last executing test programs: 45.1831886s ago: executing program 2 (id=1191): ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa}, @multicast2, 0x1d, 0x7}}) r0 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x2, &(0x7f0000000140)=""/29) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10104, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x1d144, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, r4, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x4, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x4}, 0x10026, 0x10003, 0x3ff, 0x2, 0x10000a, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffdfffffffbffff, 0xffffffffffffffff, 0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000d2cf00e97802000000000000000a0000000000000008000500", @ANYRES32, @ANYBLOB], 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8915, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8919, &(0x7f00000000c0)={'batadv_slave_0\x00'}) socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r5, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ac", 0x1}], 0x5}}], 0x2, 0x400c405) socket$nl_route(0x10, 0x3, 0x0) 44.129552283s ago: executing program 2 (id=1200): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) ioprio_set$uid(0x0, 0x0, 0x6000) socket$kcm(0x10, 0x2, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000180), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8006, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x6d82d2b6, r4}, 0x38) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xb7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$eJzs281rHOUfAPDvTLKb9teX5FfrS2vVaBGCYtKkVXvwolQQqSjooR5jsi2h20aaKLYWm4p4EqSgZ/Eo+hd4E0HUk+DVkycpFO2lrafITGaSTbp5odlk0+7nAzP7PDPP7Dzfnbdnn2c3gI7Vn82SiJ0R8UdE9M5lFxfon3u5ef3i2K3rF8eSmJ198+8kL3fj+sWxsmi53Y4iM5BGpJ8kxU4Wmzp/4fRovV47V+SHps+8OzR1/sIz758ZPVU7VTs7cvTokcPDzz838mxL4sziurH/o8kD+155+8prYyeuvPPLd1l9dxbrG+Nolf4s8H9mc0vXPdnqnbXZrnzek8+T7jZXhjXriojscFXy6783umLh4PXGyx+3tXLAhsqeTT3Lr56ZBe5hSay1ZKXhngHc/coHffb9t5w2odmxZVx7ce4LUBb3zWKaW9MdaVGmMv/9tvX6I+LEzL9fZVNsUD8EAECjz8a+PF6Nnvjw1revZm2P3vk1aTyQv/6Zz3cXYyh9EfH/iNgTEfdFxN6IuD8iL/tgRDy0zvrc3v5Jr67zLVeUtf9eKMa2Frf/ytZf9HUVuV15/JXk5ES9dqj4TAai0pPlh1fYxw/Hfv98uXWN7b9syvZftgWLelztXtJBNz46PRqV9US94NrliP3dzeJP5kcCkojYFxH757da0wDP7jIx8dQ3B5YrtHr8K2jBONPs11l4M1n8M7Ek/lLSOD45cdv45NC2qNcODZVnxe1+/e3TN5bb/7rib4FrtbnXhuO/tEhf0jheO9Xa/d/h+Z9Wk7fyceZqMeb4wej09LnhiGpyPM9Xi7L58pGFbct8WT47/wcONr/+9xTbZPE/HBHZSfxIRDwaEY8VdX88Ip6IiIMrxPjzS6vHH2mbjv/liPGm97/583/J8T9/4XR5a1xYsmKi6/RP3y+3/7Ud/yN5aqBYkt//VtGsOt1NqnynnxsAAADcTdL8N/BJOjifTtPBwbnf8O+N/6X1yanpp09Ovnd2fO638n1RScuert6iP7Q+Ua8NJzPFO1aSY1GvjRR9xWV/6eGi3/iLru15fnBssj7e5tih0+1Y5vrP/NXV7toBG2x706Uj1U2vCNAGS8fR08XZS6+HmwHcq/xfGzrXKtd/uln1ADaf5z90rmbX/6UleWMBcG/y/IfO5fqHDpX+2O4aAG3k+Q8dadU/77cnsa1xSXXlwtUtUueWJbbqQckTEWUi3RL1kdigRLvvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK3xXwAAAP//uIXZzg==") sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c0000001000010400000000000000000b000000", @ANYRES32=0x0, @ANYBLOB="03800000000000002c00128009000100626f6e64000000001c000280050001000600000008000500060000000800040000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 43.207437673s ago: executing program 2 (id=1202): fallocate(0xffffffffffffffff, 0x17, 0x254, 0x1250) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f00000002c0)={0x4, {{0xa, 0x4e22, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}, {{0xa, 0x4e22, 0xcf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}}, 0x108) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) r0 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (fail_nth: 3) 42.873866683s ago: executing program 2 (id=1205): clock_settime(0x0, &(0x7f00000001c0)={0x7f, 0x2f000000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50a, &(0x7f0000001f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L1nxFdHvnm7ARwgAAAB/eYWo/e1/YbKRLhQmJ+vXgA7F3kL5+sLi/yLi2lz9HoHRKBYuzZdL+QW50Sgm+fXP0ab8dEv+dHbd+KOBkVp+cvZ6eW6rg4ddbl+tzydt/T/10xqv8wLb0A66Dw1Yo179//C9TdoRYNP5/Yfdq6n/d3uyRcVfysDO5Pcfdq9O/f92fLbqvQu+M2D7q+rLsKut3v97P28T2L4G481Gunbbc8e7bYGdqPvvvzMD2MF63yQ/tOZ7/5cT1aHObw1HhycGDK+rip6JkQ51bUkiHVltYIHFiOhv5ZH1VJEPAbs/4aGwtgKHov2tgVhtq6TzcxwiotJ1q/RT6bk/lw/32/hLN5Kn9Qdl9ggwfybKRjebz5f7abHPw90l8Vu/zc/5PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKP8HgAA//87jdA6") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffa000/0x3000)=nil) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r2}, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$peeksig(0x4209, r3, &(0x7f00000000c0)={0xffffffffffffffff, 0x1, 0xffffffffffffff35}, &(0x7f0000000200)=[{}, {}, {}]) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x225, 0x70bd2c, 0x25dfdbff, {{@in=@private=0xa010102, @in6=@remote, 0x4e21, 0x0, 0x4e22, 0x4000, 0x0, 0x20, 0x20, 0x8}, {@in=@loopback, 0x4d3, 0x2b}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, {0x2, 0xfffffffffffffff8, 0x7, 0x800, 0x9, 0xffffffff80000001, 0x9, 0x100}, {0xfffffffffffffffc, 0xd2, 0x5, 0xb}, {0xe, 0x3, 0x401}, 0x70bd2d, 0x3507, 0x2, 0x3, 0xa, 0x84}, [@algo_auth={0x48, 0x1, {{'rmd256\x00'}}}]}, 0x138}}, 0x800) sendmsg$can_raw(r1, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}, 0xee}, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/71, 0x47}], 0x1, 0x8000, 0x0, 0x12) 42.118227546s ago: executing program 2 (id=1214): ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa}, @multicast2, 0x1d, 0x7}}) r0 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x2, &(0x7f0000000140)=""/29) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10104, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x1d144, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, r4, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ptrace$ARCH_MAP_VDSO_32(0x1e, r1, 0x3, 0x2002) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x4, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x4}, 0x10026, 0x10003, 0x3ff, 0x2, 0x10000a, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffdfffffffbffff, 0xffffffffffffffff, 0xa) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000d2cf00e97802000000000000000a0000000000000008000500", @ANYRES32=r5, @ANYBLOB], 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8915, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8919, &(0x7f00000000c0)={'batadv_slave_0\x00'}) socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ac", 0x1}], 0x5}}], 0x2, 0x400c405) 41.641222771s ago: executing program 2 (id=1220): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) accept$phonet_pipe(r0, 0x0, &(0x7f0000001040)) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x2, 0xa, 0x73) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) socket$packet(0x11, 0x3, 0x300) 41.640937801s ago: executing program 32 (id=1220): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) accept$phonet_pipe(r0, 0x0, &(0x7f0000001040)) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x2, 0xa, 0x73) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) socket$packet(0x11, 0x3, 0x300) 6.0835108s ago: executing program 4 (id=1433): syz_open_dev$tty20(0xc, 0x4, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000001080)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@test_dummy_encryption_v1}, {@user_xattr}, {@test_dummy_encryption_v1}, {@nodiscard}, {@data_err_ignore}, {@resuid}, {@journal_ioprio}, {@resuid}]}, 0x1, 0xbcb, &(0x7f0000000480)="$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") r0 = socket$tipc(0x1e, 0x5, 0x0) unshare(0x22020400) bind$tipc(r0, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x0, 0xfbfffffd}}, 0x10) 5.970879463s ago: executing program 4 (id=1435): syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) io_uring_setup(0x7d0a, &(0x7f0000000080)={0x0, 0x11fb, 0x2, 0x2, 0x8b}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) file_setattr(r0, 0x0, 0x0, 0x0, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x11, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffff8, 0x1, @perf_config_ext={0x1fc, 0x4}, 0x102802, 0x2e, 0xfffffff8, 0x3, 0x1, 0x8001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x8) capget(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, &(0x7f00000001c0)={0x7f, 0x4, 0x200003, 0xcf5, 0x7, 0xfff}) lseek(0xffffffffffffffff, 0xc8, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r3, &(0x7f0000002200)=[{{0x0, 0xf5, 0x0}}], 0x40000000000027f, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a32000000003400038030000080090006400000000024000b802000018007000100637400001400028008000160ee00000000000040000000000900010073797a30"], 0xe4}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000010ffffffffffff00000000000086dd69ee052001d02cfffc020000000000000000000000000001ff0200000000000000000000000000013c00000000000000040108000100000087"], 0x20a) 3.403590444s ago: executing program 5 (id=1454): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x8080) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x48, 0x1e, 0x109, 0x0, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_mirred={0x30, 0x0, 0x0, 0x0, {{0xb, 0x9}, {0x4, 0xe}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x58) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'gre0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x8000, 0x7800, 0x3, 0x9, {{0x14, 0x4, 0x1, 0x8, 0x50, 0x64, 0x0, 0x1, 0x2f, 0x0, @empty, @multicast1, {[@cipso={0x86, 0x3c, 0x3, [{0x7, 0x11, "973e0a32b6bba9ba1ac58b3b9671b8"}, {0x2, 0x5, "53f1df"}, {0x2, 0xb, "fb7865ccc26f746541"}, {0x7, 0xf, "0ed45fd65f267780d51a60df5f"}, {0x5, 0x6, "dfe2c991"}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0) r4 = syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000003c0)={[], [{@context={'context', 0x3d, 'user_u'}}, {@permit_directio}, {@hash}]}, 0x1, 0x5d7, &(0x7f0000000e40)="$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") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x19}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0134014030d9"}) unshare(0x22020600) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x10000000, 0xffffffff, 0x8}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000280)={r4, &(0x7f0000000080)='\\\x00', 0x101542, &(0x7f00000000c0)={@align=0x8, {0x1, 0x9, 0x0, 0xdef}}, 0xf, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000240)=0x100}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xffd7, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x58e, &(0x7f0000000700), 0x1, 0x459, &(0x7f0000000240)="$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") 3.357751425s ago: executing program 4 (id=1455): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@nojournal_checksum}, {@grpquota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@i_version}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x8) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d80), 0x0, 0x8080) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240), 0x1, 0x4ff, &(0x7f0000000ac0)="$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") ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x10, 0xa0002f5}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x2c180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x1, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x2b1e}, 0x58) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002ebd7000040000001400000018000180140002006e657464657673696d3000000000000005000c0000000000050018"], 0x3c}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000340)={'gre0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x8000, 0x7800, 0x3, 0x9, {{0x7, 0x4, 0x1, 0x8, 0x1c, 0x64, 0x0, 0x1, 0x2f, 0x0, @empty, @multicast1, {[@cipso={0x86, 0x6, 0x3}]}}}}}) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000003c0)={[], [{@context={'context', 0x3d, 'user_u'}}, {@permit_directio}, {@hash}]}, 0x1, 0x5d7, &(0x7f0000000e40)="$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") r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@can_delroute={0x154, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@CGW_MOD_SET={0x15, 0x4, {{{0x4, 0x1, 0x0, 0x1}, 0x6, 0x1, 0x0, 0x0, "7341c4fefd61f0d4"}, 0x1}}, @CGW_CS_CRC8={0x11e, 0x6, {0x13, 0x7c, 0x72, 0xf, 0x37, "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", 0x3, "37e5315e76f5d17e8789b7cc06298073f370470b"}}, @CGW_LIM_HOPS={0x5, 0xd, 0x1}]}, 0x154}}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x19}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)=0x13) 3.037822335s ago: executing program 3 (id=1457): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x5, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r1, 0x6, 0x2e, &(0x7f0000000000)=0xfffffffd, 0x4) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r3, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x10, 0x7, 0x9, 0x4, 0x3, 0x3e, 0xfffffff9, 0x1d8, 0x40, 0x223, 0x8, 0x6, 0x38, 0x2, 0x74, 0x7, 0x104}, [{0x60000000, 0x4, 0x400, 0x0, 0x94c5, 0xb, 0x5, 0xffffffff00000001}, {0x6474e551, 0xa68, 0x5, 0xffffffffffffffff, 0x100000001, 0xfffffffffffffffa, 0xa, 0xffffffffffffffff}]}, 0xb0) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, &(0x7f0000002300)=[{0x0}], 0x1, 0x74a, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r4) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000087e343565606fa090ab76bae979ceb1805e9b3918830c46a7de729529961c0bd41637ed7df15b8c59fe41c07ca30ba84ab55259141cb7eb4c6eafca39384d31f3d0a2f33102ba6db0b55009675279279dc5644fa179c00176522d51a3402dffc1a774066ad262b40e9540a02ccf516c1f51efbeaf4617a4da1b3284eea", @ANYRES16=r5, @ANYBLOB="010724bd7020ffdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40850}, 0x4000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x2004c004) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fsopen(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0xfffffffffffffffb}, 0x0, 0x0, 0x100, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create1(0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2.90026941s ago: executing program 3 (id=1458): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe0200108500000007000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0xfffffffffffffff3], 0x0, 0x0, 0x1, 0x1}}, 0x40) 2.833575822s ago: executing program 3 (id=1459): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000080), 0x1}, 0x11c0ad, 0x0, 0x0, 0x4, 0x6, 0x8001, 0x7ffe}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x70, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x3, 0x2}, {}, {0x4, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xb, 0x8, 0x0, 0x7, 0x3, 0x4, 0xf000, 0x2}}, @TCA_U32_HASH={0x8, 0x2, 0x8001}, @TCA_U32_INDEV={0x14, 0x8, 'gretap0\x00'}, @TCA_U32_HASH={0x8, 0x2, 0x4}, @TCA_U32_DIVISOR={0x8, 0x4, 0x2b}]}}]}, 0x70}}, 0x24040094) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'lo\x00'}) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f00000005c0)}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a7ec80adaf5235, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_setup(0x2d32, &(0x7f0000000840)={0x0, 0x55b8, 0x2000, 0x2, 0xf2}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) recvmsg$can_raw(r0, &(0x7f0000000800)={&(0x7f00000004c0)=@sco, 0x80, &(0x7f0000000780)=[{&(0x7f0000000540)=""/9, 0x9}, {&(0x7f0000000600)=""/213, 0xd5}], 0x2}, 0x40000141) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r4, 0x0, 0x40d4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r6, r6, 0x2f, 0x0, @void}, 0x1a) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={r7, r6, 0x4, r6}, 0x10) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB='@\x00'/20, @ANYRES32=r5, @ANYRES32=r0, @ANYBLOB="01000000000000000500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x13, 0x64, &(0x7f0000000c40)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x84, '\x00', r5, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0xb, 0x9, 0xfffff000}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, r8, 0xffffffffffffffff], &(0x7f0000000ac0)=[{0x3, 0x5, 0xc, 0x2}, {0x4, 0x4, 0x5, 0x9}, {0x2, 0x3, 0x4, 0x3}, {0x3, 0x3, 0x6, 0xe077cfe8eeff70ee}], 0x10, 0x40}, 0x94) dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@block_validity}, {}, {@errors_continue}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") setxattr$security_ima(&(0x7f0000000000)='./file1\x00', &(0x7f0000000200), &(0x7f0000000c80)=ANY=[], 0x700, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 2.689748796s ago: executing program 4 (id=1460): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000080), 0x1}, 0x11c0ad, 0x0, 0x0, 0x4, 0x6, 0x8001, 0x7ffe}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x70, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x3, 0x2}, {}, {0x4, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xb, 0x8, 0x0, 0x7, 0x3, 0x4, 0xf000, 0x2}}, @TCA_U32_HASH={0x8, 0x2, 0x8001}, @TCA_U32_INDEV={0x14, 0x8, 'gretap0\x00'}, @TCA_U32_HASH={0x8, 0x2, 0x4}, @TCA_U32_DIVISOR={0x8, 0x4, 0x2b}]}}]}, 0x70}}, 0x24040094) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'lo\x00'}) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f00000005c0)}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a7ec80adaf5235, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_setup(0x2d32, &(0x7f0000000840)={0x0, 0x55b8, 0x2000, 0x2, 0xf2}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) recvmsg$can_raw(r0, &(0x7f0000000800)={&(0x7f00000004c0)=@sco, 0x80, &(0x7f0000000780)=[{&(0x7f0000000540)=""/9, 0x9}, {&(0x7f0000000600)=""/213, 0xd5}], 0x2}, 0x40000141) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r4, 0x0, 0x40d4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r6, r6, 0x2f, 0x0, @void}, 0x1a) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={r7, r6, 0x4, r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x13, 0x64, &(0x7f0000000c40)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x84, '\x00', r5, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0xb, 0x9, 0xfffff000}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000ac0)=[{0x3, 0x5, 0xc, 0x2}, {0x4, 0x4, 0x5, 0x9}, {0x2, 0x3, 0x4, 0x3}, {0x3, 0x3, 0x6, 0xe077cfe8eeff70ee}], 0x10, 0x40}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@block_validity}, {}, {@errors_continue}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") setxattr$security_ima(&(0x7f0000000000)='./file1\x00', &(0x7f0000000200), &(0x7f0000000c80)=ANY=[], 0x700, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 2.580745679s ago: executing program 5 (id=1462): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, 0x0, 0x4000) sendmsg$nl_route_sched(r3, 0x0, 0x40850) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0x0, 0x8ffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./file1\x00', 0x4c142, 0x104) sendfile(r5, r5, 0x0, 0xe3aa6ea) (fail_nth: 5) fcntl$setlease(r1, 0x400, 0x1) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f0000000000)={0x0, 0x64}) unlink(&(0x7f0000000280)='./file1\x00') 2.532029081s ago: executing program 0 (id=1463): iopl(0x3) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = eventfd2(0x74a6, 0x0) writev(r1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000140)=""/226, 0xe2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x10802, 