 8 bytes leftover after parsing attributes in process `syz.5.686'. [ 105.210483][ T6088] netlink: 'syz.5.686': attribute type 1 has an invalid length. [ 105.210497][ T6088] netlink: 8 bytes leftover after parsing attributes in process `syz.5.686'. [ 105.210544][ T6088] iwpm_send_hello: Unable to send a nlmsg [ 105.250376][ T29] audit: type=1400 audit(2000000031.109:19442): avc: denied { write } for pid=3298 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.250817][ T3298] EXT4-fs error (device loop2): ext4_readdir:226: inode #11: comm syz-executor: path /140/file1/lost+found: directory fails checksum at offset 1024 [ 105.253224][ T3298] EXT4-fs error (device loop2): ext4_readdir:226: inode #11: comm syz-executor: path /140/file1/lost+found: directory fails checksum at offset 8192 [ 105.253767][ T3298] EXT4-fs error (device loop2): ext4_empty_dir:3116: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 105.255477][ T3298] EXT4-fs error (device loop2): ext4_readdir:226: inode #11: comm syz-executor: path /140/file1/lost+found: directory fails checksum at offset 1024 [ 105.255712][ T3298] EXT4-fs error (device loop2): ext4_readdir:226: inode #11: comm syz-executor: path /140/file1/lost+found: directory fails checksum at offset 8192 [ 105.255922][ T3298] EXT4-fs error (device loop2): ext4_empty_dir:3116: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 105.256123][ T3298] EXT4-fs error (device loop2): ext4_readdir:226: inode #11: comm syz-executor: path /140/file1/lost+found: directory fails checksum at offset 1024 [ 105.345318][ T6090] loop1: detected capacity change from 0 to 2048 [ 105.510649][ T6090] loop1: p2 p3 p7 [ 105.525661][ T6099] loop0: detected capacity change from 0 to 8192 [ 105.615828][ T3298] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.668190][ T351] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.960150][ T351] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.013251][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 106.023176][ T3517] udevd[3517]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 106.034291][ T3282] udevd[3282]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 106.060035][ T351] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.197069][ T351] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.253749][ T6120] loop0: detected capacity change from 0 to 8192 [ 106.847093][ T6130] FAULT_INJECTION: forcing a failure. [ 106.847093][ T6130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.847170][ T6130] CPU: 1 UID: 0 PID: 6130 Comm: syz.0.698 Not tainted syzkaller #0 PREEMPT(lazy) [ 106.847198][ T6130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.847281][ T6130] Call Trace: [ 106.847289][ T6130] [ 106.847297][ T6130] __dump_stack+0x1d/0x30 [ 106.847323][ T6130] dump_stack_lvl+0x95/0xd0 [ 106.847431][ T6130] dump_stack+0x15/0x1b [ 106.847452][ T6130] should_fail_ex+0x262/0x280 [ 106.847483][ T6130] should_fail+0xb/0x20 [ 106.847581][ T6130] should_fail_usercopy+0x1a/0x20 [ 106.847602][ T6130] _copy_from_iter+0xcc/0xe70 [ 106.847624][ T6130] ? _copy_from_iter+0x13b/0xe70 [ 106.847724][ T6130] copy_page_from_iter+0x15d/0x1f0 [ 106.847746][ T6130] skb_copy_datagram_from_iter+0x22d/0x480 [ 106.847848][ T6130] tun_get_user+0xc1e/0x2870 [ 106.847878][ T6130] ? ref_tracker_alloc+0x1eb/0x2f0 [ 106.847913][ T6130] tun_chr_write_iter+0x15a/0x210 [ 106.847957][ T6130] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 106.847999][ T6130] vfs_write+0x57f/0x9a0 [ 106.848027][ T6130] ksys_write+0xdc/0x1a0 [ 106.848053][ T6130] __x64_sys_write+0x40/0x50 [ 106.848076][ T6130] x64_sys_call+0x154e/0x2550 [ 106.848121][ T6130] do_syscall_64+0x112/0x360 [ 106.848144][ T6130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.848215][ T6130] RIP: 0033:0x7f91e3f2e0d9 [ 106.848232][ T6130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.848253][ T6130] RSP: 002b:00007f91e2966028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 106.848272][ T6130] RAX: ffffffffffffffda RBX: 00007f91e41b6090 RCX: 00007f91e3f2e0d9 [ 106.848286][ T6130] RDX: 000000000000ffdd RSI: 0000200000000840 RDI: 0000000000000004 [ 106.848486][ T6130] RBP: 00007f91e2966090 R08: 0000000000000000 R09: 0000000000000000 [ 106.848510][ T6130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.848524][ T6130] R13: 00007f91e41b6128 R14: 00007f91e41b6090 R15: 00007ffe0abf49f8 [ 106.848545][ T6130] [ 106.942853][ T351] bridge_slave_1: left allmulticast mode [ 106.942874][ T351] bridge_slave_1: left promiscuous mode [ 106.943027][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.954001][ T351] bridge_slave_0: left allmulticast mode [ 106.954095][ T351] bridge_slave_0: left promiscuous mode [ 106.954247][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.178062][ T351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.191500][ T351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.201223][ T351] bond0 (unregistering): Released all slaves [ 107.208162][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 107.208212][ T29] audit: type=1400 audit(2000000033.099:19544): avc: denied { write } for pid=6134 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.238169][ T29] audit: type=1400 audit(2000000033.129:19545): avc: denied { write } for pid=6150 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.291449][ T351] hsr_slave_0: left promiscuous mode [ 107.291774][ T351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.291867][ T351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.309085][ T351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.309102][ T351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.326768][ T351] veth1_macvtap: left promiscuous mode [ 107.326859][ T351] veth0_macvtap: left promiscuous mode [ 107.326904][ T351] veth1_vlan: left promiscuous mode [ 107.326942][ T351] veth0_vlan: left promiscuous mode [ 107.411242][ T6159] loop5: detected capacity change from 0 to 512 [ 107.411698][ T6159] ext4: Unknown parameter 'nouser_xattr' [ 107.430765][ T6162] loop4: detected capacity change from 0 to 512 [ 107.433055][ T6162] EXT4-fs (loop4): invalid #clusters per group: 95 [ 107.477939][ T6164] loop0: detected capacity change from 0 to 512 [ 107.483635][ T6166] netlink: 256 bytes leftover after parsing attributes in process `syz.1.706'. [ 107.485216][ T6164] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 107.485929][ T6164] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 107.486207][ T6164] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.704: iget: bogus i_mode (2) [ 107.486233][ T6164] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 107.486336][ T6164] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.704: couldn't read orphan inode 15 (err -117) [ 107.486365][ T6164] loop0: lost filesystem error report for type 5 error -117 [ 107.486818][ T6164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.497390][ T6166] netlink: 20 bytes leftover after parsing attributes in process `syz.1.706'. [ 107.557004][ T6169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=6169 comm=syz.1.706 [ 107.573218][ T351] team0 (unregistering): Port device team_slave_1 removed [ 107.585187][ T351] team0 (unregistering): Port device team_slave_0 removed [ 107.616871][ T6164] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 107.616921][ T6164] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #2: block 3: comm syz.0.704: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 107.648764][ T29] audit: type=1400 audit(2000000033.509:19546): avc: denied { write } for pid=6163 comm="syz.0.704" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.675286][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.798814][ T29] audit: type=1400 audit(2000000033.649:19547): avc: denied { setattr } for pid=6174 comm="syz.1.708" name="RXRPC" dev="sockfs" ino=13207 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 107.798850][ T29] audit: type=1400 audit(2000000033.649:19548): avc: denied { read } for pid=6174 comm="syz.1.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 107.857148][ T29] audit: type=1400 audit(2000000033.749:19549): avc: denied { setopt } for pid=6184 comm="syz.1.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.898098][ T6109] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.898154][ T6109] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.898211][ T6109] bridge_slave_0: entered allmulticast mode [ 108.212495][ T6199] Invalid ELF header magic: != ELF [ 108.216712][ T29] audit: type=1400 audit(2000000034.109:19550): avc: denied { module_load } for pid=6184 comm="syz.1.