0x0, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x1b, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000400000008500000017000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) lsm_get_self_attr(0x65, 0x0, 0x0, 0x0) 2.476761503s ago: executing program 3 (id=1466): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000280)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@noload}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f00000013c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000005bc0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x0, 0x7, 0x6, 0x807e9, 0x2000000000, 0x2000000000002, 0x3, 0x100000000003, 0x7ffd}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x4440, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) futex(0x0, 0x5, 0x4, 0x0, 0x0, 0x20000002) 2.472229073s ago: executing program 4 (id=1467): modify_ldt$write2(0x11, &(0x7f0000000100)={0x810, 0x100000, 0x4000, 0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, @perf_config_ext={0x3, 0xffffffffffffffff}, 0x90, 0x0, 0x0, 0x1, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @random="7792d99bba25", @dev={0xac, 0x14, 0x14, 0x11}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = socket(0x1d, 0x2, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x6a, 0x10, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002400)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xfffffe01, 0x800) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280), 0xff, 0x25e, &(0x7f0000000e80)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000120001eefdffffff0200000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x44010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a000000140007800800124000000000050015"], 0x64}}, 0x20008040) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.471895363s ago: executing program 0 (id=1468): r0 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES32=r1], 0x38}}, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000dbdf25080012000100000008000100010000000800010002000000000000000000000000002a5590312e40d0ee15b231a721558a7bbeb02401d1aeb7fb45e4488efb3ab6ab1f86be89561984ef1948429368f663e4163e243f1e6b636b6d24fbb342fc1ba58e6ca5a8f3f4a34a00000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="140100001b0001000000000000000000010100800c0001000f"], 0x114}], 0x1, 0x0, 0x0, 0x4000001}, 0x40) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x10, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x9}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) write$vga_arbiter(r5, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0xec}}, 0x44000) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000fbdbdf250c0000000800010002000000080001000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="764f12ea9774ae1ea5663078fed3610350f904cfe988a2e0c9848cf1f7156a18c7139b26ba72fcd330c871f5f3a636bab9b29255c6832919ecddf4fe0c231358c8b335f6813f3cda2194a5babe09c3e291add95a2e383d40108d68878fcc08a8180ebea10781cf74642ec340ae2cb911fca9fd9d9288ccc388b947d56a70b2bd9dc577378c25b9006b6f9a2ce02bd32c71b34bf20751a64a7021a33f14387e95664383f3b9ae4be9d1422af45704a46fac94a6f26f6180c50a596976d69d7042367ac7e6662e43ecd6db6ceee3ebf2ee7657eb9062a0eed6d6fc0b814880da5854792f489bfa0e3e29d9dd49a669e7cd6c9e75641f4d17c15ad7937df8950191da712fea50d9f0f771ec0d2e034678ea238ca4923dddf6cd547d1460880438bb58338d8265e4e59cf3142e5e98bf62427b1c4c49b632a2255a2b736290920a372735a5d75213a5ca693a9525726adb40470980b4a0d426"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) socket$igmp6(0xa, 0x3, 0x2) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r10, 0x8954, &(0x7f0000000240)={{0x2, 0x4e20, @empty}, {0x1, @multicast}, 0x4, {0x2, 0x4e22, @remote}, 'lo\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x48004) ioctl$SIOCSIFHWADDR(r9, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="0400"}) sendmsg$IEEE802154_ASSOCIATE_RESP(r6, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc48edbf2c1b66fc4) 2.24467891s ago: executing program 0 (id=1469): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x5, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r1, 0x6, 0x2e, &(0x7f0000000000)=0xfffffffd, 0x4) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r3, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x10, 0x7, 0x9, 0x4, 0x3, 0x3e, 0xfffffff9, 0x1d8, 0x40, 0x223, 0x8, 0x6, 0x38, 0x2, 0x74, 0x7, 0x104}, [{0x60000000, 0x4, 0x400, 0x0, 0x94c5, 0xb, 0x5, 0xffffffff00000001}, {0x6474e551, 0xa68, 0x5, 0xffffffffffffffff, 0x100000001, 0xfffffffffffffffa, 0xa, 0xffffffffffffffff}]}, 0xb0) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, &(0x7f0000002300)=[{0x0}], 0x1, 0x74a, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r4) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000087e343565606fa090ab76bae979ceb1805e9b3918830c46a7de729529961c0bd41637ed7df15b8c59fe41c07ca30ba84ab55259141cb7eb4c6eafca39384d31f3d0a2f33102ba6db0b55009675279279dc5644fa179c00176522d51a3402dffc1a774066ad262b40e9540a02ccf516c1f51efbeaf4617a4da1b3284eea", @ANYRES16=r5, @ANYBLOB="010724bd7020ffdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40850}, 0x4000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x2004c004) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fsopen(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0xfffffffffffffffb}, 0x0, 0x0, 0x100, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create1(0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close(r3) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2.24416027s ago: executing program 5 (id=1470): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x200000003, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELRULE={0x2b8, 0x8, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_USERDATA={0xd1, 0x7, 0x1, 0x0, "09d769caa1b0765f0f3d68ab418e421b0219bf14ecce41744bac266c0770c5c3221fd565f5670801ed8e2079d2a48f74c56a15af466071b50b716d9536908c1e5e97a88293e22ba6e4503495551182cdb9ff75538818607ac34048562bfa364506172651cd7b3964c9f3baafa2556227dd7f0da12ecffc19499045fce6c718852e74bbf44e58f4257aea50b26413a31e8fa22b2669a72251f85427a5d76915c63c47afd00c3769bd6e6923f92a25e00e8589e6a826814e92ea992e646ed0d48994f326a207daf4bcccd6be64ba"}, @NFTA_RULE_EXPRESSIONS={0x1a0, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x2c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x154, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x144, 0x2, 0x0, 0x1, [@NFTA_DYNSET_EXPRESSIONS={0x12c, 0xa, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x80000000}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x30, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8}]}}}, {0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xd, 0x1, 'CHECKSUM\x00'}, @NFTA_TARGET_NAME={0x9, 0x1, 'DNAT\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x5}]}}}]}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x2e}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x70, 0x3, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'batadv0\x00'}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_FLAGS={0x8}]}, @NFT_MSG_NEWRULE={0x148, 0x6, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0xf9, 0x7, 0x1, 0x0, "aad6b5ac276b9d10dc07e8bffa8aeecc0c644dc86d85a8c36467a2c201928087406c39392321577ab2514f9bcc0251214ab59fd9bbc02924fd9578057326fde6a8b9ed3a1783047017eda333bc2310ad1581adf023b78c980507a330d0da55e21f7d915267735bfac0f1fcaa826f67b7ced8327ec5c5416145ab0eb6a26f303c8470631aca6465a654395da60fadf046fe39221dd68e64d8f8252d28cc1ec591fac480be8b991fdd36bda77de854a782b8de79bb66f0611953ac3b1b26fe6c738d90a24ff7bb3b5bbf366b28849339d8a97633c7b1ed6daa16fb370791b22e9a62146e97d0bd43221f0dc8457d8d9e9501430da330"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x4b8}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000005c0)='rw\x00', 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000580)=@req3={0x8, 0x0, 0x7, 0xfffffffd, 0xfffffffa, 0x2f2, 0x4}, 0x1c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', &(0x7f00000000c0)="8c", 0xff57) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x29, 0x48a, 0x0, 0x0) 2.148742883s ago: executing program 1 (id=1471): ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa}, @multicast2, 0x1d, 0x7}}) r0 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x2, &(0x7f0000000140)=""/29) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10104, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x1d144, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, r4, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r1, 0x3, 0x2002) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x4, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x4}, 0x10026, 0x10003, 0x3ff, 0x2, 0x10000a, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffdfffffffbffff, 0xffffffffffffffff, 0xa) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000d2cf00e97802000000000000000a0000000000000008000500", @ANYRES32=r6, @ANYBLOB], 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8915, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8919, &(0x7f00000000c0)={'batadv_slave_0\x00'}) socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r5, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ac", 0x1}], 0x5}}], 0x2, 0x400c405) 1.948635859s ago: executing program 0 (id=1472): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xfff) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000051cd1a780b47bea9640a00010076786c616e00000018"], 0x50}}, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r0, &(0x7f0000000040)=@unlock_all, 0xb) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)="94", 0x1}], 0x1, 0x0, 0x0, 0x5c656f613d3ffcde}}], 0x2, 0x4000045) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="93", 0x1, 0x8840, 0x0, 0x0) close(0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000001080)=ANY=[@ANYBLOB="6d706f8f3dff696e643aff00f1ff68632c00"]) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x1}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c00008008"], 0x20}, 0x1, 0x0, 0x0, 0x600c8050}, 0x0) 1.768675505s ago: executing program 5 (id=1473): ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa}, @multicast2, 0x1d, 0x7}}) r0 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x2, &(0x7f0000000140)=""/29) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10104, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x1d144, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, r4, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r1, 0x3, 0x2002) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x4, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x4}, 0x10026, 0x10003, 0x3ff, 0x2, 0x10000a, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffdfffffffbffff, 0xffffffffffffffff, 0xa) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000d2cf00e97802000000000000000a0000000000000008000500", @ANYRES32=r6, @ANYBLOB], 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8915, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8919, &(0x7f00000000c0)={'batadv_slave_0\x00'}) socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r5, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ac", 0x1}], 0x5}}], 0x2, 0x400c405) 1.647899188s ago: executing program 3 (id=1474): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x4000004) 691.866518ms ago: executing program 0 (id=1475): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ptrace$ARCH_GET_FS(0x1e, 0x0, 0x0, 0x1003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) (async) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x65, 0x0, 0x1, 0x0, 0x0, 0x8, 0x40808, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x1, @perf_bp={&(0x7f0000000180), 0x3}, 0x0, 0x0, 0x4, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x65, 0x5, 0x0, 0x8, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={&(0x7f0000000380)}, 0x40, 0x0, 0x210000, 0x3, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, r2, 0x0) (async) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) (async, rerun: 32) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) (async, rerun: 32) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000000c0)=ANY=[@ANYRES8=r1], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4048800) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r3, 0x0, 0x119) (async) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) (async) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x8000) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c7000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'veth1_macvtap\x00', 0x1000}) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r6 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x3, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x3, 0x6}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xf, 0xc}, {0x5, 0xfff1}, {0xffff, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x240008c1}, 0x4041080) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="580000000206010800000000000000000a00000012000300686173683a6e65742c706f727400000000000c0007800500150005000000050005000200737901000100000000000100070000000fe36c939e656d0c9ff11e119b7f2ca96266abe4945833a4d827e593080a1bafa2bf1a49fd1a569024"], 0x58}}, 0x84000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b70000008e000000bca31000000000002403000030feffff720af0ffa4ffffff91a4f0ff000000001f030000000000002e140200000000002604fdffa4ffffff14010000000300001d130000000000007a0a00fe0020001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb150c537bf2085651d6dd6ce9bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf0134c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4136dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91ff073e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baaa244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b7025488316241f64c851a7fe7396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30c1675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010fcdb9913823333a70c2a4ab000000000000003f8dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc090000000000000061563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9901010000b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba435926b61c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0aa81192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e5789c6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06eef98aee88ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06ee0ff698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e913ac1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e495295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000060000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c97552606ffff97e86dc995604346262a177b06c634969a31b5717c416f8224662f4dd46d6081cb96dd6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) r9 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r9, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x4e23, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x36}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 599.047941ms ago: executing program 4 (id=1476): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x8, 0x6, 0x7, 0x2, 0xb, 0x1007, 0x5}}, {0xe, 0x2, [0x7f, 0x9, 0x4, 0x8, 0x10]}}, {{0x1c, 0x1, {0x4, 0x80, 0x160, 0xfffffffe, 0x1, 0x1, 0x35e, 0x2}}, {0x8, 0x2, [0x80, 0x3]}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x7, 0x9, 0x7, 0x9, 0x6, 0x800004, 0x1, 0xffff8001, 0xf, 0x2, 0xc, 0x4, 0x5, 0xc, 0x3, 0x8}}]}}]}, 0x6c}}, 0x24008004) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec040000002ffffe800000000088fc70738daf7b3200aaff0200"], 0xfdef) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000004240)=0x6, 0x4) r7 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r7) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x4008, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)="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", 0x1c0}, {&(0x7f0000000780)="618fc6537e44676a48e49a88f4bc1c3af1b4de453d5095f7a1ad54f271ee87ed8c87636e1f947094fb04637d1f9ed92a8ecb8f522d5b2c7c3efa12f8bd8d7508029d8da6e381339b18586378e42172441893c18db0fada50702c7556871542e86fc54c2ebee0ff9aac1b25b2f5bbe44a3c738464d2c108598195331c6d088da0e1d2162e0c87ee6ee9ee48a40d7716aec81a05add97578dbd8d08fdfe2026d4c257121a06aed4008623b02c616cfd56e407ea2634248c814ff3c5b57432ba9c754076fe471d5c52db9b54600c9c3aa7d5de34a457760bbf2a92c12c3", 0xdc}], 0x2}, 0x10000000) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) recvmmsg(r0, &(0x7f0000005440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002a00)=""/195, 0xc3}, 0x81}], 0x1, 0x2, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99925bd700000000000fc00000000000000007fbb4b05000000ac1e00010000000000000000a05d000000000000000000000a003080"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) close(0x3) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000001c0)={{0x2, 0x0, 0x7fff, 0x1, 0x200}}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="19006576aaa36d86e9000000d2ff0000daf4fa906749e778fdb2fd9964c7b691c0b9672349ccb19d399eac63", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 485.267694ms ago: executing program 1 (id=1477): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x4e20, 0xffff, @dev={0xfe, 0x80, '\x00', 0x37}, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 472.965505ms ago: executing program 5 (id=1478): iopl(0x3) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = eventfd2(0x74a6, 0x0) writev(r1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000140)=""/226, 0xe2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x10802, 0x0, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x1b, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000400000008500000017000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) lsm_get_self_attr(0x65, 0x0, 0x0, 0x0) 389.582188ms ago: executing program 1 (id=1479): r0 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES32=r1], 0x38}}, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000dbdf25080012000100000008000100010000000800010002000000000000000000000000002a5590312e40d0ee15b231a721558a7bbeb02401d1aeb7fb45e4488efb3ab6ab1f86be89561984ef1948429368f663e4163e243f1e6b636b6d24fbb342fc1ba58e6ca5a8f3f4a34a00000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="140100001b0001000000000000000000010100800c0001000f"], 0x114}], 0x1, 0x0, 0x0, 0x4000001}, 0x40) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x10, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x9}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) write$vga_arbiter(r5, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0xec}}, 0x44000) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000fbdbdf250c0000000800010002000000080001000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) socket$igmp6(0xa, 0x3, 0x2) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r10, 0x8954, &(0x7f0000000240)={{0x2, 0x4e20, @empty}, {0x1, @multicast}, 0x4, {0x2, 0x4e22, @remote}, 'lo\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x48004) ioctl$SIOCSIFHWADDR(r9, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="0400"}) sendmsg$IEEE802154_ASSOCIATE_RESP(r6, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc48edbf2c1b66fc4) 389.106158ms ago: executing program 3 (id=1480): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = creat(&(0x7f0000000140)='./file2\x00', 0x99) fallocate(r0, 0x0, 0xbf5, 0x2000402) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xb}, {0x10, 0x5}, {0xc, 0x3}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2404c090}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) socket$netlink(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0xa, 0x0, 0x0, 0x5, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x4, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x44201, 0x0) fallocate(r2, 0x17, 0x254, 0x1250) setsockopt$inet6_group_source_req(r2, 0x29, 0x1, &(0x7f00000002c0)={0x4, {{0xa, 0x4e22, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}, {{0xa, 0x4e22, 0xcf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}}, 0x108) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000880)={0x1, {{0xa, 0x4e21, 0x8, @empty}}, 0x1, 0x2, [{{0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}, {{0xa, 0x4e23, 0x81, @loopback, 0x6}}]}, 0x190) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x32, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) 340.448529ms ago: executing program 1 (id=1481): timer_create(0x4, &(0x7f0000000040)={0x0, 0x17, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x1, &(0x7f0000000140)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000180)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, 0x0, 0x0) 306.26622ms ago: executing program 1 (id=1482): modify_ldt$write2(0x11, &(0x7f0000000100)={0x810, 0x100000, 0x4000, 0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, @perf_config_ext={0x3, 0xffffffffffffffff}, 0x90, 0x0, 0x0, 0x1, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="000088a8", 0x5e0, 0x14000b01, &(0x7f00000000c0)={0x11, 0x8100, r2, 0x1, 0x80, 0x6, @multicast}, 0x14) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) socket(0x1d, 0x2, 0x6) preadv(0xffffffffffffffff, &(0x7f0000002400)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xfffffe01, 0x800) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280), 0xff, 0x25e, &(0x7f0000000e80)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000120001eefdffffff0200000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x44010) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) socket$inet6(0xa, 0x80002, 0x0) mprotect(&(0x7f0000505000/0x3000)=nil, 0x3000, 0x6) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 173.386054ms ago: executing program 0 (id=1483): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x108, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0xd}, [@CTA_EXPECT_NAT={0x74, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @CTA_EXPECT_NAT={0x80, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}}}}]}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)={0x50, 0x464, 0x400, 0x70bd2b, 0x25dfdbfd, "46a765f534e6b2f0238b9a445437b6e7259cbadf9bc868ab0295ecb64ed3596c84efff179a8941bcc625fd2ba69ccba40a907ae052349b9b57cb2b14715ef865", ["", "", ""]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendto(r0, &(0x7f0000000c40)="120000001200e7ef00", 0x9, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x70bd23, 0x25dfdbfc, {0xa, 0x0, 0x5, 0x0, 0x4}, [@NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}]}, 0x24}, 0x1, 0x20000, 0x0, 0x24044855}, 0x9080) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000140)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x1, 0x1}, 0x10) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r8}, &(0x7f0000000540), &(0x7f0000000580)=r9}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r8, &(0x7f0000000780)}, 0x20) 172.730694ms ago: executing program 5 (id=1484): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x10000, 0x0, 0x4, 0x8, 0x3fe}, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80440, 0x0) socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010025"], 0x0, 0x46, 0x0, 0x1}, 0x28) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c000000020601080000010000000000000000000900020073797a320000000005000400000000001400078005001500050000000800114000000000050005000a000000050001000600000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x48010}, 0x84000) socket(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x10000, 0x0, 0x0, 0x5, 0x7ffe, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000f5000800000000000000000018000000e502000400000000000000005c81e53736052a70b124c581f174f2bdedfe128b9ad9a4ea6f6002b4d304cf88683f4904048be7b75031f5afead69aff74bc7348ac13c206ab74eb3ad0182e4d4f740e39f2c09e757e39e08817de3afd325273aa"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$inet(0x2, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000000cf08000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x250, 0xc8, 0x8, 0x250, 0x5803, 0x340, 0x2e8, 0x2e8, 0x340, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xff], [], 'batadv0\x00', 'wlan0\x00', {0xff}, {}, 0x11, 0x1, 0x2}, 0x0, 0x230, 0x250, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'gre0\x00', {0x1, 0x1, 0x0, 0x5, 0x7ff, 0x7, 0x6, 0xfffffffd, 0x40, 0x20}, {0x100000000}}}, @common=@inet=@udp={{0x30}, {[0x4e24, 0x4e23], [0x4e23, 0x4e24]}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x2, 0xfffffffc, 0x800, 'snmp_trap\x00', {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) sendmmsg$inet6(r2, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x9, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000200)=0xfe) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) recvfrom$inet6(r2, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) 0s ago: executing program 1 (id=1485): r0 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES32=r1], 0x38}}, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000dbdf25080012000100000008000100010000000800010002000000000000000000000000002a5590312e40d0ee15b231a721558a7bbeb02401d1aeb7fb45e4488efb3ab6ab1f86be89561984ef1948429368f663e4163e243f1e6b636b6d24fbb342fc1ba58e6ca5a8f3f4a34a00000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="140100001b0001000000000000000000010100800c0001000f"], 0x114}], 0x1, 0x0, 0x0, 0x4000001}, 0x40) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x10, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x9}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) write$vga_arbiter(r5, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0xec}}, 0x44000) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000fbdbdf250c0000000800010002000000080001000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) socket$igmp6(0xa, 0x3, 0x2) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r10, 0x8954, &(0x7f0000000240)={{0x2, 0x4e20, @empty}, {0x1, @multicast}, 0x4, {0x2, 0x4e22, @remote}, 'lo\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x48004) ioctl$SIOCSIFHWADDR(r9, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="0400"}) sendmsg$IEEE802154_ASSOCIATE_RESP(r6, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc48edbf2c1b66fc4) kernel console output (not intermixed with test programs): .833573][ T6969] __memcg_kmem_charge_page+0x199/0x3a0 [ 196.833663][ T6969] __alloc_frozen_pages_noprof+0x18a/0x350 [ 196.833698][ T6969] alloc_pages_mpol+0xa9/0x1d0 [ 196.833843][ T6969] alloc_pages_noprof+0x8f/0x140 [ 196.833891][ T6969] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 196.833938][ T6969] __kvmalloc_node_noprof+0x3a0/0x590 [ 196.834001][ T6969] ? futex_hash_allocate+0x192/0x920 [ 196.834024][ T6969] ? futex_hash_allocate+0x192/0x920 [ 196.834048][ T6969] ? futex_hash_allocate+0x192/0x920 [ 196.834076][ T6969] futex_hash_allocate+0x192/0x920 [ 196.834171][ T6969] ? cap_task_prctl+0x13f/0x6b0 [ 196.834210][ T6969] futex_hash_prctl+0xd8/0xf0 [ 196.834294][ T6969] __se_sys_prctl+0x4f4/0x13b0 [ 196.834324][ T6969] __x64_sys_prctl+0x67/0x80 [ 196.834352][ T6969] x64_sys_call+0x2533/0x3020 [ 196.834380][ T6969] do_syscall_64+0x136/0x3c0 [ 196.834404][ T6969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.834489][ T6969] RIP: 0033:0x7fa04466ce59 [ 196.834508][ T6969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.834529][ T6969] RSP: 002b:00007fa0430a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 196.834553][ T6969] RAX: ffffffffffffffda RBX: 00007fa0448e6090 RCX: 00007fa04466ce59 [ 196.834632][ T6969] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 196.834715][ T6969] RBP: 00007fa044702e6f R08: 0000000000000000 R09: 0000000000000000 [ 196.834730][ T6969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.834744][ T6969] R13: 00007fa0448e6128 R14: 00007fa0448e6090 R15: 00007ffdf401ad48 [ 196.834766][ T6969] [ 196.834773][ T6969] memory: usage 307200kB, limit 307200kB, failcnt 2329 [ 197.116611][ T6969] memory+swap: usage 311988kB, limit 9007199254740988kB, failcnt 0 [ 197.248714][ T6969] kmem: usage 138360kB, limit 9007199254740988kB, failcnt 0 [ 197.265591][ T6969] Memory cgroup stats for /syz3: [ 197.292996][ T6969] cache 4096 [ 197.301804][ T6969] rss 24576 [ 197.302193][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.305574][ T6969] shmem 0 [ 197.317191][ T6969] mapped_file 4096 [ 197.321044][ T6969] dirty 0 [ 197.324153][ T6969] writeback 0 [ 197.327562][ T6969] workingset_refault_anon 36 [ 197.332178][ T6969] workingset_refault_file 2129 [ 197.337283][ T6969] swap 1126400 [ 197.340831][ T6969] swapcached 2064384 [ 197.344979][ T6969] pgpgin 243604 [ 197.348504][ T6969] pgpgout 243596 [ 197.352223][ T6969] pgfault 168680 [ 197.356028][ T6969] pgmajfault 41 [ 197.359645][ T6969] inactive_anon 28672 [ 197.365534][ T6969] active_anon 0 [ 197.369073][ T6969] inactive_file 0 [ 197.372730][ T6969] active_file 4096 [ 197.376972][ T6969] unevictable 0 [ 197.380503][ T6969] hierarchical_memory_limit 314572800 [ 197.386172][ T6969] hierarchical_memsw_limit 9223372036854771712 [ 197.392547][ T6969] total_cache 4096 [ 197.442584][ T6969] total_rss 24576 [ 197.452832][ T6969] total_shmem 0 [ 197.462479][ T6969] total_mapped_file 4096 [ 197.475496][ T6969] total_dirty 0 [ 197.518930][ T6984] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1087'. [ 197.533470][ T6969] total_writeback 0 [ 197.551517][ T6969] total_workingset_refault_anon 37 [ 197.573128][ T6969] total_workingset_refault_file 2129 [ 197.606686][ T6969] total_swap 4882432 [ 197.627119][ T6969] total_swapcached 5824512 [ 197.682182][ T6969] total_pgpgin 244522 [ 197.698052][ T6983] loop4: detected capacity change from 0 to 1024 [ 197.708395][ T6969] total_pgpgout 244514 [ 197.723869][ T6969] total_pgfault 169603 [ 197.742647][ T6983] EXT4-fs: Ignoring removed orlov option [ 197.752709][ T6969] total_pgmajfault 41 [ 197.769999][ T6969] total_inactive_anon 28672 [ 197.789745][ T6969] total_active_anon 0 [ 197.806151][ T6969] total_inactive_file 0 [ 197.825856][ T6969] total_active_file 4096 [ 197.842838][ T6969] total_unevictable 0 [ 197.858520][ T6969] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1084,pid=6957,uid=0 [ 197.875524][ T28] audit: type=1400 audit(1782165434.713:1176): avc: denied { read write } for pid=6988 comm="syz.1.1090" name="usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 197.910786][ T6983] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.975846][ T6969] Memory cgroup out of memory: Killed process 6957 (syz.3.1084) total-vm:94300kB, anon-rss:1252kB, file-rss:22280kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 198.012736][ T28] audit: type=1400 audit(1782165434.713:1177): avc: denied { open } for pid=6988 comm="syz.1.1090" path="/dev/usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 198.036619][ T28] audit: type=1400 audit(1782165434.723:1178): avc: denied { ioctl } for pid=6988 comm="syz.1.1090" path="/dev/usbmon1" dev="devtmpfs" ino=143 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 198.061903][ T28] audit: type=1400 audit(1782165434.763:1179): avc: denied { create } for pid=6988 comm="syz.1.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 198.081472][ T28] audit: type=1400 audit(1782165434.773:1180): avc: denied { read } for pid=6988 comm="syz.1.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 198.247676][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.292393][ T7006] loop2: detected capacity change from 0 to 512 [ 199.984330][ T7006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.997388][ T7006] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.117231][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.231683][ T7020] loop1: detected capacity change from 0 to 512 [ 200.246484][ T7020] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 200.267868][ T7020] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.1101: bad orphan inode 131083 [ 200.278430][ T7020] loop1: lost filesystem error report for type 5 error -117 [ 200.279008][ T7020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.360591][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 200.360609][ T28] audit: type=1400 audit(1782165437.223:1184): avc: denied { write } for pid=7019 comm="syz.1.1101" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 200.393246][ T7028] loop2: detected capacity change from 0 to 512 [ 200.417328][ T7028] EXT4-fs: Ignoring removed mblk_io_submit option [ 200.426253][ T7028] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 200.437069][ T7028] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 200.445442][ T7028] EXT4-fs (loop2): orphan cleanup on readonly fs [ 200.452338][ T7028] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1098: Invalid block bitmap block 0 in block_group 0 [ 200.466124][ T7028] loop2: lost filesystem error report for type 5 error -117 [ 200.466322][ T7028] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1098: Invalid block bitmap block 0 in block_group 0 [ 200.487064][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 200.487086][ C0] EXT4-fs (loop2): last error at time 1782165437: ext4_read_block_bitmap_nowait:483 [ 200.503402][ T7028] loop2: lost filesystem error report for type 5 error -117 [ 200.503838][ T7028] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1098: Invalid block bitmap block 0 in block_group 0 [ 200.527588][ T7028] loop2: lost filesystem error report for type 5 error -117 [ 200.527917][ T7028] Quota error (device loop2): write_blk: dquota write failed [ 200.544850][ T7028] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 200.555357][ T7028] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1098: Failed to acquire dquot type 1 [ 200.567177][ T7028] loop2: lost filesystem error report for type 5 error -28 [ 200.567801][ T7028] EXT4-fs (loop2): 1 orphan inode deleted [ 200.598788][ T12] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 200.608419][ T12] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:0: Failed to release dquot type 1 [ 200.620473][ T12] loop2: lost filesystem error report for type 5 error -117 [ 200.621945][ T7028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 201.016193][ T7034] loop4: detected capacity change from 0 to 1024 [ 201.026589][ T7034] EXT4-fs: Ignoring removed orlov option [ 201.057231][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.082161][ T7034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.186998][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.202048][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.694375][ T7054] loop4: detected capacity change from 0 to 512 [ 201.977949][ T7054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.996870][ T7054] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.044763][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.053909][ T28] audit: type=1400 audit(1782165438.893:1185): avc: denied { write } for pid=7053 comm="syz.4.1110" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 202.077765][ T28] audit: type=1400 audit(1782165438.893:1186): avc: denied { write } for pid=7053 comm="syz.4.1110" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 202.438932][ T7068] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1111'. [ 202.512206][ T7067] loop3: detected capacity change from 0 to 1024 [ 202.536870][ T7067] EXT4-fs: Ignoring removed orlov option [ 202.618166][ T7067] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.868613][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.103872][ T7077] loop3: detected capacity change from 0 to 512 [ 203.203350][ T7077] EXT4-fs: Ignoring removed mblk_io_submit option [ 203.224607][ T7077] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 203.246703][ T7077] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 203.258053][ T7077] EXT4-fs (loop3): orphan cleanup on readonly fs [ 203.275385][ T7077] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1115: Invalid block bitmap block 0 in block_group 0 [ 203.314874][ T7077] loop3: lost filesystem error report for type 5 error -117 [ 203.317810][ T7077] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1115: Invalid block bitmap block 0 in block_group 0 [ 203.325698][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 203.325787][ C1] EXT4-fs (loop3): last error at time 1782165440: ext4_read_block_bitmap_nowait:483 [ 203.474222][ T7077] loop3: lost filesystem error report for type 5 error -117 [ 203.477217][ T7077] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1115: Invalid block bitmap block 0 in block_group 0 [ 203.513360][ T7083] loop4: detected capacity change from 0 to 1024 [ 203.541430][ T7077] loop3: lost filesystem error report for type 5 error -117 [ 203.547371][ T7077] Quota error (device loop3): write_blk: dquota write failed [ 203.575932][ T7083] EXT4-fs: Ignoring removed bh option [ 203.608405][ T7077] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 203.620856][ T7077] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.1115: Failed to acquire dquot type 1 [ 203.645606][ T7077] loop3: lost filesystem error report for type 5 error -28 [ 203.712755][ T7093] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1117'. [ 203.738975][ T7077] EXT4-fs (loop3): 1 orphan inode deleted [ 203.745513][ T30] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 203.754546][ T30] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:1: Failed to release dquot type 1 [ 203.767360][ T7093] tmpfs: Unknown parameter 'mpo' [ 203.785310][ T7077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 203.928028][ T7083] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.965522][ T7083] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=257 sclass=netlink_tcpdiag_socket pid=7083 comm=syz.4.1118 [ 203.985843][ T28] audit: type=1400 audit(1782165440.833:1187): avc: denied { write } for pid=7082 comm="syz.4.1118" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 204.071041][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.142065][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.394172][ T7103] loop3: detected capacity change from 0 to 128 [ 204.534182][ T7107] random: crng reseeded on system resumption [ 205.236231][ T7114] loop4: detected capacity change from 0 to 1024 [ 205.251055][ T7114] EXT4-fs: Ignoring removed orlov option [ 205.402499][ T7114] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.428415][ T28] audit: type=1400 audit(1782165442.293:1188): avc: denied { bind } for pid=7117 comm="syz.3.