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 108.561941][ T6109] bridge_slave_0: entered promiscuous mode [ 108.709618][ T6109] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.710091][ T6109] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.711343][ T6109] bridge_slave_1: entered allmulticast mode [ 108.713405][ T6109] bridge_slave_1: entered promiscuous mode [ 108.844465][ T6109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.162425][ T6109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.181979][ T29] audit: type=1400 audit(2000000035.079:19551): avc: denied { write } for pid=6182 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.198042][ T6109] team0: Port device team_slave_0 added [ 109.200462][ T6109] team0: Port device team_slave_1 added [ 109.217671][ T29] audit: type=1400 audit(2000000035.109:19552): avc: denied { write } for pid=6218 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.222706][ T6109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.222719][ T6109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.222748][ T6109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.223331][ T6109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.223343][ T6109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.223406][ T6109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.243526][ T3023] 8021q: adding VLAN 0 to HW filter on device eth5 [ 109.256851][ T6109] hsr_slave_0: entered promiscuous mode [ 109.257286][ T6109] hsr_slave_1: entered promiscuous mode [ 109.257600][ T6109] debugfs: 'hsr0' already exists in 'hsr' [ 109.257613][ T6109] Cannot create hsr debugfs directory [ 109.492408][ T29] audit: type=1400 audit(2000000035.379:19553): avc: denied { write } for pid=6222 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.519003][ T351] IPVS: stop unused estimator thread 0... [ 109.522242][ T3023] 8021q: adding VLAN 0 to HW filter on device eth6 [ 109.660251][ T6109] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 109.675738][ T6109] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.679753][ T6109] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 109.691154][ T6109] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.692586][ T6109] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 109.703915][ T6109] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.714375][ T6109] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 109.720498][ T6109] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.816863][ T6109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.834129][ T6272] loop4: detected capacity change from 0 to 256 [ 109.841328][ T6109] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.862669][ T128] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.862713][ T128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.866787][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.866831][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.870585][ T3023] 8021q: adding VLAN 0 to HW filter on device eth7 [ 109.892077][ T6274] netlink: 'syz.5.720': attribute type 3 has an invalid length. [ 109.892759][ T6274] netlink: 184 bytes leftover after parsing attributes in process `syz.5.720'. [ 110.251071][ T3023] 8021q: adding VLAN 0 to HW filter on device eth8 [ 110.485197][ T6109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.605533][ T128] Bluetooth: hci0: Frame reassembly failed (-84) [ 110.761020][ T6109] veth0_vlan: entered promiscuous mode [ 110.772633][ T6109] veth1_vlan: entered promiscuous mode [ 110.800227][ T6109] veth0_macvtap: entered promiscuous mode [ 110.807719][ T6109] veth1_macvtap: entered promiscuous mode [ 110.825381][ T6109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.830917][ T6109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.870569][ T51] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.870661][ T51] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.870777][ T51] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.870815][ T51] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.274755][ T6383] veth0: entered promiscuous mode [ 111.280677][ T6385] device-mapper: ioctl: device name cannot contain '/' [ 111.288094][ T6383] netlink: 'syz.4.728': attribute type 1 has an invalid length. [ 111.288112][ T6383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.728'. [ 111.315825][ T6387] netlink: 28 bytes leftover after parsing attributes in process `syz.1.730'. [ 111.317501][ T6388] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 111.341384][ T6382] veth0: left promiscuous mode [ 111.434747][ T6401] loop4: detected capacity change from 0 to 512 [ 111.640870][ T6421] FAULT_INJECTION: forcing a failure. [ 111.640870][ T6421] name failslab, interval 1, probability 0, space 0, times 0 [ 111.640955][ T6421] CPU: 1 UID: 0 PID: 6421 Comm: syz.6.735 Not tainted syzkaller #0 PREEMPT(lazy) [ 111.640979][ T6421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.641061][ T6421] Call Trace: [ 111.641067][ T6421] [ 111.641096][ T6421] __dump_stack+0x1d/0x30 [ 111.641123][ T6421] dump_stack_lvl+0x95/0xd0 [ 111.641212][ T6421] dump_stack+0x15/0x1b [ 111.641312][ T6421] should_fail_ex+0x262/0x280 [ 111.641407][ T6421] ? alloc_mnt_ns+0x75/0x250 [ 111.641494][ T6421] should_failslab+0x8c/0xb0 [ 111.641522][ T6421] __kmalloc_cache_noprof+0x7a/0x400 [ 111.641554][ T6421] ? alloc_mnt_ns+0x75/0x250 [ 111.641596][ T6421] alloc_mnt_ns+0x75/0x250 [ 111.641694][ T6421] copy_mnt_ns+0x135/0x720 [ 111.641729][ T6421] ? kmem_cache_alloc_noprof+0x1f5/0x3f0 [ 111.641752][ T6421] ? create_new_namespaces+0x38/0x420 [ 111.641838][ T6421] create_new_namespaces+0x7f/0x420 [ 111.641871][ T6421] unshare_nsproxy_namespaces+0x115/0x150 [ 111.641900][ T6421] ksys_unshare+0x42b/0x710 [ 111.642106][ T6421] __x64_sys_unshare+0x1f/0x30 [ 111.642146][ T6421] x64_sys_call+0x1e33/0x2550 [ 111.642174][ T6421] do_syscall_64+0x112/0x360 [ 111.642197][ T6421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.642217][ T6421] RIP: 0033:0x7f2ae8a5e0d9 [ 111.642231][ T6421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.642294][ T6421] RSP: 002b:00007f2ae74b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 111.642317][ T6421] RAX: ffffffffffffffda RBX: 00007f2ae8ce5fa0 RCX: 00007f2ae8a5e0d9 [ 111.642330][ T6421] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 111.642342][ T6421] RBP: 00007f2ae74b7090 R08: 0000000000000000 R09: 0000000000000000 [ 111.642354][ T6421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.642366][ T6421] R13: 00007f2ae8ce6038 R14: 00007f2ae8ce5fa0 R15: 00007fffc610b068 [ 111.642410][ T6421] [ 112.095130][ T6450] loop6: detected capacity change from 0 to 512 [ 112.114355][ T6450] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 112.126896][ T6450] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 112.127017][ T6450] EXT4-fs (loop6): orphan cleanup on readonly fs [ 112.142267][ T6450] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4223: comm syz.6.738: Allocating blocks 41-42 which overlap fs metadata [ 112.142359][ T6450] loop6: lost filesystem error report for type 5 error -117 [ 112.143065][ T6450] EXT4-fs (loop6): Remounting filesystem read-only [ 112.143140][ T6450] EXT4-fs (loop6): 1 truncate cleaned up [ 112.143454][ T6450] EXT4-fs (loop6): pa ffff88810069bb60: logic 1, phys. 41, len 23 [ 112.143947][ T6450] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.245432][ T6109] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.301786][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 112.301809][ T29] audit: type=1400 audit(2000000038.199:19570): avc: denied { create } for pid=6488 comm="syz.6.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 112.301836][ T29] audit: type=1400 audit(2000000038.199:19571): avc: denied { setopt } for pid=6488 comm="syz.6.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 112.301857][ T29] audit: type=1400 audit(2000000038.199:19572): avc: denied { bind } for pid=6488 comm="syz.6.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 112.400954][ T29] audit: type=1400 audit(2000000038.299:19573): avc: denied { connect } for pid=6488 comm="syz.6.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 112.422281][ T6496] device-mapper: ioctl: device name cannot contain '/' [ 112.503145][ T29] audit: type=1400 audit(2000000038.399:19574): avc: denied { ioctl } for pid=6497 comm="syz.0.743" path="socket:[15667]" dev="sockfs" ino=15667 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 112.668774][ T6326] Bluetooth: hci0: command 0x1003 tx timeout [ 112.668869][ T4052] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 112.903404][ T6513] netlink: 268 bytes leftover after parsing attributes in process `syz.4.747'. [ 112.979877][ T6517] FAULT_INJECTION: forcing a failure. [ 112.979877][ T6517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.979913][ T6517] CPU: 0 UID: 0 PID: 6517 Comm: syz.6.750 Not tainted syzkaller #0 PREEMPT(lazy) [ 112.979951][ T6517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.979965][ T6517] Call Trace: [ 112.979972][ T6517] [ 112.979980][ T6517] __dump_stack+0x1d/0x30 [ 112.980006][ T6517] dump_stack_lvl+0x95/0xd0 [ 112.980053][ T6517] dump_stack+0x15/0x1b [ 112.980075][ T6517] should_fail_ex+0x262/0x280 [ 112.980110][ T6517] should_fail+0xb/0x20 [ 112.980139][ T6517] should_fail_usercopy+0x1a/0x20 [ 112.980180][ T6517] _copy_to_user+0x20/0xa0 [ 112.980201][ T6517] simple_read_from_buffer+0xb5/0x130 [ 112.980302][ T6517] proc_fail_nth_read+0x10e/0x150 [ 112.980335][ T6517] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 112.980417][ T6517] vfs_read+0x18e/0x7c0 [ 112.980563][ T6517] ? __rcu_read_unlock+0x4e/0x70 [ 112.980591][ T6517] ? __fget_files+0x184/0x1c0 [ 112.980611][ T6517] ? mutex_lock+0x57/0x90 [ 112.980642][ T6517] ksys_read+0xdc/0x1a0 [ 112.980717][ T6517] __x64_sys_read+0x40/0x50 [ 112.980740][ T6517] x64_sys_call+0x2135/0x2550 [ 112.980763][ T6517] do_syscall_64+0x112/0x360 [ 112.980785][ T6517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.980902][ T6517] RIP: 0033:0x7f2ae8a1e90e [ 112.980919][ T6517] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 112.980939][ T6517] RSP: 002b:00007f2ae74b6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 112.981030][ T6517] RAX: ffffffffffffffda RBX: 00007f2ae74b76c0 RCX: 00007f2ae8a1e90e [ 112.981044][ T6517] RDX: 000000000000000f RSI: 00007f2ae74b70a0 RDI: 0000000000000007 [ 112.981056][ T6517] RBP: 00007f2ae74b7090 R08: 0000000000000000 R09: 0000000000000000 [ 112.981069][ T6517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.981081][ T6517] R13: 00007f2ae8ce6038 R14: 00007f2ae8ce5fa0 R15: 00007fffc610b068 [ 112.981098][ T6517] [ 113.227855][ T6522] loop6: detected capacity change from 0 to 512 [ 113.244967][ T29] audit: type=1400 audit(2000000039.139:19575): avc: denied { create } for pid=6519 comm="syz.4.749" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 113.413077][ T29] audit: type=1400 audit(2000000039.309:19576): avc: denied { tracepoint } for pid=6527 comm="syz.1.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 113.435354][ T29] audit: type=1400 audit(2000000039.329:19577): avc: denied { read } for pid=6527 comm="syz.1.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 113.466129][ T6528] loop1: detected capacity change from 0 to 256 [ 113.526246][ T29] audit: type=1400 audit(2000000039.409:19578): avc: denied { write } for pid=6527 comm="syz.1.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 113.569607][ T6530] device-mapper: ioctl: device name cannot contain '/' [ 113.605972][ T29] audit: type=1400 audit(2000000039.499:19579): avc: denied { unlink } for pid=3304 comm="syz-executor" name="file0" dev="tmpfs" ino=881 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 113.635754][ T6534] netlink: 'syz.5.755': attribute type 10 has an invalid length. [ 113.635778][ T6534] netlink: 156 bytes leftover after parsing attributes in process `syz.5.755'. [ 113.640284][ T6533] device-mapper: ioctl: device name cannot contain '/' [ 113.817496][ T6539] loop5: detected capacity change from 0 to 128 [ 114.048616][ T6539] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.062820][ T6539] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.580360][ T5304] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.597562][ T6565] device-mapper: ioctl: device name cannot contain '/' [ 114.811874][ T6593] ªªªªªª: renamed from hsr0 (while UP) [ 114.923218][ T6598] device-mapper: ioctl: device name cannot contain '/' [ 114.932929][ T6596] tipc: Started in network mode [ 114.932962][ T6596] tipc: Node identity beb2dfb939e5, cluster identity 4711 [ 114.933071][ T6596] tipc: Enabled bearer , priority 0 [ 114.952570][ T6596] syzkaller0: entered promiscuous mode [ 114.952594][ T6596] syzkaller0: entered allmulticast mode [ 114.953006][ T6594] loop6: detected capacity change from 0 to 128 [ 115.031325][ T6594] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.034507][ T6594] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 115.380346][ T6605] tipc: Resetting bearer [ 115.387751][ T6608] loop4: detected capacity change from 0 to 512 [ 115.429481][ T6588] tipc: Resetting bearer [ 115.436295][ T6109] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.448182][ T6588] tipc: Disabling bearer [ 115.457248][ T6610] ªªªªªª: renamed from hsr0 (while UP) [ 115.489831][ T6610] ªªªªªª: failed to rename [ 115.578953][ T6610] loop1: detected capacity