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 205.527426][ T7118] Cannot find del_set index 4 as target [ 205.556506][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.954127][ T7131] loop4: detected capacity change from 0 to 1024 [ 205.960982][ T7131] EXT4-fs: Ignoring removed bh option [ 206.224306][ T7131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.243911][ T7131] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=257 sclass=netlink_tcpdiag_socket pid=7131 comm=syz.4.1132 [ 206.303675][ T7136] loop2: detected capacity change from 0 to 512 [ 206.310811][ T7136] EXT4-fs: Ignoring removed mblk_io_submit option [ 206.324303][ T7136] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 206.499444][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.548590][ T7136] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 206.588333][ T7136] EXT4-fs (loop2): orphan cleanup on readonly fs [ 206.630671][ T7136] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1133: Invalid block bitmap block 0 in block_group 0 [ 206.644284][ T7136] fserror_report: 1 callbacks suppressed [ 206.644368][ T7136] loop2: lost filesystem error report for type 5 error -117 [ 206.651887][ T7136] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1133: Invalid block bitmap block 0 in block_group 0 [ 206.699633][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 206.706120][ C1] EXT4-fs (loop2): last error at time 1782165443: ext4_read_block_bitmap_nowait:483 [ 206.719683][ T7136] loop2: lost filesystem error report for type 5 error -117 [ 206.723054][ T7136] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1133: Invalid block bitmap block 0 in block_group 0 [ 206.811953][ T7136] loop2: lost filesystem error report for type 5 error -117 [ 206.817104][ T7136] Quota error (device loop2): write_blk: dquota write failed [ 206.875196][ T7136] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 206.914072][ T7136] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1133: Failed to acquire dquot type 1 [ 206.939287][ T7136] loop2: lost filesystem error report for type 5 error -28 [ 206.971253][ T7136] EXT4-fs (loop2): 1 orphan inode deleted [ 207.008038][ T68] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 207.024803][ T68] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:4: Failed to release dquot type 1 [ 207.483781][ T28] audit: type=1326 audit(1782165444.343:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7159 comm="syz.1.1138" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2825ce59 code=0x7ffc0000 [ 207.520708][ T7160] FAULT_INJECTION: forcing a failure. [ 207.520708][ T7160] name failslab, interval 1, probability 0, space 0, times 0 [ 207.586507][ T7160] CPU: 0 UID: 0 PID: 7160 Comm: syz.1.1138 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 207.586593][ T7160] Tainted: [W]=WARN [ 207.586601][ T7160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 207.586694][ T7160] Call Trace: [ 207.586700][ T7160] [ 207.586707][ T7160] __dump_stack+0x1d/0x30 [ 207.586736][ T7160] dump_stack_lvl+0x95/0xd0 [ 207.586756][ T7160] dump_stack+0x15/0x1b [ 207.586802][ T7160] should_fail_ex+0x25e/0x270 [ 207.586829][ T7160] should_failslab+0x8c/0xb0 [ 207.586850][ T7160] __kmalloc_node_track_caller_noprof+0xd5/0x4c0 [ 207.586882][ T7160] ? sidtab_sid2str_get+0xa0/0x130 [ 207.586978][ T7160] ? sidtab_sid2str_get+0xa0/0x130 [ 207.587013][ T7160] kmemdup_noprof+0x2b/0x70 [ 207.587044][ T7160] sidtab_sid2str_get+0xa0/0x130 [ 207.587137][ T7160] security_sid_to_context_core+0x1eb/0x2e0 [ 207.587178][ T7160] security_sid_to_context+0x27/0x40 [ 207.587253][ T7160] selinux_lsmprop_to_secctx+0x67/0xf0 [ 207.587287][ T7160] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 207.587312][ T7160] audit_log_subj_ctx+0xa4/0x3e0 [ 207.587422][ T7160] audit_log_task_context+0x48/0x70 [ 207.587543][ T7160] audit_log_task+0xf3/0x240 [ 207.587576][ T7160] audit_seccomp+0x6a/0x110 [ 207.587686][ T7160] __seccomp_filter+0x905/0x1370 [ 207.587716][ T7160] ? __fget_files+0x184/0x1c0 [ 207.587741][ T7160] ? mutex_lock+0x57/0x90 [ 207.587818][ T7160] ? mutex_unlock+0x4e/0x90 [ 207.587857][ T7160] __secure_computing+0x7d/0x150 [ 207.587887][ T7160] do_syscall_64+0xd4/0x3c0 [ 207.587910][ T7160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.587991][ T7160] RIP: 0033:0x7f9e2825ce59 [ 207.588006][ T7160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.588025][ T7160] RSP: 002b:00007f9e26caf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 207.588047][ T7160] RAX: ffffffffffffffda RBX: 00007f9e284d5fa0 RCX: 00007f9e2825ce59 [ 207.588061][ T7160] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 207.588111][ T7160] RBP: 00007f9e26caf090 R08: 0000000000000000 R09: 0000000000000000 [ 207.588124][ T7160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.588137][ T7160] R13: 00007f9e284d6038 R14: 00007f9e284d5fa0 R15: 00007fffa8d46018 [ 207.588156][ T7160] [ 207.590135][ T7160] audit: error in audit_log_subj_ctx [ 207.593827][ T68] loop2: lost filesystem error report for type 5 error -117 [ 207.719761][ T28] audit: type=1326 audit(1782165444.373:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7159 comm="syz.1.1138" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2825ce59 code=0x7ffc0000 [ 207.867971][ T28] audit: type=1326 audit(1782165444.383:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7159 comm="syz.1.1138" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2825ce59 code=0x7ffc0000 [ 207.893469][ T28] audit: type=1326 audit(1782165444.383:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7159 comm="syz.1.1138" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2825ce59 code=0x7ffc0000 [ 207.919034][ T28] audit: type=1326 audit(1782165444.383:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7159 comm="syz.1.1138" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9e2821d68e code=0x7ffc0000 [ 207.988174][ T7136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 208.228842][ T7136] syz.2.1133 (7136) used greatest stack depth: 8320 bytes left [ 208.411872][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.019878][ T7181] loop0: detected capacity change from 0 to 1024 [ 210.081308][ T7181] EXT4-fs: Ignoring removed orlov option [ 210.421617][ T7181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.455136][ T7201] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1152'. [ 210.565968][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.677192][ T7204] loop1: detected capacity change from 0 to 128 [ 210.787405][ T7208] loop0: detected capacity change from 0 to 1024 [ 210.804661][ T7204] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 210.811572][ T7208] EXT4-fs: Ignoring removed orlov option [ 210.850587][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 210.850600][ T28] audit: type=1400 audit(1782165447.713:1209): avc: denied { execute } for pid=7209 comm="syz.3.1154" path="/237/cpu.stat" dev="tmpfs" ino=1314 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 210.882984][ T7204] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.958621][ T7218] loop2: detected capacity change from 0 to 512 [ 210.995617][ T28] audit: type=1400 audit(1782165447.853:1210): avc: denied { write } for pid=7203 comm="syz.1.1156" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 210.999180][ T7208] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.054650][ T7218] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 211.066477][ T7226] loop4: detected capacity change from 0 to 256 [ 211.100985][ T28] audit: type=1400 audit(1782165447.943:1211): avc: denied { write } for pid=7203 comm="syz.1.1156" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 211.130336][ T7218] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.1155: bad orphan inode 131083 [ 211.141439][ T7226] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 211.184142][ T7218] loop2: lost filesystem error report for type 5 error -117 [ 211.185164][ T7218] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.238015][ T28] audit: type=1400 audit(1782165448.103:1212): avc: denied { write } for pid=7214 comm="syz.2.1155" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 211.295329][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.406133][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.435974][ T7233] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 211.550306][ T7237] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1162'. [ 211.564148][ T7237] tmpfs: Unknown parameter 'mpo' [ 211.834608][ T3297] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 212.086419][ T7243] loop3: detected capacity change from 0 to 512 [ 212.110151][ T7243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.153118][ T28] audit: type=1400 audit(1782165448.993:1213): avc: denied { connect } for pid=7244 comm="syz.1.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 212.184097][ T7249] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1161'. [ 212.196017][ T7243] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.251191][ T7246] loop1: detected capacity change from 0 to 4096 [ 212.276193][ T28] audit: type=1400 audit(1782165449.093:1214): avc: denied { write } for pid=7242 comm="syz.3.1164" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 212.297890][ T28] audit: type=1400 audit(1782165449.093:1215): avc: denied { write } for pid=7242 comm="syz.3.1164" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 212.447644][ T7246] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.483982][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.496945][ T28] audit: type=1400 audit(1782165449.343:1216): avc: denied { setopt } for pid=7244 comm="syz.1.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 212.540684][ T28] audit: type=1400 audit(1782165449.343:1217): avc: denied { write } for pid=7244 comm="syz.1.1163" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 212.605020][ T28] audit: type=1400 audit(1782165449.433:1218): avc: denied { map } for pid=7244 comm="syz.1.1163" path="/250/file0/blkio.bfq.io_serviced_recursive" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 212.605950][ T7263] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1166'. [ 212.726332][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.824507][ T7273] loop3: detected capacity change from 0 to 512 [ 212.950883][ T7273] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 212.992013][ T7273] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.1171: bad orphan inode 131083 [ 212.992513][ T7280] loop1: detected capacity change from 0 to 128 [ 213.125764][ T7273] loop3: lost filesystem error report for type 5 error -117 [ 213.133755][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 213.147605][ C0] EXT4-fs (loop3): initial error at time 1782165449: ext4_orphan_get:1425 [ 213.156271][ C0] EXT4-fs (loop3): last error at time 1782165449: ext4_orphan_get:1425 [ 213.158134][ T7280] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 213.180809][ T7273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.200866][ T7280] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.420384][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.431717][ T3297] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 213.586562][ T7294] loop3: detected capacity change from 0 to 512 [ 213.682922][ T7292] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1176'. [ 213.702293][ T7294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.765628][ T7294] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.845992][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.879756][ T7302] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1179: corrupted in-inode xattr: invalid ea_ino [ 213.899862][ T7302] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 213.900315][ T7302] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1179: couldn't read orphan inode 15 (err -117) [ 213.909562][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 213.909576][ C1] EXT4-fs (loop2): initial error at time 1782165450: ext4_iget_extra_inode:5180: inode 15 [ 213.909600][ C1] EXT4-fs (loop2): last error at time 1782165450: ext4_iget_extra_inode:5180: inode 15 [ 214.003098][ T7302] loop2: lost filesystem error report for type 5 error -117 [ 214.004848][ T7302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.423670][ T7314] EXT4-fs: Ignoring removed orlov option [ 214.460536][ T7318] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1181'. [ 214.478039][ T7314] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.524461][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.595874][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.130574][ T7343] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1187'. [ 215.199533][ T7340] EXT4-fs (loop2): 1 orphan inode deleted [ 215.205771][ T7340] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.248769][ T7339] bond3: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 215.258547][ T7339] 8021q: adding VLAN 0 to HW filter on device bond3 [ 215.462535][ T7346] set_capacity_and_notify: 3 callbacks suppressed [ 215.462555][ T7346] loop3: detected capacity change from 0 to 128 [ 215.478320][ T7346] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 215.495368][ T7346] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.688715][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.794534][ T3300] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 215.943099][ T7356] loop1: detected capacity change from 0 to 512 [ 216.148775][ T7356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.205397][ T7362] loop3: detected capacity change from 0 to 1024 [ 216.230206][ T7356] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.248869][ T7362] EXT4-fs: Ignoring removed orlov option [ 216.307404][ T7362] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.366806][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 216.366818][ T28] audit: type=1400 audit(1782165453.233:1228): avc: denied { write } for pid=7354 comm="syz.1.1190" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 216.467881][ T28] audit: type=1400 audit(1782165453.283:1229): avc: denied { write } for pid=7354 comm="syz.1.1190" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 216.524141][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.541883][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.849653][ T7385] loop0: detected capacity change from 0 to 512 [ 216.856317][ T7385] EXT4-fs: Ignoring removed mblk_io_submit option [ 216.867529][ T7385] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 216.883594][ T7385] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 216.891706][ T7385] EXT4-fs (loop0): orphan cleanup on readonly fs [ 216.898583][ T7385] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1199: Invalid block bitmap block 0 in block_group 0 [ 216.911951][ T7385] loop0: lost filesystem error report for type 5 error -117 [ 216.912364][ T7385] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1199: Invalid block bitmap block 0 in block_group 0 [ 216.933013][ T7385] loop0: lost filesystem error report for type 5 error -117 [ 216.933267][ T7385] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1199: Invalid block bitmap block 0 in block_group 0 [ 216.955172][ C1] EXT4-fs (loop0): error count since last fsck: 2 [ 216.955273][ C1] EXT4-fs (loop0): last error at time 1782165453: ext4_read_block_bitmap_nowait:483 [ 217.460778][ T7393] loop2: detected capacity change from 0 to 512 [ 217.474337][ T7385] loop0: lost filesystem error report for type 5 error -117 [ 217.496720][ T7385] Quota error (device loop0): write_blk: dquota write failed [ 217.511502][ T7385] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 217.521412][ T7385] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.1199: Failed to acquire dquot type 1 [ 217.532708][ T7385] loop0: lost filesystem error report for type 5 error -28 [ 217.534451][ T7394] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1193'. [ 217.566907][ T7393] EXT4-fs (loop2): 1 orphan inode deleted [ 217.573212][ T7393] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.596493][ T7393] bond4: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 217.606247][ T7393] 8021q: adding VLAN 0 to HW filter on device bond4 [ 217.616496][ T7385] EXT4-fs (loop0): 1 orphan inode deleted [ 217.622583][ T3528] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5 [ 217.631561][ T3528] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:8: Failed to release dquot type 1 [ 217.642963][ T3528] loop0: lost filesystem error report for type 5 error -117 [ 217.823613][ T7403] FAULT_INJECTION: forcing a failure. [ 217.823613][ T7403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.851428][ T7400] loop4: detected capacity change from 0 to 512 [ 217.856661][ T7403] CPU: 0 UID: 0 PID: 7403 Comm: syz.2.1202 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 217.856766][ T7403] Tainted: [W]=WARN [ 217.856785][ T7403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 217.856821][ T7403] Call Trace: [ 217.856915][ T7403] [ 217.856943][ T7403] __dump_stack+0x1d/0x30 [ 217.857012][ T7403] dump_stack_lvl+0x95/0xd0 [ 217.857082][ T7403] dump_stack+0x15/0x1b [ 217.857130][ T7403] should_fail_ex+0x25e/0x270 [ 217.857281][ T7403] should_fail+0xb/0x20 [ 217.857385][ T7403] should_fail_usercopy+0x1a/0x20 [ 217.857503][ T7403] _copy_from_user+0x1c/0xb0 [ 217.857601][ T7403] ____sys_sendmsg+0x1c1/0x580 [ 217.857726][ T7403] ___sys_sendmsg+0x195/0x1e0 [ 217.857822][ T7403] __x64_sys_sendmsg+0xd4/0x160 [ 217.857902][ T7403] x64_sys_call+0x194c/0x3020 [ 217.858030][ T7403] do_syscall_64+0x136/0x3c0 [ 217.858078][ T7403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.858104][ T7403] RIP: 0033:0x7f36f085ce59 [ 217.858123][ T7403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.858219][ T7403] RSP: 002b:00007f36ef2b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.858294][ T7403] RAX: ffffffffffffffda RBX: 00007f36f0ad5fa0 RCX: 00007f36f085ce59 [ 217.858345][ T7403] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 217.858384][ T7403] RBP: 00007f36ef2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 217.858422][ T7403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.858459][ T7403] R13: 00007f36f0ad6038 R14: 00007f36f0ad5fa0 R15: 00007ffdabb95508 [ 217.858518][ T7403] [ 217.922562][ T7404] loop3: detected capacity change from 0 to 512 [ 217.949525][ T7400] EXT4-fs: Ignoring removed mblk_io_submit option [ 218.070430][ T7400] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 218.084596][ T7404] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.124973][ T28] audit: type=1400 audit(1782165454.983:1230): avc: denied { write } for pid=7401 comm="syz.3.1203" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 218.126390][ T7400] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 218.146905][ T28] audit: type=1400 audit(1782165454.983:1231): avc: denied { write } for pid=7401 comm="syz.3.1203" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 