change from 0 to 128 [ 115.591629][ T6610] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.592066][ T6610] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 115.622585][ T4954] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.748673][ T6635] device-mapper: ioctl: device name cannot contain '/' [ 115.849597][ T6633] syzkaller1: entered promiscuous mode [ 115.855634][ T6633] syzkaller1: entered allmulticast mode [ 116.404933][ T6645] loop0: detected capacity change from 0 to 128 [ 116.446995][ T6645] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.447203][ T6645] ext4 filesystem being mounted at /150/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 116.516066][ T3297] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.717365][ T6668] 9pnet_virtio: no channels available for device 127.0.0.1 [ 117.374454][ T6701] netlink: 5 bytes leftover after parsing attributes in process `syz.5.802'. [ 117.412789][ T6705] loop1: detected capacity change from 0 to 512 [ 117.453153][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 117.453176][ T29] audit: type=1400 audit(2000000043.349:19585): avc: denied { write } for pid=6696 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.543593][ T29] audit: type=1400 audit(2000000043.439:19586): avc: denied { write } for pid=6713 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.697200][ T6732] veth0: entered promiscuous mode [ 117.702588][ T6732] netlink: 'syz.5.808': attribute type 1 has an invalid length. [ 117.702604][ T6732] netlink: 4 bytes leftover after parsing attributes in process `syz.5.808'. [ 117.711568][ T6731] veth0: left promiscuous mode [ 117.759134][ T29] audit: type=1400 audit(2000000043.649:19587): avc: denied { write } for pid=6720 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.802078][ T29] audit: type=1400 audit(2000000043.699:19588): avc: denied { write } for pid=6742 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.897507][ T6743] loop4: detected capacity change from 0 to 128 [ 117.947077][ T29] audit: type=1400 audit(2000000043.839:19589): avc: denied { write } for pid=6745 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.972765][ T6743] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.989057][ T6743] ext4 filesystem being mounted at /171/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 118.012635][ T29] audit: type=1400 audit(2000000043.909:19590): avc: denied { write } for pid=6758 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.090837][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.132089][ T29] audit: type=1400 audit(2000000044.029:19591): avc: denied { write } for pid=6760 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.282830][ T29] audit: type=1400 audit(2000000044.179:19592): avc: denied { write } for pid=6778 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.463275][ T6784] loop5: detected capacity change from 0 to 1024 [ 118.463744][ T6784] EXT4-fs (loop5): inodes count not valid: 1 vs 32 [ 118.617427][ T6808] ªªªªªª: renamed from hsr0 (while UP) [ 119.375251][ T6823] loop0: detected capacity change from 0 to 128 [ 119.459395][ T6823] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.499596][ T6823] ext4 filesystem being mounted at /157/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 119.537897][ T6831] loop6: detected capacity change from 0 to 512 [ 119.594270][ T3297] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.660162][ T6836] veth0: entered promiscuous mode [ 119.660780][ T6836] netlink: 'syz.1.827': attribute type 1 has an invalid length. [ 119.660795][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.827'. [ 119.668269][ T6835] veth0: left promiscuous mode [ 119.724340][ T6840] loop1: detected capacity change from 0 to 128 [ 119.738162][ T6840] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.738413][ T6840] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.774126][ T4954] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.814833][ T6846] device-mapper: ioctl: device name cannot contain '/' [ 119.860251][ T6847] netlink: 36 bytes leftover after parsing attributes in process `syz.1.831'. [ 119.870639][ T29] audit: type=1400 audit(2000000045.759:19593): avc: denied { append } for pid=6844 comm="syz.1.831" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 120.496101][ T6870] loop0: detected capacity change from 0 to 128 [ 120.512847][ T6870] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.522077][ T6870] ext4 filesystem being mounted at /163/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 120.528798][ T29] audit: type=1400 audit(2000000046.429:19594): avc: denied { write } for pid=6859 comm="syz.0.837" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.662340][ T3297] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.746903][ T6886] netlink: 'syz.6.842': attribute type 25 has an invalid length. [ 121.215460][ T6904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1040 sclass=netlink_route_socket pid=6904 comm=syz.0.859 [ 121.237142][ T6906] loop4: detected capacity change from 0 to 512 [ 121.482743][ T6918] loop0: detected capacity change from 0 to 128 [ 121.517610][ T6918] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 121.530626][ T6918] ext4 filesystem being mounted at /168/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 121.881562][ T3297] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 122.191237][ T6947] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 122.637333][ T6985] netlink: 14 bytes leftover after parsing attributes in process `syz.5.861'. [ 122.660139][ T6985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.671161][ T6985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.675130][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 122.675156][ T29] audit: type=1400 audit(2000000048.569:19607): avc: denied { write } for pid=6973 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.721512][ T6985] bond0 (unregistering): Released all slaves [ 122.727689][ T29] audit: type=1400 audit(2000000048.619:19608): avc: denied { write } for pid=6990 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.760511][ T6969] loop1: detected capacity change from 0 to 512 [ 122.837054][ T6969] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.857: corrupted in-inode xattr: invalid ea_ino [ 122.837263][ T6969] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 122.850822][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 122.850854][ C1] EXT4-fs (loop1): initial error at time 2000000048: ext4_iget_extra_inode:5210: inode 15 [ 122.850894][ C1] EXT4-fs (loop1): last error at time 2000000048: ext4_iget_extra_inode:5210: inode 15 [ 122.894232][ T6969] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.857: couldn't read orphan inode 15 (err -117) [ 122.894291][ T6969] loop1: lost filesystem error report for type 5 error -117 [ 122.910361][ T6969] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.004329][ T29] audit: type=1400 audit(2000000048.899:19609): avc: denied { write } for pid=7001 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.045032][ T29] audit: type=1400 audit(2000000048.939:19610): avc: denied { write } for pid=7014 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.069757][ T4954] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.304117][ T7029] tipc: Started in network mode [ 123.304168][ T7029] tipc: Node identity e2d3a965a8f5, cluster identity 4711 [ 123.304212][ T7029] tipc: Enabled bearer , priority 0 [ 123.323502][ T7029] syzkaller0: entered promiscuous mode [ 123.323609][ T7029] syzkaller0: entered allmulticast mode [ 123.408271][ T7033] loop5: detected capacity change from 0 to 512 [ 123.423215][ T7033] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.868: iget: bad i_size value: 38620345925642 [ 123.423253][ T7033] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 123.435899][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 123.435926][ C0] EXT4-fs (loop5): initial error at time 2000000049: ext4_orphan_get:1403: inode 15 [ 123.435954][ T7034] loop1: detected capacity change from 0 to 128 [ 123.435957][ C0] EXT4-fs (loop5): last error at time 2000000049: ext4_orphan_get:1403: inode 15 [ 123.450191][ T7034] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 123.450423][ T7034] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 123.455864][ T29] audit: type=1400 audit(2000000049.349:19611): avc: denied { write } for pid=7021 comm="syz.1.865" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.485365][ T7033] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.868: couldn't read orphan inode 15 (err -117) [ 123.485403][ T7033] loop5: lost filesystem error report for type 5 error -117 [ 123.519182][ T7033] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.532109][ T29] audit: type=1400 