218.176950][ T7400] EXT4-fs (loop4): orphan cleanup on readonly fs [ 218.183835][ T7400] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1201: Invalid block bitmap block 0 in block_group 0 [ 218.197978][ T7400] loop4: lost filesystem error report for type 5 error -117 [ 218.198158][ T7400] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1201: Invalid block bitmap block 0 in block_group 0 [ 218.205530][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 218.205550][ C0] EXT4-fs (loop4): last error at time 1782165455: ext4_read_block_bitmap_nowait:483 [ 218.235298][ T7400] loop4: lost filesystem error report for type 5 error -117 [ 218.235480][ T7400] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1201: Invalid block bitmap block 0 in block_group 0 [ 218.256683][ T7400] loop4: lost filesystem error report for type 5 error -117 [ 218.256865][ T7400] Quota error (device loop4): write_blk: dquota write failed [ 218.273361][ T7400] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 218.285664][ T7400] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.1201: Failed to acquire dquot type 1 [ 218.297291][ T7400] loop4: lost filesystem error report for type 5 error -28 [ 218.297638][ T7400] EXT4-fs (loop4): 1 orphan inode deleted [ 218.313987][ T12] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 218.330909][ T12] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:0: Failed to release dquot type 1 [ 218.370410][ T12] loop4: lost filesystem error report for type 5 error -117 [ 218.504701][ T7427] mmap: syz.2.1205 (7427) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 218.610271][ T7427] loop2: detected capacity change from 0 to 512 [ 218.695071][ T7427] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 218.706300][ T7432] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=257 sclass=netlink_tcpdiag_socket pid=7432 comm=syz.0.1212 [ 218.729626][ T7427] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1205: iget: bad i_size value: 38620345925642 [ 218.742814][ T7427] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 218.743767][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 218.743938][ T7435] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1213'. [ 218.752937][ C0] EXT4-fs (loop2): initial error at time 1782165455: ext4_orphan_get:1399 [ 218.767324][ T7427] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1205: couldn't read orphan inode 15 (err -117) [ 218.768431][ C0] : inode 15 [ 218.792136][ C0] EXT4-fs (loop2): last error at time 1782165455: ext4_orphan_get:1399: inode 15 [ 218.794594][ T7427] loop2: lost filesystem error report for type 5 error -117 [ 218.805661][ T7435] tmpfs: Unknown parameter 'mpo' [ 219.061498][ T7448] loop4: detected capacity change from 0 to 1024 [ 219.078821][ T7448] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.094264][ T7441] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1215'. [ 219.110941][ T7448] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1218: bg 0: block 112: padding at end of block bitmap is not set [ 219.128363][ T7448] EXT4-fs (loop4): Remounting filesystem read-only [ 219.181970][ T3528] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.565861][ T3528] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.979695][ T3528] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.027900][ T3528] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.060076][ T7471] loop1: detected capacity change from 0 to 1024 [ 220.087432][ T7471] EXT4-fs: Ignoring removed orlov option [ 220.243540][ T3528] gretap0: left allmulticast mode [ 220.248651][ T3528] gretap0: left promiscuous mode [ 220.253712][ T3528] bridge0: port 3(gretap0) entered disabled state [ 220.406171][ T3528] bridge_slave_1: left allmulticast mode [ 220.418553][ T3528] bridge_slave_1: left promiscuous mode [ 220.446413][ T3528] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.476018][ T3528] bridge_slave_0: left allmulticast mode [ 220.519892][ T3528] bridge_slave_0: left promiscuous mode [ 220.540506][ T3528] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.768620][ T3528] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.789899][ T3528] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.827017][ T3528] bond0 (unregistering): Released all slaves [ 220.856338][ T3528] bond1 (unregistering): Released all slaves [ 220.901032][ T3528] bond2 (unregistering): Released all slaves [ 220.936167][ T3528] bond3 (unregistering): Released all slaves [ 220.949518][ T3528] bond4 (unregistering): Released all slaves [ 220.978241][ T7455] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.003794][ T7455] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.011005][ T7455] bridge_slave_0: entered allmulticast mode [ 221.017512][ T7455] bridge_slave_0: entered promiscuous mode [ 221.026725][ T7455] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.033827][ T7455] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.040939][ T7455] bridge_slave_1: entered allmulticast mode [ 221.047228][ T7455] bridge_slave_1: entered promiscuous mode [ 221.064306][ T7455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.074930][ T7455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.104130][ T7455] team0: Port device team_slave_0 added [ 221.110724][ T7455] team0: Port device team_slave_1 added [ 221.128538][ T7455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.143205][ T7455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.169964][ T7455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.228563][ T7524] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=257 sclass=netlink_tcpdiag_socket pid=7524 comm=syz.0.1228 [ 221.253434][ T7455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.260869][ T7455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.293813][ T7455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.298573][ T7526] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1229'. [ 221.314715][ T3528] hsr_slave_0: left promiscuous mode [ 221.320220][ T3528] hsr_slave_1: left promiscuous mode [ 221.325718][ T3528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.333091][ T3528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.340617][ T3528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.348016][ T3528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.358014][ T3528] veth1_macvtap: left promiscuous mode [ 221.363491][ T3528] veth0_macvtap: left promiscuous mode [ 221.368998][ T3528] veth1_vlan: left promiscuous mode [ 221.374232][ T3528] veth0_vlan: left promiscuous mode [ 221.418452][ T7529] tmpfs: Unknown parameter 'mpo' [ 221.450579][ T3528] team0 (unregistering): Port device team_slave_1 removed [ 221.460868][ T3528] team0 (unregistering): Port device team_slave_0 removed [ 221.494277][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 221.526252][ T7455] hsr_slave_0: entered promiscuous mode [ 221.532302][ T7455] hsr_slave_1: entered promiscuous mode [ 221.619702][ T7455] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 221.622372][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 221.622400][ T28] audit: type=1400 audit(1782165458.483:1243): avc: denied { write } for pid=7535 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.657984][ T7455] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 221.668950][ T28] audit: type=1400 audit(1782165458.533:1244): avc: denied { write } for pid=7546 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.676918][ T7455] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 221.718031][ T7455] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 221.741703][ T7455] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 221.771780][ T7455] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 221.786863][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 221.794984][ T7455] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 221.919993][ T7455] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 221.937084][ T7562] loop4: detected capacity change from 0 to 164 [ 222.039897][ T7573] random: crng reseeded on system resumption [ 222.131323][ T7455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.242919][ T3528] IPVS: stop unused estimator thread 0... [ 222.275233][ T7455] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.295872][ T7578] loop4: detected capacity change from 0 to 128 [ 222.304821][ T179] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.311892][ T179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.386553][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.393676][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.461639][ T7576] loop0: detected capacity change from 0 to 128 [ 222.618097][ T7576] ext4 filesystem being mounted at /256/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.645934][ T28] audit: type=1400 audit(1782165459.503:1245): avc: denied { write } for pid=7554 comm="syz.0.1232" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 223.773264][ T28] audit: type=1400 audit(1782165460.113:1246): avc: denied { watch watch_reads } for pid=7554 comm="syz.0.1232" path="/256/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 224.014647][ T28] audit: type=1400 audit(1782165460.883:1247): avc: denied { bind } for pid=7595 comm="syz.1.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 224.117659][ T7601] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1243'. [ 224.193153][ T7610] tmpfs: Unknown parameter 'mpo' [ 224.223076][ T28] audit: type=1400 audit(1782165461.083:1248): avc: denied { write } for pid=7574 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.331051][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 225.190738][ T7627] FAULT_INJECTION: forcing a failure. [ 225.190738][ T7627] name failslab, interval 1, probability 0, space 0, times 0 [ 225.203721][ T7627] CPU: 1 UID: 0 PID: 7627 Comm: syz.4.1247 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 225.203805][ T7627] Tainted: [W]=WARN [ 225.203814][ T7627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 225.203831][ T7627] Call Trace: [ 225.203839][ T7627] [ 225.203847][ T7627] __dump_stack+0x1d/0x30 [ 225.203909][ T7627] dump_stack_lvl+0x95/0xd0 [ 225.203974][ T7627] dump_stack+0x15/0x1b [ 225.203992][ T7627] should_fail_ex+0x25e/0x270 [ 225.204106][ T7627] should_failslab+0x8c/0xb0 [ 225.204133][ T7627] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 225.204154][ T7627] ? dst_alloc+0xbd/0x100 [ 225.204245][ T7627] ? dst_alloc+0xbd/0x100 [ 225.204271][ T7627] dst_alloc+0xbd/0x100 [ 225.204296][ T7627] ip_route_input_rcu+0x1469/0x1b80 [ 225.204329][ T7627] ip_route_input_noref+0x5f/0x90 [ 225.204354][ T7627] arp_process+0x65d/0xf40 [ 225.204433][ T7627] ? __pfx_arp_process+0x10/0x10 [ 225.204461][ T7627] NF_HOOK+0x128/0x160 [ 225.204503][ T7627] ? __pfx_arp_process+0x10/0x10 [ 225.204538][ T7627] ? __pfx_arp_process+0x10/0x10 [ 225.204601][ T7627] arp_rcv+0x20f/0x2c0 [ 225.204638][ T7627] ? __pfx_arp_rcv+0x10/0x10 [ 225.204671][ T7627] netif_receive_skb+0x158/0x4c0 [ 225.204699][ T7627] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 225.204812][ T7627] ? tun_rx_batched+0xca/0x430 [ 225.204844][ T7627] tun_rx_batched+0x100/0x430 [ 225.204876][ T7627] ? tun_get_user+0x1ad9/0x2820 [ 225.204904][ T7627] tun_get_user+0x1fe2/0x2820 [ 225.204948][ T7627] ? ref_tracker_alloc+0x1eb/0x2f0 [ 225.204985][ T7627] tun_chr_write_iter+0x15a/0x210 [ 225.205018][ T7627] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 225.205055][ T7627] vfs_write+0x57d/0x990 [ 225.205099][ T7627] ksys_write+0xdc/0x1a0 [ 225.205118][ T7627] __x64_sys_write+0x40/0x50 [ 225.205201][ T7627] x64_sys_call+0x27e1/0x3020 [ 225.205237][ T7627] do_syscall_64+0x136/0x3c0 [ 225.205260][ T7627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.205284][ T7627] RIP: 0033:0x7f4e4199d68e [ 225.205305][ T7627] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 225.205331][ T7627] RSP: 002b:00007f4e40436fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 225.205358][ T7627] RAX: ffffffffffffffda RBX: 00007f4e404376c0 RCX: 00007f4e4199d68e [ 225.205383][ T7627] RDX: 000000000000002a RSI: 00002000000001c0 RDI: 00000000000000c8 [ 225.205396][ T7627] RBP: 00007f4e40437090 R08: 0000000000000000 R09: 0000000000000000 [ 225.205412][ T7627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.205506][ T7627] R13: 00007f4e41c56038 R14: 00007f4e41c55fa0 R15: 00007ffff6069428 [ 225.205532][ T7627] [ 225.483890][ T28] audit: type=1400 audit(1782165461.173:1249): avc: denied { write } for pid=7617 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.616774][ T7455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.650033][ T7632] netlink: 392 bytes leftover after parsing attributes in process `syz.4.1248'. [ 225.688968][ T7632] loop4: detected capacity change from 0 to 512 [ 225.712382][ T7632] EXT4-fs: Ignoring removed nobh option [ 225.815491][ T7632] EXT4-fs (loop4): 1 orphan inode deleted [ 225.821670][ T7632] EXT4-fs mount: 14 callbacks suppressed [ 225.821686][ T7632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.914185][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1248'. [ 225.957843][ T7455] veth0_vlan: entered promiscuous mode [ 225.980552][ T7455] veth1_vlan: entered promiscuous mode [ 226.017600][ T7455] veth0_macvtap: entered promiscuous mode [ 226.032593][ T7455] veth1_macvtap: entered promiscuous mode [ 226.058642][ T7455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.067890][ T7455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.077595][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.129395][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.158927][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.174267][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.294521][ T28] audit: type=1400 audit(1782165463.153:1250): avc: denied { mounton } for pid=7455 comm="syz-executor" path="/root/syzkaller.ImPcLQ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=18249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 226.336899][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.414859][ T28] audit: type=1400 audit(1782165463.273:1251): avc: denied { write } for pid=7649 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.488648][ T7675] loop3: detected capacity change from 0 to 128 [ 226.523567][ T7680] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1255'. [ 226.576877][ T28] audit: type=1400 audit(1782165463.443:1252): avc: denied { write } for pid=7679 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.601459][ T7680] tmpfs: Unknown parameter 'mpo' [ 226.634536][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 226.636072][ T7675] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 226.753874][ T7675] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.818758][ T7686] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1251'. [ 226.901464][ T28] audit: type=1400 audit(1782165463.753:1253): avc: denied { write } for pid=7673 comm="syz.3.1254" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 227.166574][ T28] audit: type=1400 audit(1782165463.873:1254): avc: denied { write } for pid=7673 comm="syz.3.1254" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 227.235753][ T3300] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 227.367531][ T7701] loop1: detected capacity change from 0 to 512 [ 227.685549][ T7701] EXT4-fs (loop1): 1 orphan inode deleted [ 227.691856][ T7701] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.740438][ T7700] bond2: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 227.750203][ T7700] 8021q: adding VLAN 0 to HW filter on device bond2 [ 227.795804][ T7705] loop3: detected capacity change from 0 to 1024 [ 227.815396][ T7705] EXT4-fs: Ignoring removed orlov option [ 227.851088][ T7705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.888872][ T28] audit: type=1400 audit(1782165464.753:1255): avc: denied { write } for pid=7704 comm="syz.3.1260" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 227.950420][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.121593][ T7717] loop5: detected capacity change from 0 to 512 [ 228.144595][ T7717] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 228.184863][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.209289][ T7717] EXT4-fs (loop5): 1 orphan inode deleted [ 228.225496][ T7717] EXT4-fs (loop5): 1 truncate cleaned up [ 228.242557][ T7717] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.338380][ T7455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.582616][ T7734] loop5: detected capacity change from 0 to 128 [ 228.684960][ T7734] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 228.701117][ T7734] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.728060][ T28] audit: type=1400 audit(1782165465.593:1256): avc: denied { write } for pid=7732 comm="syz.5.1268" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 228.838551][ T28] audit: type=1400 audit(1782165465.623:1257): avc: denied { write } for pid=7732 comm="syz.5.1268" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 228.956792][ T7455] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.061914][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.309113][ T7750] loop0: detected capacity change from 0 to 764 [ 229.316562][ T7758] FAULT_INJECTION: forcing a failure. [ 229.316562][ T7758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.321469][ T7750] process 'syz.0.1272' launched './file0' with NULL argv: empty string added [ 229.329651][ T7758] CPU: 0 UID: 0 PID: 7758 Comm: syz.4.1275 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 229.329815][ T7758] Tainted: [W]=WARN [ 229.329853][ T7758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 229.329901][ T7758] Call Trace: [ 229.329923][ T7758] [ 229.329952][ T7758] __dump_stack+0x1d/0x30 [ 229.330053][ T7758] dump_stack_lvl+0x95/0xd0 [ 229.330137][ T7758] dump_stack+0x15/0x1b [ 229.330199][ T7758] should_fail_ex+0x25e/0x270 [ 229.330278][ T7758] should_fail+0xb/0x20 [ 229.330388][ T7758] should_fail_usercopy+0x1a/0x20 [ 229.330471][ T7758] _copy_from_iter+0xcc/0xe70 [ 229.330566][ T7758] ? should_failslab+0x8c/0xb0 [ 229.330632][ T7758] ? kmem_cache_alloc_noprof+0x198/0x3c0 [ 229.330797][ T7758] ? bio_alloc_bioset+0x20d/0x640 [ 229.330919][ T7758] ? bio_alloc_bioset+0x20d/0x640 [ 229.331033][ T7758] copy_page_from_iter+0x15d/0x1f0 [ 229.331063][ T7758] blk_rq_map_user_iov+0xaab/0xfa0 [ 229.331266][ T7758] blk_rq_map_user_io+0x1a4/0x280 [ 229.331340][ T7758] ? alloc_pages_mpol+0xd9/0x1d0 [ 229.331438][ T7758] ? alloc_pages_noprof+0xa8/0x140 [ 229.331522][ T7758] ? sg_build_indirect+0x39a/0x450 [ 229.331628][ T7758] sg_common_write+0xaef/0xc10 [ 229.331730][ T7758] ? should_fail_ex+0xd9/0x270 [ 229.331882][ T7758] sg_write+0x6ff/0x7a0 [ 229.331991][ T7758] ? __pfx_sg_write+0x10/0x10 [ 229.332077][ T7758] vfs_write+0x252/0x990 [ 229.332173][ T7758] ? __fget_files+0x184/0x1c0 [ 229.332352][ T7758] ksys_write+0xdc/0x1a0 [ 229.332409][ T7758] __x64_sys_write+0x40/0x50 [ 229.332481][ T7758] x64_sys_call+0x27e1/0x3020 [ 229.332577][ T7758] do_syscall_64+0x136/0x3c0 [ 229.332742][ T7758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.332830][ T7758] RIP: 0033:0x7f4e419dce59 [ 229.332949][ T7758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.333011][ T7758] RSP: 002b:00007f4e40437028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 229.333081][ T7758] RAX: ffffffffffffffda RBX: 00007f4e41c55fa0 RCX: 00007f4e419dce59 [ 229.333132][ T7758] RDX: 000000000000fe33 RSI: 0000200000000080 RDI: 0000000000000005 [ 229.333175][ T7758] RBP: 00007f4e40437090 R08: 0000000000000000 R09: 0000000000000000 [ 229.333216][ T7758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.333323][ T7758] R13: 00007f4e41c56038 R14: 00007f4e41c55fa0 R15: 00007ffff6069428 [ 229.333394][ T7758] [ 229.598378][ T28] audit: type=1400 audit(1782165466.423:1258): avc: denied { execute_no_trans } for pid=7743 comm="syz.0.1272" path="/257/file0" dev="tmpfs" ino=1420 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 229.841764][ T7768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1277'. [ 229.856782][ T7765] batadv1: entered promiscuous mode [ 229.862065][ T7765] batadv1: entered allmulticast mode [ 229.868572][ T7765] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 230.020042][ T7762] syzkaller0: entered promiscuous mode [ 230.024818][ T7762] syzkaller0: entered allmulticast mode [ 231.065129][ T7784] loop3: detected capacity change from 0 to 512 [ 231.212733][ T7784] EXT4-fs (loop3): 1 orphan inode deleted [ 231.218978][ T7784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.244748][ T7784] bond1: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 231.254414][ T7784] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.393380][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.437944][ T7794] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1283'. [ 231.662937][ T7807] loop5: detected capacity change from 0 to 512 [ 231.765562][ T7808] loop1: detected capacity change from 0 to 128 [ 232.054238][ T7807] EXT4-fs (loop5): 1 orphan inode deleted [ 232.060607][ T7807] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.118353][ T7805] bond1: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 232.128228][ T7805] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.265160][ T7818] loop0: detected capacity change from 0 to 512 [ 232.341447][ T7820] loop3: detected capacity change from 0 to 1024 [ 232.351610][ T7820] EXT4-fs: Ignoring removed orlov option [ 232.375683][ T7818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.388510][ T7818] ext4 filesystem being mounted at /261/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.404236][ T28] audit: type=1400 audit(1782165469.273:1259): avc: denied { write } for pid=7817 comm="syz.0.1294" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 232.422077][ T7820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.455147][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.550730][ T7830] IPVS: set_ctl: invalid protocol: 33 172.30.0.4:20003 [ 232.702206][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.013960][ T7455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.052817][ T7835] loop0: detected capacity change from 0 to 128 [ 233.064429][ T7835] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 233.077311][ T7835] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.092496][ T28] audit: type=1400 audit(1782165469.913:1260): avc: denied { write } for pid=7834 comm="syz.0.1297" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 233.137313][ T28] audit: type=1400 audit(1782165469.973:1261): avc: denied { append } for pid=7839 comm="syz.4.1299" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 233.198489][ T28] audit: type=1400 audit(1782165470.053:1262): avc: denied { write } for pid=7834 comm="syz.0.1297" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 233.246232][ T7845] loop4: detected capacity change from 0 to 1024 [ 233.268923][ T7845] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 233.279306][ T7845] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 233.288858][ T7845] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.1302: Failed to acquire dquot type 0 [ 233.405795][ T7851] loop5: detected capacity change from 0 to 512 [ 233.431531][ T7845] loop4: lost filesystem error report for type 5 error -5 [ 233.501749][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 233.515484][ C0] EXT4-fs (loop4): initial error at time 1782165470: ext4_acquire_dquot:7041 [ 233.524300][ C0] EXT4-fs (loop4): last error at time 1782165470: ext4_acquire_dquot:7041 [ 233.541927][ T7854] random: crng reseeded on system resumption [ 233.996165][ T7845] EXT4-fs (loop4): 1 truncate cleaned up [ 234.057425][ T7845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.379829][ T7853] loop3: detected capacity change from 0 to 8192 [ 234.409674][ T7851] EXT4-fs (loop5): 1 orphan inode deleted [ 234.416007][ T7851] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.443775][ T7849] bond2: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 234.453397][ T7849] 8021q: adding VLAN 0 to HW filter on device bond2 [ 234.547479][ T28] audit: type=1400 audit(1782165471.413:1263): avc: denied { create } for pid=7844 comm="syz.4.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 235.189373][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 235.204936][ T7455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.233276][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.254080][ T7870] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1306'. [ 235.268952][ T7870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.318793][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1310'. [ 235.477530][ T7884] loop0: detected capacity change from 0 to 1024 [ 235.485142][ T7884] EXT4-fs: Ignoring removed orlov option [ 235.496820][ T7891] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1308'. [ 235.509526][ T7891] tmpfs: Unknown parameter 'mpo' [ 235.537282][ T7885] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1307'. [ 235.549800][ T7884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.633735][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.076406][ T7906] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1314'. [ 236.187293][ T7912] random: crng reseeded on system resumption [ 236.581200][ T3300] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 236.592782][ T3300] CPU: 1 UID: 0 PID: 3300 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 236.592823][ T3300] Tainted: [W]=WARN [ 236.592857][ T3300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 236.592875][ T3300] Call Trace: [ 236.592884][ T3300] [ 236.592894][ T3300] __dump_stack+0x1d/0x30 [ 236.592918][ T3300] dump_stack_lvl+0x95/0xd0 [ 236.592964][ T3300] dump_stack+0x15/0x1b [ 236.592990][ T3300] dump_header+0x80/0x240 [ 236.593019][ T3300] oom_kill_process+0x295/0x350 [ 236.593053][ T3300] out_of_memory+0x981/0xbc0 [ 236.593107][ T3300] ? try_charge_memcg+0x582/0xa00 [ 236.593144][ T3300] try_charge_memcg+0x621/0xa00 [ 236.593235][ T3300] charge_memcg+0x6d/0x120 [ 236.593276][ T3300] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 236.593429][ T3300] swap_cache_alloc_folio+0x47b/0x5e0 [ 236.593500][ T3300] swap_cluster_readahead+0x3d2/0x460 [ 236.593555][ T3300] swapin_readahead+0xd8/0x8a0 [ 236.593597][ T3300] ? folio_add_file_rmap_ptes+0x1a8/0x1e0 [ 236.593693][ T3300] ? set_pte_range+0x325/0x4f0 [ 236.593729][ T3300] ? __rcu_read_unlock+0x4e/0x70 [ 236.593757][ T3300] ? swap_cache_get_folio+0x1f7/0x200 [ 236.593796][ T3300] do_swap_page+0x2a2/0x1ec0 [ 236.593830][ T3300] ? __css_rstat_updated+0xbb/0x280 [ 236.593935][ T3300] ? __rcu_read_lock+0x36/0x50 [ 236.593972][ T3300] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 236.594041][ T3300] handle_mm_fault+0xb3c/0x2da0 [ 236.594092][ T3300] do_user_addr_fault+0x634/0x1060 [ 236.594143][ T3300] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 236.594172][ T3300] ? trace_page_fault_user+0x1f/0xa0 [ 236.594220][ T3300] exc_page_fault+0x62/0xa0 [ 236.594300][ T3300] asm_exc_page_fault+0x26/0x30 [ 236.594327][ T3300] RIP: 0033:0x7fa04453ae77 [ 236.594344][ T3300] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 40 a9 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 a8 ed 00 48 01 d1 39 7c 24 [ 236.594377][ T3300] RSP: 002b:00007ffdf401b0b0 EFLAGS: 00010202 [ 236.594395][ T3300] RAX: 0000001b32a24000 RBX: 0000000000000318 RCX: 00000000000395f8 [ 236.594409][ T3300] RDX: 000000000e56d9aa RSI: 00007ffdf401b140 RDI: 0000000000000018 [ 236.594431][ T3300] RBP: 00007ffdf401b0ec R08: 0000000036b32eb4 R09: 3fffffffffffffff [ 236.594446][ T3300] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 236.594463][ T3300] R13: 00000000000927c0 R14: 00000000000398a8 R15: 00007ffdf401b140 [ 236.594502][ T3300] [ 236.594549][ T3300] memory: usage 307200kB, limit 307200kB, failcnt 2556 [ 237.630041][ T7916] loop5: detected capacity change from 0 to 512 [ 237.682111][ T3300] memory+swap: usage 312184kB, limit 9007199254740988kB, failcnt 0 [ 237.783734][ T7916] EXT4-fs (loop5): 1 orphan inode deleted [ 237.791506][ T7916] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.831054][ T3300] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 237.857313][ T7916] bond3: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 237.867658][ T7916] 8021q: adding VLAN 0 to HW filter on device bond3 [ 237.931904][ T3300] Memory cgroup stats for /syz3: [ 237.932355][ T3300] cache 0 [ 237.970802][ T3300] rss 0 [ 237.991474][ T3300] shmem 0 [ 238.004454][ T3300] mapped_file 0 [ 238.016973][ T3300] dirty 0 [ 238.028962][ T3300] writeback 0 [ 238.063791][ T3300] workingset_refault_anon 84 [ 238.070063][ T3300] workingset_refault_file 2257 [ 238.157154][ T3300] swap 1347584 [ 238.162662][ T3300] swapcached 11317248 [ 238.167239][ T7923] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1320'. [ 238.176298][ T3300] pgpgin 290154 [ 238.179782][ T3300] pgpgout 290153 [ 238.183330][ T3300] pgfault 204441 [ 238.195209][ T3300] pgmajfault 75 [ 238.201022][ T3300] inactive_anon 0 [ 238.207742][ T3300] active_anon 0 [ 238.223125][ T3300] inactive_file 0 [ 238.233254][ T3300] active_file 0 [ 238.244931][ T3300] unevictable 0 [ 238.256801][ T28] audit: type=1400 audit(1782165475.113:1264): avc: denied { ioctl } for pid=7922 comm="syz.1.1320" path="socket:[19054]" dev="sockfs" ino=19054 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 238.289506][ T3300] hierarchical_memory_limit 314572800 [ 238.314827][ T7455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.333559][ T3300] hierarchical_memsw_limit 9223372036854771712 [ 238.375262][ T3300] total_cache 0 [ 238.386718][ T3300] total_rss 0 [ 238.390123][ T3300] total_shmem 0 [ 238.393617][ T3300] total_mapped_file 0 [ 238.413540][ T3300] total_dirty 0 [ 238.425019][ T3300] total_writeback 0 [ 238.432186][ T3300] total_workingset_refault_anon 85 [ 238.448942][ T3300] total_workingset_refault_file 2257 [ 238.502652][ T3300] total_swap 5103616 [ 238.546495][ T3300] total_swapcached 15077376 [ 238.557698][ T3300] total_pgpgin 291072 [ 238.568100][ T3300] total_pgpgout 291071 [ 238.587491][ T3300] total_pgfault 205364 [ 238.601775][ T3300] total_pgmajfault 75 [ 238.655493][ T3300] total_inactive_anon 0 [ 238.698561][ T3300] total_active_anon 0 [ 238.731534][ T3300] total_inactive_file 0 [ 239.481131][ T3300] total_active_file 0 [ 239.505636][ T3300] total_unevictable 0 [ 239.815718][ T3300] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1313,pid=7886,uid=0 [ 239.849330][ T7941] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=257 sclass=netlink_tcpdiag_socket pid=7941 comm=syz.5.1324 [ 240.486994][ T3300] Memory cgroup out of memory: Killed process 7886 (syz.3.1313) total-vm:96348kB, anon-rss:1232kB, file-rss:22336kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 240.750145][ T7943] loop1: detected capacity change from 0 to 512 [ 240.756805][ T7943] EXT4-fs: Ignoring removed nobh option [ 240.794903][ T7943] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 240.802891][ T7943] System zones: 1-12 [ 240.808890][ T7943] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.1320: corrupted in-inode xattr: e_value size too large [ 240.823120][ T7943] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 240.823595][ T7943] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1320: couldn't read orphan inode 15 (err -117) [ 240.832846][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 240.832869][ C0] EXT4-fs (loop1): initial error at time 1782165477: ext4_iget_extra_inode:5180: inode 15 [ 240.832908][ C0] EXT4-fs (loop1): last error at time 1782165477: ext4_iget_extra_inode:5180: inode 15 [ 240.870909][ T7943] loop1: lost filesystem error report for type 5 error -117 [ 240.871615][ T7943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.898626][ T7952] loop4: detected capacity change from 0 to 1024 [ 240.913620][ T7952] EXT4-fs: Ignoring removed orlov option [ 241.161850][ T28] audit: type=1400 audit(1782165478.013:1265): avc: denied { write } for pid=7924 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.242269][ T7952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.289624][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.301597][ T28] audit: type=1400 audit(1782165478.133:1266): avc: denied { write } for pid=7963 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.440746][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.667493][ T28] audit: type=1400 audit(1782165478.533:1267): avc: denied { write } for pid=7971 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.847164][ T28] audit: type=1400 audit(1782165478.713:1268): avc: denied { write } for pid=7989 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.610689][ T8010] loop1: detected capacity change from 0 to 512 [ 242.636339][ T8009] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1335'. [ 242.667693][ T7998] loop3: detected capacity change from 0 to 1024 [ 242.834355][ T7998] EXT4-fs: Ignoring removed orlov option [ 242.892362][ T28] audit: type=1400 audit(1782165479.753:1269): avc: denied { write } for pid=7992 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.933052][ T28] audit: type=1400 audit(1782165479.793:1270): avc: denied { write } for pid=8018 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.968714][ T8009] tmpfs: Unknown parameter 'mpo' [ 242.992799][ T7998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.008610][ T8023] loop5: detected capacity change from 0 to 256 [ 243.039928][ T28] audit: type=1400 audit(1782165479.903:1271): avc: denied { setattr } for pid=7996 comm="syz.3.1332" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 243.083783][ T28] audit: type=1400 audit(1782165479.903:1272): avc: denied { accept } for pid=8022 comm="syz.5.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 243.130547][ T28] audit: type=1400 audit(1782165479.903:1273): avc: denied { connect } for pid=8022 comm="syz.5.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 243.157068][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.174152][ T8023] xt_TCPMSS: Only works on TCP SYN packets [ 243.254154][ T8037] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1338'. [ 243.274523][ T8036] loop3: detected capacity change from 0 to 128 [ 243.315570][ T8046] FAULT_INJECTION: forcing a failure. [ 243.315570][ T8046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.329048][ T8046] CPU: 0 UID: 0 PID: 8046 Comm: syz.1.1340 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 243.329119][ T8046] Tainted: [W]=WARN [ 243.329127][ T8046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 243.329141][ T8046] Call Trace: [ 243.329149][ T8046] [ 243.329160][ T8046] __dump_stack+0x1d/0x30 [ 243.329229][ T8046] dump_stack_lvl+0x95/0xd0 [ 243.329257][ T8046] dump_stack+0x15/0x1b [ 243.329285][ T8046] should_fail_ex+0x25e/0x270 [ 243.329326][ T8046] should_fail+0xb/0x20 [ 243.329393][ T8046] should_fail_usercopy+0x1a/0x20 [ 243.329434][ T8046] _copy_to_user+0x20/0xa0 [ 243.329481][ T8046] simple_read_from_buffer+0xb5/0x130 [ 243.329550][ T8046] proc_fail_nth_read+0x10e/0x150 [ 243.329575][ T8046] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 243.329605][ T8046] vfs_read+0x18e/0x7c0 [ 243.329652][ T8046] ? __rcu_read_unlock+0x4e/0x70 [ 243.329730][ T8046] ? __fget_files+0x184/0x1c0 [ 243.329767][ T8046] ? mutex_lock+0x57/0x90 [ 243.329802][ T8046] ksys_read+0xdc/0x1a0 [ 243.329823][ T8046] __x64_sys_read+0x40/0x50 [ 243.329844][ T8046] x64_sys_call+0x2886/0x3020 [ 243.329969][ T8046] do_syscall_64+0x136/0x3c0 [ 243.330003][ T8046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.330030][ T8046] RIP: 0033:0x7f9e2821d68e [ 243.330120][ T8046] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 243.330150][ T8046] RSP: 002b:00007f9e26caefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 243.330181][ T8046] RAX: ffffffffffffffda RBX: 00007f9e26caf6c0 RCX: 00007f9e2821d68e [ 243.330244][ T8046] RDX: 000000000000000f RSI: 00007f9e26caf0a0 RDI: 0000000000000004 [ 243.330264][ T8046] RBP: 00007f9e26caf090 R08: 0000000000000000 R09: 0000000000000000 [ 243.330283][ T8046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.330381][ T8046] R13: 00007f9e284d6038 R14: 00007f9e284d5fa0 R15: 00007fffa8d46018 [ 243.330413][ T8046] [ 243.338370][ T8036] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 243.562977][ T8051] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1342'. [ 243.578763][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 243.578824][ T28] audit: type=1400 audit(1782165480.323:1277): avc: denied { write } for pid=8025 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.581733][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1342'. [ 243.587717][ T28] audit: type=1400 audit(1782165480.363:1278): avc: denied { write } for pid=8059 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.659127][ T8036] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.800902][ T8066] loop4: detected capacity change from 0 to 1764 [ 243.808463][ T28] audit: type=1400 audit(1782165480.663:1279): avc: denied { write } for pid=8034 comm="syz.3.1337" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 243.841593][ T8066] iso9660: Bad value for 'sbsector' [ 244.096265][ T8076] loop4: detected capacity change from 0 to 1024 [ 244.105086][ T8076] EXT4-fs: Ignoring removed orlov option [ 244.216616][ T8076] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.314989][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.397834][ T28] audit: type=1400 audit(1782165480.663:1280): avc: denied { write } for pid=8034 comm="syz.3.1337" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 244.458298][ T3300] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 244.642126][ T8082] loop4: detected capacity change from 0 to 512 [ 244.705288][ T8082] msdos: Unknown parameter 'noca [ 244.705288][ T8082] ' [ 244.958825][ T8099] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1353'. [ 245.228441][ T8106] loop0: detected capacity change from 0 to 512 [ 245.273463][ T8106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.357944][ T8106] ext4 filesystem being mounted