audit(2000000049.409:19612): avc: denied { write } for pid=7032 comm="syz.5.868" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.591069][ T7038] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.868: bg 0: block 5: invalid block bitmap [ 123.592886][ T7038] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 1 with error 28 [ 123.592913][ T7038] EXT4-fs (loop5): This should not happen!! Data will be lost [ 123.592913][ T7038] [ 123.593109][ T7038] EXT4-fs (loop5): Total free blocks count 0 [ 123.593123][ T7038] EXT4-fs (loop5): Free/Dirty block details [ 123.593136][ T7038] EXT4-fs (loop5): free_blocks=0 [ 123.593213][ T7038] EXT4-fs (loop5): dirty_blocks=1 [ 123.593226][ T7038] EXT4-fs (loop5): Block reservation details [ 123.593238][ T7038] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 123.677835][ T7037] tipc: Resetting bearer [ 123.688874][ T7028] tipc: Resetting bearer [ 123.699165][ T7028] tipc: Disabling bearer [ 123.800619][ T5304] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.835631][ T4954] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.852775][ T7042] loop4: detected capacity change from 0 to 512 [ 124.008301][ T31] ================================================================== [ 124.008337][ T31] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / fat_write_inode [ 124.008376][ T31] [ 124.008382][ T31] write to 0xffff88813eff46bc of 4 bytes by task 7053 on cpu 0: [ 124.008400][ T31] fat_write_inode+0x26d/0x580 [ 124.008431][ T31] __writeback_single_inode+0x33a/0x790 [ 124.008462][ T31] writeback_single_inode+0x16d/0x410 [ 124.008487][ T31] sync_inode_metadata+0x6e/0xa0 [ 124.008523][ T31] fat_flush_inodes+0x77/0x150 [ 124.008553][ T31] fat_truncate_blocks+0x53b/0x5b0 [ 124.008581][ T31] fat_write_end+0xba/0x160 [ 124.008609][ T31] generic_perform_write+0x314/0x490 [ 124.008635][ T31] __generic_file_write_iter+0x9e/0x120 [ 124.008660][ T31] generic_file_write_iter+0x77/0x1f0 [ 124.008687][ T31] vfs_write+0x57f/0x9a0 [ 124.008709][ T31] ksys_write+0xdc/0x1a0 [ 124.008730][ T31] __x64_sys_write+0x40/0x50 [ 124.008752][ T31] x64_sys_call+0x154e/0x2550 [ 124.008777][ T31] do_syscall_64+0x112/0x360 [ 124.008799][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.008819][ T31] [ 124.008824][ T31] read to 0xffff88813eff4600 of 512 bytes by task 31 on cpu 1: [ 124.008842][ T31] copy_folio_from_iter_atomic+0x728/0x10a0 [ 124.008865][ T31] generic_perform_write+0x2c4/0x490 [ 124.008887][ T31] shmem_file_write_iter+0xc5/0xf0 [ 124.008918][ T31] lo_rw_aio+0x6ab/0x760 [ 124.008944][ T31] loop_process_work+0x569/0xad0 [ 124.008972][ T31] loop_workfn+0x31/0x40 [ 124.008998][ T31] process_scheduled_works+0x56a/0xa50 [ 124.009029][ T31] worker_thread+0x569/0x750 [ 124.009060][ T31] kthread+0x223/0x270 [ 124.009077][ T31] ret_from_fork+0x146/0x330 [ 124.009110][ T31] ret_from_fork_asm+0x1a/0x30 [ 124.009132][ T31] [ 124.009136][ T31] Reported by Kernel Concurrency Sanitizer on: [ 124.009161][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(lazy) [ 124.009183][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.009197][ T31] Workqueue: loop4 loop_workfn [ 124.009228][ T31] ================================================================== [ 124.123461][ T7060] loop6: detected capacity change from 0 to 512 [ 124.124533][ T7060] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 124.175587][ T7060] Quota error (device loop6): do_check_range: Getting block 196613 out of range 1-5 [ 124.175686][ T7060] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 124.175705][ T7060] EXT4-fs error (device loop6): ext4_acquire_dquot:7069: comm syz.6.875: Failed to acquire dquot type 1 [ 124.175729][ T7060] loop6: lost filesystem error report for type 5 error -117 [ 124.180547][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 124.180582][ C0] EXT4-fs (loop6): last error at time 2000000050: ext4_acquire_dquot:7069 [ 124.190827][ T7060] EXT4-fs (loop6): 1 truncate cleaned up [ 124.191213][ T7060] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 124.444163][ T7065] Quota error (device loop6): do_check_range: Getting block 196613 out of range 1-5 [ 124.444207][ T7065] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 124.444224][ T7065] EXT4-fs error (device loop6): ext4_acquire_dquot:7069: comm syz.6.875: Failed to acquire dquot type 1 [ 124.955256][ T6109] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000.