at /273/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.368948][ T8106] FAULT_INJECTION: forcing a failure. [ 245.368948][ T8106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.382082][ T8106] CPU: 0 UID: 0 PID: 8106 Comm: syz.0.1354 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 245.382119][ T8106] Tainted: [W]=WARN [ 245.382127][ T8106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 245.382208][ T8106] Call Trace: [ 245.382214][ T8106] [ 245.382221][ T8106] __dump_stack+0x1d/0x30 [ 245.382244][ T8106] dump_stack_lvl+0x95/0xd0 [ 245.382335][ T8106] dump_stack+0x15/0x1b [ 245.382377][ T8106] should_fail_ex+0x25e/0x270 [ 245.382414][ T8106] should_fail+0xb/0x20 [ 245.382489][ T8106] should_fail_usercopy+0x1a/0x20 [ 245.382527][ T8106] _copy_from_user+0x1c/0xb0 [ 245.382604][ T8106] sctp_getsockopt_ecn_supported+0x6e/0x350 [ 245.382641][ T8106] sctp_getsockopt+0x92c/0xaa0 [ 245.382707][ T8106] sock_common_getsockopt+0x60/0x70 [ 245.382799][ T8106] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 245.382833][ T8106] do_sock_getsockopt+0x2f5/0x570 [ 245.382915][ T8106] ? vfs_write+0x848/0x990 [ 245.382956][ T8106] __x64_sys_getsockopt+0x11d/0x1a0 [ 245.382980][ T8106] x64_sys_call+0x2dcf/0x3020 [ 245.383046][ T8106] do_syscall_64+0x136/0x3c0 [ 245.383076][ T8106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.383098][ T8106] RIP: 0033:0x7f0a5496ce59 [ 245.383114][ T8106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.383159][ T8106] RSP: 002b:00007f0a533bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 245.383184][ T8106] RAX: ffffffffffffffda RBX: 00007f0a54be5fa0 RCX: 00007f0a5496ce59 [ 245.383198][ T8106] RDX: 0000000000000082 RSI: 0000000000000084 RDI: 0000000000000008 [ 245.383223][ T8106] RBP: 00007f0a533bf090 R08: 0000200000001040 R09: 0000000000000000 [ 245.383240][ T8106] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.383304][ T8106] R13: 00007f0a54be6038 R14: 00007f0a54be5fa0 R15: 00007ffe0e1c10c8 [ 245.383331][ T8106] [ 245.798235][ T8111] EXT4-fs (loop5): 1 orphan inode deleted [ 245.804546][ T8111] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.825746][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.839930][ T8109] bond4: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 245.849738][ T8109] 8021q: adding VLAN 0 to HW filter on device bond4 [ 245.932997][ T8115] set_capacity_and_notify: 1 callbacks suppressed [ 245.933030][ T8115] loop3: detected capacity change from 0 to 128 [ 245.957575][ T8117] loop0: detected capacity change from 0 to 512 [ 246.057837][ T8115] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 246.086558][ T8115] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.102127][ T8117] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.126565][ T28] audit: type=1400 audit(1782165482.983:1281): avc: denied { write } for pid=8114 comm="syz.3.1357" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 246.163815][ T7455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.175294][ T8117] ext4 filesystem being mounted at /274/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.186021][ T28] audit: type=1400 audit(1782165483.023:1282): avc: denied { write } for pid=8114 comm="syz.3.1357" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 246.287167][ T8122] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=8122 comm=syz.5.1359 [ 246.340278][ T8125] loop1: detected capacity change from 0 to 128 [ 246.466843][ T8126] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 246.492360][ T3300] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 247.188779][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.424004][ T8143] loop0: detected capacity change from 0 to 128 [ 247.495044][ T8145] loop5: detected capacity change from 0 to 512 [ 247.524831][ T8145] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 247.544656][ T8145] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1366: bg 0: block 255: padding at end of block bitmap is not set [ 247.559192][ T8145] loop5: lost filesystem error report for type 5 error -117 [ 247.561153][ T8145] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 247.568515][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 247.568536][ C0] EXT4-fs (loop5): initial error at time 1782165484: ext4_validate_block_bitmap:441 [ 247.568579][ C0] EXT4-fs (loop5): last error at time 1782165484: ext4_validate_block_bitmap:441 [ 247.602490][ T8145] loop5: lost filesystem error report for type 5 error -117 [ 247.603048][ T8145] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1366: invalid indirect mapped block 1 (level 1) [ 247.623698][ T8145] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 247.624053][ T8145] EXT4-fs (loop5): 1 truncate cleaned up [ 247.639345][ T8145] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.643198][ T28] audit: type=1400 audit(1782165484.473:1283): avc: denied { write } for pid=8144 comm="syz.5.1366" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 247.643231][ T28] audit: type=1400 audit(1782165484.473:1284): avc: denied { create } for pid=8144 comm="syz.5.1366" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 247.690521][ T28] audit: type=1400 audit(1782165484.523:1285): avc: denied { write } for pid=8144 comm="syz.5.1366" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 247.735579][ T8148] loop1: detected capacity change from 0 to 512 [ 247.817682][ T8148] EXT4-fs: Ignoring removed mblk_io_submit option [ 247.843849][ T7455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.849955][ T28] audit: type=1400 audit(1782165484.523:1286): avc: denied { write } for pid=8144 comm="syz.5.1366" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 247.900446][ T8148] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 247.924856][ T8148] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 247.943139][ T8148] EXT4-fs (loop1): orphan cleanup on readonly fs [ 247.950353][ T8148] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1367: Invalid block bitmap block 0 in block_group 0 [ 248.006682][ T8148] loop1: lost filesystem error report for type 5 error -117 [ 248.006883][ T8148] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1367: Invalid block bitmap block 0 in block_group 0 [ 248.027651][ T8148] loop1: lost filesystem error report for type 5 error -117 [ 248.027938][ T8148] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1367: Invalid block bitmap block 0 in block_group 0 [ 248.048661][ T8148] loop1: lost filesystem error report for type 5 error -117 [ 248.048914][ T8148] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.1367: Failed to acquire dquot type 1 [ 248.067558][ C0] EXT4-fs (loop1): error count since last fsck: 3 [ 248.067577][ C0] EXT4-fs (loop1): last error at time 1782165484: ext4_read_block_bitmap_nowait:483 [ 248.091130][ T8162] loop5: detected capacity change from 0 to 512 [ 248.115913][ T8148] loop1: lost filesystem error report for type 5 error -28 [ 248.116235][ T8148] EXT4-fs (loop1): 1 orphan inode deleted [ 248.129977][ T8166] loop0: detected capacity change from 0 to 128 [ 248.136659][ T8162] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 248.151409][ T361] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:6: Failed to release dquot type 1 [ 248.162918][ T361] loop1: lost filesystem error report for type 5 error -117 [ 248.163954][ T8148] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 248.190001][ T8162] EXT4-fs (loop5): 1 orphan inode deleted [ 248.198912][ T8162] EXT4-fs (loop5): 1 truncate cleaned up [ 248.205252][ T8162] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.272411][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.318220][ T7455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.435588][ T8178] loop1: detected capacity change from 0 to 128 [ 248.492151][ T8178] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 248.508645][ T8178] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.579665][ T3297] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 248.613457][ T8189] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1381'. [ 248.626868][ T8189] tmpfs: Unknown parameter 'mpo' [ 249.013458][ T8198] Invalid argument reading file caps for ./file0 [ 249.175280][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 249.175311][ T28] audit: type=1400 audit(1782165486.043:1292): avc: denied { append } for pid=8201 comm="syz.4.1386" name="vsock" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 249.226660][ T28] audit: type=1400 audit(1782165486.073:1293): avc: denied { read } for pid=8201 comm="syz.4.1386" path="socket:[20029]" dev="sockfs" ino=20029 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 249.874516][ T28] audit: type=1400 audit(1782165486.743:1294): avc: denied { bind } for pid=8210 comm="syz.5.1389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 249.937797][ T8211] loop5: detected capacity change from 0 to 2048 [ 249.944597][ T8211] ext4: Bad value for 'init_itable' [ 250.193754][ T8221] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1391'. [ 250.315113][ T28] audit: type=1400 audit(1782165487.173:1295): avc: denied { getopt } for pid=8217 comm="syz.4.1391" lport=41524 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 250.651901][ T8230] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1394'. [ 250.992417][ T8233] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1396'. [ 251.211926][ T8240] loop3: detected capacity change from 0 to 8192 [ 251.304520][ T8240] loop3: p2 p3 [ 251.308753][ T8240] loop3: p3 start 458783 is beyond EOD, truncated [ 251.449370][ T5574] udevd[5574]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 251.618642][ T8253] loop1: detected capacity change from 0 to 1024 [ 251.629737][ T8253] EXT4-fs: Ignoring removed orlov option [ 251.641469][ T8258] ipvlan2: entered promiscuous mode [ 251.647251][ T8258] bridge0: port 4(ipvlan2) entered blocking state [ 251.654006][ T8258] bridge0: port 4(ipvlan2) entered disabled state [ 251.660588][ T8258] ipvlan2: entered allmulticast mode [ 251.666109][ T8258] bridge0: entered allmulticast mode [ 251.672047][ T8258] ipvlan2: left allmulticast mode [ 251.677356][ T8258] bridge0: left allmulticast mode [ 251.685095][ T8253] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.720920][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.764087][ T8266] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=257 sclass=netlink_tcpdiag_socket pid=8266 comm=syz.1.1406 [ 252.007362][ T8271] loop1: detected capacity change from 0 to 1024 [ 252.021748][ T8271] EXT4-fs: Ignoring removed orlov option [ 252.062761][ T8271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.076352][ T8281] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1407'. [ 252.247616][ T8283] bond1: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 252.257503][ T8283] 8021q: adding VLAN 0 to HW filter on device bond1 [ 252.551484][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.859871][ T8295] loop1: detected capacity change from 0 to 512 [ 252.874841][ T8295] EXT4-fs: Ignoring removed mblk_io_submit option [ 252.929886][ T8295] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 252.956933][ T8295] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 252.965638][ T8295] EXT4-fs (loop1): orphan cleanup on readonly fs [ 252.984833][ T8295] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1413: Invalid block bitmap block 0 in block_group 0 [ 252.998762][ T8295] loop1: lost filesystem error report for type 5 error -117 [ 252.999001][ T8295] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1413: Invalid block bitmap block 0 in block_group 0 [ 253.006366][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 253.006388][ C1] EXT4-fs (loop1): last error at time 1782165489: ext4_read_block_bitmap_nowait:483 [ 253.036308][ T8295] loop1: lost filesystem error report for type 5 error -117 [ 253.036470][ T8295] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1413: Invalid block bitmap block 0 in block_group 0 [ 253.060642][ T8295] loop1: lost filesystem error report for type 5 error -117 [ 253.064689][ T8295] Quota error (device loop1): write_blk: dquota write failed [ 253.097686][ T8295] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 253.115113][ T8298] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1414'. [ 253.130054][ T8295] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.1413: Failed to acquire dquot type 1 [ 253.151696][ T8298] tmpfs: Unknown parameter 'mpo' [ 253.162562][ T8295] loop1: lost filesystem error report for type 5 error -28 [ 253.162953][ T8295] EXT4-fs (loop1): 1 orphan inode deleted [ 253.176140][ T3540] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 253.186135][ T3540] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:9: Failed to release dquot type 1 [ 253.214025][ T3540] loop1: lost filesystem error report for type 5 error -117 [ 253.214828][ T8295] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 253.332758][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.376720][ T8304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.401461][ T8304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.449488][ T3303] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 253.559524][ T8308] FAULT_INJECTION: forcing a failure. [ 253.559524][ T8308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.573766][ T3303] CPU: 1 UID: 0 PID: 3303 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 253.573870][ T3303] Tainted: [W]=WARN [ 253.573880][ T3303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 253.573921][ T3303] Call Trace: [ 253.573929][ T3303] [ 253.573938][ T3303] __dump_stack+0x1d/0x30 [ 253.573961][ T3303] dump_stack_lvl+0x95/0xd0 [ 253.573981][ T3303] dump_stack+0x15/0x1b [ 253.574004][ T3303] dump_header+0x80/0x240 [ 253.574099][ T3303] oom_kill_process+0x295/0x350 [ 253.574135][ T3303] out_of_memory+0x981/0xbc0 [ 253.574175][ T3303] try_charge_memcg+0x621/0xa00 [ 253.574274][ T3303] charge_memcg+0x6d/0x120 [ 253.574313][ T3303] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 253.574358][ T3303] swap_cache_alloc_folio+0x47b/0x5e0 [ 253.574394][ T3303] swap_cluster_readahead+0x2b1/0x460 [ 253.574502][ T3303] swapin_readahead+0xd8/0x8a0 [ 253.574534][ T3303] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 253.574567][ T3303] ? hrtimer_start_range_ns+0x108/0x120 [ 253.574603][ T3303] ? __rcu_read_unlock+0x4e/0x70 [ 253.574694][ T3303] ? swap_cache_get_folio+0x1f7/0x200 [ 253.574731][ T3303] do_swap_page+0x2a2/0x1ec0 [ 253.574766][ T3303] ? __schedule+0x799/0xd10 [ 253.574818][ T3303] ? __rcu_read_lock+0x36/0x50 [ 253.574846][ T3303] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 253.574880][ T3303] handle_mm_fault+0xb3c/0x2da0 [ 253.574999][ T3303] do_user_addr_fault+0x634/0x1060 [ 253.575031][ T3303] ? trace_page_fault_user+0x1f/0xa0 [ 253.575132][ T3303] exc_page_fault+0x62/0xa0 [ 253.575166][ T3303] asm_exc_page_fault+0x26/0x30 [ 253.575190][ T3303] RIP: 0033:0x7f4e41997fd7 [ 253.575210][ T3303] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 253.575307][ T3303] RSP: 002b:00007ffff6069720 EFLAGS: 00010202 [ 253.575328][ T3303] RAX: 0000000000000000 RBX: 000055557ee24500 RCX: 00007f4e41997fd7 [ 253.575356][ T3303] RDX: 00007ffff6069760 RSI: 0000000000000000 RDI: 0000000000000000 [ 253.575369][ T3303] RBP: 00007ffff60697cc R08: 0000000000000000 R09: 0000000000000000 [ 253.575381][ T3303] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 253.575393][ T3303] R13: 00000000000927c0 R14: 000000000003dc24 R15: 00007ffff6069820 [ 253.575413][ T3303] [ 253.576184][ T3303] memory: usage 198404kB, limit 307200kB, failcnt 348 [ 253.701604][ T8308] CPU: 0 UID: 0 PID: 8308 Comm: syz.3.1418 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 253.701693][ T8308] Tainted: [W]=WARN [ 253.701759][ T8308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 253.701797][ T8308] Call Trace: [ 253.701817][ T8308] [ 253.701843][ T8308] __dump_stack+0x1d/0x30 [ 253.701906][ T8308] dump_stack_lvl+0x95/0xd0 [ 253.702017][ T8308] dump_stack+0x15/0x1b [ 253.702069][ T8308] should_fail_ex+0x25e/0x270 [ 253.702218][ T8308] should_fail+0xb/0x20 [ 253.702294][ T8308] should_fail_usercopy+0x1a/0x20 [ 253.702460][ T8308] _copy_to_user+0x20/0xa0 [ 253.702634][ T8308] simple_read_from_buffer+0xb5/0x130 [ 253.702746][ T8308] proc_fail_nth_read+0x10e/0x150 [ 253.702841][ T8308] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 253.702913][ T8308] vfs_read+0x18e/0x7c0 [ 253.703101][ T8308] ? __rcu_read_unlock+0x4e/0x70 [ 253.703187][ T8308] ? __fget_files+0x184/0x1c0 [ 253.703280][ T8308] ? fdget+0x104/0x110 [ 253.703370][ T8308] ? mutex_lock+0x57/0x90 [ 253.703401][ T8308] ksys_read+0xdc/0x1a0 [ 253.703420][ T8308] __x64_sys_read+0x40/0x50 [ 253.703462][ T8308] x64_sys_call+0x2886/0x3020 [ 253.703622][ T8308] do_syscall_64+0x136/0x3c0 [ 253.703689][ T8308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.703821][ T8308] RIP: 0033:0x7fa04462d68e [ 253.703869][ T8308] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 253.703919][ T8308] RSP: 002b:00007fa0430a5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 253.704082][ T8308] RAX: ffffffffffffffda RBX: 00007fa0430a66c0 RCX: 00007fa04462d68e [ 253.704209][ T8308] RDX: 000000000000000f RSI: 00007fa0430a60a0 RDI: 0000000000000003 [ 253.704247][ T8308] RBP: 00007fa0430a6090 R08: 0000000000000000 R09: 0000000000000000 [ 253.704284][ T8308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.704323][ T8308] R13: 00007fa0448e6128 R14: 00007fa0448e6090 R15: 00007ffdf401ad48 [ 253.704387][ T8308] [ 253.933677][ T8314] loop5: detected capacity change from 0 to 512 [ 254.041251][ T3303] memory+swap: usage 120008kB, limit 9007199254740988kB, failcnt 0 [ 254.050339][ T8314] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.1415: bad orphan inode 13 [ 254.060634][ T8314] loop5: lost filesystem error report for type 5 error -117 [ 254.060759][ T8314] ext4_test_bit(bit=12, block=4) = 1 [ 254.061937][ T3303] kmem: usage 125660kB, limit 9007199254740988kB, failcnt 0 [ 254.068165][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 254.068184][ C0] EXT4-fs (loop5): initial error at time 1782165490: ext4_orphan_get:1425 [ 254.068204][ C0] EXT4-fs (loop5): last error at time 1782165490: ext4_orphan_get:1425 [ 254.104985][ T8314] is_bad_inode(inode)=0 [ 254.109201][ T8314] NEXT_ORPHAN(inode)=0 [ 254.113304][ T8314] max_ino=32 [ 254.116857][ T8314] i_nlink=1 [ 254.120445][ T8314] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.139090][ T8314] netlink: 'syz.5.1415': attribute type 2 has an invalid length. [ 254.147467][ T3303] Memory cgroup stats for /syz4: [ 254.147729][ T3303] cache 0 [ 254.155806][ T3303] rss 65536 [ 254.159082][ T3303] shmem 0 [ 254.162106][ T3303] mapped_file 0 [ 254.165876][ T3303] dirty 0 [ 254.168852][ T3303] writeback 0 [ 254.172233][ T3303] workingset_refault_anon 78 [ 254.177153][ T8318] netlink: 'syz.3.1419': attribute type 5 has an invalid length. [ 254.177606][ T3303] workingset_refault_file 858 [ 254.190006][ T3303] swap 1069056 [ 254.193442][ T3303] swapcached 33017856 [ 254.198009][ T3303] pgpgin 291514 [ 254.201645][ T3303] pgpgout 291490 [ 254.205535][ T3303] pgfault 228091 [ 254.209285][ T3303] pgmajfault 60 [ 254.212900][ T3303] inactive_anon 0 [ 254.217014][ T3303] active_anon 98304 [ 254.221192][ T3303] inactive_file 0 [ 254.225085][ T3303] active_file 0 [ 254.228641][ T3303] unevictable 0 [ 254.232177][ T3303] hierarchical_memory_limit 314572800 [ 254.239815][ T3303] hierarchical_memsw_limit 9223372036854771712 [ 254.246094][ T3303] total_cache 0 [ 254.249586][ T3303] total_rss 65536 [ 254.253247][ T3303] total_shmem 0 [ 254.257074][ T3303] total_mapped_file 0 [ 254.261087][ T3303] total_dirty 0 [ 254.264726][ T3303] total_writeback 0 [ 254.268618][ T3303] total_workingset_refault_anon 78 [ 254.273925][ T3303] total_workingset_refault_file 858 [ 254.279238][ T3303] total_swap 1069056 [ 254.283156][ T3303] total_swapcached 33017856 [ 254.287868][ T3303] total_pgpgin 291514 [ 254.291970][ T3303] total_pgpgout 291490 [ 254.297185][ T3303] total_pgfault 228091 [ 254.318134][ T3303] total_pgmajfault 60 [ 254.322428][ T3303] total_inactive_anon 0 [ 254.327144][ T3303] total_active_anon 98304 [ 254.331692][ T3303] total_inactive_file 0 [ 254.336182][ T3303] total_active_file 0 [ 254.340230][ T3303] total_unevictable 0 [ 254.344441][ T3303] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1411,pid=8287,uid=0 [ 254.359267][ T3303] Memory cgroup out of memory: OOM victim 8287 (syz.4.1411) is already exiting. Skip killing the task [ 254.372093][ T8324] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1415'. [ 254.383263][ T28] audit: type=1400 audit(1782165491.253:1296): avc: denied { ioctl } for pid=8313 comm="syz.5.1415" path="socket:[20227]" dev="sockfs" ino=20227 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 254.442449][ T8328] netlink: 'syz.4.1421': attribute type 1 has an invalid length. [ 254.460916][ T8328] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1421'. [ 254.584056][ T8332] loop4: detected capacity change from 0 to 1024 [ 254.591855][ T8332] EXT4-fs: Ignoring removed orlov option [ 254.650102][ T8336] loop4: detected capacity change from 0 to 128 [ 254.670585][ T8336] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.686541][ T28] audit: type=1400 audit(1782165491.553:1297): avc: denied { write } for pid=8335 comm="syz.4.1424" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 254.751854][ T8343] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1427'. [ 254.763654][ T8343] tmpfs: Unknown parameter 'mpo' [ 254.781302][ T8346] loop4: detected capacity change from 0 to 128 [ 254.904242][ T8350] syz_tun: entered allmulticast mode [ 254.937479][ T8357] loop4: detected capacity change from 0 to 4096 [ 254.946118][ T8357] EXT4-fs: test_dummy_encryption option not supported [ 254.967483][ T8357] tipc: Can't bind to reserved service type 0 [ 255.050376][ T8360] loop5: detected capacity change from 0 to 1024 [ 255.138272][ T8360] EXT4-fs: Ignoring removed orlov option [ 255.313611][ T8368] veth1_macvtap: left promiscuous mode [ 255.335895][ T8369] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1435'. [ 255.345020][ T8368] macsec0: entered allmulticast mode [ 255.398615][ T8368] veth1_macvtap: entered promiscuous mode [ 255.405079][ T8368] veth1_macvtap: entered allmulticast mode [ 255.411346][ T8368] macsec0: entered promiscuous mode [ 255.682286][ T8387] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1444'. [ 255.707043][ T8387] tmpfs: Unknown parameter 'mpo' [ 256.258686][ T8396] set_capacity_and_notify: 1 callbacks suppressed [ 256.258802][ T8396] loop1: detected capacity change from 0 to 1024 [ 256.283546][ T8398] sg_write: data in/out 222208/136 bytes for SCSI command 0x0-- guessing data in; [ 256.283546][ T8398] program syz.3.1447 not setting count and/or reply_len properly [ 256.328355][ T8396] EXT4-fs: Ignoring removed orlov option [ 256.610534][ T8389] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 256.657044][ T8396] EXT4-fs mount: 7 callbacks suppressed [ 256.657060][ T8396] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.926684][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.978664][ T8411] loop3: detected capacity change from 0 to 128 [ 257.035798][ T8411] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 257.174639][ T8411] ext4 filesystem being mounted at /302/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 257.244202][ T28] audit: type=1400 audit(1782165494.103:1298): avc: denied { write } for pid=8410 comm="syz.3.1451" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 257.323193][ T3300] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 257.336857][ T8417] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1452'. [ 257.577492][ T8419] loop4: detected capacity change from 0 to 1024 [ 257.586365][ T8419] EXT4-fs: Ignoring removed i_version option [ 257.614357][ T8419] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.616652][ T8427] netlink: 'syz.5.1454': attribute type 9 has an invalid length. [ 257.634639][ T8427] netlink: 'syz.5.1454': attribute type 6 has an invalid length. [ 257.642863][ T28] audit: type=1400 audit(1782165494.503:1299): avc: denied { read } for pid=8420 comm="syz.1.1449" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 257.644701][ T8423] loop3: detected capacity change from 0 to 512 [ 257.665890][ T28] audit: type=1400 audit(1782165494.503:1300): avc: denied { open } for pid=8420 comm="syz.1.1449" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 257.706856][ T8427] bond5: option lacp_rate: invalid value (255) [ 257.713339][ T28] audit: type=1400 audit(1782165494.563:1301): avc: denied { write } for pid=8418 comm="syz.4.1455" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 257.793095][ T8423] loop3: detected capacity change from 0 to 512 [ 257.821658][ T8432] loop5: detected capacity change from 0 to 512 [ 257.840828][ T8435] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1456'. [ 257.849019][ T28] audit: type=1400 audit(1782165494.573:1302): avc: denied { write } for pid=8418 comm="syz.4.1455" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 257.866027][ T8427] bond5 (unregistering): Released all slaves [ 257.888234][ T8432] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 257.914626][ T8438] tmpfs: Unknown parameter 'mpo' [ 258.107780][ T8432] @0: renamed from bond_slave_1 (while UP) [ 258.121147][ T8432] loop5: detected capacity change from 0 to 512 [ 258.127949][ T8432] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 258.155355][ T8432] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.1454: invalid indirect mapped block 4294967295 (level 0) [ 258.169303][ T8432] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 258.169462][ T8432] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.1454: invalid indirect mapped block 4294967295 (level 1) [ 258.192555][ T8432] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 258.192927][ T8432] EXT4-fs (loop5): 1 orphan inode deleted [ 258.202130][ C1] EXT4-fs (loop5): error count since last fsck: 2 [ 258.202143][ C1] EXT4-fs (loop5): initial error at time 1782165494: ext4_free_branches:1023: inode 16 [ 258.202170][ C1] EXT4-fs (loop5): last error at time 1782165494: ext4_free_branches:1023: inode 16 [ 258.233598][ T8432] EXT4-fs (loop5): 1 truncate cleaned up [ 258.239732][ T8432] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.257104][ T8444] loop3: detected capacity change from 0 to 1024 [ 258.263803][ T8444] EXT4-fs: Ignoring removed orlov option [ 258.273365][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.316242][ T8447] loop4: detected capacity change from 0 to 1024 [ 258.334270][ T8432] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.354380][ T8444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.368478][ T8447] EXT4-fs: Ignoring removed orlov option [ 258.414807][ T8447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.427813][ T8453] loop5: detected capacity change from 0 to 512 [ 258.484134][ T8453] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 258.498975][ T8453] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.1462: bad orphan inode 131083 [ 258.509781][ T8453] loop5: lost filesystem error report for type 5 error -117 [ 258.510287][ T8453] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.511368][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.540034][ T28] audit: type=1400 audit(1782165495.383:1303): avc: denied { write } for pid=8452 comm="syz.5.1462" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 258.540481][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.568217][ T8463] netlink: 'syz.0.1468': attribute type 1 has an invalid length. [ 258.575797][ T8453] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1462'. [ 258.578412][ T8463] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1468'. [ 258.597854][ T8453] FAULT_INJECTION: forcing a failure. [ 258.597854][ T8453] name failslab, interval 1, probability 0, space 0, times 0 [ 258.610535][ T8453] CPU: 1 UID: 0 PID: 8453 Comm: syz.5.1462 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 258.610573][ T8453] Tainted: [W]=WARN [ 258.610581][ T8453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 258.610598][ T8453] Call Trace: [ 258.610673][ T8453] [ 258.610682][ T8453] __dump_stack+0x1d/0x30 [ 258.610712][ T8453] dump_stack_lvl+0x95/0xd0 [ 258.610733][ T8453] dump_stack+0x15/0x1b [ 258.610751][ T8453] should_fail_ex+0x25e/0x270 [ 258.610778][ T8453] ? __iomap_dio_rw+0x191/0x1410 [ 258.610856][ T8453] should_failslab+0x8c/0xb0 [ 258.610877][ T8453] __kmalloc_cache_noprof+0x7b/0x3d0 [ 258.610901][ T8453] ? __iomap_dio_rw+0x191/0x1410 [ 258.610996][ T8453] ? __rcu_read_unlock+0x4e/0x70 [ 258.611123][ T8453] __iomap_dio_rw+0x191/0x1410 [ 258.611162][ T8453] ? should_failslab+0x8c/0xb0 [ 258.611188][ T8453] ? kmem_cache_alloc_noprof+0x198/0x3c0 [ 258.611216][ T8453] ? security_inode_alloc+0x37/0x100 [ 258.611327][ T8453] ? avc_has_perm_noaudit+0xa3/0x120 [ 258.611370][ T8453] iomap_dio_rw+0x40/0x90 [ 258.611409][ T8453] ext4_file_read_iter+0x209/0x280 [ 258.611495][ T8453] copy_splice_read+0x47a/0x6b0 [ 258.611531][ T8453] ? __pfx_ext4_file_splice_read+0x10/0x10 [ 258.611564][ T8453] splice_direct_to_actor+0x27c/0x680 [ 258.611595][ T8453] ? kstrtouint_from_user+0xa8/0xf0 [ 258.611705][ T8453] ? __pfx_direct_splice_actor+0x10/0x10 [ 258.611837][ T8453] do_splice_direct+0x119/0x1a0 [ 258.611927][ T8453] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 258.611970][ T8453] do_sendfile+0x37d/0x640 [ 258.612003][ T8453] __x64_sys_sendfile64+0x105/0x150 [ 258.612026][ T8453] x64_sys_call+0x2dc4/0x3020 [ 258.612049][ T8453] do_syscall_64+0x136/0x3c0 [ 258.612079][ T8453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.612144][ T8453] RIP: 0033:0x7fbda091ce59 [ 258.612160][ T8453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.612177][ T8453] RSP: 002b:00007fbd9f377028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 258.612199][ T8453] RAX: ffffffffffffffda RBX: 00007fbda0b95fa0 RCX: 00007fbda091ce59 [ 258.612228][ T8453] RDX: 0000000000000000 RSI: 000000000000000b RDI: 000000000000000b [ 258.612240][ T8453] RBP: 00007fbd9f377090 R08: 0000000000000000 R09: 0000000000000000 [ 258.612251][ T8453] R10: 000000000e3aa6ea R11: 0000000000000246 R12: 0000000000000001 [ 258.612284][ T8453] R13: 00007fbda0b96038 R14: 00007fbda0b95fa0 R15: 00007ffe52d83858 [ 258.612303][ T8453] [ 258.612807][ T28] audit: type=1400 audit(1782165495.443:1304): avc: denied { lock } for pid=8452 comm="syz.5.1462" path="/35/bus/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 258.885354][ T7455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.909032][ T28] audit: type=1400 audit(1782165495.443:1305): avc: denied { write } for pid=8452 comm="syz.5.1462" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 258.909781][ T8466] Invalid argument reading file caps for ./file0 [ 258.974577][ T8469] EXT4-fs: Ignoring removed mblk_io_submit option [ 258.981496][ T8469] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 258.990373][ T8469] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 259.021954][ T8469] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #11: comm syz.3.1466: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 259.050300][ T8470] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 259.066742][ T8470] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.078895][ T8469] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 259.083717][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 259.099448][ C1] EXT4-fs (loop3): initial error at time 1782165495: ext4_ext_check_inode:521: inode 11 [ 259.109239][ C1] EXT4-fs (loop3): last error at time 1782165495: ext4_ext_check_inode:521: inode 11 [ 259.121128][ T8469] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1466: couldn't read orphan inode 11 (err -117) [ 259.148312][ T8469] loop3: lost filesystem error report for type 5 error -117 [ 259.148861][ T8469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.188779][ T8477] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1472'. [ 259.204064][ T8477] tmpfs: Unknown parameter 'mpo' [ 259.238284][ T8469] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1466: Invalid block bitmap block 0 in block_group 0 [ 259.253412][ T8469] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.1466: Failed to acquire dquot type 0 [ 259.303680][ T361] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm kworker/u8:6: Invalid inode table block 8589934593 in block_group 0 [ 259.451321][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 259.451337][ T28] audit: type=1326 audit(1782165496.073:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.3.1466" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa04462d68e code=0x7ffc0000 [ 259.999632][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.049723][ T28] audit: type=1326 audit(1782165496.073:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.3.1466" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fa04466b297 code=0x7ffc0000 [ 260.076665][ T28] audit: type=1326 audit(1782165496.073:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.3.1466" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa04462d68e code=0x7ffc0000 [ 260.238792][ T28] audit: type=1326 audit(1782165496.073:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.3.1466" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04466ce59 code=0x7ffc0000 [ 260.273889][ T28] audit: type=1326 audit(1782165496.073:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.3.1466" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04466ce59 code=0x7ffc0000 [ 260.301931][ T28] audit: type=1326 audit(1782165496.103:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.3.1466" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04466ce59 code=0x7ffc0000 [ 260.327883][ T28] audit: type=1326 audit(1782165496.103:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.3.1466" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa04466ce59 code=0x7ffc0000 [ 260.390465][ T28] audit: type=1326 audit(1782165496.103:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.3.1466" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04466ce59 code=0x7ffc0000 [ 260.415985][ T28] audit: type=1400 audit(1782165496.103:1349): avc: denied { write } for pid=8467 comm="syz.3.1466" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 260.437875][ T28] audit: type=1326 audit(1782165496.133:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.3.1466" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04466ce59 code=0x7ffc0000 [ 260.484081][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 260.549460][ T8499] netlink: 'syz.1.1479': attribute type 1 has an invalid length. [ 260.569031][ T8499] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1479'. [ 260.680307][ T8497] 9p: Bad value for 'wfdno' [ 260.685111][ T8497] netlink: 'syz.4.1476': attribute type 10 has an invalid length. [ 260.696680][ T8497] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 260.750723][ T8506] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 260.780853][ T8514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=8514 comm=syz.0.1483 [ 260.797055][ T8516] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1476'. [ 260.828493][ T8506] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.969661][ T3297] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 261.110152][ T8512] ================================================================== [ 261.118299][ T8512] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 261.126145][ T8512] [ 261.128483][ T8512] write to 0xffffea000478b358 of 8 bytes by task 8502 on cpu 1: [ 261.136130][ T8512] __filemap_remove_folio+0x201/0x2e0 [ 261.141538][ T8512] filemap_remove_folio+0x6d/0x1d0 [ 261.146700][ T8512] truncate_inode_folio+0x42/0x50 [ 261.151750][ T8512] shmem_undo_range+0x27f/0xb60 [ 261.156629][ T8512] shmem_fallocate+0x84e/0x8f0 [ 261.161445][ T8512] vfs_fallocate+0x3ac/0x400 [ 261.166069][ T8512] __x64_sys_fallocate+0x7a/0xd0 [ 261.171052][ T8512] x64_sys_call+0x298e/0x3020 [ 261.175773][ T8512] do_syscall_64+0x136/0x3c0 [ 261.180099][ T8521] netlink: 'syz.1.1485': attribute type 1 has an invalid length. [ 261.180405][ T8512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.193597][ T8521] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1485'. [ 261.194032][ T8512] [ 261.194042][ T8512] read to 0xffffea000478b358 of 8 bytes by task 8512 on cpu 0: [ 261.194067][ T8512] folio_mapping+0xa1/0xe0 [ 261.217398][ T8512] evict_folios+0x2300/0x2d80 [ 261.222137][ T8512] try_to_shrink_lruvec+0x7c5/0xb10 [ 261.227370][ T8512] shrink_lruvec+0x25e/0x1b60 [ 261.232062][ T8512] shrink_node+0x69d/0x20f0 [ 261.236595][ T8512] do_try_to_free_pages+0x408/0xc90 [ 261.241819][ T8512] try_to_free_mem_cgroup_pages+0x201/0x420 [ 261.247745][ T8512] try_charge_memcg+0x375/0xa00 [ 261.252633][ T8512] __memcg_kmem_charge_page+0x199/0x3a0 [ 261.258212][ T8512] __alloc_frozen_pages_noprof+0x18a/0x350 [ 261.264122][ T8512] alloc_pages_mpol+0xa9/0x1d0 [ 261.268928][ T8512] alloc_pages_noprof+0x8f/0x140 [ 261.273923][ T8512] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 261.279839][ T8512] __kvmalloc_node_noprof+0x3a0/0x590 [ 261.285234][ T8512] futex_hash_allocate+0x192/0x920 [ 261.290370][ T8512] futex_hash_prctl+0xd8/0xf0 [ 261.295069][ T8512] __se_sys_prctl+0x4f4/0x13b0 [ 261.299849][ T8512] __x64_sys_prctl+0x67/0x80 [ 261.304455][ T8512] x64_sys_call+0x2533/0x3020 [ 261.309340][ T8512] do_syscall_64+0x136/0x3c0 [ 261.313953][ T8512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.319877][ T8512] [ 261.322214][ T8512] value changed: 0xffff88811c4deab0 -> 0x0000000000000000 [ 261.329333][ T8512] [ 261.331663][ T8512] Reported by Kernel Concurrency Sanitizer on: [ 261.338041][ T8512] CPU: 0 UID: 0 PID: 8512 Comm: syz.3.1480 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 261.348921][ T8512] Tainted: [W]=WARN [ 261.352749][ T8512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 261.362827][ T8512] ==================================================================